last executing test programs: 4.027048303s ago: executing program 1 (id=4143): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9024, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time\x00') bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000040)={0x0, 0x80, 0x2, 0xd, 0x8d, 0x5, 0x0, 0x1, 0x80000, 0xd, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x8000000000000000}, 0x2, 0x4, 0x9, 0x7, 0x10, 0x7, 0x1000, 0x0, 0x3e}) socketpair(0x1e, 0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6065e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095", @ANYRES64=r5, @ANYRES8=r5], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8e, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRESOCT=r6, @ANYRES32, @ANYBLOB="4efe0f16f78ce54b770509660baace09846a618f3b550131b7608f06341051b959b2bcba958f7aebe617e2006e921e634ec8011f2c6d1e4900fedd96f796c4f14d5a0250bf1ca082373b731fece64e", @ANYRES64=0x0], 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000e6030000000400000012"], 0x48) 3.503133378s ago: executing program 1 (id=4147): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018001e00"/30], 0x0, 0x1e, 0x0, 0x1}, 0x28) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48880}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x28}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.398756829s ago: executing program 2 (id=4148): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180099030000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f85b24099c0081e4e7effc5c13ff0000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x954, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1b, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000010c1708a9aecd7411fa4f7f00000719264dbf91710f9ec108e000000000000000000000000000000000000006adb0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x18, 0x0, 0x0) socketpair(0x3, 0x800, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x10}}], 0x10}, 0x40010040) r8 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x11b, 0x2, &(0x7f0000000900), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x4000088) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="080000000f0000d3", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="000000000100"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x30, 0x0, &(0x7f0000000600)="f8ad48c5fce216efcc244f5d86dd6c5fee416a26f2a47171535434145d224d820439ccd9c109b1d38ea5c464189c571e", 0x0, 0x61ab, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) 3.118300622s ago: executing program 2 (id=4150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0xffffffff, 0x0, 0x0, 0x2f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000001c00)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000ac0)="467d2e35f51fc920ece338dc049f1dcfb999577dbc724a0eae4f67dc0012750d066d436a78934cd87c11fa98268a401a5ff5f10d4173b7de1e6cb03dba8392e7f652abcb9eb87a12c3bb12679f05bfc1bd70daa37b9e224bc2da2b8c8856b736e863e707eb11638b7971f4e6aa8d4fb662ddf6c9ca1eec68ff4dec8ead05eb9383d0f0a6ad2e228a08241c94841cf309f0c9ff30f285bf74505e531b5f69419f098d3e37f0d821787c57898cbebf025b26142d113d4acf20dab03238949f8c881c2309609bb98c0f8808feb10c3e7206d09922618172c30501f0beca1ec4da1c4168059b4794365d9ec723092bfcf5b17c731bd72e4667a323f671475706dbccd78a10fea41431eeb31bae849fd5c5fe6e36a5ffdfaa9de914c2ce0fd46fe77ac4ca795d6e7c83fbc2548058928237127a0c12724463ca17216ce2641963ae72066b75bc499baf57e066eddbd2f8af5ffa72fce32e39caacbf23effe320afd963391a37879990c77572d0484fe24520adc30547ef56f664d7b82963d50b104bf235a48ea9c16f857c1807071b3520e04a46bae996a5a6325d09851ebd7d5073a44d8a15164451bf0734ddc3f34ced0edd16904a76c0c4d1d7c9a6b0f7971ed6da86b42dd8b14938de270c8e1d344a89d3f758a10028dfbf4358e5bd5310e9d6184a4d9e194924bdd169e0ca467b5a7050c3cc26823f4c0fbd01b1dd8f965472aeb6fe31163aa58dfe34dffd1ea26823d1a9069de25eeaa4c7ea4529da3db6936846c3a538958f5b091d7415b5235ac68d27eb4cbe82490c98924f222cab3541ce18dad426070b5d56f8b7f38951a9f0b7fe9643ba51c5f3a43ab7ce158709af6dc29a8f203f759b790f700f39d4fd9b62f8b0f60eac3a8bac7bf0a049674325877209acd124147e25e751bbdc890cc63b414678a5e54f417c371bd2bf5453a055750364c52e46c26e0e300f0f09797c5aa1f7c1cf08691ddca9fd96595ec05b851b871f0b8cf97c68e7081159dc927504b9f350cfb777c93dacffe75e6bfd72c6d301b373f241704185123e0f224188d2a84d4cc6653069b3c6ab96b0da954b1924b74b241446c3c5359a8db98fbc06e3f1980205c33ca33901586947176af9f6024f10598b1fd32557d555edc16e239cfa6cebbc64c5df7a14fa25f1f2d52edd1d81afb601e812f90ad2e1d1ec064d08ffc64db89c714d8cbe1d2d73e71e676968fe70950d70a1355f12f1bb61d6f082c8229889ca0e16e795f07d46384ca9d80a9e87ddc6dbe6a0e47189c87ce86ac658992de30dc59684f40da34217703d2cf2ad0b1250dabd57eb04c9023a4a53477533365861c912c49d0e233faed2dcb574e98f5b6fcfee80bce23d889e7f6e1e8a637665f1f1c134925aed1c7a1884aaa9389d222f4ce3d144b40b2c8f4c47c971cc98592a24ae89c693cfbb5f95f5d66ccd53911824379e918a9ee3ade97261a96f2e0bf8e61e9d7be68224d856969da81f60c34f0c0ada358f659d81914ee14eb35f39293a632c1b152876d7a7766dea988634e112a7395adf40914c7325e2a93403ef0201a514aad86278366eb5040730dc885e1a7f726cbb2bcfec1af0006006e0df7fa2488b7a88fd3f61f53f37566d6b2e191507245bbba5a0a0fed9c1c3574d0a16c37488f016ae24fdceb673a12ccf24fe6b1c8f4ce79704ec08382bb346676cd8547ee80fa92a500be9a825d2046375ce0d3212349c37f83d3a45d5666ae82b85eb7c5a715d3ba4dbc406e01827349a8a7027b8864e3776293053d5e121ee826170b92aed17635f802f91bccce691c6afec92bcc9c5a2d924dbe097ce2e8c6bfa25f0e19c37e3eda4096e8de8c87abb05755f05a59d306eb74d5b5080f8ef183b1839b7ca2cedd19b045821e30237417aa98be83e59144ac8507a2eab375eeb655ad66de4f1902b36978c4a99f4682835c5d6dabf3891e2343d52b69c1936afb5014380cad5f2333ad611024f80506bff42d79060d066cead959229943229cff3e89f1c2e81ada875cfdbe753731d5ef239bc7f6bd1e89a3b4ac7b649fee55ba63bf7da9c6a5b7e134371912a23db64ed7989ddfb01548c270c6c70586a9e2d73e4e4d802b1e26044d7125063fe38af077c9c60dbfb15b89d469a5f79460a426020f51bc629904ef6565d4682fc343f5d1ec8943fb619ada9d37716f0033f038fb2a12fbaecf551bc018155814d89fc2be8b6bdd3c9c0826d1217e8f15f3e7cacd6a9f16092a9aa774bf7f4892e1b1e652ee97e6bd5496d2dd2ddd9ee8b6b51761923528c0e0473e0be36e6ec0ec8671facf967f873d53e04a8f935b9c800611e546352c1416d7a38cacafad60cdc85abcfeb8900307383d489c75fb59eb979a6526ef2a589474e6623f37cb21a670ae29b21e9fb6f22ea1baba2751b57521f50a75e6757ce4a2f08f04edee72687437625ae5495c83a37990353d1980b035b172604f456f830c6816633b2ddb398a7428b094083a852835f1ea8e5b7a1085f727c058c777a20137743ca4b8c487af8ad7cb042035d3e8c572e82009cea690c83dc06d84d5a0625875209592b53790d00c1d4e5cbe2e5229bf1d6e7c069791fd79833380b0f6eac4663f2301025f9b8ecc48f304f9818d2dacb21e92667a08c9f2e49d695cf34d99ccf9f9ab080420b4e08d5fd182ed7294fd1560515786ac29d108e85afdc6189376336d1fe347305d67d5a08e001a024b7942b5bf3b525179de577b5a5fe020e982cabba61fce03413323aad4bc9d40faee042aea41105dc55b8f906eb8b8a5971a7f63c79838f87e537820daff9b07e5c5ba6eae82dc64c44b9a6693a980b751daa059351f876f29deeb665c4cdb6ee5c239fd7f507838c9fd1a737d22140d8433b05fc58c4fffa992efb716e60046b5e4efa043a61a4113495575cac6edb41dfc8cfac34784f46860daa01d991e63d21e3c261c3c980fce1f599d7a7ae5329f9be523ad60918708c73f90f3320c80be2d0c37b762a6859d9e1e04569efe70f393811a4d55aa70d9b57b2799cbf6ceead03d68fadff83d1cdff3880ea1d70933ac136e7529f6496ab43ce624f605ece9b5f5c28313ca12fdc806ecaab99ac1760bf98a48a1ec38a368763e38aff5b2fd165f69a35cd5e565d4684c6bb403dc4cdd5c72ebd7c7815794f20e18ac0c98ef26aedb00479e49ddc489a434f0d63e94927567ce7c4b3720c3032a6a9ae1bdffed509cb321b722d450cd16bff1c0c1d025f9051f26c127617c1cba296f50b6c73f5b02153bae45091e796533fb88f1d5bad1de12ab1a51a36d2f9fd14e6a6645523aa67b737c3566c9af1f0fa1a6867a365a6a0155c60c387fb461d8ffa21b248a29409ebde588afc9200708963343f4fad2c4fb3e12315d69a23e392986c4e2dbb38ae8f3e572ad9a2300fc392e4f440b65d01e316fc9493a2d4f473cf401c8501b8f750cbaf3c3eee7bc961be0ca5329d9f6c4e2ae59df45bc0be62b47c86e29298bf1c3a9b52a8706df9b2cfc8f7ef7100b71a87c89c6f23439ce592797d9623daeca7283f153607d4c0bdec4a00f2394cebe4878fcb0b36518a44ef222b8d64835a320cdc416783e5e8a4abacb3fcaa9f6bc8124f955f8fba1d25d32baafd54fe4462f848783f00c8a72e214e8d146a3229a4d332c99823e5365ce026db690288060ef0fde9c3dd4c2485106bb41e6ac70c503e3a61452300c6bea108b49b333dabb7a8d900a52f23184ed0d274ed5e9efcceebd8e1b9f8036ed09dce927e49b156a1580257bb3de6d0427dea4c06fd677d16de84ed3873a41991a9d016e8031810cb6413ee9a2d8a7c92c6f949cad74c9ef0694c3bb027edbefa29b9ef8606091586b684cf7fd4a12a9e49b3a5bf04376e09c33836ba6ae9fab92fae75fbc5f0aeb6ae69968b97a42dba6625a43ecd0b2d7c0bbeda68f46a14311cbae5604e518e1895a75c5b79f0fd13f10692db16190d69058702d8cb6760d7ffdb8e19f334d52916789cebd456756d5397e970b483bbb0eb1dc1c75ff25367f7a040f7f21a36a389611f0232673433c0d97002cf8f7fcab2730a2a0683e5d2a0e06a9918360917c25b8f6e169effd2babe0b042b952017ca2ef0c270d1ca0d5a4d466a9d7fe2a7b34c7ad9505b43175fab2a3f9c2aec184662492ab52afbc6f8d23f6fa1551ea4ea34f1782a64ae240a11737c9eb33d7d3c379be9d04b0a76c48941ec5ee1287d48f438cdb09867123e68f99ca245bd06a9cc6b59a3c843c2fa87e160f7b2c6ac60ee11d8fa6abd8d9e13ef2c58d7e3c5b332fd39608c27fcfa72baa5f7b45be92b47fdb", 0xbf5}, {&(0x7f0000001ac0)="7fa230fc2b544faf68d472cb350dc67b8d50ab8160b779c97edc39617557d841bc9dd7fabf3e25cf0f2d8f9fb76902b4c863b1a1effb281b7c91751f47dd59728e6f69416470283ae144946bd4d82e2545e11cc3907eafdc2d47619bcebcade31bb5453e01df3689b0eed4e92520315c40f644777a49384a6912", 0x7a}, {&(0x7f0000001b40)}], 0x3, &(0x7f0000001bc0)}, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10003d39fcffffff0000000000000000000000000000000000000000d2ec87f6e3de160774583cca1ae91c187408b081631a71890cd214f24a8d2aa4911517a7d59d2af0df277f49b42807e845d7a6c4"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004a00000000000000020b0000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018510000040000000000000000000000bf91000000000000b7020000020000008500000084000000b700"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[r8, r8], &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xfffffffc}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={r10, 0x58, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000008000000070000000708000010000000", @ANYRESHEX=r14, @ANYBLOB="34000000000000000000000000006f3c39f49c00"/32, @ANYRES32=r0, @ANYRES32=r9, @ANYBLOB="0200000001000000000000000e00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x17, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000f8a8d6e56fb3de00000001000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000011c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r14, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0x9, 0x100, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001480)=[r8, r10, r12, r13, 0xffffffffffffffff, r15], &(0x7f00000014c0)=[{0x1, 0x2, 0xc, 0x4}, {0x1f3, 0x2, 0x5}, {0x2, 0x1, 0x4, 0xa}], 0x10, 0x6}, 0x94) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x7, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x1}, @struct={0x2, 0x9, 0x0, 0x4, 0x0, 0x5, [{0xc, 0x0, 0xf}, {0xd, 0x5, 0x80000001}, {0x0, 0x4, 0x10001}, {0xb, 0x5, 0x482}, {0x1, 0x4, 0xa}, {0x5, 0x1, 0x4}, {0x7, 0x1, 0x9}, {0xa, 0x5, 0x4}, {0xb, 0x4}]}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @ptr, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x3}, {0x6}, {0xd, 0x114}, {0xf, 0x2}, {0x9, 0x76}, {0x7, 0xc000000}, {0x9, 0x8172}]}, @const={0x2, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000240)=""/189, 0x11f, 0xbd, 0x1, 0x5}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', r14, r16, 0x2, 0x1, 0x1}, 0x50) 2.982716133s ago: executing program 1 (id=4152): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0x4}, 0x8428, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40012103) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xb7, &(0x7f000000cf3d)=""/183}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001500)={r1, 0x3, 0x2d, 0xfd77, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) socket$kcm(0x23, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0xd, 0x3}, {0x6}]}]}}, &(0x7f0000000980)=""/144, 0x3e, 0x90, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r2 = socket$kcm(0x22, 0x2, 0x21) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000080) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40047438, 0x7f7c2739efff) 2.900681153s ago: executing program 0 (id=4154): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) recvmsg(r0, &(0x7f0000000900)={&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000200)=""/174, 0xae}, {&(0x7f00000002c0)=""/173, 0xad}, {&(0x7f0000000380)=""/95, 0x5f}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000640)=""/194, 0xc2}, {&(0x7f0000000740)=""/226, 0xe2}, {&(0x7f0000000840)=""/41, 0x29}], 0x7}, 0x41) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x118540, 0x4, 0xf5e, 0x1, 0x0, 0x0, 0x41, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r6) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8902, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0x200000fe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) 2.799125234s ago: executing program 3 (id=4155): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc601000050008000900053582c137153e37000c0180fc0b1d00f80b", 0x33fe0}], 0x1, 0x0, 0x0, 0x12}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000180)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x13, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2df}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x70}}, @printk={@d}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r9, r7}) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r10, 0x0, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x12}, 0x94) 2.694573415s ago: executing program 0 (id=4157): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x27) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002e80)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000070000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@map, 0x15, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000780)=[0x0, 0x0], 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 2.683568815s ago: executing program 1 (id=4158): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) close(0x3) (async) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000000)=r3, 0x4a) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0xffff, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e000000040000000008000005000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000000000003000000000000000000000000000000b30da742cbd7f1312e620a076847b77835e6bdca91ec40014599a220af43f9f11265986e4c13cbb65507c6050f9a1ab1c9999aed7e6f9ac58e0233ce672aaf7baed4a54d90735c96360588271fa453c947c99fe7450ff572b6fe5496dbc01a427970c9d5f40febea76"], 0x50) (async, rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async, rerun: 32) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000580)='!%**[$/&\\]\x00') (async) ioctl$TUNGETVNETLE(r6, 0x800454dd, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x1}, 0x2018, 0x0, 0x1ff, 0x8, 0x1000, 0x9, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000004000000b704000000000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x80020000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000040000040000000000000000000040", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r7, &(0x7f0000000100), &(0x7f0000000000)=""/95, 0x2}, 0x20) 2.127949451s ago: executing program 2 (id=4159): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0), 0x4) sendmsg$unix(r5, &(0x7f0000000580)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200), 0x0, &(0x7f0000000480)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x28, 0x1, 0x1, [r2, r1, r6, r3, r1, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}], 0x58, 0x8830}, 0x20000000) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r8 = syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r7, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) recvmsg$kcm(r9, 0x0, 0x20) 1.617400665s ago: executing program 0 (id=4160): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff00000000fdffffff8500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000007b000000"], 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x3, 0x10) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32], 0x50) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 1.565917676s ago: executing program 3 (id=4161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{r0}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x1d, 0x0, 0xfea5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)=0x20000) (async) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305839, &(0x7f0000000040)=0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000140), &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='ns/net\x00') 1.05768812s ago: executing program 0 (id=4162): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, 0x0, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$sock_attach_bpf(r2, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@ifindex, 0xffffffffffffffff, 0xe, 0x10}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x1b, &(0x7f00000001c0)=r5, 0xa1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000700), &(0x7f0000000780), 0x8, 0x26, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000094) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002080)={0x1, 0x58, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002180)=@bpf_tracing={0x1a, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x10001, 0x0, 0x0, 0x41100, 0x30, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000020c0)={0x1, 0x10, 0x5, 0x2}, 0x10, 0x25f8e, 0xffffffffffffffff, 0x0, &(0x7f0000002100), 0x0, 0x10, 0x7}, 0x94) sendmsg$inet(r6, &(0x7f0000000a40)={&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000140)="dbf2df905cb2277107549571f91073755b630916a09d303897564a1fe4b52c7bdc8d0ae54f65dc02617debed74c27d499105bc34c6d965e6ffe95fbeb8d42a2af3ff3b9d4f7ef9842ff168c22c3d83df95728feb53740e7d496a13ea1dbd5ad5481ec8cf4190db652a403821e02d82736a8dd46d0bab378858f12fb4f6c0d02680a69cd468bbddd425da11dd13dc", 0x8e}, {&(0x7f00000003c0)="3c223ac1a768250f2e3db3114e", 0xd}, {&(0x7f0000000400)="06ecadab3007afe136", 0x9}, {&(0x7f0000000440)="0cec243e9374939268fd16923c0e26f221418657bf7e10062bdd7bee6c4b5b91092e015a0aa42bc7c4e35d2bb0ede0c1e817d198ac83fa44c196167075fd34ef7de8a77d177aac9c9124e5d521a5228bade1435ec4b48837310fd397f1a86ed875b5ada64a9f78c6c574f7a9250b33a138c34bfaf7955bd58a31451d0d1a6c98149b7262bf84baa4cd3b22f9be5355d2e56b9c7cfde6c2b94e3eeaa7dc8379b7fdbf1bc59408354818d8519ec953ed974fec5c32245e8bc0997e41ad2ee74e3c8d07c4e07f1e7bcc6d2fa7", 0xcb}, {&(0x7f0000000540)="7847960845568595a60f6d25", 0xc}], 0x5, &(0x7f0000000980)=[@ip_retopts={{0x20, 0x0, 0x7, {[@end, @timestamp_addr={0x44, 0xc, 0xb0, 0x1, 0x2, [{@multicast2}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast1, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @loopback, @multicast1}}}], 0xa8}, 0x20) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1, &(0x7f0000001b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @local}}}], 0x20}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xff97, &(0x7f0000000dc0)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x20040080) 926.733282ms ago: executing program 3 (id=4163): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x0, 0x43, 0xda, &(0x7f00000001c0)="fbb6155f1a3f199104e621a730a3a5a9e97e13a080228015b421430490edd2d65a45f1dbcb13b1bff07106f439c0f092cada31e0c948116b49e6639f370e2c3cfaf1ee", &(0x7f0000000740)=""/218, 0x5, 0x0, 0x73, 0xe3, &(0x7f0000000840)="77cb2e16329de4181774b6799fe408b9d0368df86370e114cb225d610312b915b2264431bb88950b76b9968ea879696b247df3eb9c45b3bdb4f541d00693931002a54fe4ec12121a434f18739ed8472223984bdfd2247ba00610bdac91237c69915ee299b866c6396239d0989cc155163d3c79", &(0x7f0000000940)="8c6ce0f5d0c7aad3c69fcd0d1d361d93356c3d6f5ead78094e689bf43fb8c27de6375f574e4bf5e033beab5997fab8542c34a6cf46ab9dfff398e75f62f9049b13b00357680ed170fbf448af2eda397c24b6f432a46e7e4a381d9760177ddcf29807d03a80189b2385c409f295bee417bca49d19571af1b1fbbecf043662a9d97866be2c66928230f8bfda3bc260b0c069ec30813424c548800ddf72f99a5aeebce27e41fa0262b44a849d7b13d1c041ea6e76d8968562d518fd3e2b328f12cab701f5d2c2d031b0374a73d984d4142e0ea83ddefe4fbc0e98c3bfb6b7d7cc135db825", 0x1, 0x0, 0x80000000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x5, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) 812.161723ms ago: executing program 3 (id=4164): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c21e370000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x2}}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) socket$kcm(0xa, 0x922000000003, 0x11) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001980)="2b7314e09a92bafb36c833be506b72e39af51682a30566ac25c1a8a5753002cd45098cda6617d9d0d69f7684523ba452330693735b9fc8ce6db494c2d377f07e122122111906bbff8b319713b03ce8bc5f18475cc8956611f3d7eb7c9bffb9335988a65c825a0736541282bcbd5f23d95b1b6abf84a1185f0591f27b3706b60612e043e6c714e6a3f7020aee5bafd0bf574564d8583ab0b1d9b95b50a207f7f6de8fbedf2c358ea42251196c857fb9bb205a3ee34f3a61b134ed1e4a732ede3507ffc8a262f76254cc664cd4eca06375bb89295cab412d559dc1fb098d3067f4a5e5ff61846026aff514f883ea491e4dc3f351d0a16b9c694dcd1e31c7d30dc50130a621ff5139109a7db3e9e137cc20a7fe260f639e369ac106094b9ba024e5934a5883df79429acbc854c25c9b3294400f8940c3cbb9d50f67b5ddd4a2cf85c36dfe80e3119f81d83abf8822c9832f7f6bf14feb6a8182a9efec48c0b74b1484631f3f45ef9e6b90e0dab6181a5c68ccc94651be224b51c2492fa8cb03ad0b475a5f052ffa9b695407227999e464a7ea0f58d35963d3d32ce38b73391c593530423a10b4d752c05feb266edb12a813beb7cdf747260232a45c4baa266ba1722ffeae9a474d3cee695360069766da47a4c36603b55cf779ff030a9414fd0a1ec5e49c424795da04e6adb9a5e01dd771bf841c7a5cedc03b7a4c2733aab4087d8383442104566229df2fcc12cfca85b6cd6949b94d582def2ac3b22ada7c22980287adcaa7123764dd5d1f23605a1aa77f23560f48bb29d2e6c3d2d20370e59ab695dad58d5faedbef978109a4248de02bf1f0f56468c4334f60839752445f8f3014c19da69795f5968a8a7f03bcee144842b38bb1288a93811283e01dc43f1e11713f76538c6855dd9cb047829bda4c82ccad9baa812ea2fdc762c2416751183bade3d0c4d775f4f53dfd922e38a78bcd44f276f871366a07bbb4bbd4ec0580fe3b52cdb07b808bd901dea5b25cc0b3f5ebbb0ebe21a9575828d8011ef76c6c391ffa6db9bc6fd7bde5ca1f7ab8f40d28b3404c1206ed2069bf05f45692f690cd1026247253cc4ffa5a785cc14ed65996f009c3dbc077bc67c37e067480ff73d517dd7797835f2cb7cc25a98c2f4889e5d6744d2e1dcdc18d3a096150b6f8dba289b186773c600fd1474832f8b265fa8e07667b412ac9fca80dc849ddb1ea8e10d213f0479e795fb0024964cf1e65078d5723243cdd3256fb9fd5251f27a1815fa1c69304f4c3555bd5d5e07c4f59802d9bb202420d6177bd937a85ea51219dba814c90ac490306ddbd50858bc597d1832dfccf3a455a1ee4e286bd497a4d2beeed84386596dcc74be271ccd63155d14a458c10f0fccc42d409a9aaa95f68070e55f1eb085a8bfd5f7ba271e6839f577b92f354d08c8f9bbb4958043bd4ed254f62c3f52464c74d0b902ee106ffa5b4479a076e4b758570ac45059ec862c10657448b501117aee010c7c9166c4ec8a3363b1b93d48ffd5f2fc1603aa7974d0d6d8118bbe20822b46e47dfe97f2828b760bf040e743778da5cf87af2e70030e97ed3296ad1a354a92b742098146368b7f85a8b6048748da322632c24e1f1b6678e3b22cb3673410fb41bc3367f3ace20a5b5b00e4e2ec6aa192ea8d85062ea0f1507714062f1e8500e3f9d1ea977314d8faa77b1f9717d53676055a2caeb54c7e544caa366cf3bf0a96e628979378f966ea2783661ef295ddacfc38f90154f674389bbe09c5851aade84502b4683acebd4bbf09c6d37fc88c4c23de3d9379bda045f62b72c468185d8b8db873de25fbb6942d9bc665bcfce08bf4b03cd0b80a4f09a68b8eacb005e718bebb7fb8816b7f213524971bb6f0709e8c9e80ed9ba01c331a9d44f4366ba44fae1dbf39ba476c1aece2bc2d0288b73743c367c75b8f5c787e3776141877235d4543c41be5ac6da8797042b4860bc6caa7a951913d63ecfd6d123e3a8a14570480db953297a9b3d0288", 0x593}], 0x1}, 0x4044004) (async) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1650}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r4, &(0x7f00000001c0)="0d4a563a700a1d107460a6a076b25d34d3466c1e326d9319ce495261b7b4530d02d42e092cea24f11af7cd993a3e7f1ccc06acbbb324e221f4384ae7d469c485b3a0776c341fca8f54d61f953f8e794a15e01f081aff2e6effac7e7f83b094", &(0x7f0000000580)=""/91, 0x4}, 0x20) 749.962913ms ago: executing program 1 (id=4165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x8, 0x8, 0x40}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000180)={0x0, 0x80, 0x3, 0x0, 0x8, 0x30, 0x0, 0x6, 0x1000, 0xe, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000140), 0xe}, 0x1000, 0x5, 0x1000, 0x7, 0x4, 0x7, 0xc84, 0x0, 0x5, 0x0, 0xff}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000040000000c00000012020000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000000000000000000000000000000005fd0000000"], 0x50) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x2, 0x1, 0x3}], 0x10, 0x5}, 0x94) r5 = socket$kcm(0x1e, 0x2, 0x0) r6 = socket$kcm(0x28, 0x1, 0x0) recvmsg$kcm(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2160) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x0, 0x0, 0x0, 0x209, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x19}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0x16, 0x2008}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0xfffffe2b, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c25949301a3c92b", 0x14}], 0x1}, 0x0) 664.743504ms ago: executing program 2 (id=4166): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0x4}, 0x8428, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40012103) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x7e}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xb7, &(0x7f000000cf3d)=""/183}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001500)={r1, 0x3, 0x2d, 0xfd77, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000000), 0x4) socket$kcm(0x23, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0xd, 0x3}, {0x6}]}]}}, &(0x7f0000000980)=""/144, 0x3e, 0x90, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x53}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r2 = socket$kcm(0x22, 0x2, 0x21) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x4000080) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40047438, 0x7f7c2739efff) 664.319094ms ago: executing program 3 (id=4167): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000000)="7311ff7d8abb4c31c015aadc7b3699aad812cc336b6656af6404100771847ebc2020c0f0dc7b6cb3322e4028bd733f5077ca0e8496895d6172145f99d67c6205d8723c0348d143f07d9c5484b640b768bce351a28fb33c7880a4dce38f636c784d427dcbf2e06c8a09cd244a11e16b5948354ab4cbe18a18d15e1f2f6ba15ed284fa964c3d44dfd551db3ffc927ad089e8bad719f99b7eeff03e1e621e503531e70fdeef50493b39ab8e6ad2731738e64413bbef8117aefead9e64ccd8fb76f5fe4abd82248f3d0bf010a754b0e22615707222a0408bf45baffe5804f32483c01741e1e5d2633622d2ab903d", &(0x7f0000000100)=""/137, &(0x7f00000001c0)="d70f0f1f8268634fa6bd799cf06b66aeac85990a1e479ba48cf5a19c4b8dc29bac23926f44d3e384280d1fb90606cee5553050ca87671081d07c72602e39d177bd706a04cd9e67252416ad32d71750721248eca8100de3762aea39ab498146595140789b9e47635dbc53397d6dedcef51247fece5a1b4e01c3839053f01353d5a7126279fae7cf3a6543868168f0a4a0ed", &(0x7f0000000280)="dc04d6e20b7e1ed23fcddaa0aaabb154005eeeee0cf3cdc866fe28a06cb2b8607fad2000d677d14b357b98fbb1687171938fab9f52fb562dcd73eca46fe31eae1e70b2229e7869b4388794e19e396a7fdd190e7accdadb78d8db6fe090f85ed637ac5578738a2cae82a50b9c912c463b2616ab260214f21250ae0b4c954959075cfa63a028c98f259bc32f0a9906d628dd9c1b073c943c94c17ec07fe06fde50ecf2e4a1f5369589645bd7ef0c591108d457f3d82722dc6bfe24c66c6d6b10e73a2aac3ba191f64011449bb315bd32666f94a63957e61af798bd", 0x3, 0x1, 0x4}, 0x38) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0x0, 0x28, 0x5, 0x0, 0x8cfc, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffff7f, 0x1, @perf_config_ext={0x4, 0x2}, 0x10, 0x7, 0xffff, 0x4, 0x3, 0x7, 0x0, 0x0, 0x9, 0x0, 0xc}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) r1 = perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x8, 0x3f, 0x64, 0xd, 0x0, 0xd845, 0x0, 0x14, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffff8c, 0x0, @perf_bp={&(0x7f00000003c0), 0x6}, 0x4206, 0xfffffffffffff800, 0xa, 0x1, 0xc, 0xffffffff, 0x8, 0x0, 0xfffffff9, 0x0, 0x1}, 0x0, 0x10, r0, 0x2) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz1\x00', 0x200002, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000500)={0x0, 0x80, 0x3, 0x5, 0x7, 0x9, 0x0, 0x140000, 0x1040, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x4, 0x9}, 0x100000, 0x2, 0x3, 0x3, 0x5, 0x6, 0xb1a, 0x0, 0x200, 0x0, 0x4}, r2, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000600)={'a', ' *:* ', 'r\x00'}, 0x8) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) r5 = gettid() r6 = syz_open_procfs$namespace(r5, &(0x7f0000000640)='ns/mnt\x00') close(r1) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) sendmsg$unix(r7, &(0x7f0000000840)={&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000740)="58047951dd9a66e98980ca5bf18783eab950d5325182849295cc85b10e3321995b959ff8cdb71aa0a2875151c1aed95f530f1ceef86bf0bacfdaf3a3ef84785b9486186df0c6f76039d88351369c0b444e7b403bd832053e2a341b6e7319dbfa59d4476635997dadb7e21e9da02d8eaee0c60966e64a70cbd3322eb271918a392cd221010beaa6", 0x87}], 0x1, 0x0, 0x0, 0x4000880}, 0x40000) r8 = openat$cgroup_pressure(r7, &(0x7f00000009c0)='io.pressure\x00', 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000000b40)={&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000900)="ded52406141d5e055a2f21905e50e544cc598e18381ad7b768bc98c087905423867744ab82", 0x25}, {&(0x7f0000000940)="7eb60f1da28359eb2948ce18a806788141b6369dce97a3131f95992de784ed94491bfa72da79ea1e89329fe2b0", 0x2d}], 0x2, &(0x7f0000000a00)=[@rights={{0x30, 0x1, 0x1, [r0, r4, r6, r3, r7, r6, r4, r0]}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @rights={{0x18, 0x1, 0x1, [r1, r7]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, 0xee01}}}, @rights={{0x24, 0x1, 0x1, [r4, r2, r7, r7, r8]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee01}}}], 0x108, 0x4c004}, 0x4000000) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={r7, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000c00)=@o_path={&(0x7f0000000b80)='./file0\x00', r9, 0x4000, r8}, 0x18) r10 = perf_event_open$cgroup(&(0x7f0000000c40)={0x1, 0x80, 0x4, 0x3, 0x5, 0x19, 0x0, 0x846b, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x9, 0x3}, 0x100, 0xfffffffffffffbd8, 0x3, 0x5, 0x5, 0x0, 0x200, 0x0, 0x9, 0x0, 0x1}, r2, 0xf, 0xffffffffffffffff, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={r9, 0x58, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r7, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000e40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000e80)=[0x0], &(0x7f0000000ec0)=[0x0], 0x0, 0x19, &(0x7f0000000f00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000f40), &(0x7f0000000f80), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1e, 0x3, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}}, &(0x7f0000000d00)='syzkaller\x00', 0xc, 0x30, &(0x7f0000000d40)=""/48, 0x41100, 0x90, '\x00', r11, @sk_lookup, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, 0xffffffffffffffff, 0x6, &(0x7f0000001140)=[0xffffffffffffffff, r7, r9, r9, r9, r7], &(0x7f0000001180)=[{0x5, 0x1, 0x2, 0xc}, {0x4, 0x2, 0x7, 0x5}, {0x4, 0x4, 0x9, 0xb}, {0x2, 0x3, 0xa, 0x8}, {0x5, 0x2, 0x7, 0x4}, {0x0, 0x3, 0x6, 0x3}], 0x10, 0x101}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000014c0)={r7, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001500)=@base={0x11, 0xc24f, 0x3, 0x4c40, 0x400, r9, 0xa8, '\x00', r12, r7, 0x1, 0x2, 0x4}, 0x50) r16 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001640)={0x6, 0xc, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000001340)='GPL\x00', 0xa8d, 0x93, &(0x7f0000001380)=""/147, 0x41100, 0x1, '\x00', r11, 0x25, r7, 0x8, &(0x7f0000001440)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001480)={0x5, 0xc, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001580)=[r14, r15, r9, r9, 0x1], &(0x7f00000015c0)=[{0x5, 0x2, 0x4, 0x3}, {0x3, 0x5, 0x6, 0x4}, {0x1, 0x1, 0xf, 0x4}, {0x5, 0x2, 0x5, 0xb}, {0x0, 0x3, 0x2, 0x9}, {0x2, 0x5, 0x7, 0xa}], 0x10, 0x7c68}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001700)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000001740)={r17, r16}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001940)={r7, &(0x7f0000001780)="7e8af3714a785b8346d590829aa0b7ba8094fbb5512ff4d1e688d77378af748766bc4a987c851606246c7625dc69c4b7bdaab376b02527cbe459430bfae78273ea23ec69d65e392d742e4517ae0449408e2593cfadf51f9a0f1939d34a2106ea2266da00f267242b37a64b404c5ab924b2d2fa703dc7584d6babbeee8e4821465ad0d85b3101c6731c7147a755dc25d2fd5a1fab2f5b00bd2c61a4a3", &(0x7f0000001840)=""/215}, 0x20) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x7, 0x6b, 0x9, 0x0, 0x0, 0xa, 0xb022d, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000001980), 0xa35945bcbfc0d740}, 0x1640c, 0x3, 0x6, 0x5, 0x9, 0x8000, 0x2, 0x0, 0xdb, 0x0, 0x1}, r5, 0x6, r10, 0x2) 546.729685ms ago: executing program 3 (id=4168): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0xffffffff, 0x0, 0x0, 0x2f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000001c00)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000ac0)="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", 0xbf5}, {&(0x7f0000001ac0)="7fa230fc2b544faf68d472cb350dc67b8d50ab8160b779c97edc39617557d841bc9dd7fabf3e25cf0f2d8f9fb76902b4c863b1a1effb281b7c91751f47dd59728e6f69416470283ae144946bd4d82e2545e11cc3907eafdc2d47619bcebcade31bb5453e01df3689b0eed4e92520315c40f644777a49384a6912", 0x7a}, {&(0x7f0000001b40)}], 0x3, &(0x7f0000001bc0)}, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10003d39fcffffff0000000000000000000000000000000000000000d2ec87f6e3de160774583cca1ae91c187408b081631a71890cd214f24a8d2aa4911517a7d59d2af0df277f49b42807e845d7a6c4"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004a00000000000000020b0000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018510000040000000000000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[r8, r8], &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xfffffffc}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={r10, 0x58, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000008000000070000000708000010000000", @ANYRESHEX=r14, @ANYBLOB="34000000000000000000000000006f3c39f49c00"/32, @ANYRES32=r0, @ANYRES32=r9, @ANYBLOB="0200000001000000000000000e00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x17, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000f8a8d6e56fb3de00000001000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000011c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r14, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0x9, 0x100, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001480)=[r8, r10, r12, r13, 0xffffffffffffffff, r15], &(0x7f00000014c0)=[{0x1, 0x2, 0xc, 0x4}, {0x1f3, 0x2, 0x5}, {0x2, 0x1, 0x4, 0xa}], 0x10, 0x6}, 0x94) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x7, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x1}, @struct={0x2, 0x9, 0x0, 0x4, 0x0, 0x5, [{0xc, 0x0, 0xf}, {0xd, 0x5, 0x80000001}, {0x0, 0x4, 0x10001}, {0xb, 0x5, 0x482}, {0x1, 0x4, 0xa}, {0x5, 0x1, 0x4}, {0x7, 0x1, 0x9}, {0xa, 0x5, 0x4}, {0xb, 0x4}]}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @ptr, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x3}, {0x6}, {0xd, 0x114}, {0xf, 0x2}, {0x9, 0x76}, {0x7, 0xc000000}, {0x9, 0x8172}]}, @const={0x2, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000240)=""/189, 0x11f, 0xbd, 0x1, 0x5}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', r14, r16, 0x2, 0x1, 0x1}, 0x50) 488.734765ms ago: executing program 1 (id=4169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0xffffffff, 0x0, 0x0, 0x2f9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="bb00000031000b63ddd2806c8c6f94f903f4b76ffa24fc60100003000a00020005358ac137800500026ced000300", 0x2e}, {&(0x7f0000000140)="c512603b5c247ac97270d2d9f9e3a774644b37ffa4c38bc5ac41e6569c22f21809625db64973a31646a005a85e988285af8f70ec763129dac5d3c4e5e28b003aec39da77a70fcc3aec02c9d2148fa6edc37169089bf94207176394", 0x5b}, {&(0x7f0000000380)="e166186d6cb0b5b1d6ffadb2be01b8263d3abab0c802ff3938203ba118ca79aec5641d631a209c4a807a66d32c93d6258379", 0x32}], 0x3}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$inet(r6, &(0x7f0000001c00)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000000ac0)="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", 0xbf5}, {&(0x7f0000001ac0)="7fa230fc2b544faf68d472cb350dc67b8d50ab8160b779c97edc39617557d841bc9dd7fabf3e25cf0f2d8f9fb76902b4c863b1a1effb281b7c91751f47dd59728e6f69416470283ae144946bd4d82e2545e11cc3907eafdc2d47619bcebcade31bb5453e01df3689b0eed4e92520315c40f644777a49384a6912", 0x7a}, {&(0x7f0000001b40)}], 0x3, &(0x7f0000001bc0)}, 0x0) recvmsg$kcm(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="15000000060000000f0000000800000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="10003d39fcffffff0000000000000000000000000000000000000000d2ec87f6e3de160774583cca1ae91c187408b081631a71890cd214f24a8d2aa4911517a7d59d2af0df277f49b42807e845d7a6c4"], 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004a00000000000000020b0000181100", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018510000040000000000000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0xa, 0x65b2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x7, 0x3ff, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[r8, r8], &(0x7f00000003c0)=[{0x2, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x8, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x6, 0xc}, {0x0, 0x3, 0xd, 0x2}, {0x5, 0x3, 0x6, 0xa}], 0x10, 0x1}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="12000000040000000800000044"], 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0xfffffffc}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r13, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001200)={r10, 0x58, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e00000008000000070000000708000010000000", @ANYRESHEX=r14, @ANYBLOB="34000000000000000000000000006f3c39f49c00"/32, @ANYRES32=r0, @ANYRES32=r9, @ANYBLOB="0200000001000000000000000e00"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x17, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000800000000f8a8d6e56fb3de00000001000000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f00000011c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', r14, 0x25, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f00000013c0)={0x2, 0x9, 0x100, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001480)=[r8, r10, r12, r13, 0xffffffffffffffff, r15], &(0x7f00000014c0)=[{0x1, 0x2, 0xc, 0x4}, {0x1f3, 0x2, 0x5}, {0x2, 0x1, 0x4, 0xa}], 0x10, 0x6}, 0x94) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x100, 0x100, 0x7, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x1}, @struct={0x2, 0x9, 0x0, 0x4, 0x0, 0x5, [{0xc, 0x0, 0xf}, {0xd, 0x5, 0x80000001}, {0x0, 0x4, 0x10001}, {0xb, 0x5, 0x482}, {0x1, 0x4, 0xa}, {0x5, 0x1, 0x4}, {0x7, 0x1, 0x9}, {0xa, 0x5, 0x4}, {0xb, 0x4}]}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x4}, @ptr, @enum={0x1, 0x7, 0x0, 0x6, 0x4, [{0x3}, {0x6}, {0xd, 0x114}, {0xf, 0x2}, {0x9, 0x76}, {0x7, 0xc000000}, {0x9, 0x8172}]}, @const={0x2, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x2e]}}, &(0x7f0000000240)=""/189, 0x11f, 0xbd, 0x1, 0x5}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, r15, 0x3, '\x00', r14, r16, 0x2, 0x1, 0x1}, 0x50) 294.126897ms ago: executing program 2 (id=4170): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fdffffff00000000fdffffff8500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000007b000000"], 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x10, 0x3, 0x10) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32], 0x50) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r4], 0x9a) 169.609168ms ago: executing program 2 (id=4171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x27) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002e80)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f40)={0x6, 0x1c, &(0x7f0000002000)=ANY=[@ANYBLOB="180000000e000000000000000200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ab0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000001853000003000000000000000000000095"], &(0x7f0000000840)='GPL\x00', 0x4, 0x2e, &(0x7f0000000940)=""/46, 0x40f00, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3bd}, [@ldst={0x1, 0x3, 0x4, 0x3, 0x9, 0xfffffffffffffff0, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x6b, &(0x7f0000000880)=""/107, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[r2, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff], &(0x7f0000000a80)=[{0x2, 0x1, 0x9, 0x5}, {0x3, 0x5, 0x8, 0x5}, {0x1, 0x5, 0xe, 0x9}], 0x10, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, r6, 0x4, r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@map, 0x15, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000780)=[0x0, 0x0], 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) 54.723509ms ago: executing program 0 (id=4172): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x0, 0x43, 0xda, &(0x7f00000001c0)="fbb6155f1a3f199104e621a730a3a5a9e97e13a080228015b421430490edd2d65a45f1dbcb13b1bff07106f439c0f092cada31e0c948116b49e6639f370e2c3cfaf1ee", &(0x7f0000000740)=""/218, 0x5, 0x0, 0x73, 0xe3, &(0x7f0000000840)="77cb2e16329de4181774b6799fe408b9d0368df86370e114cb225d610312b915b2264431bb88950b76b9968ea879696b247df3eb9c45b3bdb4f541d00693931002a54fe4ec12121a434f18739ed8472223984bdfd2247ba00610bdac91237c69915ee299b866c6396239d0989cc155163d3c79", &(0x7f0000000940)="8c6ce0f5d0c7aad3c69fcd0d1d361d93356c3d6f5ead78094e689bf43fb8c27de6375f574e4bf5e033beab5997fab8542c34a6cf46ab9dfff398e75f62f9049b13b00357680ed170fbf448af2eda397c24b6f432a46e7e4a381d9760177ddcf29807d03a80189b2385c409f295bee417bca49d19571af1b1fbbecf043662a9d97866be2c66928230f8bfda3bc260b0c069ec30813424c548800ddf72f99a5aeebce27e41fa0262b44a849d7b13d1c041ea6e76d8968562d518fd3e2b328f12cab701f5d2c2d031b0374a73d984d4142e0ea83ddefe4fbc0e98c3bfb6b7d7cc135db825", 0x1, 0x0, 0x80000000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x5, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x6, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) 0s ago: executing program 0 (id=4173): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x45, &(0x7f0000000040)=r5, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xd, 0x0, 0x3, 0x3, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x1f, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0xb, 0x0, 0x4, 0x8, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @map_fd={0x18, 0xa, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x65, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000380), &(0x7f0000000600), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8914, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x1], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x8916, &(0x7f0000000000)={r13}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8914, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5 [ 544.567274][T13382] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2155'. [ 544.569409][T13380] dump_stack_lvl+0x18c/0x250 [ 544.569503][T13380] ? show_regs_print_info+0x20/0x20 [ 544.569539][T13380] ? load_image+0x420/0x420 [ 544.569592][T13380] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 544.569625][T13380] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 544.569655][T13380] warn_alloc+0x246/0x340 [ 544.569704][T13380] ? stack_trace_save+0xaa/0x100 [ 544.569735][T13380] ? zone_watermark_ok_safe+0x230/0x230 [ 544.569781][T13380] ? kasan_set_track+0x5f/0x70 [ 544.569819][T13380] ? kasan_set_track+0x4e/0x70 [ 544.569842][T13380] ? __kasan_kmalloc+0x8f/0xa0 [ 544.569865][T13380] ? xsk_init_queue+0xad/0x100 [ 544.569906][T13380] ? xsk_setsockopt+0x4e5/0x760 [ 544.569932][T13380] ? do_sock_setsockopt+0x175/0x1a0 [ 544.569953][T13380] ? __x64_sys_setsockopt+0x182/0x200 [ 544.569995][T13380] __vmalloc_node_range+0x126/0x1330 [ 544.570104][T13380] ? free_vm_area+0x50/0x50 [ 544.570150][T13380] vmalloc_user+0x74/0x80 [ 544.570197][T13380] ? xskq_create+0xbf/0x170 [ 544.570227][T13380] xskq_create+0xbf/0x170 [ 544.570262][T13380] xsk_init_queue+0xad/0x100 [ 544.570310][T13380] xsk_setsockopt+0x4e5/0x760 [ 544.570344][T13380] ? xsk_poll+0x680/0x680 [ 544.570379][T13380] ? __fget_files+0x28/0x4b0 [ 544.570421][T13380] ? __fget_files+0x28/0x4b0 [ 544.570449][T13380] ? aa_sock_opt_perm+0x74/0x100 [ 544.570482][T13380] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 544.570524][T13380] ? security_socket_setsockopt+0x7e/0xa0 [ 544.570550][T13380] ? xsk_poll+0x680/0x680 [ 544.570580][T13380] do_sock_setsockopt+0x175/0x1a0 [ 544.570615][T13380] ? __fdget+0x180/0x210 [ 544.570648][T13380] __x64_sys_setsockopt+0x182/0x200 [ 544.570680][T13380] do_syscall_64+0x55/0xa0 [ 544.570713][T13380] ? clear_bhb_loop+0x40/0x90 [ 544.570740][T13380] ? clear_bhb_loop+0x40/0x90 [ 544.570768][T13380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 544.761035][T13380] RIP: 0033:0x7fe60019cdd9 [ 544.765526][T13380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.785426][T13380] RSP: 002b:00007fe601002028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 544.793992][T13380] RAX: ffffffffffffffda RBX: 00007fe600415fa0 RCX: 00007fe60019cdd9 [ 544.801991][T13380] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 544.810001][T13380] RBP: 00007fe600232d69 R08: 0000000000000004 R09: 0000000000000000 [ 544.818344][T13380] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 544.826416][T13380] R13: 00007fe600416038 R14: 00007fe600415fa0 R15: 00007ffd1086e9b8 [ 544.834527][T13380] [ 544.849732][T13380] Mem-Info: [ 544.852943][T13380] active_anon:9257 inactive_anon:0 isolated_anon:0 [ 544.852943][T13380] active_file:17253 inactive_file:40134 isolated_file:0 [ 544.852943][T13380] unevictable:768 dirty:160 writeback:0 [ 544.852943][T13380] slab_reclaimable:10701 slab_unreclaimable:98796 [ 544.852943][T13380] mapped:24548 shmem:1376 pagetables:574 [ 544.852943][T13380] sec_pagetables:0 bounce:0 [ 544.852943][T13380] kernel_misc_reclaimable:0 [ 544.852943][T13380] free:1339396 free_pcp:8708 free_cma:0 [ 544.902273][T13380] Node 0 active_anon:37028kB inactive_anon:0kB active_file:69012kB inactive_file:160336kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98192kB dirty:640kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10644kB pagetables:2296kB sec_pagetables:0kB all_unreclaimable? no [ 544.940922][T13380] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 544.977817][T13380] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 545.008870][T13380] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 545.015359][T13380] Node 0 DMA32 free:1446100kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:36984kB inactive_anon:0kB active_file:69012kB inactive_file:159516kB unevictable:1536kB writepending:640kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:16224kB local_pcp:13236kB free_cma:0kB [ 545.057107][T13380] lowmem_reserve[]: 0 0 0 0 0 [ 545.065668][T13380] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 545.097224][T13380] lowmem_reserve[]: 0 0 0 0 0 [ 545.124449][T13380] Node 1 Normal free:3896124kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18272kB local_pcp:4512kB free_cma:0kB [ 545.155827][T13380] lowmem_reserve[]: 0 0 0 0 0 [ 545.162505][T13380] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 545.176430][T13380] Node 0 DMA32: 1809*4kB (UME) 1882*8kB (UME) 1350*16kB (UME) 841*32kB (UME) 271*64kB (UME) 115*128kB (UME) 23*256kB (UME) 14*512kB (UM) 21*1024kB (UME) 11*2048kB (UME) 314*4096kB (UM) = 1446100kB [ 545.279319][T13380] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 545.309521][T13380] Node 1 Normal: 245*4kB (UE) 51*8kB (U) 49*16kB (UE) 140*32kB (UE) 45*64kB (UME) 4*128kB (UME) 0*256kB 2*512kB (UM) 0*1024kB 1*2048kB (U) 948*4096kB (M) = 3896124kB [ 545.371646][T13380] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 545.383376][T13380] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 545.393135][T13380] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 545.405908][T13380] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 545.415649][T13380] 58750 total pagecache pages [ 545.447421][T13380] 0 pages in swap cache [ 545.464781][T13380] Free swap = 124996kB [ 545.477763][T13391] netlink: 'syz.0.2157': attribute type 10 has an invalid length. [ 545.524281][T13380] Total swap = 124996kB [ 545.528619][T13380] 2097051 pages RAM [ 545.533146][T13380] 0 pages HighMem/MovableOnly [ 545.537975][T13380] 416927 pages reserved [ 545.557894][T13380] 0 pages cma reserved [ 545.568848][T13391] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 546.638759][T13425] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2168'. [ 547.362940][T13433] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2169'. [ 547.424180][T13433] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 549.396808][T13472] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2181'. [ 549.536499][T13479] tap0: tun_chr_ioctl cmd 1074025681 [ 550.703842][T13504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2189'. [ 550.781230][T13504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2189'. [ 550.803513][T13507] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2189'. [ 551.694278][T13523] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2195'. [ 552.433054][T13538] netlink: 'syz.2.2199': attribute type 11 has an invalid length. [ 552.454614][T13538] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.2199'. [ 553.250162][T13551] netlink: 'syz.0.2204': attribute type 1 has an invalid length. [ 553.257983][T13551] netlink: 'syz.0.2204': attribute type 4 has an invalid length. [ 553.305214][T13551] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2204'. [ 553.447799][T13555] netlink: 'syz.2.2203': attribute type 29 has an invalid length. [ 553.532099][T13555] netlink: 'syz.2.2203': attribute type 29 has an invalid length. [ 553.650093][T13557] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2206'. [ 553.695489][T13560] netlink: 'syz.2.2203': attribute type 29 has an invalid length. [ 554.278427][T13572] netlink: 209848 bytes leftover after parsing attributes in process `syz.2.2210'. [ 554.351643][T13575] netlink: 'syz.1.2209': attribute type 21 has an invalid length. [ 554.384150][T13575] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2209'. [ 554.408582][T13575] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 555.903001][T13595] netlink: 'syz.1.2216': attribute type 1 has an invalid length. [ 555.914375][T13595] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2216'. [ 556.016979][T13595] netlink: 'syz.1.2216': attribute type 3 has an invalid length. [ 556.069536][T13595] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2216'. [ 556.776041][T13607] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 556.825449][T13605] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2219'. [ 556.925638][T13607] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2219'. [ 557.380041][T13615] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2220'. [ 557.408610][T13616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 558.168206][T13630] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2224'. [ 558.189376][T13630] tc_dump_action: action bad kind [ 558.331267][T13634] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2226'. [ 558.653813][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.665196][T13637] bridge0: entered allmulticast mode [ 559.342291][T13651] validate_nla: 1 callbacks suppressed [ 559.342310][T13651] netlink: 'syz.3.2232': attribute type 39 has an invalid length. [ 559.593806][T13655] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2234'. [ 559.653959][T13655] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 559.691489][T13655] CPU: 1 PID: 13655 Comm: syz.0.2234 Not tainted syzkaller #0 [ 559.699220][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 559.709714][T13655] Call Trace: [ 559.713038][T13655] [ 559.716007][T13655] dump_stack_lvl+0x18c/0x250 [ 559.720751][T13655] ? show_regs_print_info+0x20/0x20 [ 559.726091][T13655] ? load_image+0x420/0x420 [ 559.730671][T13655] sysfs_warn_dup+0x8e/0xa0 [ 559.735231][T13655] sysfs_do_create_link_sd+0xc0/0x110 [ 559.740652][T13655] device_add_class_symlinks+0x1cf/0x240 [ 559.746341][T13655] device_add+0x507/0xc20 [ 559.750726][T13655] wiphy_register+0x1dad/0x2ae0 [ 559.755672][T13655] ? cfg80211_event_work+0x40/0x40 [ 559.760845][T13655] ? minstrel_ht_alloc+0x88a/0x990 [ 559.766302][T13655] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 559.772439][T13655] ieee80211_register_hw+0x3464/0x4250 [ 559.778031][T13655] ? ieee80211_tasklet_handler+0x20/0x20 [ 559.783709][T13655] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 559.789761][T13655] ? __debug_object_init+0xec/0x450 [ 559.795033][T13655] ? __asan_memset+0x22/0x40 [ 559.799706][T13655] ? __hrtimer_init+0x186/0x270 [ 559.804610][T13655] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 559.810422][T13655] ? mac80211_hwsim_free+0x220/0x220 [ 559.815764][T13655] ? rcu_is_watching+0x15/0xb0 [ 559.820591][T13655] ? kstrndup+0xbd/0x140 [ 559.824896][T13655] hwsim_new_radio_nl+0xdc9/0x1a90 [ 559.830055][T13655] ? __nla_validate+0x50/0x50 [ 559.834798][T13655] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 559.841263][T13655] ? __nla_parse+0x40/0x50 [ 559.845740][T13655] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 559.852215][T13655] genl_family_rcv_msg_doit+0x211/0x310 [ 559.857799][T13655] ? end_current_label_crit_section+0x170/0x170 [ 559.864195][T13655] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 559.870132][T13655] ? bpf_lsm_capable+0x9/0x10 [ 559.874893][T13655] ? security_capable+0x89/0xb0 [ 559.879776][T13655] genl_rcv_msg+0x619/0x7a0 [ 559.884736][T13655] ? genl_bind+0x360/0x360 [ 559.889174][T13655] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 559.895546][T13655] netlink_rcv_skb+0x241/0x4d0 [ 559.900355][T13655] ? genl_bind+0x360/0x360 [ 559.904790][T13655] ? netlink_ack+0x1180/0x1180 [ 559.909674][T13655] ? __lock_acquire+0x7d40/0x7d40 [ 559.914719][T13655] ? net_generic+0x1e/0x240 [ 559.919263][T13655] ? down_read+0x1ac/0x2e0 [ 559.923737][T13655] genl_rcv+0x28/0x40 [ 559.927735][T13655] netlink_unicast+0x751/0x8d0 [ 559.932625][T13655] netlink_sendmsg+0x8d0/0xbf0 [ 559.937424][T13655] ? netlink_getsockopt+0x590/0x590 [ 559.942767][T13655] ? aa_sock_msg_perm+0x94/0x150 [ 559.947851][T13655] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 559.953180][T13655] ? security_socket_sendmsg+0x80/0xa0 [ 559.958838][T13655] ? netlink_getsockopt+0x590/0x590 [ 559.964067][T13655] ____sys_sendmsg+0x5ba/0x960 [ 559.968862][T13655] ? __asan_memset+0x22/0x40 [ 559.973570][T13655] ? __sys_sendmsg_sock+0x30/0x30 [ 559.978695][T13655] ? __import_iovec+0x5f2/0x850 [ 559.983595][T13655] ? import_iovec+0x73/0xa0 [ 559.988381][T13655] ___sys_sendmsg+0x2a6/0x360 [ 559.993077][T13655] ? __sys_sendmsg+0x2a0/0x2a0 [ 559.997983][T13655] ? debug_mutex_init+0x38/0x70 [ 560.002877][T13655] __se_sys_sendmsg+0x1c2/0x2b0 [ 560.007753][T13655] ? __x64_sys_sendmsg+0x80/0x80 [ 560.012722][T13655] ? lockdep_hardirqs_on+0x98/0x150 [ 560.017948][T13655] do_syscall_64+0x55/0xa0 [ 560.022386][T13655] ? clear_bhb_loop+0x40/0x90 [ 560.027207][T13655] ? clear_bhb_loop+0x40/0x90 [ 560.031978][T13655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.037919][T13655] RIP: 0033:0x7f4a7119cdd9 [ 560.042368][T13655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.062098][T13655] RSP: 002b:00007f4a72032028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 560.070661][T13655] RAX: ffffffffffffffda RBX: 00007f4a71415fa0 RCX: 00007f4a7119cdd9 [ 560.078737][T13655] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 560.086736][T13655] RBP: 00007f4a71232d69 R08: 0000000000000000 R09: 0000000000000000 [ 560.094917][T13655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.102903][T13655] R13: 00007f4a71416038 R14: 00007f4a71415fa0 R15: 00007ffea0bd5d18 [ 560.110912][T13655] [ 560.130316][T13657] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2235'. [ 560.792388][T13676] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2241'. [ 560.925524][T13674] __nla_validate_parse: 1 callbacks suppressed [ 560.925564][T13674] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2238'. [ 560.970828][T13674] tc_dump_action: action bad kind [ 561.315713][T13691] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2245'. [ 561.516518][T13694] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2246'. [ 563.403309][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.409902][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.756959][T13722] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2253'. [ 563.787144][T13722] tc_dump_action: action bad kind [ 564.196102][T13731] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 564.213027][T13731] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 564.222221][T13731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 564.232581][T13731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 564.240940][T13731] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 564.249492][T13731] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 564.489506][T13729] chnl_net:caif_netlink_parms(): no params data found [ 564.737072][T13743] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2256'. [ 564.776140][T13729] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.783621][T13729] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.791050][T13729] bridge_slave_0: entered allmulticast mode [ 564.798603][T13729] bridge_slave_0: entered promiscuous mode [ 564.807916][T13729] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.815333][T13729] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.822904][T13729] bridge_slave_1: entered allmulticast mode [ 564.830576][T13729] bridge_slave_1: entered promiscuous mode [ 564.887916][T13747] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2257'. [ 564.942534][T13729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.963175][T13729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.067606][T13751] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2258'. [ 565.071907][T13754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2260'. [ 565.093101][T13729] team0: Port device team_slave_0 added [ 565.104144][T13729] team0: Port device team_slave_1 added [ 565.132415][T13754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2260'. [ 565.175153][T13754] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2260'. [ 565.220546][T13729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.230790][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.258891][T13729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.298421][T13729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.305886][T13729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.335961][T13729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.398331][T13729] hsr_slave_0: entered promiscuous mode [ 565.420842][T13729] hsr_slave_1: entered promiscuous mode [ 565.427502][T13729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.436033][T13729] Cannot create hsr debugfs directory [ 565.696408][T13765] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 565.703331][T13765] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 565.911322][T10781] tipc: Left network mode [ 566.331181][T13731] Bluetooth: hci4: command tx timeout [ 568.366595][T13731] Bluetooth: hci4: command tx timeout [ 568.433381][T10781] smc: removing net device  with user defined pnetid CONFIG [ 568.824801][T13793] netlink: 'syz.2.2266': attribute type 7 has an invalid length. [ 569.010987][T13803] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2268'. [ 570.063053][T13807] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2269'. [ 570.096403][T13807] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 570.441869][T13731] Bluetooth: hci4: command tx timeout [ 570.753381][T13812] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2270'. [ 572.519282][T13731] Bluetooth: hci4: command tx timeout [ 572.767413][T13729] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 572.796109][T13729] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 572.826939][T13729] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 572.891097][T13729] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 574.203301][T13729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.254370][T13866] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2278'. [ 574.372769][T13729] 8021q: adding VLAN 0 to HW filter on device team0 [ 574.417325][T10788] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.424630][T10788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 574.477084][T10788] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.485488][T10788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.882843][T13875] netlink: 'syz.3.2281': attribute type 22 has an invalid length. [ 574.899633][T13875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2281'. [ 574.992550][T10781] hsr_slave_0: left promiscuous mode [ 575.088362][T10781] hsr_slave_1: left promiscuous mode [ 575.201407][T10781] bridge0: port 4(team0) entered disabled state [ 575.224404][T10781] bridge_slave_0: left allmulticast mode [ 575.240323][T10781] bridge_slave_0: left promiscuous mode [ 575.259447][T10781] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.373049][T10781] veth1_macvtap: left allmulticast mode [ 575.381852][T10781] veth1_macvtap: left promiscuous mode [ 575.387981][T10781] veth0_macvtap: left promiscuous mode [ 576.216661][T13902] netlink: 'syz.1.2285': attribute type 9 has an invalid length. [ 576.249323][T13902] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2285'. [ 579.313592][T10781] geneve1 (unregistering): left promiscuous mode [ 579.321354][T10781] geneve1 (unregistering): left allmulticast mode [ 579.331507][T10781] team0 (unregistering): Port device geneve1 removed [ 579.653490][T10781] team_slave_1 (unregistering): left promiscuous mode [ 579.662580][T10781] team_slave_1 (unregistering): left allmulticast mode [ 579.670786][T10781] team0 (unregistering): Port device team_slave_1 removed [ 579.715167][T10781]  (unregistering): left promiscuous mode [ 579.721380][T10781]  (unregistering): left allmulticast mode [ 579.729271][T10781] team0 (unregistering): Port device  removed [ 580.369247][T13903] netlink: 'syz.1.2285': attribute type 9 has an invalid length. [ 580.377167][T13903] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2285'. [ 580.593162][T13923] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2289'. [ 581.077593][T13729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.232484][T13729] veth0_vlan: entered promiscuous mode [ 581.287446][T13729] veth1_vlan: entered promiscuous mode [ 581.398809][T13958] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2294'. [ 581.413250][T13729] veth0_macvtap: entered promiscuous mode [ 581.453449][T13958] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 581.481379][T13729] veth1_macvtap: entered promiscuous mode [ 581.611648][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.639281][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.670788][T13729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.683979][T13964] netlink: 'syz.2.2296': attribute type 2 has an invalid length. [ 581.781636][T13964] netlink: 'syz.2.2296': attribute type 8 has an invalid length. [ 581.805036][T13964] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2296'. [ 581.989821][T13966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2296'. [ 582.125685][T13977] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 582.169808][T13977] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 582.584764][T13729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.614070][T13729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.630802][T13729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.677657][T13729] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.686806][T13729] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.719325][T13729] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.728300][T13729] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.953884][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.988710][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.132062][T14013] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2304'. [ 583.291738][T10781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.330599][T10781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.351760][T14009] netlink: 'syz.2.2305': attribute type 10 has an invalid length. [ 583.591580][T14024] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2306'. [ 583.605586][T14024] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 583.658669][T14026] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2307'. [ 583.983160][T14039] sctp: [Deprecated]: syz.1.2312 (pid 14039) Use of int in maxseg socket option. [ 583.983160][T14039] Use struct sctp_assoc_value instead [ 584.077278][T14048] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2314'. [ 584.287836][T14057] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2318'. [ 584.408241][T14059] netlink: 'syz.3.2315': attribute type 3 has an invalid length. [ 584.417377][T14057] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 584.482068][T14062] netlink: 'syz.1.2319': attribute type 21 has an invalid length. [ 584.727608][T14071] netlink: zone id is out of range [ 584.799187][T14075] netlink: 'syz.0.2324': attribute type 9 has an invalid length. [ 585.497197][T14085] __nla_validate_parse: 3 callbacks suppressed [ 585.497216][T14085] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2324'. [ 585.643454][T14085] netlink: del zone limit has 4 unknown bytes [ 587.620240][T14101] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 587.627907][T14101] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 588.017184][T14112] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.2333'. [ 588.037376][T14112] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.2333'. [ 588.215649][T14114] netlink: 'syz.2.2334': attribute type 9 has an invalid length. [ 588.224922][T14114] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2334'. [ 588.367609][T14117] netlink: 'syz.2.2334': attribute type 9 has an invalid length. [ 588.386061][T14117] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2334'. [ 590.479462][T14133] tc_dump_action: action bad kind [ 595.126287][T14188] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.2357'. [ 595.485851][T14186] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2356'. [ 595.799533][T14203] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2359'. [ 595.850297][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 595.864314][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 595.873617][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 595.885780][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 595.897167][ T5773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 595.906810][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 596.186898][T14217] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2361'. [ 596.810043][T14213] netlink: 'syz.2.2360': attribute type 33 has an invalid length. [ 596.823556][T14213] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2360'. [ 596.833119][T14213] `: renamed from ip6tnl0 (while UP) [ 596.845005][T14213] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 596.871331][T14217] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2361'. [ 596.936487][T14216] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2361'. [ 597.048482][T14221] sock: sock_set_timeout: `syz.0.2369' (pid 14221) tries to set negative timeout [ 597.597170][T14206] chnl_net:caif_netlink_parms(): no params data found [ 597.962233][T13731] Bluetooth: hci0: command tx timeout [ 598.001545][T14206] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.019510][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.038424][T14206] bridge_slave_0: entered allmulticast mode [ 598.065491][T14206] bridge_slave_0: entered promiscuous mode [ 598.420231][T14206] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.427504][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.473809][T14206] bridge_slave_1: entered allmulticast mode [ 598.501101][T14206] bridge_slave_1: entered promiscuous mode [ 598.588641][T14263] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2373'. [ 598.706426][T14249] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 598.856150][T14206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.940307][T14206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.205202][T14285] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.2379'. [ 599.278697][T14284] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.2379'. [ 600.039788][T13731] Bluetooth: hci0: command tx timeout [ 600.071752][T14206] team0: Port device team_slave_0 added [ 600.182641][T14206] team0: Port device team_slave_1 added [ 600.480145][T14206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.487281][T14206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.519538][T14206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.541110][T14206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.548130][T14206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.579563][T14206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.460209][T14206] hsr_slave_0: entered promiscuous mode [ 601.487881][T14206] hsr_slave_1: entered promiscuous mode [ 601.513315][T14206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.534882][T14206] Cannot create hsr debugfs directory [ 602.121870][T13731] Bluetooth: hci0: command tx timeout [ 602.318133][T14351] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2393'. [ 602.759052][T14356] cgroup: fork rejected by pids controller in /syz3 [ 604.199402][T13731] Bluetooth: hci0: command tx timeout [ 605.111271][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 605.137614][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 605.154009][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 605.172430][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 605.187150][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 605.197273][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 605.365834][ T11] hsr_slave_0: left promiscuous mode [ 605.384052][ T11] hsr_slave_1: left promiscuous mode [ 605.402871][ T11] bridge_slave_1: left allmulticast mode [ 605.408698][ T11] bridge_slave_1: left promiscuous mode [ 605.417818][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.427817][ T11] bridge_slave_0: left allmulticast mode [ 605.433884][ T11] bridge_slave_0: left promiscuous mode [ 605.440089][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.466351][ T11] veth1_macvtap: left promiscuous mode [ 605.472103][ T11] veth0_macvtap: left promiscuous mode [ 605.490629][ T11] veth1_vlan: left promiscuous mode [ 605.496293][ T11] veth0_vlan: left promiscuous mode [ 605.981344][T14499] netlink: 'syz.2.2404': attribute type 29 has an invalid length. [ 606.787848][T14499] netlink: 'syz.2.2404': attribute type 29 has an invalid length. [ 606.803269][T14500] netlink: 'syz.2.2404': attribute type 29 has an invalid length. [ 606.841763][T14206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 606.876908][T14206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 606.940344][T14206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 606.994094][T14206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 607.045297][T14505] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2405'. [ 607.239404][ T5773] Bluetooth: hci2: command tx timeout [ 607.644079][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.747230][T14486] chnl_net:caif_netlink_parms(): no params data found [ 607.805884][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.916645][T14206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.954300][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.231855][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.270788][T14206] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.309815][T14486] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.317274][T14486] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.355396][T14486] bridge_slave_0: entered allmulticast mode [ 608.373189][T14486] bridge_slave_0: entered promiscuous mode [ 608.402266][T14486] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.420535][T14486] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.448665][T14486] bridge_slave_1: entered allmulticast mode [ 608.460589][T14486] bridge_slave_1: entered promiscuous mode [ 608.589992][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.598314][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.641358][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.648780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.689966][T14534] netlink: 63747 bytes leftover after parsing attributes in process `syz.0.2407'. [ 609.033723][T14486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.064895][T14486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.189019][T14486] team0: Port device team_slave_0 added [ 609.211773][T14486] team0: Port device team_slave_1 added [ 609.334019][ T5773] Bluetooth: hci2: command tx timeout [ 609.337819][T14486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.346686][T14486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.403566][T14486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.575898][T14486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.603441][T14486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.671762][T14486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.997833][T14486] hsr_slave_0: entered promiscuous mode [ 610.049630][T14486] hsr_slave_1: entered promiscuous mode [ 610.655933][T14575] Dead loop on virtual device ip6_vti0, fix it urgently! [ 611.331113][T14206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.399957][ T5773] Bluetooth: hci2: command tx timeout [ 612.067134][T14206] veth0_vlan: entered promiscuous mode [ 612.275726][T14206] veth1_vlan: entered promiscuous mode [ 612.678731][T14206] veth0_macvtap: entered promiscuous mode [ 612.702470][T14206] veth1_macvtap: entered promiscuous mode [ 613.380548][T14486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 613.432690][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.449181][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.469615][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.482131][ T5773] Bluetooth: hci2: command tx timeout [ 613.492277][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.541881][T14206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.563169][T14486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 613.617253][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.630180][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.642441][T14206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.666309][T14206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.678110][T14206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.697716][T14486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 613.717047][T14486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 613.741877][T14629] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2419'. [ 613.851958][T14206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.871868][T14206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.881857][T14206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.899330][T14206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.138299][ T11] hsr_slave_0: left promiscuous mode [ 614.145077][ T11] hsr_slave_1: left promiscuous mode [ 614.160864][ T11] veth0_macvtap: left promiscuous mode [ 614.167257][ T11] veth1_vlan: left promiscuous mode [ 614.172972][ T11] veth0_vlan: left promiscuous mode [ 614.394786][ T11] geneve1 (unregistering): left promiscuous mode [ 614.402992][ T11] geneve1 (unregistering): left allmulticast mode [ 614.857246][ T11] team0 (unregistering): Port device geneve1 removed [ 615.403064][ T11] team_slave_1 (unregistering): left promiscuous mode [ 615.410381][ T11] team_slave_1 (unregistering): left allmulticast mode [ 615.418508][ T11] team0 (unregistering): Port device team_slave_1 removed [ 615.466825][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.476633][ T11] bond_slave_1 (unregistering): left promiscuous mode [ 615.830807][ T11] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 615.840146][ T11] dummy0 (unregistering): left promiscuous mode [ 615.895059][ T11] bond0 (unregistering): Released all slaves [ 615.941029][T14637] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2421'. [ 615.955811][T14644] netlink: 'syz.2.2423': attribute type 41 has an invalid length. [ 616.110346][ T3460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.118228][ T3460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.260323][ T3460] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.272643][T14486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.289324][ T3460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.370668][T14486] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.433609][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.440850][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.511076][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.518305][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.758150][T14486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 616.759905][T14660] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2427'. [ 617.777470][T14690] netlink: 'syz.0.2431': attribute type 29 has an invalid length. [ 617.810024][T14690] netlink: 'syz.0.2431': attribute type 29 has an invalid length. [ 617.905040][T14486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.981562][T14693] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2432'. [ 618.132226][T14486] veth0_vlan: entered promiscuous mode [ 618.163055][T14690] netlink: 'syz.0.2431': attribute type 29 has an invalid length. [ 618.315035][T14486] veth1_vlan: entered promiscuous mode [ 618.665761][T14486] veth0_macvtap: entered promiscuous mode [ 618.725983][T14486] veth1_macvtap: entered promiscuous mode [ 618.796013][T14702] netlink: 'syz.1.2435': attribute type 29 has an invalid length. [ 618.844536][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.866599][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.877736][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.946546][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 618.973616][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 618.992121][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.006581][T14486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.017679][T14702] netlink: 'syz.1.2435': attribute type 29 has an invalid length. [ 619.055863][T14703] netlink: 'syz.1.2435': attribute type 29 has an invalid length. [ 619.091549][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.112729][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.129516][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.144945][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.155403][T14486] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.169869][T14486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.191434][T14486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.207104][T14711] mac80211_hwsim hwsim38 wlan1: entered promiscuous mode [ 619.217534][T14707] netlink: 'syz.1.2435': attribute type 29 has an invalid length. [ 619.233429][T14486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.243400][T14486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.253143][T14486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.262500][T14486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.280828][T14709] netlink: 'syz.1.2435': attribute type 29 has an invalid length. [ 619.456839][T14719] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2437'. [ 619.495854][T14719] netlink: 'syz.0.2437': attribute type 21 has an invalid length. [ 619.505620][T14719] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2437'. [ 619.517184][T14718] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2437'. [ 619.545246][T10788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.569894][T10788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.682860][T10788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.712930][T10788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.500745][T14747] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 621.508742][T14747] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 621.532830][T14752] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2448'. [ 621.781993][T14758] validate_nla: 1 callbacks suppressed [ 621.782010][T14758] netlink: 'syz.3.2449': attribute type 9 has an invalid length. [ 621.802935][T14762] netlink: 'syz.1.2451': attribute type 29 has an invalid length. [ 621.813232][T14762] netlink: 'syz.1.2451': attribute type 29 has an invalid length. [ 621.823627][T14763] netlink: 'syz.3.2449': attribute type 9 has an invalid length. [ 622.089307][T14771] netlink: 'syz.1.2451': attribute type 29 has an invalid length. [ 623.008600][T14779] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2453'. [ 623.984226][T13731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.993911][T13731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 624.004749][T13731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 624.014270][T13731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 624.023104][T13731] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 624.066252][T13731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 624.666545][T14792] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 624.678265][T14792] mac80211_hwsim hwsim43 wlan1: left promiscuous mode [ 624.685452][T14792] mac80211_hwsim hwsim43 wlan1: left allmulticast mode [ 624.717087][T14792] team0: Port device wlan1 added [ 624.931049][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.937540][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.033442][T14797] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2459'. [ 625.995385][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.096303][T14806] netlink: 'syz.0.2462': attribute type 21 has an invalid length. [ 626.120199][T14806] IPv6: NLM_F_CREATE should be specified when creating new route [ 626.307692][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.563547][ T5773] Bluetooth: hci3: command tx timeout [ 627.224046][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.265166][T14817] netlink: 'syz.0.2464': attribute type 21 has an invalid length. [ 627.516871][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.668223][T14827] syzkaller0: entered promiscuous mode [ 627.728739][T14827] syzkaller0: entered allmulticast mode [ 627.765872][T14828] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.2467'. [ 628.265793][T14841] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2469'. [ 628.551449][T14844] netlink: 'syz.3.2470': attribute type 1 has an invalid length. [ 628.587651][T14844] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.2470'. [ 628.609472][ T5773] Bluetooth: hci3: command tx timeout [ 628.617882][T14794] chnl_net:caif_netlink_parms(): no params data found [ 630.689300][ T5773] Bluetooth: hci3: command tx timeout [ 631.340895][T14885] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2479'. [ 631.542767][T14885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.570866][T14885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.608615][T14885] bond0 (unregistering): Released all slaves [ 631.651110][T14794] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.679684][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.690089][T14794] bridge_slave_0: entered allmulticast mode [ 631.704375][T14794] bridge_slave_0: entered promiscuous mode [ 631.716545][T14794] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.733579][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.744183][T14794] bridge_slave_1: entered allmulticast mode [ 631.757310][T14794] bridge_slave_1: entered promiscuous mode [ 631.981713][T14794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.003512][T14794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.095018][T14794] team0: Port device team_slave_0 added [ 632.107202][T14794] team0: Port device team_slave_1 added [ 632.207319][T14794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.239431][T14794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.307839][T14794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.322933][T14794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.330388][T14794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.379169][T14794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.619540][T14924] netlink: 'syz.3.2484': attribute type 21 has an invalid length. [ 632.627805][T14924] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2484'. [ 632.770077][ T5773] Bluetooth: hci3: command tx timeout [ 633.737422][T14794] hsr_slave_0: entered promiscuous mode [ 633.756751][T14794] hsr_slave_1: entered promiscuous mode [ 633.773290][T14794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.789315][T14794] Cannot create hsr debugfs directory [ 634.251217][T14955] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2488'. [ 634.427490][T14958] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2489'. [ 636.034577][T14991] netlink: 'syz.1.2495': attribute type 10 has an invalid length. [ 636.254664][T14991] hsr_slave_0 (unregistering): left promiscuous mode [ 636.396205][T15002] netlink: 'syz.0.2497': attribute type 39 has an invalid length. [ 636.823615][T15010] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2500'. [ 637.304087][T14794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 637.327883][T14794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 637.388912][T14794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 637.414455][T15017] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2508'. [ 637.451490][ T12] hsr_slave_0: left promiscuous mode [ 637.527884][ T12] hsr_slave_1: left promiscuous mode [ 637.573717][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.591290][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.604066][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 637.612913][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.622117][ T12] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 637.630346][ T12] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 637.641619][ T12] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 637.648736][ T12] batman_adv: batadv0: Removing interface: virt_wifi0 [ 637.662165][ T12] bridge_slave_0: left promiscuous mode [ 637.667937][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.694309][ T12] veth1_macvtap: left promiscuous mode [ 637.700314][ T12] veth0_macvtap: left promiscuous mode [ 638.378458][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.434449][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.487263][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 638.802102][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 638.811554][ T12] bond0 (unregistering): Released all slaves [ 638.928882][T14794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 638.939009][T15019] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2501'. [ 639.007192][T15019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.026260][T15019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.041167][T15019] bond0 (unregistering): Released all slaves [ 639.509491][T14794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.280488][T14794] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.325547][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.332919][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.364133][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.371679][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.597119][T14794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 640.693599][T15058] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2509'. [ 641.327029][T15077] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2511'. [ 641.544713][T14794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 641.770869][T14794] veth0_vlan: entered promiscuous mode [ 641.852568][T14794] veth1_vlan: entered promiscuous mode [ 642.030056][T14794] veth0_macvtap: entered promiscuous mode [ 642.085050][T14794] veth1_macvtap: entered promiscuous mode [ 642.285303][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.361068][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.390948][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.449230][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.595143][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.659844][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.721609][T14794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.958588][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.028164][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.069041][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.108679][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.185057][T14794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.214462][T14794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.227384][T14794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.344917][T14794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.379298][T14794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.388096][T14794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.441918][T14794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.231400][T10781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.267442][T10781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.644843][T10777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.701441][T10777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.118388][T15146] netlink: 'syz.1.2520': attribute type 5 has an invalid length. [ 646.870245][T15154] netlink: 141980 bytes leftover after parsing attributes in process `syz.0.2522'. [ 646.979599][T15154] netlink: zone id is out of range [ 646.999769][T15154] netlink: zone id is out of range [ 647.006365][T15154] netlink: zone id is out of range [ 647.031008][T15154] netlink: zone id is out of range [ 647.049726][T15154] netlink: zone id is out of range [ 647.056625][T15154] netlink: zone id is out of range [ 647.081561][T15154] netlink: zone id is out of range [ 647.087681][T15154] netlink: zone id is out of range [ 647.109549][T15154] netlink: zone id is out of range [ 647.116871][T15154] netlink: zone id is out of range [ 650.758444][T15211] netlink: 'syz.0.2535': attribute type 1 has an invalid length. [ 650.780236][T15211] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2535'. [ 650.790500][T15211] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2535'. [ 652.518487][T15224] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 653.500007][T15249] netlink: 'syz.0.2546': attribute type 5 has an invalid length. [ 654.723263][T15268] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2554'. [ 655.087731][T15272] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 655.395045][T15287] netlink: 'syz.3.2559': attribute type 1 has an invalid length. [ 655.439283][T15287] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2559'. [ 655.459615][T15287] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2559'. [ 656.446002][T15306] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2566'. [ 656.838640][T15319] net_ratelimit: 158 callbacks suppressed [ 656.838660][T15319] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 657.400279][ T12] wlan1: Trigger new scan to find an IBSS to join [ 657.494435][T15325] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 657.502443][T15325] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2571'. [ 657.512166][T15325] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2571'. [ 657.577891][T15317] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 658.178243][T15329] netlink: 'syz.1.2573': attribute type 10 has an invalid length. [ 658.503337][T15342] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2576'. [ 658.914168][T15351] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.2579'. [ 659.038938][T15351] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2579'. [ 659.472573][T15363] tap0: tun_chr_ioctl cmd 35108 [ 660.285517][T15372] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2586'. [ 660.359732][ T3460] wlan1: Trigger new scan to find an IBSS to join [ 660.387861][T15375] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2587'. [ 660.398424][T15375] netlink: zone id is out of range [ 660.980780][T15389] syzkaller0: entered promiscuous mode [ 660.986614][T15389] syzkaller0: entered allmulticast mode [ 663.648864][T10777] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 666.043523][T15407] netlink: 'syz.1.2599': attribute type 10 has an invalid length. [ 666.093778][T15407] syz_tun: entered promiscuous mode [ 667.189771][ T5773] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 667.201827][T15421] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2602'. [ 667.207338][T15426] netlink: 'syz.2.2606': attribute type 1 has an invalid length. [ 667.267051][T15426] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2606'. [ 667.321621][T15430] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2604'. [ 668.005146][T15435] C: renamed from team_slave_0 (while UP) [ 668.163553][T15435] netlink: 'syz.2.2608': attribute type 4 has an invalid length. [ 668.210530][T15435] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2608'. [ 668.274546][T15435] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 668.411146][T15443] syzkaller0: entered promiscuous mode [ 668.424438][T15443] syzkaller0: entered allmulticast mode [ 669.239296][ T5773] Bluetooth: hci3: command tx timeout [ 670.359766][T10777] wlan1: Trigger new scan to find an IBSS to join [ 670.916567][T15495] netlink: 'syz.3.2625': attribute type 21 has an invalid length. [ 671.131701][T15503] netlink: 'syz.3.2626': attribute type 2 has an invalid length. [ 671.417000][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2627'. [ 671.576969][T15506] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2627'. [ 671.588658][T15506] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2627'. [ 673.882436][T10777] wlan1: Trigger new scan to find an IBSS to join [ 674.806743][T15533] netlink: 'syz.1.2635': attribute type 39 has an invalid length. [ 675.093837][T15533] hsr_slave_1 (unregistering): left promiscuous mode [ 676.177819][T15544] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2638'. [ 678.180542][T15582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2648'. [ 678.359977][T10781] wlan1: Trigger new scan to find an IBSS to join [ 678.569415][T15592] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2650'. [ 678.664980][T15597] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2652'. [ 678.674694][T15597] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 678.699300][T15597] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 679.947058][T15641] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2663'. [ 680.623122][T15658] netlink: 'syz.3.2667': attribute type 10 has an invalid length. [ 680.632367][T15658] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2667'. [ 680.664144][T15660] sctp: [Deprecated]: syz.2.2666 (pid 15660) Use of int in max_burst socket option deprecated. [ 680.664144][T15660] Use struct sctp_assoc_value instead [ 680.682904][T15658] hsr0: entered promiscuous mode [ 680.701410][T15658] bridge0: port 3(hsr0) entered blocking state [ 680.709903][T15659] delete_channel: no stack [ 680.716657][T15658] bridge0: port 3(hsr0) entered disabled state [ 680.725153][T15658] hsr0: entered allmulticast mode [ 680.735277][T15658] hsr_slave_0: entered allmulticast mode [ 680.745709][T15658] hsr_slave_1: entered allmulticast mode [ 680.788811][T15658] bridge0: port 3(hsr0) entered blocking state [ 680.796353][T15658] bridge0: port 3(hsr0) entered forwarding state [ 680.830227][T15662] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.2668'. [ 681.028987][T15671] netlink: 'syz.3.2671': attribute type 19 has an invalid length. [ 681.051787][T15673] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2671'. [ 681.068004][T15671] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2671'. [ 681.109041][T15664] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2669'. [ 681.354734][T15664] team0: Port device team_slave_0 removed [ 681.437735][T15669] netlink: 'syz.2.2670': attribute type 21 has an invalid length. [ 681.456206][T15669] netlink: 'syz.2.2670': attribute type 6 has an invalid length. [ 681.469035][T15669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2670'. [ 681.501579][T15677] netlink: 'syz.3.2674': attribute type 3 has an invalid length. [ 681.540419][T15677] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2674'. [ 682.007581][T15694] netlink: 'syz.0.2678': attribute type 1 has an invalid length. [ 682.026442][T15694] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2678'. [ 682.322565][T15707] netlink: 'syz.0.2681': attribute type 10 has an invalid length. [ 682.346002][T15707] geneve0: entered promiscuous mode [ 682.576885][T15709] netlink: 'syz.2.2682': attribute type 39 has an invalid length. [ 682.726273][T15709] hsr_slave_1 (unregistering): left promiscuous mode [ 682.854590][T15719] netlink: 'syz.3.2684': attribute type 16 has an invalid length. [ 682.862866][T15719] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2684'. [ 682.872445][T15719] veth1_macvtap: entered allmulticast mode [ 686.322754][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.329320][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.362237][T10777] wlan1: Trigger new scan to find an IBSS to join [ 687.270108][T15770] netlink: 'syz.2.2699': attribute type 9 has an invalid length. [ 687.278134][T15770] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2699'. [ 687.469869][T15775] netlink: 'syz.0.2697': attribute type 39 has an invalid length. [ 687.558198][T15779] netlink: 'syz.2.2699': attribute type 9 has an invalid length. [ 687.584742][T15779] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2699'. [ 687.679684][T15775] hsr_slave_1 (unregistering): left promiscuous mode [ 687.855869][T15781] netlink: 'syz.1.2701': attribute type 6 has an invalid length. [ 688.363838][T13731] Bluetooth: hci4: command 0x0406 tx timeout [ 688.867967][T15803] sock: sock_set_timeout: `syz.0.2707' (pid 15803) tries to set negative timeout [ 689.334275][ T1129] wlan1: Trigger new scan to find an IBSS to join [ 689.364851][T15813] syzkaller0: entered promiscuous mode [ 689.395370][T15813] syzkaller0: entered allmulticast mode [ 689.904198][T15827] netlink: 'syz.3.2714': attribute type 21 has an invalid length. [ 689.912480][T15827] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2714'. [ 689.931002][T15827] netlink: 'syz.3.2714': attribute type 4 has an invalid length. [ 690.045882][T15830] netlink: 'syz.1.2715': attribute type 33 has an invalid length. [ 690.075482][T15830] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2715'. [ 690.104072][T15830] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 690.348216][ T12] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 690.685619][T15849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2720'. [ 691.318830][T15866] netlink: 'syz.2.2725': attribute type 10 has an invalid length. [ 691.379056][T15866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2725'. [ 691.516180][T15866] batman_adv: batadv0: Adding interface: veth0_vlan [ 691.529684][T15866] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.557571][T15866] batman_adv: batadv0: Interface activated: veth0_vlan [ 691.756857][T15869] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 691.787172][T15872] netlink: 'syz.3.2728': attribute type 10 has an invalid length. [ 691.808236][T15872] geneve0: entered promiscuous mode [ 691.946844][T15872] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 692.899804][T15895] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2733'. [ 699.154553][T16031] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 699.432643][T16042] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.2771'. [ 699.853542][T16045] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2773'. [ 700.280554][T16053] netlink: 'syz.1.2775': attribute type 10 has an invalid length. [ 700.288662][T16053] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2775'. [ 700.451761][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2778'. [ 700.474786][T16058] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.2776'. [ 701.036441][T16075] syzkaller0: entered promiscuous mode [ 701.054388][T16075] syzkaller0: entered allmulticast mode [ 701.075102][T16078] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2781'. [ 701.633488][T16086] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2784'. [ 705.148285][T16084] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2784'. [ 705.954708][T16105] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2790'. [ 706.341796][T16123] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2794'. [ 708.261351][T16136] netlink: 'syz.3.2798': attribute type 10 has an invalid length. [ 708.411164][T16136] veth0_vlan: left promiscuous mode [ 708.469444][T16136] veth0_vlan: entered promiscuous mode [ 708.506311][T16136] team0: Device veth0_vlan failed to register rx_handler [ 709.920064][T16155] netlink: 'syz.0.2804': attribute type 2 has an invalid length. [ 709.928186][T16155] netlink: 'syz.0.2804': attribute type 8 has an invalid length. [ 709.949581][T16155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2804'. [ 710.009911][T16157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2804'. [ 712.685668][T16195] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2814'. [ 712.695975][T16196] netlink: 'syz.0.2815': attribute type 2 has an invalid length. [ 712.719334][T16196] netlink: 'syz.0.2815': attribute type 1 has an invalid length. [ 712.727554][T16196] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2815'. [ 713.020534][T16198] netlink: 'syz.2.2816': attribute type 10 has an invalid length. [ 713.036172][T16198] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2816'. [ 713.045916][T16198] batadv_slave_1: entered promiscuous mode [ 713.069897][T16198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.078720][T16198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.321085][T16200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2817'. [ 713.452768][T16208] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2819'. [ 714.128522][T16214] can: request_module (can-proto-0) failed. [ 714.650017][T16224] netlink: 'syz.0.2825': attribute type 1 has an invalid length. [ 715.081064][T16230] netlink: 'syz.3.2827': attribute type 10 has an invalid length. [ 715.104454][T16230] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2827'. [ 715.129426][T16230] batadv_slave_1: entered promiscuous mode [ 715.159498][T16230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.181149][T16230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.203859][T16232] netlink: 'syz.1.2826': attribute type 19 has an invalid length. [ 715.245199][T16232] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2826'. [ 716.855846][T16263] netlink: 'syz.3.2836': attribute type 2 has an invalid length. [ 716.876493][T16263] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2836'. [ 717.542551][T16273] netlink: 'syz.1.2838': attribute type 10 has an invalid length. [ 717.599369][T16273] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2838'. [ 717.608462][T16273] batadv_slave_1: entered promiscuous mode [ 717.675014][T16273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.773017][T16273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.797672][T16281] netlink: 'syz.1.2840': attribute type 10 has an invalid length. [ 718.850141][T16141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.081737][T13731] Bluetooth: hci0: command 0x0406 tx timeout [ 719.500050][T16297] netlink: 'syz.1.2843': attribute type 46 has an invalid length. [ 720.411464][T10781] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 722.521082][T16358] netlink: 'syz.0.2863': attribute type 4 has an invalid length. [ 722.535933][T16360] netlink: 'syz.2.2862': attribute type 21 has an invalid length. [ 722.539251][T16358] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2863'. [ 722.559414][T16360] netlink: 'syz.2.2862': attribute type 1 has an invalid length. [ 722.629511][T16352] netlink: 'syz.3.2861': attribute type 10 has an invalid length. [ 722.673803][T16352] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2861'. [ 722.751678][T16352] ipvlan1: entered promiscuous mode [ 722.772906][T16352] ipvlan1: entered allmulticast mode [ 722.792052][T16352] veth0_vlan: entered allmulticast mode [ 722.822343][T16352] bridge0: port 4(ipvlan1) entered blocking state [ 722.836821][T16352] bridge0: port 4(ipvlan1) entered disabled state [ 722.888941][T16352] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 722.987322][T16363] netlink: 'syz.2.2862': attribute type 5 has an invalid length. [ 723.180929][T16374] netlink: 'syz.2.2867': attribute type 21 has an invalid length. [ 723.204131][T16376] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 723.205648][T16374] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2867'. [ 723.368387][T16378] netlink: 'syz.2.2867': attribute type 10 has an invalid length. [ 723.605995][T16378] team0 (unregistering): Port device C removed [ 723.643379][T16378] team0 (unregistering): Port device team_slave_1 removed [ 723.674209][T16389] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2872'. [ 723.779803][T16388] netlink: 'syz.1.2872': attribute type 10 has an invalid length. [ 723.846226][T16388] geneve0: entered promiscuous mode [ 724.497288][T16397] syzkaller0: entered promiscuous mode [ 724.532721][T16397] syzkaller0: entered allmulticast mode [ 727.433969][T16413] ªªªªªª: renamed from vlan0 [ 727.654732][T16421] netlink: 'syz.1.2879': attribute type 10 has an invalid length. [ 727.674157][T16421] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2879'. [ 727.710317][T16421] ipvlan1: entered promiscuous mode [ 727.734804][T16421] ipvlan1: entered allmulticast mode [ 727.766015][T16421] veth0_vlan: entered allmulticast mode [ 727.881283][T16421] bridge0: port 3(ipvlan1) entered blocking state [ 727.897271][T16421] bridge0: port 3(ipvlan1) entered disabled state [ 727.922906][T16421] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 729.319259][T13731] Bluetooth: hci2: command 0x0406 tx timeout [ 729.853055][T16450] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2891'. [ 731.127980][T16477] netlink: 'syz.2.2898': attribute type 10 has an invalid length. [ 731.176185][T16477] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.184273][T16477] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.288911][T16481] delete_channel: no stack [ 731.374220][ T5773] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 731.651763][T16497] netlink: 'syz.0.2904': attribute type 1 has an invalid length. [ 733.820953][T16535] netlink: 'syz.2.2915': attribute type 3 has an invalid length. [ 733.828781][T16535] netlink: 'syz.2.2915': attribute type 1 has an invalid length. [ 733.882609][T16536] netlink: 'syz.2.2915': attribute type 3 has an invalid length. [ 733.934826][T16536] netlink: 'syz.2.2915': attribute type 1 has an invalid length. [ 733.975138][T16535] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2915'. [ 734.029299][T16536] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.2915'. [ 734.467693][T16545] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2918'. [ 735.670911][T16566] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.2924'. [ 736.032280][T16575] delete_channel: no stack [ 736.049641][T16575] delete_channel: no stack [ 736.886376][T16591] netlink: 'syz.0.2932': attribute type 9 has an invalid length. [ 740.698422][T16615] netlink: 'syz.1.2938': attribute type 10 has an invalid length. [ 740.708425][T16615] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2938'. [ 741.032415][T16623] syzkaller0: entered promiscuous mode [ 741.038146][T16623] syzkaller0: entered allmulticast mode [ 743.739219][T16641] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2947'. [ 744.019354][T16650] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2950'. [ 744.142700][T16650] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2950'. [ 745.212318][T16668] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2957'. [ 746.075162][T16684] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2962'. [ 746.197327][T16685] netlink: 'syz.2.2963': attribute type 10 has an invalid length. [ 746.205772][T16685] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2963'. [ 746.218607][T16685] hsr0: entered promiscuous mode [ 746.264158][T16685] bridge0: port 3(hsr0) entered blocking state [ 746.272997][T16685] bridge0: port 3(hsr0) entered disabled state [ 746.295048][T16685] hsr0: entered allmulticast mode [ 746.308899][T16685] hsr_slave_0: entered allmulticast mode [ 746.380123][T16694] syz.0.2966[16694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 746.380402][T16694] syz.0.2966[16694] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 746.973147][T16705] delete_channel: no stack [ 747.256406][T16705] delete_channel: no stack [ 747.516830][T16709] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2971'. [ 747.652293][ T5773] Bluetooth: hci2: unknown advertising packet type: 0xff [ 747.746214][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.760450][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.168398][T16725] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2975'. [ 748.463381][T16735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2978'. [ 748.505386][T16735] netlink: 'syz.2.2978': attribute type 7 has an invalid length. [ 748.537899][T16729] netlink: 'syz.0.2977': attribute type 10 has an invalid length. [ 748.579386][T16729] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2977'. [ 748.609579][T16729] hsr0: entered promiscuous mode [ 748.647645][T16729] bridge0: port 3(hsr0) entered blocking state [ 748.666825][T16729] bridge0: port 3(hsr0) entered disabled state [ 748.709140][T16729] hsr0: entered allmulticast mode [ 748.728296][T16729] hsr_slave_0: entered allmulticast mode [ 748.852053][T16729] bridge0: port 3(hsr0) entered blocking state [ 748.860402][T16729] bridge0: port 3(hsr0) entered forwarding state [ 749.458067][T16744] netlink: 'syz.2.2982': attribute type 9 has an invalid length. [ 749.477599][T16744] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2982'. [ 749.799291][T13731] Bluetooth: hci3: command 0x0406 tx timeout [ 749.820188][T13731] Bluetooth: hci4: unknown advertising packet type: 0xff [ 750.009522][T16750] netlink: 'syz.3.2985': attribute type 2 has an invalid length. [ 750.055627][T16750] netlink: 'syz.3.2985': attribute type 6 has an invalid length. [ 750.334895][T16760] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2987'. [ 750.575317][T16764] netlink: 1772 bytes leftover after parsing attributes in process `syz.1.2988'. [ 750.757002][T16767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2989'. [ 750.805215][T16767] netlink: 'syz.3.2989': attribute type 7 has an invalid length. [ 751.958298][T16785] netlink: 'syz.3.2992': attribute type 10 has an invalid length. [ 751.980036][T16785] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2992'. [ 752.424805][ T5773] Bluetooth: hci0: unknown advertising packet type: 0xff [ 753.054503][T16810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 753.129519][T16810] netlink: 'syz.1.3001': attribute type 7 has an invalid length. [ 753.317870][T16816] netlink: 'syz.1.3005': attribute type 12 has an invalid length. [ 753.346565][T16816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3005'. [ 753.367133][T16816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3005'. [ 753.461448][T16822] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3006'. [ 753.543057][T16825] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3006'. [ 753.872655][ T5773] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 753.905918][T16831] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3008'. [ 754.311222][ T5773] Bluetooth: hci2: unknown advertising packet type: 0xff [ 755.620529][T16850] netlink: 'syz.1.3013': attribute type 9 has an invalid length. [ 755.687783][T16850] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3013'. [ 756.897163][T16872] netlink: 'syz.2.3020': attribute type 9 has an invalid length. [ 757.008045][T16870] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3019'. [ 757.894903][ T5773] Bluetooth: hci4: unknown advertising packet type: 0xff [ 758.206776][T16895] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3027'. [ 758.274003][T16896] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.3027'. [ 759.556261][T16917] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3032'. [ 759.577575][T16912] netlink: 'syz.3.3030': attribute type 9 has an invalid length. [ 759.615055][T16912] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3030'. [ 759.996321][T16919] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3033'. [ 760.382192][ T5773] Bluetooth: hci2: unknown advertising packet type: 0xff [ 760.385370][T16925] wg2: entered promiscuous mode [ 760.400260][T16925] wg2: entered allmulticast mode [ 761.081129][T16939] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3039'. [ 761.556259][T16949] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3042'. [ 762.354725][T16953] netlink: 'syz.0.3043': attribute type 9 has an invalid length. [ 762.369518][T16953] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3043'. [ 763.015279][ T5773] Bluetooth: hci3: unknown advertising packet type: 0xff [ 763.867775][T16980] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3052'. [ 763.901303][T16982] netlink: 'syz.3.3054': attribute type 17 has an invalid length. [ 764.492957][T16993] netlink: 'syz.1.3057': attribute type 10 has an invalid length. [ 764.960165][ T5773] Bluetooth: hci3: unknown advertising packet type: 0xff [ 765.910784][T17019] netlink: 'syz.2.3062': attribute type 33 has an invalid length. [ 765.911731][T17014] netlink: 'syz.3.3059': attribute type 10 has an invalid length. [ 765.918232][T17019] netlink: 'syz.2.3062': attribute type 3 has an invalid length. [ 765.969687][T17019] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.3062'. [ 766.398148][T17034] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3066'. [ 766.414246][T17036] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3067'. [ 767.125603][T17065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3075'. [ 767.324882][T17074] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3079'. [ 767.474651][T17078] sock: sock_set_timeout: `syz.3.3080' (pid 17078) tries to set negative timeout [ 767.727913][T17086] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3084'. [ 768.114571][T17101] netlink: 'syz.3.3088': attribute type 10 has an invalid length. [ 768.386741][T17097] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3087'. [ 768.505334][T17110] netlink: 172244 bytes leftover after parsing attributes in process `syz.1.3090'. [ 768.556380][T17106] syzkaller0: entered promiscuous mode [ 768.563221][T17106] syzkaller0: entered allmulticast mode [ 768.670220][T17114] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3092'. [ 768.676999][T17112] netlink: 'syz.3.3091': attribute type 9 has an invalid length. [ 768.699815][T17112] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3091'. [ 771.401433][T17115] netlink: 'syz.3.3091': attribute type 9 has an invalid length. [ 771.430059][T17115] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3091'. [ 771.447543][T17120] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3094'. [ 771.639561][T17134] netlink: 'syz.1.3096': attribute type 21 has an invalid length. [ 771.863539][T17140] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3099'. [ 773.013551][T17162] netlink: 'syz.2.3104': attribute type 21 has an invalid length. [ 773.084159][T17159] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3103'. [ 773.224001][T17165] netlink: 'syz.3.3106': attribute type 1 has an invalid length. [ 773.235399][T17165] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3106'. [ 773.314906][T17168] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3105'. [ 773.386259][T17169] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3105'. [ 773.857688][T17162] Ÿë: port 1(ip6gretap0) entered blocking state [ 773.875522][T17162] Ÿë: port 1(ip6gretap0) entered disabled state [ 773.906331][T17162] ip6gretap0: entered allmulticast mode [ 773.983323][T17162] ip6gretap0: entered promiscuous mode [ 775.603253][T17197] ÿ: renamed from bond_slave_0 (while UP) [ 776.078533][T17204] netlink: 'syz.3.3117': attribute type 10 has an invalid length. [ 776.122736][T17204] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 776.305271][T17214] netlink: 'syz.3.3119': attribute type 10 has an invalid length. [ 776.316126][T17214] hsr_slave_0: left promiscuous mode [ 776.326656][T17214] hsr_slave_1: left promiscuous mode [ 776.343865][T17214] bridge0: port 3(hsr0) entered disabled state [ 776.386891][T17214] hsr0 (unregistering): left allmulticast mode [ 776.393441][T17214] bridge0: port 3(hsr0) entered disabled state [ 778.605011][T17248] netlink: 'syz.2.3132': attribute type 12 has an invalid length. [ 778.614921][T17248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3132'. [ 778.637716][T17248] netlink: 'syz.2.3132': attribute type 2 has an invalid length. [ 778.645964][T17248] netlink: 'syz.2.3132': attribute type 1 has an invalid length. [ 778.655352][T17248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.864412][T17254] netlink: 'syz.1.3134': attribute type 10 has an invalid length. [ 779.008871][T17261] netlink: 'syz.2.3136': attribute type 3 has an invalid length. [ 779.061667][T17261] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3136'. [ 779.295012][ T5773] Bluetooth: hci0: unknown advertising packet type: 0xff [ 779.730225][T17289] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3144'. [ 780.071946][T17294] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.331476][T17307] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 780.740096][T17315] netlink: 'syz.1.3149': attribute type 10 has an invalid length. [ 780.759319][T17315] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3149'. [ 781.378138][T17329] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3154'. [ 781.409205][T17329] batadv_slave_1: entered promiscuous mode [ 781.718328][T17334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3156'. [ 781.747254][T17334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3156'. [ 781.999514][T17345] netlink: 'syz.1.3159': attribute type 4 has an invalid length. [ 782.019291][T17345] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3159'. [ 783.339962][T17365] netlink: 'syz.3.3164': attribute type 6 has an invalid length. [ 783.354893][T17365] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3164'. [ 783.372814][T17368] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3165'. [ 783.659006][T17377] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3168'. [ 784.326265][T17384] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3167'. [ 784.850753][T17384] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 785.212501][T17393] syzkaller0: entered promiscuous mode [ 785.231767][T17403] netlink: 'syz.2.3173': attribute type 2 has an invalid length. [ 785.240378][T17393] syzkaller0: entered allmulticast mode [ 785.283210][T17403] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3173'. [ 785.327910][T17393] netlink: 'syz.0.3171': attribute type 21 has an invalid length. [ 785.624574][T17407] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3177'. [ 785.872321][T17410] netlink: 'syz.1.3175': attribute type 39 has an invalid length. [ 786.207681][T17419] netlink: 'syz.3.3180': attribute type 21 has an invalid length. [ 787.037350][T17437] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3186'. [ 787.077694][T17435] Ÿë: port 1(ip6gretap0) entered blocking state [ 787.090221][T17439] netlink: 'syz.1.3187': attribute type 21 has an invalid length. [ 787.145855][T17435] Ÿë: port 1(ip6gretap0) entered disabled state [ 787.180311][T17435] ip6gretap0: entered allmulticast mode [ 787.509168][T17435] ip6gretap0: entered promiscuous mode [ 788.454823][T17470] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3196'. [ 790.658830][T17517] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3207'. [ 792.260081][T17553] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3217'. [ 792.283940][ T5773] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 792.403948][T17560] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3219'. [ 793.086846][T17570] netlink: 'syz.3.3223': attribute type 9 has an invalid length. [ 793.096245][T17570] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3223'. [ 793.710417][T17594] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3230'. [ 795.762515][T17630] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3240'. [ 796.169558][T17633] netlink: 'syz.2.3242': attribute type 10 has an invalid length. [ 796.177642][T17633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3242'. [ 796.530212][T17633] netlink: 'syz.2.3242': attribute type 10 has an invalid length. [ 796.556706][T17633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3242'. [ 798.449790][T17656] netlink: 'syz.1.3249': attribute type 13 has an invalid length. [ 798.472671][T17656] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3249'. [ 798.594315][T17664] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3251'. [ 798.982271][T17678] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3254'. [ 799.206922][T17682] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.3257'. [ 800.481388][T17693] sit0: entered allmulticast mode [ 800.764938][T17703] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3262'. [ 800.876241][T17705] netlink: 'syz.3.3264': attribute type 21 has an invalid length. [ 800.889240][T17705] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 802.481008][T17708] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3265'. [ 802.870317][T17744] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3274'. [ 803.373549][T17764] netlink: 50295 bytes leftover after parsing attributes in process `syz.1.3279'. [ 803.404172][T17764] netlink: 50295 bytes leftover after parsing attributes in process `syz.1.3279'. [ 803.415295][T17765] netlink: 'syz.1.3279': attribute type 10 has an invalid length. [ 803.518667][T17765] team0: Port device macvlan0 added [ 803.726927][T17768] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3281'. [ 803.822684][T17768] netlink: 'syz.3.3281': attribute type 6 has an invalid length. [ 803.850993][T17768] netlink: 'syz.3.3281': attribute type 1 has an invalid length. [ 809.166188][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.173253][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.510810][T17813] syzkaller0: entered promiscuous mode [ 809.518531][T17813] syzkaller0: entered allmulticast mode [ 809.805574][T17822] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3296'. [ 810.136217][T17822] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3296'. [ 810.162845][T17824] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3296'. [ 810.421022][T17831] netlink: 'syz.3.3299': attribute type 4 has an invalid length. [ 810.446001][T17831] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3299'. [ 810.507112][T17831] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 811.064254][ T5773] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 811.896342][T17861] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3309'. [ 812.074655][T17867] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.3312'. [ 812.375531][ T5773] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 812.469292][T17881] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 812.485303][T17883] netlink: 'syz.3.3314': attribute type 33 has an invalid length. [ 812.494177][T17883] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3314'. [ 812.696622][T17890] netlink: 'syz.1.3319': attribute type 10 has an invalid length. [ 812.713843][T17890] mac80211_hwsim hwsim43 wlan1: left allmulticast mode [ 812.733252][T17890] team0: Port device wlan1 removed [ 813.014553][T17904] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3323'. [ 813.039435][T17904] netlink: 'syz.0.3323': attribute type 2 has an invalid length. [ 813.234959][T17907] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3325'. [ 813.381958][ T5773] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 813.521910][T17911] syzkaller0: entered promiscuous mode [ 813.527734][T17911] syzkaller0: entered allmulticast mode [ 814.372230][T17917] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3327'. [ 814.536858][T17930] netlink: 'syz.1.3329': attribute type 10 has an invalid length. [ 816.028934][T17952] netlink: 'syz.1.3337': attribute type 10 has an invalid length. [ 816.045048][T17952] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3337'. [ 816.642690][T17960] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3340'. [ 817.563906][T17975] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3349'. [ 817.602684][T17977] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3341'. [ 817.624472][T17980] netlink: 'syz.3.3342': attribute type 10 has an invalid length. [ 817.647797][T17980] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3342'. [ 818.470205][T18006] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3347'. [ 818.959726][T18017] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3352'. [ 819.426269][T18033] netlink: 'syz.0.3356': attribute type 10 has an invalid length. [ 819.549565][T18033] mac80211_hwsim hwsim38 wlan1: left promiscuous mode [ 819.571789][T18033] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 820.346028][T18050] netlink: 'syz.0.3361': attribute type 13 has an invalid length. [ 820.387354][T18050] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3361'. [ 820.430800][T18050] erspan0: refused to change device tx_queue_len [ 820.471514][T18050] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 820.668060][T18056] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3363'. [ 820.824109][T18059] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3364'. [ 821.444820][T18069] netlink: 'syz.3.3367': attribute type 10 has an invalid length. [ 821.483420][T18069] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 821.880376][T18089] netlink: 2583 bytes leftover after parsing attributes in process `syz.0.3370'. [ 822.198584][T18097] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3374'. [ 822.604098][T18109] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3377'. [ 822.745439][T18108] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3376'. [ 822.809273][T18109] netlink: 8454 bytes leftover after parsing attributes in process `syz.3.3377'. [ 824.210558][T18141] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3385'. [ 824.702439][T18153] syz.0.3387[18153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 824.702582][T18153] syz.0.3387[18153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 825.377855][T18145] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3386'. [ 825.465805][T18145] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.3386'. [ 825.509796][T18145] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3386'. [ 825.748802][T18171] syzkaller0: entered promiscuous mode [ 825.759886][T18171] syzkaller0: entered allmulticast mode [ 825.774222][T18178] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3395'. [ 832.963747][T18212] netlink: 'syz.0.3404': attribute type 29 has an invalid length. [ 833.055053][T18212] netlink: 'syz.0.3404': attribute type 29 has an invalid length. [ 833.317022][T18220] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.3406'. [ 833.382002][T18229] netlink: 'syz.0.3411': attribute type 10 has an invalid length. [ 833.397392][T18229] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3411'. [ 833.415401][T18229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.423491][T18229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.475696][T18226] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3409'. [ 833.697311][T18237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 834.120862][T18254] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3417'. [ 834.306849][T18261] netlink: set zone limit has 8 unknown bytes [ 834.335194][T18262] netlink: set zone limit has 8 unknown bytes [ 834.442256][T18261] netlink: 'syz.1.3418': attribute type 21 has an invalid length. [ 834.720512][ T5773] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 835.946237][T18280] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3426'. [ 836.195563][T18286] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3428'. [ 836.797328][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 838.898005][ T5773] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 838.978437][T18336] netlink: 'syz.3.3443': attribute type 10 has an invalid length. [ 838.986749][T18336] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3443'. [ 839.069373][T18338] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3445'. [ 839.222145][ T5773] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 840.121063][T13731] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 840.249276][T18354] netlink: 'syz.1.3451': attribute type 4 has an invalid length. [ 840.466919][T18370] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3454'. [ 840.527576][T18374] lo: entered allmulticast mode [ 840.570812][T18374] netlink: 'syz.1.3456': attribute type 33 has an invalid length. [ 840.605682][T18374] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3456'. [ 840.627389][T18374] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 840.737252][T13731] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 841.144980][T18390] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3461'. [ 841.222543][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 842.077865][T18397] netlink: 'syz.3.3464': attribute type 10 has an invalid length. [ 842.087247][T18397] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3464'. [ 842.455886][T18423] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3472'. [ 842.485998][T18423] veth0_macvtap: left promiscuous mode [ 842.554672][T13731] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 842.865592][T18430] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3474'. [ 843.053091][T13731] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 844.640394][T18473] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3487'. [ 844.691151][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 845.030832][T18480] netlink: 'syz.1.3490': attribute type 9 has an invalid length. [ 845.040665][T18480] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3490'. [ 846.326520][T18504] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3496'. [ 846.376550][T18504] netlink: 'syz.2.3496': attribute type 1 has an invalid length. [ 846.414835][T18504] netlink: 9062 bytes leftover after parsing attributes in process `syz.2.3496'. [ 846.962212][ T5773] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 847.098976][T18511] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3500'. [ 848.423380][T18534] netlink: 'syz.3.3506': attribute type 10 has an invalid length. [ 848.439407][T18534] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3506'. [ 849.245305][T18549] netlink: 'syz.3.3511': attribute type 3 has an invalid length. [ 849.271203][T18549] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.3511'. [ 849.350872][ T5773] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 849.625494][T18560] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3513'. [ 851.100949][ T5773] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 851.895626][T18605] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3526'. [ 852.070031][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 852.835108][T13731] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 853.675989][T18631] netlink: 'syz.3.3534': attribute type 10 has an invalid length. [ 853.836223][T18631] bond0: (slave wlan1): Releasing backup interface [ 853.871838][T18631] team0: Port device wlan1 added [ 854.266169][T18639] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3537'. [ 855.090869][ T5773] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 857.506543][T18677] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3548'. [ 858.397120][T18693] netlink: 'syz.3.3552': attribute type 10 has an invalid length. [ 858.417061][T13731] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 860.482464][T18722] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3562'. [ 860.555115][T18719] delete_channel: no stack [ 860.873424][T18734] netlink: 'syz.3.3565': attribute type 29 has an invalid length. [ 860.912918][T18734] netlink: 'syz.3.3565': attribute type 29 has an invalid length. [ 860.937680][T18733] netlink: 'syz.3.3565': attribute type 29 has an invalid length. [ 861.374431][T18734] netlink: 'syz.3.3565': attribute type 29 has an invalid length. [ 861.397536][T18736] netlink: 'syz.3.3565': attribute type 29 has an invalid length. [ 861.411212][ T5773] Bluetooth: hci0: unknown advertising packet type: 0xff [ 862.739635][T18750] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3570'. [ 862.772352][T18750] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 862.788880][T18750] CPU: 0 PID: 18750 Comm: syz.1.3570 Not tainted syzkaller #0 [ 862.796769][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 862.806890][T18750] Call Trace: [ 862.810401][T18750] [ 862.813381][T18750] dump_stack_lvl+0x18c/0x250 [ 862.818185][T18750] ? show_regs_print_info+0x20/0x20 [ 862.823411][T18750] ? load_image+0x420/0x420 [ 862.828044][T18750] sysfs_warn_dup+0x8e/0xa0 [ 862.832595][T18750] sysfs_do_create_link_sd+0xc0/0x110 [ 862.838031][T18750] device_add_class_symlinks+0x1cf/0x240 [ 862.843772][T18750] device_add+0x507/0xc20 [ 862.848170][T18750] wiphy_register+0x1dad/0x2ae0 [ 862.853107][T18750] ? cfg80211_event_work+0x40/0x40 [ 862.858353][T18750] ? minstrel_ht_alloc+0x88a/0x990 [ 862.863535][T18750] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 862.869664][T18750] ieee80211_register_hw+0x3464/0x4250 [ 862.875219][T18750] ? ieee80211_tasklet_handler+0x20/0x20 [ 862.880920][T18750] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 862.886936][T18750] ? __debug_object_init+0xec/0x450 [ 862.892254][T18750] ? __asan_memset+0x22/0x40 [ 862.896874][T18750] ? __hrtimer_init+0x186/0x270 [ 862.901764][T18750] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 862.907731][T18750] ? mac80211_hwsim_free+0x220/0x220 [ 862.913063][T18750] ? rcu_is_watching+0x15/0xb0 [ 862.917868][T18750] ? kstrndup+0xbd/0x140 [ 862.922160][T18750] hwsim_new_radio_nl+0xdc9/0x1a90 [ 862.927313][T18750] ? __nla_validate+0x50/0x50 [ 862.932021][T18750] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 862.938484][T18750] ? __nla_parse+0x40/0x50 [ 862.943011][T18750] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 862.949458][T18750] genl_family_rcv_msg_doit+0x211/0x310 [ 862.955027][T18750] ? end_current_label_crit_section+0x170/0x170 [ 862.961640][T18750] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 862.967573][T18750] ? bpf_lsm_capable+0x9/0x10 [ 862.972628][T18750] ? security_capable+0x89/0xb0 [ 862.977523][T18750] genl_rcv_msg+0x619/0x7a0 [ 862.982164][T18750] ? genl_bind+0x360/0x360 [ 862.986697][T18750] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 862.993218][T18750] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 862.999842][T18750] netlink_rcv_skb+0x241/0x4d0 [ 863.004676][T18750] ? genl_bind+0x360/0x360 [ 863.009111][T18750] ? netlink_ack+0x1180/0x1180 [ 863.014011][T18750] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 863.020487][T18750] ? down_read+0x1ac/0x2e0 [ 863.025015][T18750] genl_rcv+0x28/0x40 [ 863.029020][T18750] netlink_unicast+0x751/0x8d0 [ 863.033921][T18750] netlink_sendmsg+0x8d0/0xbf0 [ 863.038722][T18750] ? netlink_getsockopt+0x590/0x590 [ 863.043949][T18750] ? aa_sock_msg_perm+0x94/0x150 [ 863.048916][T18750] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 863.054407][T18750] ? security_socket_sendmsg+0x80/0xa0 [ 863.059971][T18750] ? netlink_getsockopt+0x590/0x590 [ 863.065196][T18750] ____sys_sendmsg+0x5ba/0x960 [ 863.069983][T18750] ? __asan_memset+0x22/0x40 [ 863.074678][T18750] ? __sys_sendmsg_sock+0x30/0x30 [ 863.079717][T18750] ? __import_iovec+0x5f2/0x850 [ 863.084682][T18750] ? import_iovec+0x73/0xa0 [ 863.089291][T18750] ___sys_sendmsg+0x2a6/0x360 [ 863.094044][T18750] ? __sys_sendmsg+0x2a0/0x2a0 [ 863.098966][T18750] ? trace_call_bpf+0xc3/0x6c0 [ 863.103883][T18750] __se_sys_sendmsg+0x1c2/0x2b0 [ 863.108753][T18750] ? __x64_sys_sendmsg+0x80/0x80 [ 863.113730][T18750] ? lockdep_hardirqs_on+0x98/0x150 [ 863.118962][T18750] do_syscall_64+0x55/0xa0 [ 863.123405][T18750] ? clear_bhb_loop+0x40/0x90 [ 863.128226][T18750] ? clear_bhb_loop+0x40/0x90 [ 863.132949][T18750] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.138864][T18750] RIP: 0033:0x7f08e4f9cdd9 [ 863.143572][T18750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.163375][T18750] RSP: 002b:00007f08e5f15028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.171999][T18750] RAX: ffffffffffffffda RBX: 00007f08e5215fa0 RCX: 00007f08e4f9cdd9 [ 863.179986][T18750] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000011 [ 863.187999][T18750] RBP: 00007f08e5032d69 R08: 0000000000000000 R09: 0000000000000000 [ 863.196196][T18750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.204203][T18750] R13: 00007f08e5216038 R14: 00007f08e5215fa0 R15: 00007ffe056ee8a8 [ 863.212221][T18750] [ 863.467573][T18764] netlink: 'syz.1.3574': attribute type 10 has an invalid length. [ 863.487766][T18764] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3574'. [ 863.790847][T18770] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3576'. [ 864.486223][ T5773] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 866.413172][T18805] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3587'. [ 866.660022][T18806] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3586'. [ 867.130048][T13731] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 868.191466][T18825] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 868.210088][T18831] FAULT_INJECTION: forcing a failure. [ 868.210088][T18831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.229376][T18831] CPU: 0 PID: 18831 Comm: syz.1.3595 Not tainted syzkaller #0 [ 868.236973][T18831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 868.247094][T18831] Call Trace: [ 868.250435][T18831] [ 868.253429][T18831] dump_stack_lvl+0x18c/0x250 [ 868.258199][T18831] ? show_regs_print_info+0x20/0x20 [ 868.263515][T18831] ? load_image+0x420/0x420 [ 868.268290][T18831] ? __lock_acquire+0x7d40/0x7d40 [ 868.273573][T18831] ? snprintf+0xe9/0x140 [ 868.277908][T18831] should_fail_ex+0x39d/0x4d0 [ 868.282691][T18831] _copy_to_user+0x2f/0xa0 [ 868.287190][T18831] simple_read_from_buffer+0xe7/0x150 [ 868.292675][T18831] proc_fail_nth_read+0x1e8/0x260 [ 868.297826][T18831] ? proc_fault_inject_write+0x360/0x360 [ 868.303745][T18831] ? fsnotify_perm+0x271/0x5e0 [ 868.308619][T18831] ? proc_fault_inject_write+0x360/0x360 [ 868.314351][T18831] vfs_read+0x28b/0x970 [ 868.318614][T18831] ? kernel_read+0x1e0/0x1e0 [ 868.323296][T18831] ? __fget_files+0x28/0x4b0 [ 868.328061][T18831] ? __fget_files+0x28/0x4b0 [ 868.332742][T18831] ? __fget_files+0x43d/0x4b0 [ 868.337535][T18831] ? __fdget_pos+0x2a3/0x330 [ 868.342204][T18831] ? ksys_read+0x75/0x260 [ 868.346622][T18831] ksys_read+0x150/0x260 [ 868.351026][T18831] ? vfs_write+0x990/0x990 [ 868.355546][T18831] ? lockdep_hardirqs_on+0x98/0x150 [ 868.360833][T18831] do_syscall_64+0x55/0xa0 [ 868.365328][T18831] ? clear_bhb_loop+0x40/0x90 [ 868.370085][T18831] ? clear_bhb_loop+0x40/0x90 [ 868.374963][T18831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 868.381101][T18831] RIP: 0033:0x7f08e4f5d60e [ 868.385677][T18831] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 868.405360][T18831] RSP: 002b:00007f08e5f14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 868.414038][T18831] RAX: ffffffffffffffda RBX: 00007f08e5f156c0 RCX: 00007f08e4f5d60e [ 868.422173][T18831] RDX: 000000000000000f RSI: 00007f08e5f150a0 RDI: 0000000000000007 [ 868.430222][T18831] RBP: 00007f08e5f15090 R08: 0000000000000000 R09: 0000000000000000 [ 868.438549][T18831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.446583][T18831] R13: 00007f08e5216038 R14: 00007f08e5215fa0 R15: 00007ffe056ee8a8 [ 868.454699][T18831] [ 868.539297][T18834] netlink: 'syz.3.3596': attribute type 21 has an invalid length. [ 868.554243][T18834] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3596'. [ 868.568675][T18833] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3596'. [ 869.038195][T18834] netlink: 'syz.3.3596': attribute type 10 has an invalid length. [ 869.051202][T18834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3596'. [ 869.065279][T18834] batadv0: entered promiscuous mode [ 869.077308][T18834] batadv0: entered allmulticast mode [ 869.091458][T18834] bridge0: port 3(batadv0) entered blocking state [ 869.113144][T18834] bridge0: port 3(batadv0) entered disabled state [ 869.129621][T18834] bridge0: port 3(batadv0) entered blocking state [ 869.138024][T18834] bridge0: port 3(batadv0) entered forwarding state [ 869.149970][ T1142] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 869.159604][ T1142] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 869.170458][T18841] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3599'. [ 869.190443][T18843] netlink: 'syz.1.3598': attribute type 10 has an invalid length. [ 869.198432][T18843] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3598'. [ 869.471857][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 870.604713][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.611310][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.969434][T18878] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3611'. [ 872.239575][ T5773] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 872.720493][ T5773] Bluetooth: hci2: unknown advertising packet type: 0xff [ 873.373187][T18909] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3622'. [ 874.190579][ T5773] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 874.646954][T18825] Bluetooth: hci4: unknown advertising packet type: 0xff [ 875.278709][T18950] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3637'. [ 875.590570][T18953] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.3638'. [ 875.877018][T18825] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 875.955200][T18962] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3640'. [ 875.967499][T18962] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.3640'. [ 876.594086][T18979] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3647'. [ 876.620298][ T5773] Bluetooth: hci4: unknown advertising packet type: 0xff [ 877.339316][T18989] netlink: 'syz.3.3651': attribute type 1 has an invalid length. [ 877.369235][T18989] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.3651'. [ 877.761601][ T5773] Bluetooth: hci3: unknown advertising packet type: 0xff [ 878.141754][T19002] netlink: 'syz.1.3655': attribute type 29 has an invalid length. [ 878.167759][T19002] netlink: 'syz.1.3655': attribute type 29 has an invalid length. [ 878.263552][T19008] syz.2.3657[19008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 878.263819][T19008] syz.2.3657[19008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 878.394328][ T5773] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 878.465966][T19014] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3660'. [ 879.880194][T18825] Bluetooth: hci3: unknown advertising packet type: 0xff [ 879.946597][T19036] netlink: 'syz.1.3666': attribute type 10 has an invalid length. [ 880.022765][T19036] team0: Device wg1 is of different type [ 880.085385][T19039] netlink: 'syz.0.3667': attribute type 10 has an invalid length. [ 880.101535][T19039] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3667'. [ 880.295408][T18825] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 880.438000][T19051] sock: sock_timestamping_bind_phc: sock not bind to device [ 880.491864][T19050] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3672'. [ 881.929908][ T5773] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 882.337160][T19071] netlink: 'syz.1.3678': attribute type 29 has an invalid length. [ 882.356699][T19071] netlink: 'syz.1.3678': attribute type 29 has an invalid length. [ 882.463723][T18825] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 882.667057][T19082] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3683'. [ 883.004031][T19092] syzkaller0: entered promiscuous mode [ 883.024170][T19092] syzkaller0: entered allmulticast mode [ 883.088771][ T5773] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 886.199821][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 886.356830][T19121] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3695'. [ 887.199561][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 887.708292][T19144] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3702'. [ 887.727530][T19144] netlink: 'syz.1.3702': attribute type 9 has an invalid length. [ 887.799364][T19144] netlink: 399 bytes leftover after parsing attributes in process `syz.1.3702'. [ 887.842617][T19145] netlink: 'syz.3.3701': attribute type 10 has an invalid length. [ 887.906334][T19145] team0: Port device macvlan0 added [ 888.008145][T19150] netlink: 'syz.2.3703': attribute type 10 has an invalid length. [ 888.262657][T19150] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3703'. [ 888.515517][T19150] ipvlan1: entered promiscuous mode [ 888.544425][T19150] ipvlan1: entered allmulticast mode [ 888.562492][T19150] veth0_vlan: entered allmulticast mode [ 888.614146][T19150] bridge0: port 4(ipvlan1) entered blocking state [ 888.655127][T19150] bridge0: port 4(ipvlan1) entered disabled state [ 888.702151][T19150] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 888.795353][T18825] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 889.017839][T19164] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3708'. [ 889.447246][T18825] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 890.327528][T13731] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 890.612812][T19197] netlink: 'syz.0.3718': attribute type 16 has an invalid length. [ 890.644827][T19197] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3718'. [ 890.656534][T19197] veth1_macvtap: entered allmulticast mode [ 890.961568][T19213] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3721'. [ 891.363447][T18825] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 892.553452][T13731] Bluetooth: hci0: unknown advertising packet type: 0xff [ 893.469512][T19250] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3734'. [ 894.754889][T13731] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 896.294578][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 896.485745][T19278] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.3743'. [ 896.733044][T19279] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3742'. [ 896.974504][T19279] netlink: 'syz.0.3742': attribute type 13 has an invalid length. [ 897.010863][T19279] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3742'. [ 897.026509][T19279] syz_tun: refused to change device tx_queue_len [ 897.038826][T19279] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 897.441828][T19294] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3746'. [ 898.708267][T13731] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 898.818485][T19316] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3753'. [ 898.947046][T19311] netlink: 'syz.3.3751': attribute type 21 has an invalid length. [ 898.957069][T19311] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.3751'. [ 900.202406][T19333] netlink: 'syz.2.3758': attribute type 1 has an invalid length. [ 900.218768][T19333] netlink: 'syz.2.3758': attribute type 3 has an invalid length. [ 900.226905][T19333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3758'. [ 900.904373][T19336] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3759'. [ 900.914156][T19336] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3759'. [ 900.926034][T19336] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3759'. [ 901.190973][T19341] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3760'. [ 901.389441][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 903.152507][T19363] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 903.400996][T19370] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3772'. [ 903.605241][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 905.078166][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 906.286824][T19417] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3787'. [ 907.289086][T19419] netlink: 'syz.1.3788': attribute type 10 has an invalid length. [ 907.635199][T19419] team0: Port device wlan1 added [ 908.690882][T13731] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 909.990279][T19450] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3799'. [ 912.649423][T19490] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3812'. [ 913.056827][T19511] netlink: 'syz.0.3817': attribute type 21 has an invalid length. [ 913.069448][T19511] IPv6: NLM_F_CREATE should be specified when creating new route [ 913.099379][T19511] IPv6: Can't replace route, no match found [ 913.956873][T19524] netlink: 'syz.1.3820': attribute type 3 has an invalid length. [ 914.029171][T19524] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3820'. [ 915.247708][T19531] netlink: 'syz.3.3821': attribute type 21 has an invalid length. [ 915.358688][T19541] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3825'. [ 916.099818][T18825] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 917.278553][T19574] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3836'. [ 918.021938][T19583] netlink: 'syz.1.3837': attribute type 10 has an invalid length. [ 918.055710][T19583] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3837'. [ 918.148485][T19586] netlink: 'syz.3.3839': attribute type 4 has an invalid length. [ 918.191498][T19586] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3839'. [ 918.339652][T19586] .`: renamed from bond0 (while UP) [ 918.671074][T18825] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 918.966805][T19608] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3847'. [ 919.594719][T19623] netlink: 'syz.0.3851': attribute type 10 has an invalid length. [ 920.238639][T19623] bridge0: port 3(hsr0) entered disabled state [ 920.713220][T19637] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3856'. [ 920.890221][T18825] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 921.821116][T19653] netlink: 'syz.2.3860': attribute type 1 has an invalid length. [ 921.859199][T19653] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3860'. [ 922.226396][T19662] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3863'. [ 922.684197][T19650] hsr0: left allmulticast mode [ 922.707428][T19650] hsr_slave_0: left allmulticast mode [ 922.735060][T19650] bridge0: port 3(hsr0) entered disabled state [ 922.782778][T19650] bridge_slave_1: left allmulticast mode [ 922.788520][T19650] bridge_slave_1: left promiscuous mode [ 922.819335][T19650] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.833030][T19650] bridge_slave_0: left allmulticast mode [ 922.847524][T19650] bridge_slave_0: left promiscuous mode [ 922.865171][T19650] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.040722][T19665] netlink: 'syz.1.3865': attribute type 17 has an invalid length. [ 923.049654][T19665] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3865'. [ 923.064962][T19665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 923.312056][T19673] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3867'. [ 924.054815][T19694] netlink: 'syz.0.3873': attribute type 21 has an invalid length. [ 924.085911][T13731] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 926.295173][T19726] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3883'. [ 926.518690][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 926.827751][T13731] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 927.984444][T19764] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3895'. [ 928.023616][T19769] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3896'. [ 928.130663][T19769] bridge_slave_0: entered allmulticast mode [ 928.583637][T18825] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 929.023019][T19793] netlink: 'syz.3.3903': attribute type 41 has an invalid length. [ 929.051182][T19793] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3903'. [ 929.053303][T19789] netlink: 'syz.0.3901': attribute type 21 has an invalid length. [ 929.062857][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 930.361293][T13731] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 930.491678][T19818] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3911'. [ 930.545676][T19822] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3912'. [ 930.669466][T18825] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 930.708628][T19829] pimreg: tun_chr_ioctl cmd 1074025692 [ 930.716445][T19829] pimreg: tun_chr_ioctl cmd 1074025681 [ 932.056357][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.069226][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.538627][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 932.975024][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 932.990302][T19873] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3927'. [ 933.376716][T19879] netlink: 'syz.1.3929': attribute type 22 has an invalid length. [ 934.494137][T19879] netlink: 'syz.1.3929': attribute type 10 has an invalid length. [ 934.517747][T19879] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.549700][T19879] bridge_slave_1: left allmulticast mode [ 934.555440][T19879] bridge_slave_1: left promiscuous mode [ 934.571835][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 934.599344][T19879] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.821450][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 935.506334][T19921] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3940'. [ 936.602069][T19931] netlink: 'syz.0.3942': attribute type 10 has an invalid length. [ 936.623601][T19931] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3942'. [ 937.209229][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 937.446605][T13731] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 937.971908][T19956] netlink: 'syz.3.3951': attribute type 3 has an invalid length. [ 938.035851][T19956] netlink: 'syz.3.3951': attribute type 1 has an invalid length. [ 938.110861][T19956] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3951'. [ 938.469791][T19970] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3953'. [ 939.515767][T19984] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3956'. [ 939.715828][T18825] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 940.108098][T19984] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 940.396199][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 940.764463][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 941.191624][T20011] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3965'. [ 941.223212][T20009] netlink: 'syz.3.3964': attribute type 10 has an invalid length. [ 941.289404][T20009] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.324988][T20009] bridge_slave_1: left allmulticast mode [ 941.344445][T20009] bridge_slave_1: left promiscuous mode [ 941.365979][T20009] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.403716][T20009] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 941.628719][T20022] netlink: 'syz.3.3967': attribute type 11 has an invalid length. [ 941.637559][T20022] netlink: 212832 bytes leftover after parsing attributes in process `syz.3.3967'. [ 941.729540][T18825] Bluetooth: hci3: command 0x0406 tx timeout [ 942.142862][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 942.176749][T20033] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3969'. [ 945.815696][T20041] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.3974'. [ 945.880991][T13731] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 945.998162][T20046] netlink: 'syz.1.3975': attribute type 21 has an invalid length. [ 946.031066][T20046] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3975'. [ 946.044625][T20046] netlink: 'syz.1.3975': attribute type 4 has an invalid length. [ 946.934752][T20054] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3977'. [ 947.195330][T20066] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3980'. [ 947.227522][T20066] netlink: get zone limit has 4 unknown bytes [ 947.252917][T20064] delete_channel: no stack [ 947.288367][T20066] netlink: 'syz.1.3980': attribute type 10 has an invalid length. [ 947.484233][T20070] delete_channel: no stack [ 948.412906][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 948.461417][T20088] netlink: 'syz.0.3987': attribute type 27 has an invalid length. [ 948.596823][T18825] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 948.917009][T20094] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3988'. [ 949.788074][T20103] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3989'. [ 950.034492][T20122] netlink: 'syz.3.3994': attribute type 11 has an invalid length. [ 950.059173][T20122] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.3994'. [ 950.343725][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 950.561977][T18825] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 951.390520][T20137] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4000'. [ 951.830938][T20158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4005'. [ 951.844750][T20158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4005'. [ 951.856527][T20158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4005'. [ 951.920478][T20158] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4005'. [ 952.048192][T20160] netlink: 'syz.3.4006': attribute type 22 has an invalid length. [ 952.062631][T20160] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4006'. [ 952.515641][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 952.863505][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 954.064345][T20195] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4015'. [ 954.335013][ T5773] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 955.564053][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 956.135781][T20238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4027'. [ 956.170194][T20239] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4028'. [ 956.260242][T20242] °ÿ: renamed from virt_wifi0 [ 956.287332][ T5773] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 957.625290][T20262] netlink: 'syz.3.4032': attribute type 10 has an invalid length. [ 957.685193][T20262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4032'. [ 957.824584][T20262] bridge0: port 2(ipvlan1) entered blocking state [ 957.868388][T20262] bridge0: port 2(ipvlan1) entered disabled state [ 957.897539][T20262] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 958.793219][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 959.140055][T20283] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4039'. [ 959.611575][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 959.846689][T20294] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4042'. [ 962.179004][T20317] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4045'. [ 962.213724][T20319] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4047'. [ 962.520535][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 962.725175][T20333] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4049'. [ 963.729902][T20338] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4051'. [ 963.750608][T20341] netlink: 'syz.1.4053': attribute type 10 has an invalid length. [ 964.160263][T20355] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4057'. [ 964.189771][T18825] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 964.395905][T20353] netlink: 'syz.0.4065': attribute type 10 has an invalid length. [ 964.407315][T20353] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 964.555996][T20353] team0: Port device wlan1 added [ 965.091802][ T5773] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 966.132185][T20371] netlink: 'syz.2.4058': attribute type 21 has an invalid length. [ 966.140534][T20371] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.4058'. [ 966.288766][T20381] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4063'. [ 966.414299][T20383] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4064'. [ 966.652064][T20390] netlink: 'syz.2.4066': attribute type 10 has an invalid length. [ 966.672780][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 967.127421][T18825] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 967.283860][T20398] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4068'. [ 967.661271][T18825] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 967.789300][T20406] netlink: 'syz.2.4070': attribute type 10 has an invalid length. [ 969.402015][T20426] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4077'. [ 969.808678][T18825] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 970.140519][T20447] netlink: 'syz.2.4084': attribute type 21 has an invalid length. [ 970.148445][T20447] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4084'. [ 970.170730][T20449] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.4084'. [ 970.203669][T20449] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.4084'. [ 970.528135][T20455] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4085'. [ 971.898149][T20468] FAULT_INJECTION: forcing a failure. [ 971.898149][T20468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.029774][T20468] CPU: 0 PID: 20468 Comm: syz.2.4088 Not tainted syzkaller #0 [ 972.037373][T20468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 972.047468][T20468] Call Trace: [ 972.050884][T20468] [ 972.053866][T20468] dump_stack_lvl+0x18c/0x250 [ 972.058605][T20468] ? show_regs_print_info+0x20/0x20 [ 972.063942][T20468] ? load_image+0x420/0x420 [ 972.068584][T20468] ? __might_fault+0xaa/0x120 [ 972.073401][T20468] ? __lock_acquire+0x7d40/0x7d40 [ 972.078564][T20468] should_fail_ex+0x39d/0x4d0 [ 972.083303][T20468] _copy_from_user+0x2f/0xe0 [ 972.087941][T20468] __sys_bpf+0x23e/0x890 [ 972.092324][T20468] ? bpf_link_show_fdinfo+0x390/0x390 [ 972.097855][T20468] ? lock_chain_count+0x20/0x20 [ 972.102760][T20468] __x64_sys_bpf+0x7c/0x90 [ 972.107226][T20468] do_syscall_64+0x55/0xa0 [ 972.111685][T20468] ? clear_bhb_loop+0x40/0x90 [ 972.116402][T20468] ? clear_bhb_loop+0x40/0x90 [ 972.121136][T20468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 972.127161][T20468] RIP: 0033:0x7fc67099cdd9 [ 972.131620][T20468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 972.151632][T20468] RSP: 002b:00007fc671850028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 972.160208][T20468] RAX: ffffffffffffffda RBX: 00007fc670c16090 RCX: 00007fc67099cdd9 [ 972.168331][T20468] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 972.176433][T20468] RBP: 00007fc671850090 R08: 0000000000000000 R09: 0000000000000000 [ 972.184471][T20468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.192855][T20468] R13: 00007fc670c16128 R14: 00007fc670c16090 R15: 00007ffc74c36e48 [ 972.200922][T20468] Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.