last executing test programs: 4.346017537s ago: executing program 0 (id=3777): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x80fe, @local, 0x3, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001e80)="1679", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x7916) 4.135800227s ago: executing program 1 (id=3778): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000098"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x40}, 0x0) (async) r2 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x50) (async) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, &(0x7f0000000100)) 4.135324317s ago: executing program 2 (id=3779): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x4, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x2, 0x5, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000340)="a0a741373a", 0x7fffff}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="130000000700000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001dc00000000000000"], 0x18}, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="aa5e9fee25678ffd6313cf0f0df052512cfab4d03f9965fad2cf610353d7ac371f02ef17034e29d126e6809157ead14de4e95a23e40b164d7fa728f77abe1c0d40c7e908c0aa0d6247096863f8b3ef07dd133630292bf6db7680fcc09ee34e632c1a76abab2d667acb0cf9edef7b0cace95d448ae85e1110b316a82dc0f88e4fc43cbce8582107ed255135b02c0ea9ab12647c0d1048f8de53395e2b28ff4c683af5d03ead8c507c989d04ee90a66349192691c0cf219ae88a531aeb94c2cb01755cb1089e2c77c4080000000000000007985ca2f06e2e3310ad3f02a0b3", @ANYRES8=0x0, @ANYRESDEC=r0, @ANYRES64=r3, @ANYRES32=r0, @ANYRESDEC, @ANYRESDEC=r1, @ANYRESDEC=r3, @ANYBLOB="aac48deca321e69fd033957b15fe10463cf7bd8a7cb4c0231acf27ac53cb893b4402fc5601f1cb513a"], 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x1e, '\x00', 0x0, @fallback=0xd}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x5, 0x7ffffffc, 0x9}, {0x1000000a, 0x4, 0x1}], 0x10, 0x4}, 0x94) close(r6) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2b, 'rdma'}, {0x2b, 'rdma'}, {0xdc7f323e95beff06, 'net'}, {0x2b, 'net_prio'}]}, 0x1b) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000040)=r11) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000fb78be83dd5700"/24], 0x18}, 0x0) recvmsg$kcm(r4, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010000) 3.971005244s ago: executing program 0 (id=3780): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x201c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x1, @perf_bp={0x0, 0x3}, 0x10780, 0xa49, 0x80008, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], &(0x7f00000005c0)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeef}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000300)="4ac640c5139b9e94f5b5f5f3f24dd9997951f3ae78dd32e6961ee5aa1889890fa1c1738dac7af814ab22e9bf3fc32201bc3674d7b4276a5edbe92644b61a9c299f4be5828cbfd6b3bea7408e3636dbcd3946837371ccdd576e71cd1f1d755a50bc3257d1e96297dadaf6d393d217d54fd9", &(0x7f0000000380)=""/231}, 0x20) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x201c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x1, @perf_bp={0x0, 0x3}, 0x10780, 0xa49, 0x80008, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], &(0x7f00000005c0)='GPL\x00'}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e00000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xeef}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r5, &(0x7f0000000300)="4ac640c5139b9e94f5b5f5f3f24dd9997951f3ae78dd32e6961ee5aa1889890fa1c1738dac7af814ab22e9bf3fc32201bc3674d7b4276a5edbe92644b61a9c299f4be5828cbfd6b3bea7408e3636dbcd3946837371ccdd576e71cd1f1d755a50bc3257d1e96297dadaf6d393d217d54fd9", &(0x7f0000000380)=""/231}, 0x20) (async) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 3.825700991s ago: executing program 1 (id=3781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x581, 0x20c62, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7008, 0x0, @perf_bp={0x0}, 0x800, 0xca, 0x200002, 0x0, 0x7, 0x100, 0x0, 0x0, 0xe}, 0x0, 0xd, 0xffffffffffffffff, 0x3) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYBLOB='\"\x00\n'], 0x9a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x42}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x102) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xc2a4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x5, 0xc, 0x6, 0x2}, 0x10, r7, r5, 0x2, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x0, 0x2, 0xa, 0x7}, {0x2, 0x5, 0xb, 0x9}], 0x10, 0x81}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8912, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) 3.767776184s ago: executing program 2 (id=3782): r0 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r1, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f00000009c0)=r1}, 0xfffffffffffffe02) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x10, &(0x7f0000000000), 0xc) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="010000006540e2564e5841e7000000ff00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="5b15d8ea9da371ce6f3764a0498fc3230087a6e97823d96ffd3ccc797af20b998882d03baeda7c95e47a2e1368f39fcd751161301c4ee8e0695f0c9f052047d023d7520086b15e3c8318e92fb08ac2ea97a17857d8871952a3ff9d8ec313acf8966740d5056d98788c4b9334"], &(0x7f0000000040)='syzkaller\x00', 0x101, 0xfe, &(0x7f0000000340)=""/254, 0x40f00, 0xd, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x10, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r3, r5, r6], &(0x7f0000000bc0)=[{0x3, 0x2, 0xd, 0x5}, {0x2, 0x2, 0x10, 0x2}, {0x3, 0x3, 0xb, 0x5}, {0x2, 0x1, 0x0, 0x9}, {0x5, 0x4, 0xc, 0x8}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x3a) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000770000000800000002"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) gettid() (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r9, 0x58, &(0x7f0000000e00)}, 0x10) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700), 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1}, &(0x7f0000000740), &(0x7f0000000780)=r8}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000009000000010100000000000000b20600", @ANYRES32=r7, @ANYBLOB="411100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000500"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) socket$kcm(0x10, 0x2, 0x0) 3.662285189s ago: executing program 4 (id=3783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x3, 0x0, 0x3, 0x400}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, 0x0}, 0x20) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x88) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001600)=ANY=[], 0x50) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0xf, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1f", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.404281781s ago: executing program 0 (id=3784): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500070001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ec3350568b31937cbdce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d839da9ee307f27260e97030000000000000000000000003341000000", 0xd8}], 0x1}, 0x0) r3 = perf_event_open$cgroup(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x1a, 0x1, 0x4, 0x0, 0x4e, 0x250, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x4, 0x0, 0x9, 0x4, 0x2b, 0x400, 0x4, 0x0, 0x1, 0x0, 0x8001}, 0xffffffffffffffff, 0x6, r0, 0xc) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x8) 3.275760647s ago: executing program 2 (id=3785): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0xfffffffffffffc38, 0x40, 0x200000}, 0x28) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a875bb98222120b00fc60", 0x14}], 0x1}, 0x20004000) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff8880b8f0f000, 0x7}}) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x3, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x3, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x7, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r5, &(0x7f0000003040)=ANY=[@ANYRES16=0x0, @ANYRES64], 0xffdd) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x1a, 0x0}, 0x2400c85c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) 3.078035356s ago: executing program 1 (id=3786): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x1000000}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48440, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0xffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8800, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) 2.454488215s ago: executing program 0 (id=3787): socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x40}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b80)={0xc2a4, 0x0}, 0x8) r2 = syz_clone(0x2000000, &(0x7f00000002c0)="ed22a601d7cc35e20b84935f63327399f1db22b9f2df230ac21e5bcec563f0c8e9561b3571b5455a989a0958ffc32e2bd1f557546160504c793f8def139a6ffeb4667f55f276d5ff7fb78520551ba971588abe1cdbf970ec70481243382ea03a0af0cc875b", 0x65, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="199e0d43c418") r3 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x7, 0x72, 0x5, 0x7f, 0x0, 0x1, 0x1, 0x8, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000440), 0x1}, 0x1000a1, 0x0, 0xf, 0x0, 0x0, 0x9, 0x9, 0x0, 0x10000, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x3, 0x4, 0x0, 0x0, 0x8000000000000001, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8001, 0x4, @perf_config_ext={0xe9, 0xfffffffffffff001}, 0x12, 0x4, 0x1ab, 0x5, 0xfffffffffffffffe, 0x0, 0x7f8, 0x0, 0xffffff3c, 0x0, 0xc}, r2, 0x2, r3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xc, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000050d000000000000000000009500"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x5, 0xc, 0x6, 0x2}, 0x10, r1, r0, 0x2, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x0, 0x2, 0xa, 0x7}, {0x2, 0x5, 0xb, 0x9}], 0x10, 0x81}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xd, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r4, &(0x7f0000000180), 0x0}, 0x20) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0xff}, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 2.276399334s ago: executing program 4 (id=3789): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x80000}, 0x59}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="b90103600040f000009e0ff00800", 0x0, 0x1, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) 2.266581024s ago: executing program 2 (id=3790): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0xa, 0x3, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) (async) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100), 0x5000) 2.207532057s ago: executing program 1 (id=3791): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0xdc, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540)={0x1, 0xffffffffffffffff}, 0x4) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pI4 \x00'}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfe, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)='%-5lx \x00'}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x26, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x24424274f86b5e41, 0xf, &(0x7f00000000c0)=@raw=[@generic={0xff, 0x0, 0x7, 0x8, 0x5}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x51ca44c9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], &(0x7f0000000140)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x26, '\x00', r1, @fallback=0x1d, r2, 0x8, &(0x7f00000004c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x9, 0x2, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000880)=[r3, r4, r5, r6, r7, r8], &(0x7f00000008c0)=[{0x3, 0x2, 0x5, 0x9}, {0x1, 0x4, 0x9, 0x1}, {0x0, 0x3, 0x2, 0xa}, {0x3, 0x2, 0x6, 0x3}, {0x5, 0x4e, 0x0, 0x9}], 0x10, 0x6}, 0x94) r10 = perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0x81, 0x0, 0x4, 0x7, 0x0, 0xfffffffffffffbff, 0x40000, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x40, 0x4}, 0x100040, 0x6, 0x6, 0x5, 0x80, 0x3, 0xfff7, 0x0, 0x677}, 0xffffffffffffffff, 0xf, r2, 0x5) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x1, &(0x7f0000000c80)=@raw=[@alu={0x7, 0x0, 0x6, 0x5, 0x6, 0xffffffffffffffff, 0x1}], &(0x7f0000000cc0)='GPL\x00', 0x4, 0x7d, &(0x7f0000000d00)=""/125, 0x41000, 0x49, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d80)={0x1, 0x0, 0x7fff, 0x5}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000dc0)=[{0x1, 0x2, 0x8, 0xb}, {0x0, 0x5, 0xb, 0x4}, {0x1, 0x4, 0x7}], 0x10, 0x101}, 0x94) r12 = openat$cgroup(r2, &(0x7f0000000ec0)='syz0\x00', 0x200002, 0x0) r13 = syz_clone(0x24000200, &(0x7f0000000f00)="30f98384ec19fca6c85014c197d0459beb3cf9f453d7b97994bd1d998df53218a653fd221c97ceed58877ce8631d669ac433a830a4c11400f8cd0ee3f33c438ea753c9872d13db36f3f6a3ca80aacd6d99297c0c8418822a33ad7c0cac91f8661b1d96ee0943514f66b772fdfaf294baf79960a00593d0d0745e26cc95138752b7de2244b2726ea5e5a356eae62bef2db7f3174b9034a88deea429bd6b5922f4b93cca1a145c5f2fb8c65ac7a59246d94ad532dad4d2e18ec061e8790f6eacd8f053a5d0ed021104ca9857d0caaed4ce1a3f20ec79356ab5bde6", 0xda, &(0x7f0000001000), &(0x7f0000001040), &(0x7f0000001080)="844f3df3cd823a9ad84ee8c7ede7dfed2026d7") r14 = getpid() r15 = getpid() r16 = syz_clone(0x20010200, &(0x7f00000010c0)="b4591c56a3dabe87bbb8096b809b523dc13f073c4cdcb0c0759ba754f354bfb2ed560e83e94482c79773817859fc2f246b24eacb023e93c6d40be5a13a78e2ccd31cfe7a282fa8197d150c8ad6695935c1f4660d59cc08d315ce12e498a58a6b636bda1bd0466fad35b5da8ac0dbf6fc031b1a82a2f3c9f05d4f392b527e900d43bb8cf0260ed2fbd4c1eabacbfef877afd3312db3bc225b", 0x98, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)="b6c0dbd8774086214ba444a5aba6f0595903499ea94494ab7376ad27e851a5e340070c3986c5ddffc81cadf8945c48efe14382d2f6653b8d546e5d22e36cbe4ed249f81d8f2236a0364b088892ded1deebe136b378b6c7f6512c01e03a71b8d32242f1f6538f320886b9b942e9e4579b7b2f137de56667a1b1a3d38b3edced567c3c14b1401452c137d44a2fcfec030343fa1e7b81d38e244a0526b3c52c95040cabf4658148a6955798470feb24bf3a2703372981261e2383b5ed26299aad370da5eb766fed069168c43426621c5a6886f007dc58fcda08507d71bb2d") r17 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001300)='ns/uts\x00') r18 = syz_clone(0x4000800, &(0x7f0000001340)="26a5a9591ff7b9108a19508c700ae21a1f2a9b87d6d653156a3610afffe99c9b3410bc00d70e59699383e0d941914ca8e3b2d79cc3eca4ccfa889decc2439c27ddbf495010df44762aad80965d4598afd3a8ebb67287bc45d15c6a1169a7c726fc649bfd0fabacdf0f39a23101f437336ef99b5082cc06c1367f3a7a268fabade553b7a38e403eb4302c0ecdb4a0e5e6d7b801bc7945c78f4653e88c39c2f382c40e1edac6cbd130d74f905b0dfe3f26332ef7f344eed73967096bed9c81f307317b4e38e12946db94bfbf4bed5f1e00e05f1a3967aff01729e52ca6bc2a6bc3a50f554933751b321bfac9cc0b4d31b00987c8c30342d2b454", 0xf9, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)="9613bece97ee7b1dca749397898fe7715c66c73eaf76035c6934f76ffa96ac64f5d115b6890a79839fd0757f97aa15a9865c26d1ee401851c40d") ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001500)={0xffffffffffffffff}) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0xffffffffffffffff, 0x9, 0x10}, 0xc) r21 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@base={0xd, 0x1, 0x5, 0x0, 0x410a, r0, 0x3ff, '\x00', r1, r2, 0x4, 0x1, 0x4}, 0x50) sendmsg$unix(r2, &(0x7f0000001780)={&(0x7f0000000a00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="b191eda307a18fe10c9e8f99cd547667040cf86bfe93ba1c5537e2d70e47ce163f0a018dd6cf223241341ec41cf4b1d7504e3bddea2c75970b25fc302233cf142e4389493fc08985a4e2bfb595f2b4e4fc86d3da57ccaf86c6ecf778337f87f01bbb32e690a93b0ba50e30092f7d90c7fb851da5b9b28626461cc35ae38c8cddd0e89163eb8c938c62716efc671ed9517b169b132f36a4626a4b650a45ff4b5769eec5c4656c49e11912becedc732fa11a1eb616da1acb091580fcd031040e4cac02dc1ecf5330e2810182e099e40d742c", 0xd1}, {&(0x7f0000000b80)="1750df24cf4d262e6150c1d2f9b88d53b58de0e394bf2ef287d2434db92aefecd2b8788415a1521588", 0x29}], 0x2, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x2c, 0x1, 0x1, [r0, r10, r5, r11, 0xffffffffffffffff, r9, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r14, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r15, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r16, 0xee00, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r5, r3, r4, r0, r17, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r18, 0xee01, 0xee00}}}, @rights={{0x34, 0x1, 0x1, [r5, r19, r5, r3, r2, r7, r20, r21, r2]}}, @rights={{0x1c, 0x1, 0x1, [r9, r6, r0]}}], 0x170, 0x20040000}, 0x8010) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001900)={r4, &(0x7f00000017c0)="ba3175f64a3639e8289edf4dae8f84b18a023dfa80fd5753d681fff8a11c396aa2403b69a91d77ac", &(0x7f0000001800)=""/229}, 0x20) syz_clone(0x800100, &(0x7f0000001940)="62a538b808ccacf5c6c4f420eadaab47e38cdfd3fcb6abff8788c128b193447ad5906e83973a98f7897c06957a148485b3c62a757a0b5b537a9ea81ddb4f575e82bed8c8322ea67d9104b3b0857090e06c0d1734620cc960f0f4dc2465fa99f35c055f5007d44e40d9be706c0bfa1b167fe243efbc70b89668071187b892df82bb4fd52c90a83cc88db4a00ed308a4b028d46907fdf6fa21a21968649094732fd2033914bff8e7cf78c755715eaa2c2059131f92df38a95811c18a511fcddc90449dcc57d86978fa078393bac8", 0xcd, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0)="f1bb52ba05debb92a0b0664d55510bf8b9a9fafcd4a7e4f328698d0b0a7125bc09e022d8e67f53a4d4d3519e26309b60dd6f8266b6240bef7a3c14e1dd94617cc5cd9b13d334d2d20ed947f3c0d7d976d40d43636276e35327a7002814f60ea27d94830a4761a520905177b3f3530b92b43073b61c7412d68aedfaf7da61d24d22d87b9f577eaf6e52657e0d0accb060c657b5b413bac4d30cc09437e573ef59e05417a2f2b9dec7715df52c12e43249b06f3bd647253d91ab2e701c784dd8b67b429c8effc755ad8e63") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d00)={0x6, 0x8, &(0x7f0000001bc0)=@raw=[@ldst={0x1, 0x0, 0x2, 0x5, 0x5, 0xfffffffffffffffe, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000001c00)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001c40)={0x3, 0x5, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000001c80)=[{0x3, 0x1, 0x9, 0x6}, {0x2, 0x1, 0x9, 0xb}, {0x1, 0x2, 0xc, 0x7}, {0x0, 0x2, 0xe, 0x2}, {0x1, 0x3, 0x1, 0xa}], 0x10, 0x440}, 0x94) perf_event_open(&(0x7f0000001dc0)={0x3, 0x80, 0x2, 0x0, 0x3, 0xdf, 0x0, 0x200, 0x11080, 0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x7}, 0x20, 0x81, 0x4, 0x8, 0x62, 0x1e5, 0xfff9, 0x0, 0xcb55, 0x0, 0x10001}, r15, 0x7, r2, 0xd) r22 = getpid() r23 = perf_event_open$cgroup(&(0x7f0000001e40)={0x5, 0x80, 0x72, 0x6, 0x6, 0xb1, 0x0, 0x7fffffff, 0x6c080, 0x5, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xba, 0x4, @perf_config_ext={0x6, 0xea3}, 0x4140, 0x0, 0x9, 0x8, 0x4, 0xf, 0xc, 0x0, 0x0, 0x0, 0x8}, r12, 0x3, r10, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001f00)={r22, r23, 0x0, 0x1b, &(0x7f0000001ec0)='blkio.bfq.io_service_bytes\x00'}, 0x30) 2.175477828s ago: executing program 3 (id=3792): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8, 0x0, 0x39}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_tracing={0x1a, 0x15, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @jmp={0x5, 0x1, 0x4, 0x3, 0x9, 0xffffffffffffffe0}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @tail_call]}, &(0x7f00000011c0)='GPL\x00', 0x5, 0x7c, &(0x7f0000001200)=""/124, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000012c0)={0x0, 0x6, 0x6, 0x1}, 0x10, 0x235a2, 0xffffffffffffffff, 0x3, &(0x7f0000001300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000001340)=[{0x4, 0x5, 0x2, 0xc}, {0x0, 0x1, 0x5, 0x8}, {0x2, 0x3, 0xa, 0x9}], 0x10, 0x1}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001540)={@ifindex, 0x31, 0x0, 0x7ff, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@base={0x12, 0x8000, 0x2, 0x4, 0x1020, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_lsm={0x1d, 0x16, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001700)='syzkaller\x00', 0x80000000, 0x84, &(0x7f0000001740)=""/132, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000001840)={0x3, 0x9, 0x3, 0x10000}, 0x10, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000001880)=[0x1], &(0x7f00000018c0)=[{0x5, 0x4, 0x6, 0x4}, {0x5, 0x2, 0x9, 0x4}, {0x3, 0x2, 0xb}, {0x4, 0x2, 0xd, 0xa}, {0x5, 0x1, 0x800010}, {0x1, 0x3, 0x6, 0xb}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001580)={@map=r3, r0, 0x4, 0x1, r1, @void, @value=r4, @void, @void, r2}, 0x20) 2.003565727s ago: executing program 4 (id=3793): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad90200e006dcdf63951f215ce3bb9ad809d5e1ca", 0xb7}], 0x1}, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64c9f4d4938037e784f869526f9aff94880f4c4a6a639086a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000006105830000000000850000002700000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(r6, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) 1.947712999s ago: executing program 2 (id=3794): r0 = socket$kcm(0xa, 0x922000000003, 0x11) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000100)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x0) r5 = socket$kcm(0x1e, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000000c0)=r6, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r9, 0x0, 0x0}, 0x10) perf_event_open$cgroup(&(0x7f00000000c0)={0x2, 0x80, 0x7f, 0x5, 0x1, 0x8, 0x0, 0x33a, 0x21, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000040), 0x5}, 0x2002, 0x8, 0x0, 0x5, 0x8, 0x7, 0x0, 0x0, 0x4, 0x0, 0x922}, r9, 0x10, 0xffffffffffffffff, 0x9) write$cgroup_subtree(r9, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c89ffdb5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) openat$cgroup_int(r9, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r13, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100080, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000063118e00000000008510000002000000850000000500000095000000000000009500a5050000000030dd9f5bb96832c2b22604716002452e22c1f443acdfdf2f99e53e3f43480ed0c321a81071f97153026dc468e19b33f40632fba15a1e272982ad9370cf6826cc3e6fd3d95679fa8e79671f9f434ed3763542cc21968a6c57fd56a87e24"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.868388902s ago: executing program 3 (id=3795): r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x318) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xdf, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x8, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x8}, [@map_fd={0x18, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d}, @generic={0x8, 0x2, 0x8, 0x8001, 0xf4}]}, &(0x7f0000000840)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x4, 0x10, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000900)=[0x1], &(0x7f0000000940)=[{0x4, 0x2, 0xf, 0xc}, {0x1, 0x2, 0x4, 0x17}, {0x1, 0x3, 0x8}, {0x3, 0x1, 0x1, 0x9}, {0x0, 0x4, 0xd, 0x1}, {0x3, 0x2, 0x8, 0x3}, {0x4, 0x4, 0x9, 0xc}], 0x10, 0x1}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x7, 0xd9e5, 0x5, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1e, 0x11, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x200}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000380)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @sk_lookup=0x24, r4, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x2, 0x4, 0x5}, 0x10, r6, r7, 0x3, &(0x7f0000000bc0)=[r8, r9, 0xffffffffffffffff, r10], &(0x7f0000000c00)=[{0x3, 0x5, 0xf, 0x3}, {0x5, 0x1, 0x1, 0x7}, {0x4, 0x5, 0x4, 0xc}]}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r9, 0x58, &(0x7f0000000d00)}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = perf_event_open$cgroup(&(0x7f0000000e00)={0x3, 0x80, 0x3, 0x9, 0xb, 0x5, 0x0, 0x6, 0x40000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf7, 0x3, @perf_config_ext, 0x0, 0x9, 0xa, 0x7, 0x8, 0x80000000, 0x8, 0x0, 0x7f, 0x0, 0x50f}, 0xffffffffffffffff, 0x9, r11, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x40082406, &(0x7f0000000e80)='#\x00') r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ec0)=r6, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0xd52b, '\x00', 0x0, r14, 0x3, 0x5, 0x4}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80)=r6, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000010c0)={@fallback=r12, 0x4, 0x0, 0xc9, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0]}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001180)={{r3, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)=r15}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r16, 0xc008240a, &(0x7f00000011c0)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r15, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f00000013c0)=[0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3e, &(0x7f0000001440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0xe3, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xe, 0x15, &(0x7f0000001200)=@raw=[@call={0x85, 0x0, 0x0, 0x19}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @alu={0x7, 0x0, 0xd, 0x4, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @exit], &(0x7f00000012c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2a, '\x00', r5, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000001340)={0x5, 0xd, 0x852, 0x5}, 0x10, r18, r7, 0x3, 0x0, &(0x7f0000001680)=[{0x5, 0x1, 0xe, 0x9}, {0x4, 0x5, 0x10, 0x8}, {0x2, 0x5, 0x8, 0x5}], 0x10, 0x3ff}, 0x94) r19 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x2, '\x00', r17, r15, 0x2, 0x1, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001a00)={r19, &(0x7f0000001800)="44995f6a4a8d1817525696d8cab7fb0fb0609bce510d2b21d3eaae620eddbcdbeb6423b9b5322bfb945f168355708a12cb6b93b0d12b832febbcbbbe93082cb221c15a0667c707bcdaf99e7ae3806f28d86860d5750c58d8fed57e286acbcf7c6b6f5194f3759ab12fa7d98c322fd8e4f51df58ff72eed96f08c9f7a6e9969254b5406f11c7098d5f396908fe32db98320dd5943d1221dbecae11cd9e68dd842a504420c0f5baa18f7a90ede61ac709e0c937e9f9133ff51386bf8188446b5bbbbd0634c", &(0x7f0000001900)=""/248}, 0x20) ioctl$TUNGETVNETLE(r15, 0x800454dd, &(0x7f0000001a40)) r20 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001bc0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001b80)={@cgroup=r20, 0xd, 0x0, 0x3, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b00)=[0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.653270733s ago: executing program 3 (id=3796): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x0, 0x10, 0x0, 0x0, 0x8001c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.562833487s ago: executing program 1 (id=3797): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, 0x0, 0x3000c085) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0x7, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) r5 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0), 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000800)={&(0x7f00000001c0)="547dd755d7c77d1d5c0fc6d0c8ca2893bfd39db6fd34d05fae6c6bfdfe3e2e05d9ea35e223f4a0c8052070a65ccd3c426fffd072128388d43e0fbe168d89251382857ccc9924a137cf323b93d8945068657734611d5ca09152a63f9cff09fa8ef2243a56f457b295d8013da50b257b083fff3dc89ef47da97531528f364be7a371a7dbb6c3c81a6130d69c4d2b9b492bc55a362c42076b370b38", &(0x7f0000000500)=""/99, &(0x7f00000006c0)="31c25f86f051543bca5754356af6e1b35a69c1a8ab7ced6ef22ef40cbd23d5a3c5d649bf19ff94058302c93b7894ed4940017a58fd1644ff8f44fffcaf33a707a04f70c7b7261c284ef5c3e14a1b0474bee39b6405219a45c4af4ebe05e253b4c8b7d65d6ebd96e8d6d3441adea4ce6e281b69b96492f1f0622a794bd5063b692efa15da50e2cc4995715d6ed37efd5c", &(0x7f0000000780)="9ff61e1cb521b813cb3de0735b11ed783120ab86fa47269b8d50b60335b1fc9d97865a0be889b267229d88f602c514ba86312e0b9c183a973b4244dc68b3d281a7f30c75f3308a2f4754cbb9b7aebf97e640", 0x9, r1}, 0x38) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x3) r8 = socket$kcm(0x29, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, 0x0) close(0x4) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) 1.493302331s ago: executing program 4 (id=3798): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ad0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100001b8500000082000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60072fc569", 0x33}], 0x1}, 0x4084) sendmsg$inet(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000240)='*', 0x1}], 0x1}, 0x8044) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) setsockopt$sock_attach_bpf(r3, 0x84, 0x1f, &(0x7f0000000100)=r5, 0x129) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000000)={r3}) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="72a8d2cf6a439392e822bb2b85a21685226b0bc47c9bda76d0f87f10068f5bd2f34b1e6b051103248dd8734cabece8c8bf3ee660a24871e155f60ac9198c05cffee57dda82c5e1c0743e0f49c6378dc2b5291a7a8f9e6b4b73a18f98100c41d66c90e3ddaa576b857c598a5c615c68e4a4790d3eb02aceb8e0c7ee5c", 0x7c}, {&(0x7f0000000240)="3f6d275a02e27a06169eb68ed2dde93f6a93f38c6b6919ddbc48d7d55b448219e1bf8106a623e4fa4a93c5f6f4bd12490d50f224ca7dd2e824950131db818e62a3e794552bfd63d247c7f4129e2cb14e398966bac7b6c40fce3fec5a5302cb9c75e444a647af9df93a383917ec632463c41ae2220aa74a73c15725d60ed7", 0x7e}, {&(0x7f00000002c0)="26f4708ccfd68c29bbef55e4d058bd8601f6a78782daf9bae9b66f6ae287e002a07528f6aaae85a714dfe5bf78a18d1ecbea92714a78e1465a876dbbac2dd0a605b949eb00eae371077e52496a172da33f994a49c4cdb2a51b6788ae97f9296955953508ebacecdcfc373c7eccb554257ce7173d080c35efd2", 0x79}, {&(0x7f0000000340)="cf638d51e952a36a528a9dce8f6777faeed6a0b15e76e504141134ba4fe401644568d36a73028d612a6c5e83e21cfd89114f6febb75ccd5b1f117cbc65fa27e4386f6156c53c5cf2882fd262b26d48f5331f86b1c3f2f009dcf012e9cbe36064fc6249c40d5d7b672b7fd531d06076cd60d53d7a28c3a86cff3baa329e42946ab185830c6373b4c5fa79b4e248b5eabd8b0650", 0x93}, {&(0x7f0000000400)="1a7a3038c0bc9a43a08216175b8d7ac8b5c4ba22bf223e67308f4e06ca943e68911888e8e5acfa5ed4231c56c8efb94cb4007e5c31c40fccacc530b49787ac2392579d6529677e35549c599194a04c1169b48d575f9bc7d6920e51ae7e4bd5605ab2a3c623bcd57b47430e278747719a531c4f0b31c3c8450dcf80b72b4c90d0b245b3c36bf2c59a309086f3a69f96dc5167c9f6d2a8f95f2ec89bd32b88938d7c1c0095b8d22471b40d955326db7c9b3a78b28b96f815f056", 0xb9}, {&(0x7f0000000580)="5406cfd27a0d1d56e7b32aa0ca7240b25ff4d81ef5d283e307b1a059b63d4d3bcdddb799c8e581093c1e09a6bbbb5079b6fcfb2f6acc51f9853df79436517cfa93d3fe883d3297e29d4ae379906b4ceea9373d10e418dd038088b0ace2cc346450e4f435906c88c9f0fe0e99bb335bea7cafd8e5af41b682221ee5114a3848801be3d1db575b4af11e88eae5db83a2e32dbd7b1db0622d2a8ee556d41924f516", 0xa0}, {&(0x7f0000000640)="f398eb8f861249513640759531b01fc0fd570560296d389cbb3bc0e59b455331040c9d9531528b4b3501bafd505e3106d9bbb3309735737117e39aa8b396e538e12515357c9bed10810ec5c1c43c811ec99668c9ed72b50a61f080c2ea79a3c394d94284e87a68ba3a8326eccff23d58723dcd97ba25771ba19ab849e164be6abe2209e4b89d5795a2bdfca620a541df44fbf352e08c", 0x96}, {&(0x7f0000000700)="2fcd0bbf656e", 0x6}], 0x8}, 0x8004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000580)='syzkaller\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.383476485s ago: executing program 0 (id=3799): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000200"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000640)="25b2b3cbea4056eb9d315d760d7e9dfcd937", 0x12}], 0x1, 0x0, 0x0, 0x900}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010006080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x8084) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x2, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x40}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4000, r3}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000002c0)={r0, r4}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f", 0xc}], 0x1}, 0x0) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000"], 0x0, 0x56}, 0x28) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001440)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.332854648s ago: executing program 3 (id=3800): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x28, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x59, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xcfac, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.036243702s ago: executing program 3 (id=3801): r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000180)=""/27) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x3, 0x2, 0x29, 0x0, 0x2, 0x10000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3297, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x100, 0x2, 0x1, 0x8, 0xc9cd, 0x7, 0x7, 0x0, 0x3, 0x0, 0xa}, r3, 0x7, r0, 0x1) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xf7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000180)=""/27) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x3, 0x2, 0x29, 0x0, 0x2, 0x10000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3297, 0x1, @perf_bp={&(0x7f00000000c0), 0x5}, 0x100, 0x2, 0x1, 0x8, 0xc9cd, 0x7, 0x7, 0x0, 0x3, 0x0, 0xa}, r3, 0x7, r0, 0x1) (async) socket$kcm(0xa, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xf7) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8b}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async) 1.004110673s ago: executing program 4 (id=3802): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000580)=ANY=[@ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000100000000000000"], 0x50) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x8, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x100}, 0x94) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x224082, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="210000000900000003000000cd04c2542198614bd9ab2384702939ee965242f0ac6f5fc5582d763a98e7c60f7938e308e1f70c6519271c3f3efcb8c855819907bfefb132ed53adfa5a5d5215e90058e2b2938b6dfd6174467aace47d64c4465c499862d2b3d0cdc8f8ad17f39ac2f12aa28d49a2196757cea1a159e36c1bcc", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x3, r6}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) (async) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001ce00200142603600e12080005007a010401a800160020001e4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 927.294067ms ago: executing program 1 (id=3803): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e1075"], 0xfdef) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x76341, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) close(0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfa019fe45d308098ee68888a8", 0x0, 0x8200aded, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) close(r0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400c410000002000149215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xffffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001080)={r8, &(0x7f0000001000), 0x0}, 0x20) 847.877761ms ago: executing program 2 (id=3804): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000007be6a636373ebc4575000000000000b9f63ec6ee06645d00ef02f82ef78f7a7468522ae5ca0488f800876b352a03c402320177722f749f7383371a185d298d912351b2ddc9a1676991830343135cbe11e9b72ea4ebc405a32a4fea8a7afa0b1ab6b8db9888645b0c00000014010910e29ca97743cda5d88400"/136, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9d}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) sendmsg$kcm(r0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0xfffffd10}, 0x24000014) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x5, &(0x7f0000000040), 0x4) syz_open_procfs$namespace(0x0, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff0000000000", @ANYRES32], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700760409"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r3, 0x107, 0x5, &(0x7f00000000c0), 0x18) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0xa40, 0x0, 0x0, 0x8, 0x1, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="3800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x24, 0x0, 0x6, &(0x7f0000000180)) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, &(0x7f0000000100), 0x120) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x8, @remote, 0x80080000, 0x4}, 0x80, 0x0}, 0x24044051) 726.566756ms ago: executing program 4 (id=3805): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r3, 0x0, 0x32600) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 525.168946ms ago: executing program 0 (id=3806): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x208, 0x0, 0x3ffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r0, 0x20, &(0x7f0000000200)={&(0x7f0000000140)=""/38, 0x26, 0x0, &(0x7f0000000180)=""/92, 0x5c}}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 0s ago: executing program 3 (id=3807): socket$kcm(0x23, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d"], 0x0, 0x5a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) kernel console output (not intermixed with test programs): ? netlink_rcv_skb+0x194/0x440 [ 806.663847][T14985] netlink_rcv_skb+0x1ef/0x440 [ 806.668669][T14985] ? genl_bind+0x360/0x360 [ 806.673130][T14985] ? netlink_ack+0x1160/0x1160 [ 806.677952][T14985] ? down_read+0x1a8/0x2d0 [ 806.682410][T14985] genl_rcv+0x24/0x40 [ 806.686435][T14985] netlink_unicast+0x7ad/0x920 [ 806.691259][T14985] netlink_sendmsg+0x8ad/0xbd0 [ 806.696061][T14985] ? netlink_getsockopt+0x550/0x550 [ 806.701293][T14985] ? apparmor_socket_sendmsg+0x8a/0x330 [ 806.706882][T14985] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 806.712206][T14985] ? security_socket_sendmsg+0x7c/0xa0 [ 806.717715][T14985] ? netlink_getsockopt+0x550/0x550 [ 806.722952][T14985] ____sys_sendmsg+0x5ed/0x9a0 [ 806.727775][T14985] ? __sys_sendmsg_sock+0x30/0x30 [ 806.732873][T14985] ? __import_iovec+0x306/0x510 [ 806.737780][T14985] ? import_iovec+0x6f/0xa0 [ 806.742331][T14985] ___sys_sendmsg+0x2a2/0x360 [ 806.747060][T14985] ? __sys_sendmsg+0x2a0/0x2a0 [ 806.751960][T14985] __se_sys_sendmsg+0x1c3/0x2b0 [ 806.756856][T14985] ? __x64_sys_sendmsg+0x80/0x80 [ 806.761850][T14985] ? lockdep_hardirqs_on+0x94/0x140 [ 806.767089][T14985] do_syscall_64+0x4c/0xa0 [ 806.771552][T14985] ? clear_bhb_loop+0x60/0xb0 [ 806.776272][T14985] ? clear_bhb_loop+0x60/0xb0 [ 806.780990][T14985] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 806.786926][T14985] RIP: 0033:0x7fa78d79e159 [ 806.791388][T14985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.811024][T14985] RSP: 002b:00007fa78e6e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 806.819482][T14985] RAX: ffffffffffffffda RBX: 00007fa78da25fa0 RCX: 00007fa78d79e159 [ 806.827489][T14985] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 806.835497][T14985] RBP: 00007fa78d83503b R08: 0000000000000000 R09: 0000000000000000 [ 806.843504][T14985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.851510][T14985] R13: 00007fa78da26038 R14: 00007fa78da25fa0 R15: 00007fff7be8e2d8 [ 806.859542][T14985] [ 807.035974][T15015] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2547'. [ 807.315392][T15023] netlink: 'syz.2.2551': attribute type 3 has an invalid length. [ 807.336332][T15023] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.2551'. [ 808.621831][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.628974][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.402658][T15057] netlink: 'syz.0.2558': attribute type 11 has an invalid length. [ 814.433704][T15057] netlink: 'syz.0.2558': attribute type 2 has an invalid length. [ 814.456837][T15057] netlink: 126196 bytes leftover after parsing attributes in process `syz.0.2558'. [ 817.143742][T15091] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2567'. [ 817.208772][T15091] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 817.250481][T15091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 817.357374][T15097] device ipvlan1 left promiscuous mode [ 817.405322][T15105] netlink: 'syz.0.2568': attribute type 10 has an invalid length. [ 817.435468][T15105] device nlmon0 entered promiscuous mode [ 817.476435][T15105] team0: Device nlmon0 is of different type [ 818.014293][T15122] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2573'. [ 818.332393][T15132] netlink: 'syz.1.2575': attribute type 11 has an invalid length. [ 818.396776][T15132] netlink: 192312 bytes leftover after parsing attributes in process `syz.1.2575'. [ 818.574088][T15130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 819.926724][T15158] netlink: 'syz.4.2585': attribute type 7 has an invalid length. [ 820.763955][T15201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2594'. [ 822.754061][T15194] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2591'. [ 822.765915][T15201] netlink: 'syz.4.2594': attribute type 12 has an invalid length. [ 822.773936][T15201] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2594'. [ 822.928415][T15210] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.2598'. [ 823.329496][T15219] device syzkaller0 entered promiscuous mode [ 827.296755][T15261] netlink: 'syz.4.2608': attribute type 27 has an invalid length. [ 827.304751][T15261] netlink: 'syz.4.2608': attribute type 3 has an invalid length. [ 827.390368][T15263] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2609'. [ 828.755466][T15237] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2606'. [ 828.770047][T15263] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2609'. [ 829.030719][T15278] netlink: 'syz.2.2612': attribute type 3 has an invalid length. [ 829.058098][T15278] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2612'. [ 829.145205][T15280] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2614'. [ 829.263449][T15289] netlink: 'syz.4.2615': attribute type 21 has an invalid length. [ 829.426395][T15294] netlink: 'syz.0.2616': attribute type 13 has an invalid length. [ 829.438208][T15294] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2616'. [ 829.927003][T15303] netlink: 'syz.3.2618': attribute type 10 has an invalid length. [ 830.104712][T15303] team0: Device wg1 is of different type [ 830.263801][T15308] netlink: 'syz.2.2619': attribute type 7 has an invalid length. [ 830.533990][T15324] netlink: 'syz.0.2622': attribute type 4 has an invalid length. [ 830.549208][T15324] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2622'. [ 831.323614][T15351] netlink: 'syz.1.2632': attribute type 2 has an invalid length. [ 831.366068][T15351] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2632'. [ 831.449933][T15351] netlink: 'syz.1.2632': attribute type 2 has an invalid length. [ 831.462039][T15351] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2632'. [ 831.483656][T15351] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2632'. [ 831.643578][T15359] openvswitch: netlink: Message has 6 unknown bytes. [ 832.446474][T15397] validate_nla: 31 callbacks suppressed [ 832.446492][T15397] netlink: 'syz.2.2642': attribute type 9 has an invalid length. [ 832.548147][T15397] __nla_validate_parse: 31 callbacks suppressed [ 832.548164][T15397] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2642'. [ 833.014635][T15381] netlink: 39187 bytes leftover after parsing attributes in process `syz.3.2640'. [ 833.581248][T15422] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2648'. [ 834.117590][T15449] netlink: 'syz.3.2654': attribute type 21 has an invalid length. [ 834.125482][T15449] netlink: 'syz.3.2654': attribute type 1 has an invalid length. [ 834.157010][T15449] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2654'. [ 835.012131][T15478] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2659'. [ 835.262990][T15481] netlink: 'syz.0.2660': attribute type 2 has an invalid length. [ 835.325076][T15481] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2660'. [ 835.993335][T15506] netlink: 'syz.0.2666': attribute type 3 has an invalid length. [ 836.012303][T15506] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2666'. [ 836.062317][T15515] netlink: 'syz.1.2668': attribute type 17 has an invalid length. [ 836.081476][T15515] netlink: 'syz.1.2668': attribute type 16 has an invalid length. [ 836.086017][T15513] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2667'. [ 836.104669][T15515] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2668'. [ 836.127255][T15513] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 836.387383][T15520] netlink: 126288 bytes leftover after parsing attributes in process `syz.0.2669'. [ 837.166054][T15549] netlink: 'syz.1.2674': attribute type 25 has an invalid length. [ 837.178608][T15549] netlink: 'syz.1.2674': attribute type 28 has an invalid length. [ 837.655595][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 839.361003][T15606] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.2687'. [ 840.467012][T15612] netlink: 'syz.1.2689': attribute type 8 has an invalid length. [ 840.474816][T15612] netlink: 77328 bytes leftover after parsing attributes in process `syz.1.2689'. [ 842.370683][T15662] netlink: 'syz.4.2701': attribute type 2 has an invalid length. [ 842.391611][T15663] netlink: 'syz.0.2702': attribute type 5 has an invalid length. [ 842.409583][T15663] netlink: 'syz.0.2702': attribute type 10 has an invalid length. [ 842.423255][T15662] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2701'. [ 842.436522][T15663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2702'. [ 842.461729][T15663] device team0 left promiscuous mode [ 842.470400][T15663] device team_slave_0 left promiscuous mode [ 842.477888][T15663] device team_slave_1 left promiscuous mode [ 842.479400][T15668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2704'. [ 842.494190][T15663] device geneve1 left promiscuous mode [ 842.509991][T15663] device hsr_slave_0 left promiscuous mode [ 842.531475][T15663] : port 1(team0) entered disabled state [ 842.575261][T15663] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 843.090887][T15690] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 843.307030][T15692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 843.314317][T15692] IPv6: NLM_F_CREATE should be set when creating new route [ 843.321653][T15692] IPv6: NLM_F_CREATE should be set when creating new route [ 843.328931][T15692] IPv6: NLM_F_CREATE should be set when creating new route [ 843.386683][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 843.412961][T15692] device syzkaller0 entered promiscuous mode [ 843.703077][T15726] tap0: tun_chr_ioctl cmd 35108 [ 844.416711][T15753] netlink: 'syz.1.2726': attribute type 13 has an invalid length. [ 844.529132][T15753] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.2726'. [ 845.109352][T15781] netlink: 192156 bytes leftover after parsing attributes in process `syz.1.2733'. [ 845.165956][T15781] netlink: zone id is out of range [ 845.171435][T15781] netlink: zone id is out of range [ 845.494087][T15806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2737'. [ 845.507204][T15807] netlink: 'syz.1.2737': attribute type 9 has an invalid length. [ 845.515128][T15807] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2737'. [ 845.536921][T15808] netlink: 'syz.3.2736': attribute type 2 has an invalid length. [ 845.544668][T15808] netlink: 16162 bytes leftover after parsing attributes in process `syz.3.2736'. [ 845.625212][T15814] netlink: 16399 bytes leftover after parsing attributes in process `syz.4.2739'. [ 847.395316][T15866] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2756'. [ 847.437505][T15866] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 847.582032][T15866] CPU: 0 PID: 15866 Comm: syz.1.2756 Not tainted syzkaller #0 [ 847.589567][T15866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.599653][T15866] Call Trace: [ 847.602954][T15866] [ 847.605914][T15866] dump_stack_lvl+0x188/0x24e [ 847.610639][T15866] ? show_regs_print_info+0x12/0x12 [ 847.615882][T15866] ? load_image+0x410/0x410 [ 847.620431][T15866] sysfs_warn_dup+0x8a/0xa0 [ 847.624975][T15866] sysfs_do_create_link_sd+0xc0/0x110 [ 847.630393][T15866] device_add+0x83b/0x1050 [ 847.635027][T15866] wiphy_register+0x1d8b/0x2aa0 [ 847.639944][T15866] ? cfg80211_event_work+0x40/0x40 [ 847.645102][T15866] ? minstrel_ht_alloc+0x894/0xa20 [ 847.650262][T15866] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 847.656386][T15866] ieee80211_register_hw+0x2d48/0x39f0 [ 847.661900][T15866] ? ieee80211_register_hw+0xee1/0x39f0 [ 847.667484][T15866] ? ieee80211_register_hw+0xee1/0x39f0 [ 847.673161][T15866] ? ieee80211_tasklet_handler+0x20/0x20 [ 847.678830][T15866] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 847.684741][T15866] ? __debug_object_init+0xed/0x440 [ 847.689950][T15866] ? memset+0x1e/0x40 [ 847.693940][T15866] ? __hrtimer_init+0x189/0x270 [ 847.698799][T15866] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 847.704534][T15866] ? memcpy+0x3c/0x60 [ 847.708522][T15866] hwsim_new_radio_nl+0xab7/0xc90 [ 847.713567][T15866] genl_family_rcv_msg_doit+0x22f/0x350 [ 847.719125][T15866] ? end_current_label_crit_section+0x170/0x170 [ 847.725382][T15866] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 847.731291][T15866] ? bpf_lsm_capable+0x5/0x10 [ 847.735973][T15866] ? security_capable+0x85/0xb0 [ 847.740840][T15866] genl_rcv_msg+0x601/0x790 [ 847.745345][T15866] ? lock_chain_count+0x20/0x20 [ 847.750207][T15866] ? genl_bind+0x360/0x360 [ 847.754626][T15866] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 847.760983][T15866] netlink_rcv_skb+0x1ef/0x440 [ 847.765790][T15866] ? genl_bind+0x360/0x360 [ 847.770214][T15866] ? netlink_ack+0x1160/0x1160 [ 847.775006][T15866] ? down_read+0x1a8/0x2d0 [ 847.779425][T15866] genl_rcv+0x24/0x40 [ 847.783412][T15866] netlink_unicast+0x7ad/0x920 [ 847.788206][T15866] netlink_sendmsg+0x8ad/0xbd0 [ 847.792981][T15866] ? netlink_getsockopt+0x550/0x550 [ 847.798208][T15866] ? apparmor_socket_sendmsg+0x8a/0x330 [ 847.803793][T15866] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 847.809082][T15866] ? security_socket_sendmsg+0x7c/0xa0 [ 847.814546][T15866] ? netlink_getsockopt+0x550/0x550 [ 847.819749][T15866] ____sys_sendmsg+0x5ed/0x9a0 [ 847.824538][T15866] ? __sys_sendmsg_sock+0x30/0x30 [ 847.829657][T15866] ? __import_iovec+0x306/0x510 [ 847.834522][T15866] ? import_iovec+0x6f/0xa0 [ 847.839034][T15866] ___sys_sendmsg+0x2a2/0x360 [ 847.843753][T15866] ? __sys_sendmsg+0x2a0/0x2a0 [ 847.848542][T15866] ? trace_call_bpf+0xbf/0x6b0 [ 847.853334][T15866] __se_sys_sendmsg+0x1c3/0x2b0 [ 847.858212][T15866] ? perf_trace_preemptirq_template+0x268/0x320 [ 847.864498][T15866] ? __x64_sys_sendmsg+0x80/0x80 [ 847.869479][T15866] ? lockdep_hardirqs_on+0x94/0x140 [ 847.874700][T15866] do_syscall_64+0x4c/0xa0 [ 847.879123][T15866] ? clear_bhb_loop+0x60/0xb0 [ 847.883806][T15866] ? clear_bhb_loop+0x60/0xb0 [ 847.888495][T15866] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 847.894417][T15866] RIP: 0033:0x7f453499e159 [ 847.898837][T15866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.918476][T15866] RSP: 002b:00007f4535891028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 847.926913][T15866] RAX: ffffffffffffffda RBX: 00007f4534c26090 RCX: 00007f453499e159 [ 847.934889][T15866] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 847.942860][T15866] RBP: 00007f4534a3503b R08: 0000000000000000 R09: 0000000000000000 [ 847.950844][T15866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.958821][T15866] R13: 00007f4534c26128 R14: 00007f4534c26090 R15: 00007ffc02b07128 [ 847.966809][T15866] [ 848.335017][T15877] netlink: 'syz.0.2758': attribute type 1 has an invalid length. [ 848.421834][T15877] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2758'. [ 848.769967][T15893] netlink: 'syz.0.2764': attribute type 10 has an invalid length. [ 848.865464][T15897] netlink: 'syz.0.2764': attribute type 17 has an invalid length. [ 848.887770][T15897] netlink: 'syz.0.2764': attribute type 16 has an invalid length. [ 848.897679][T15897] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2764'. [ 849.838116][T15946] netlink: 'syz.2.2774': attribute type 5 has an invalid length. [ 849.858181][T15953] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2776'. [ 850.111063][T15966] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2777'. [ 850.132515][T15966] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 850.145693][T15966] CPU: 1 PID: 15966 Comm: syz.3.2777 Not tainted syzkaller #0 [ 850.153213][T15966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 850.163295][T15966] Call Trace: [ 850.166597][T15966] [ 850.169550][T15966] dump_stack_lvl+0x188/0x24e [ 850.174271][T15966] ? show_regs_print_info+0x12/0x12 [ 850.179509][T15966] ? load_image+0x410/0x410 [ 850.184059][T15966] sysfs_warn_dup+0x8a/0xa0 [ 850.188600][T15966] sysfs_do_create_link_sd+0xc0/0x110 [ 850.194013][T15966] device_add+0x83b/0x1050 [ 850.198464][T15966] wiphy_register+0x1d8b/0x2aa0 [ 850.203360][T15966] ? cfg80211_event_work+0x40/0x40 [ 850.208489][T15966] ? minstrel_ht_alloc+0x894/0xa20 [ 850.213634][T15966] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 850.219742][T15966] ieee80211_register_hw+0x2d48/0x39f0 [ 850.226236][T15966] ? ieee80211_register_hw+0xee1/0x39f0 [ 850.232303][T15966] ? ieee80211_register_hw+0xee1/0x39f0 [ 850.237889][T15966] ? ieee80211_tasklet_handler+0x20/0x20 [ 850.243549][T15966] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 850.249476][T15966] ? __debug_object_init+0xed/0x440 [ 850.254693][T15966] ? memset+0x1e/0x40 [ 850.258776][T15966] ? __hrtimer_init+0x189/0x270 [ 850.263639][T15966] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 850.269392][T15966] ? memcpy+0x3c/0x60 [ 850.273391][T15966] hwsim_new_radio_nl+0xab7/0xc90 [ 850.278451][T15966] genl_family_rcv_msg_doit+0x22f/0x350 [ 850.284012][T15966] ? end_current_label_crit_section+0x170/0x170 [ 850.290283][T15966] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 850.296300][T15966] ? bpf_lsm_capable+0x5/0x10 [ 850.300997][T15966] ? security_capable+0x85/0xb0 [ 850.305880][T15966] genl_rcv_msg+0x601/0x790 [ 850.310400][T15966] ? lock_chain_count+0x20/0x20 [ 850.315277][T15966] ? genl_bind+0x360/0x360 [ 850.319704][T15966] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 850.326072][T15966] netlink_rcv_skb+0x1ef/0x440 [ 850.330863][T15966] ? genl_bind+0x360/0x360 [ 850.335295][T15966] ? netlink_ack+0x1160/0x1160 [ 850.340088][T15966] ? down_read+0x1a8/0x2d0 [ 850.344516][T15966] genl_rcv+0x24/0x40 [ 850.348506][T15966] netlink_unicast+0x7ad/0x920 [ 850.353300][T15966] netlink_sendmsg+0x8ad/0xbd0 [ 850.358082][T15966] ? netlink_getsockopt+0x550/0x550 [ 850.363381][T15966] ? apparmor_socket_sendmsg+0x8a/0x330 [ 850.368959][T15966] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 850.374343][T15966] ? security_socket_sendmsg+0x7c/0xa0 [ 850.379826][T15966] ? netlink_getsockopt+0x550/0x550 [ 850.385044][T15966] ____sys_sendmsg+0x5ed/0x9a0 [ 850.389930][T15966] ? __sys_sendmsg_sock+0x30/0x30 [ 850.394974][T15966] ? __import_iovec+0x306/0x510 [ 850.399851][T15966] ? import_iovec+0x6f/0xa0 [ 850.404378][T15966] ___sys_sendmsg+0x2a2/0x360 [ 850.409089][T15966] ? __sys_sendmsg+0x2a0/0x2a0 [ 850.413917][T15966] __se_sys_sendmsg+0x1c3/0x2b0 [ 850.418958][T15966] ? ct_nmi_exit+0x145/0x1c0 [ 850.423565][T15966] ? __x64_sys_sendmsg+0x80/0x80 [ 850.428538][T15966] ? lockdep_hardirqs_on+0x94/0x140 [ 850.433758][T15966] do_syscall_64+0x4c/0xa0 [ 850.438197][T15966] ? clear_bhb_loop+0x60/0xb0 [ 850.442898][T15966] ? clear_bhb_loop+0x60/0xb0 [ 850.447604][T15966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 850.453518][T15966] RIP: 0033:0x7f818a19e159 [ 850.457941][T15966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.477592][T15966] RSP: 002b:00007f818b0d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.486028][T15966] RAX: ffffffffffffffda RBX: 00007f818a426090 RCX: 00007f818a19e159 [ 850.494012][T15966] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 850.501995][T15966] RBP: 00007f818a23503b R08: 0000000000000000 R09: 0000000000000000 [ 850.509978][T15966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.517993][T15966] R13: 00007f818a426128 R14: 00007f818a426090 R15: 00007ffc513c0008 [ 850.525993][T15966] [ 850.772067][T15971] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2779'. [ 850.821159][T15971] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 850.863982][T15971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 850.946111][T15972] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2779'. [ 851.219859][T15993] netlink: 'syz.4.2783': attribute type 2 has an invalid length. [ 851.247047][T15993] netlink: 'syz.4.2783': attribute type 1 has an invalid length. [ 851.302097][T15993] netlink: 'syz.4.2783': attribute type 21 has an invalid length. [ 851.334106][T15993] netlink: 'syz.4.2783': attribute type 4 has an invalid length. [ 851.381674][T15993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2783'. [ 851.694506][T16013] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2787'. [ 852.194665][T16024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2791'. [ 852.273219][T16024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2791'. [ 852.333937][T16024] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2791'. [ 852.979974][T16040] netlink: 'syz.3.2796': attribute type 16 has an invalid length. [ 853.016024][T16040] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2796'. [ 853.649595][T16060] netlink: 'syz.1.2800': attribute type 15 has an invalid length. [ 853.777838][T16066] netlink: 'syz.2.2802': attribute type 29 has an invalid length. [ 853.799074][T16066] netlink: 'syz.2.2802': attribute type 29 has an invalid length. [ 853.846294][T16063] netlink: 'syz.2.2802': attribute type 29 has an invalid length. [ 853.967163][T16072] device lo left promiscuous mode [ 854.038422][T16072] Q6`Ҙ: renamed from lo [ 854.909638][T16097] netlink: 'syz.1.2810': attribute type 27 has an invalid length. [ 854.924681][T16097] __nla_validate_parse: 1 callbacks suppressed [ 854.924718][T16097] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2810'. [ 856.268950][T16135] validate_nla: 3 callbacks suppressed [ 856.268967][T16135] netlink: 'syz.2.2819': attribute type 25 has an invalid length. [ 856.303684][T16135] netlink: 'syz.2.2819': attribute type 28 has an invalid length. [ 856.464181][T16145] netlink: 'syz.4.2820': attribute type 10 has an invalid length. [ 856.511930][T16145] device veth0_macvtap left promiscuous mode [ 856.699211][T16154] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.2824'. [ 857.088973][T16168] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2829'. [ 857.116019][T16165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2827'. [ 858.189855][T16188] netlink: 'syz.4.2835': attribute type 10 has an invalid length. [ 858.208371][T16188] device macvlan0 left promiscuous mode [ 858.235390][T16193] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2836'. [ 858.530700][T16207] netlink: 'syz.4.2840': attribute type 6 has an invalid length. [ 858.839937][T16217] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2843'. [ 858.880267][T16217] device syzkaller0 entered promiscuous mode [ 858.967289][T16214] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 859.499626][T16234] netlink: 'syz.4.2848': attribute type 29 has an invalid length. [ 859.528710][T16234] netlink: 'syz.4.2848': attribute type 29 has an invalid length. [ 859.819151][T16246] netlink: 'syz.4.2848': attribute type 29 has an invalid length. [ 859.963996][T16248] : port 1(team0) entered blocking state [ 859.974239][T16248] : port 1(team0) entered disabled state [ 859.998507][T16248] device team0 entered promiscuous mode [ 860.004295][T16248] device team_slave_1 entered promiscuous mode [ 860.013676][T16248] device geneve1 entered promiscuous mode [ 860.020641][T16248] device bridge0 entered promiscuous mode [ 860.042791][T16253] device team0 left promiscuous mode [ 860.048477][T16253] device team_slave_1 left promiscuous mode [ 860.054586][T16253] device geneve1 left promiscuous mode [ 860.060908][T16253] device bridge0 left promiscuous mode [ 860.069010][T16253] : port 1(team0) entered disabled state [ 860.133936][T16252] netlink: 'syz.2.2853': attribute type 10 has an invalid length. [ 860.179822][T16255] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2854'. [ 860.688369][T16266] netlink: 'syz.1.2857': attribute type 29 has an invalid length. [ 861.391702][T16305] validate_nla: 2 callbacks suppressed [ 861.391723][T16305] netlink: 'syz.1.2868': attribute type 10 has an invalid length. [ 861.431354][T16305] team0: Device hsr_slave_0 failed to register rx_handler [ 862.117780][T16332] netlink: 'syz.3.2873': attribute type 2 has an invalid length. [ 862.161352][T16332] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2873'. [ 862.419570][T16321] delete_channel: no stack [ 863.090802][T16351] netlink: 'syz.4.2878': attribute type 21 has an invalid length. [ 863.102276][T16351] netlink: 'syz.4.2878': attribute type 22 has an invalid length. [ 863.111254][T16351] netlink: 'syz.4.2878': attribute type 13 has an invalid length. [ 863.119624][T16351] netlink: 6188 bytes leftover after parsing attributes in process `syz.4.2878'. [ 863.571725][T16365] netlink: 'syz.2.2885': attribute type 29 has an invalid length. [ 863.596873][T16365] netlink: 'syz.2.2885': attribute type 29 has an invalid length. [ 867.230676][T16404] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2896'. [ 867.245956][T16404] netlink: 'syz.1.2896': attribute type 11 has an invalid length. [ 867.254037][T16404] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2896'. [ 867.937906][T16403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 867.960783][T16416] netlink: 8964 bytes leftover after parsing attributes in process `syz.3.2899'. [ 868.238515][T16422] netlink: 'syz.1.2902': attribute type 46 has an invalid length. [ 868.405948][T16440] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2903'. [ 868.425152][T16440] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 868.683661][T16456] delete_channel: no stack [ 868.707836][T16456] delete_channel: no stack [ 868.737145][T16461] netlink: 'syz.4.2906': attribute type 19 has an invalid length. [ 868.755304][T16461] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.2906'. [ 870.059791][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.066390][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.591359][T16476] netlink: 'syz.0.2910': attribute type 1 has an invalid length. [ 870.825364][T16489] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2914'. [ 871.019415][T16495] netlink: 'syz.0.2916': attribute type 21 has an invalid length. [ 871.085490][T16497] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.2917'. [ 871.150839][T16497] netlink: zone id is out of range [ 871.256549][T16497] netlink: zone id is out of range [ 871.274198][T16497] netlink: zone id is out of range [ 871.285816][T16497] netlink: zone id is out of range [ 871.303165][T16497] netlink: get zone limit has 8 unknown bytes [ 871.621231][T16514] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.2921'. [ 871.665415][T16514] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2921'. [ 871.844034][T16518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 871.864359][T16517] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2922'. [ 871.875412][T16518] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 871.886165][T16517] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 871.893590][T16518] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 871.932540][T16517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.951611][T16518] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 871.970561][T16518] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 871.978103][T16518] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 872.283118][T16525] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2923'. [ 872.293143][T16525] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 872.312870][T16525] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2923'. [ 872.323285][T16525] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 872.384926][ T5578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.504563][T16515] chnl_net:caif_netlink_parms(): no params data found [ 872.581271][ T5578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.071356][T16518] Bluetooth: hci5: command 0x0409 tx timeout [ 875.340534][T16572] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2935'. [ 875.378119][ T5578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.510081][ T5578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.623063][T16593] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2936'. [ 875.632786][T16593] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 875.675130][T16515] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.682795][T16515] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.691411][T16515] device bridge_slave_0 entered promiscuous mode [ 875.701229][T16515] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.708982][T16515] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.717545][T16515] device bridge_slave_1 entered promiscuous mode [ 875.746954][T16515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.759773][T16515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.795292][T16515] team0: Port device team_slave_0 added [ 875.804136][T16515] team0: Port device team_slave_1 added [ 875.888056][T16515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.919650][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.032035][T16515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 876.091676][T16515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.112969][T16515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.152547][T16515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.242145][T16601] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2939'. [ 876.257427][T16518] Bluetooth: hci5: command 0x041b tx timeout [ 877.133921][T16515] device hsr_slave_0 entered promiscuous mode [ 877.145147][T16515] device hsr_slave_1 entered promiscuous mode [ 877.152523][T16515] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 877.163345][T16515] Cannot create hsr debugfs directory [ 877.178574][T16608] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2940'. [ 877.432885][T16620] netlink: 'syz.4.2941': attribute type 4 has an invalid length. [ 877.551433][ T5578] device .*! left promiscuous mode [ 877.604143][T16625] netlink: 'syz.0.2944': attribute type 21 has an invalid length. [ 877.709676][ T5578] tipc: Left network mode [ 877.715033][T16631] netlink: 'syz.3.2945': attribute type 29 has an invalid length. [ 877.732311][T16629] netlink: 'syz.3.2945': attribute type 29 has an invalid length. [ 877.750923][T16631] netlink: 'syz.3.2945': attribute type 29 has an invalid length. [ 877.782046][T16632] netlink: 'syz.3.2945': attribute type 29 has an invalid length. [ 878.295973][ T49] Bluetooth: hci5: command 0x040f tx timeout [ 878.897537][T16659] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2951'. [ 879.057746][T16664] netlink: 'syz.1.2951': attribute type 10 has an invalid length. [ 879.126551][T16664] IPv6: ADDRCONF(NETDEV_CHANGE): Q6`Ҙ: link becomes ready [ 879.176196][T16664] team0: Device Q6`Ҙ is loopback device. Loopback devices can't be added as a team port [ 879.362208][T16515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 879.508306][T16669] netlink: 'syz.3.2953': attribute type 3 has an invalid length. [ 879.528285][T16669] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2953'. [ 879.569318][T16515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 879.608324][T16515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 879.639216][T16669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2953'. [ 879.668174][T16670] netlink: 'syz.3.2953': attribute type 10 has an invalid length. [ 879.678923][T16670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2953'. [ 879.703234][T16670] device team0 entered promiscuous mode [ 879.709076][T16670] device team_slave_1 entered promiscuous mode [ 879.717980][T16670] device bridge0 entered promiscuous mode [ 879.725084][T16670] 8021q: adding VLAN 0 to HW filter on device team0 [ 879.732647][T16670] bridge0: port 3(team0) entered blocking state [ 879.739386][T16670] bridge0: port 3(team0) entered disabled state [ 879.748846][T16670] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 879.795825][T16515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 879.834776][T16679] netlink: 'syz.0.2955': attribute type 15 has an invalid length. [ 879.992357][T16687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2957'. [ 880.016548][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2957'. [ 880.194423][ T5578] device wlan1 left promiscuous mode [ 880.217326][ T5578] team0: Port device wlan1 removed [ 880.385922][ T49] Bluetooth: hci5: command 0x0419 tx timeout [ 881.334567][T16715] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2962'. [ 881.600644][ T5578] device team0 left promiscuous mode [ 881.607642][ T5578] device team_slave_1 left promiscuous mode [ 881.630141][ T5578] device bridge0 left promiscuous mode [ 881.646882][ T5578] device geneve1 left promiscuous mode [ 881.666925][ T5578] : port 1(team0) entered disabled state [ 881.702048][ T5578] device bridge_slave_0 left promiscuous mode [ 881.711536][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.771357][ T5578] device veth1_macvtap left promiscuous mode [ 881.779643][ T5578] device veth0_macvtap left promiscuous mode [ 881.950912][ T5578] team0 (unregistering): Port device geneve1 removed [ 882.374897][T16746] netlink: 126612 bytes leftover after parsing attributes in process `syz.0.2969'. [ 882.396274][T16746] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2969'. [ 882.673780][ T5578] team0 (unregistering): Port device team_slave_1 removed [ 883.149268][ T5578] team0 (unregistering): Port device bridge0 removed [ 883.266299][T16515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.292463][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 883.300628][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 883.311918][T16515] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.323877][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 883.334094][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 883.365962][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.373110][ T5582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.429842][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 883.458853][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 883.484649][T16518] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 883.485085][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 883.515681][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.522871][ T5582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.532318][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 883.542956][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 883.551998][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 883.560946][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 883.604576][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 883.616969][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 883.633666][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 883.643040][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 883.652140][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 883.686562][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 883.709913][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 883.754087][T16515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 883.848644][T16761] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2974'. [ 884.387224][T16764] validate_nla: 1 callbacks suppressed [ 884.387246][T16764] netlink: 'syz.0.2975': attribute type 13 has an invalid length. [ 884.534783][T16764] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.2975'. [ 884.608492][T16766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2975'. [ 884.641207][T16772] netlink: 'syz.4.2976': attribute type 3 has an invalid length. [ 884.655800][T16772] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2976'. [ 884.688911][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 884.706020][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 884.719754][T16515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.738913][T16769] netlink: 'syz.4.2976': attribute type 2 has an invalid length. [ 884.765879][T16769] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2976'. [ 884.810456][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 884.836064][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 884.936210][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 884.950288][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 884.977978][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 885.000507][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 885.029833][T16515] device veth0_vlan entered promiscuous mode [ 885.060053][T16515] device veth1_vlan entered promiscuous mode [ 885.077402][T16781] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2979'. [ 885.100364][T16781] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2979'. [ 885.146663][T16781] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2979'. [ 885.165412][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 885.187081][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 885.207128][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 885.221676][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 885.250160][T16515] device veth0_macvtap entered promiscuous mode [ 885.265174][T16781] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2979'. [ 885.278782][T16781] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2979'. [ 885.302781][T16515] device veth1_macvtap entered promiscuous mode [ 885.313604][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 885.322067][T16795] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2982'. [ 885.332418][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 885.386578][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.417019][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.435831][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 885.461567][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.486012][T16515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.496644][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 885.537636][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 885.557228][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.595797][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.616472][T16515] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 885.636281][T16515] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 885.653956][T16515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.671617][T16515] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.691217][T16515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.703471][T16515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.722793][T16515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.746002][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 885.762713][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 885.978810][ T5551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.010575][ T5551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.043516][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 886.076006][ T5551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 886.092639][ T5551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.126103][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 887.595583][T16849] device syzkaller0 entered promiscuous mode [ 887.694618][T16854] netlink: 'syz.2.2999': attribute type 2 has an invalid length. [ 887.706449][T16854] netlink: 'syz.2.2999': attribute type 1 has an invalid length. [ 887.825015][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 887.839493][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 887.848521][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 887.860571][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 887.878892][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 887.896195][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 888.017453][ T5582] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.978386][T16518] Bluetooth: hci0: command 0x0409 tx timeout [ 890.102656][T16864] __nla_validate_parse: 31 callbacks suppressed [ 890.102680][T16864] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3002'. [ 890.125778][T16867] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3003'. [ 890.215592][ T5582] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.292370][T16878] netlink: 'syz.0.3004': attribute type 10 has an invalid length. [ 890.334787][ T5582] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.549688][T16890] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3008'. [ 890.559769][T16890] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3008'. [ 890.602620][ T5582] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.750548][T16857] chnl_net:caif_netlink_parms(): no params data found [ 890.958132][T16857] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.991273][T16900] netlink: 126612 bytes leftover after parsing attributes in process `syz.4.3010'. [ 891.004849][T16857] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.027928][T16857] device bridge_slave_0 entered promiscuous mode [ 891.076070][T16857] bridge0: port 2(bridge_slave_1) entered blocking state [ 891.084888][T16900] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3010'. [ 891.125534][T16857] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.215360][T16857] device bridge_slave_1 entered promiscuous mode [ 891.381153][T16857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.408035][T16857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.544088][T16857] team0: Port device team_slave_0 added [ 891.595806][T16857] team0: Port device team_slave_1 added [ 891.672455][T16857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.704611][T16857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.754139][T16857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.774014][T16857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.783887][T16857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 891.818317][T16857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.063925][T16518] Bluetooth: hci0: command 0x041b tx timeout [ 892.254053][T16857] device hsr_slave_0 entered promiscuous mode [ 892.262314][T16857] device hsr_slave_1 entered promiscuous mode [ 892.269832][T16857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 892.308633][T16857] Cannot create hsr debugfs directory [ 892.562078][T16936] netlink: 130181 bytes leftover after parsing attributes in process `syz.1.3015'. [ 892.928074][T16948] netlink: 'syz.1.3019': attribute type 3 has an invalid length. [ 892.949349][T16948] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3019'. [ 892.974228][T16950] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3019'. [ 894.135831][T16518] Bluetooth: hci0: command 0x040f tx timeout [ 894.607606][T16986] device syzkaller0 left promiscuous mode [ 895.137759][T16857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 895.243753][T17004] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 895.251119][T17004] IPv6: NLM_F_CREATE should be set when creating new route [ 895.258545][T17004] IPv6: NLM_F_CREATE should be set when creating new route [ 895.265901][T17004] IPv6: NLM_F_CREATE should be set when creating new route [ 895.396273][T16857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 895.651111][T16857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 895.701383][T16857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 895.866635][T17011] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.874107][T17011] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.916027][T17015] device bridge_slave_1 left promiscuous mode [ 895.922314][T17015] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.947730][T17015] device bridge_slave_0 left promiscuous mode [ 895.954173][T17015] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.225876][T16518] Bluetooth: hci0: command 0x0419 tx timeout [ 896.473153][ T5582] device bridge_slave_1 left promiscuous mode [ 896.522230][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.559758][ T5582] device bridge_slave_0 left promiscuous mode [ 896.583890][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.670518][ T5582] device veth0_macvtap left promiscuous mode [ 896.697516][ T5582] device veth1_vlan left promiscuous mode [ 897.355192][ T5582] device team_slave_1 left promiscuous mode [ 897.367960][ T5582] team0 (unregistering): Port device team_slave_1 removed [ 897.808856][ T5582] device bridge0 left promiscuous mode [ 897.823628][ T5582] team0 (unregistering): Port device bridge0 removed [ 897.982754][T17034] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3038'. [ 898.204681][T16857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.407786][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 898.437879][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 898.501211][T16857] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.564229][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 898.596902][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 898.631322][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.638528][ T9402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.776778][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 898.802484][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 898.859205][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 898.905353][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.912545][ T9402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 898.941569][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 898.955260][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 898.987888][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 899.049586][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 899.102421][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 899.165144][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 899.198484][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 899.273983][T16857] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 899.363577][T16857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 899.450044][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 899.482062][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 899.503351][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 899.527713][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 899.631265][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 899.864623][T17098] : port 1(team0) entered blocking state [ 899.898011][T17098] : port 1(team0) entered disabled state [ 899.929902][T17098] device team0 entered promiscuous mode [ 899.950989][T17098] device team_slave_0 entered promiscuous mode [ 899.973745][T17098] device team_slave_1 entered promiscuous mode [ 899.999365][T17098] device geneve1 entered promiscuous mode [ 900.021534][T17098] device hsr_slave_0 entered promiscuous mode [ 900.319968][T17126] netlink: 'syz.0.3056': attribute type 21 has an invalid length. [ 900.334356][T17126] IPv6: Can't replace route, no match found [ 900.340802][T17127] netlink: 'syz.0.3056': attribute type 21 has an invalid length. [ 900.358336][T17127] IPv6: Can't replace route, no match found [ 900.381700][T17126] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 900.396373][T17127] netlink: 'syz.0.3056': attribute type 1 has an invalid length. [ 900.414972][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 900.422773][T17126] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3056'. [ 900.423807][T17127] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.3056'. [ 900.433022][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 900.455038][T16857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.496889][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 900.517922][ T5551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 900.530886][T17126] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3056'. [ 900.612796][T17130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 900.620136][T17130] IPv6: NLM_F_CREATE should be set when creating new route [ 900.627454][T17130] IPv6: NLM_F_CREATE should be set when creating new route [ 900.634695][T17130] IPv6: NLM_F_CREATE should be set when creating new route [ 900.665166][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 900.675086][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 900.689846][T16857] device veth0_vlan entered promiscuous mode [ 900.702572][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 900.711831][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 900.732792][T16857] device veth1_vlan entered promiscuous mode [ 900.820652][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 900.833584][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 900.868678][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 900.890464][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 900.919731][T16857] device veth0_macvtap entered promiscuous mode [ 900.932033][T16857] device veth1_macvtap entered promiscuous mode [ 900.969813][T16857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 900.984463][T16857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.013311][T16857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.044400][T16857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.104833][T16857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.120814][T16857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.170820][T16857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.201124][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 901.223593][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 901.287593][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 901.341029][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 901.389770][T16857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.410223][ T4364] tipc: Subscription rejected, illegal request [ 901.421065][T16857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.468651][T16857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.526738][T16857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.559711][T16857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.606857][T16857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.687157][T16857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.696002][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 901.704806][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 901.743578][T17164] netlink: 'syz.0.3064': attribute type 10 has an invalid length. [ 901.762171][T17174] sctp: [Deprecated]: syz.4.3066 (pid 17174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 901.762171][T17174] Use struct sctp_sack_info instead [ 902.335147][T17187] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 902.367655][T17187] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3067'. [ 904.193381][ T7037] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 904.202355][T17164] device veth0_vlan left promiscuous mode [ 904.226851][T17164] device veth0_vlan entered promiscuous mode [ 904.234141][T17164] team0: Device veth0_vlan failed to register rx_handler [ 904.264527][T16857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.283631][T16857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.302302][T16857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.317004][T16857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.567774][ T5582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.615146][ T5582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.653813][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 904.679554][ T5578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.692841][ T5578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.704801][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 904.947639][ T5578] tipc: Subscription rejected, illegal request [ 904.983873][T17230] device syzkaller0 entered promiscuous mode [ 905.149294][T17230] netlink: 'syz.4.3074': attribute type 3 has an invalid length. [ 905.181815][T17230] netlink: 42732 bytes leftover after parsing attributes in process `syz.4.3074'. [ 905.214559][T17234] netlink: 'syz.3.3075': attribute type 2 has an invalid length. [ 905.243903][T17234] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3075'. [ 905.278590][T17234] netlink: 'syz.3.3075': attribute type 2 has an invalid length. [ 905.318365][T17234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3075'. [ 905.596181][T17238] netlink: 'syz.0.3077': attribute type 10 has an invalid length. [ 905.724906][T17238] device team0 left promiscuous mode [ 905.757188][T17238] device team_slave_0 left promiscuous mode [ 905.781810][T17238] device team_slave_1 left promiscuous mode [ 905.808401][T17238] device geneve1 left promiscuous mode [ 905.864334][T17238] device hsr_slave_0 left promiscuous mode [ 905.895644][T17238] : port 1(team0) entered disabled state [ 906.187816][T17238] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.196568][T17238] bond0: (slave team0): Enslaving as an active interface with an up link [ 906.209071][T17242] netlink: 'syz.3.3079': attribute type 4 has an invalid length. [ 906.263561][T16518] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 906.273913][T16518] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 906.296246][T16518] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 906.305078][T16518] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 906.314081][T16518] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 906.350824][T16518] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 906.582200][ T5551] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.744495][ T5551] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.870926][ T5551] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.206582][T17244] chnl_net:caif_netlink_parms(): no params data found [ 907.311529][T17244] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.318873][T17244] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.327404][T17244] device bridge_slave_0 entered promiscuous mode [ 907.337759][T17244] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.345410][T17244] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.361640][T17244] device bridge_slave_1 entered promiscuous mode [ 907.622293][ T5551] bond0: (slave netdevsim0): Releasing backup interface [ 907.744431][ T5551] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.947594][T17278] team0: Port device macvlan0 removed [ 907.985955][T17244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.010695][T17244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.092512][T17244] team0: Port device team_slave_0 added [ 908.136433][T17244] team0: Port device team_slave_1 added [ 908.220192][T17291] netlink: 47815 bytes leftover after parsing attributes in process `syz.0.3089'. [ 908.245553][T17244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.258404][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.334631][T17244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.375870][T16518] Bluetooth: hci1: command 0x0409 tx timeout [ 908.426826][T17244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.444100][T17244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 908.511959][T17244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.555726][T17295] netlink: 'syz.3.3091': attribute type 10 has an invalid length. [ 908.863801][T17295] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.956396][T17295] bond0: (slave team0): Enslaving as an active interface with an up link [ 909.024288][T17305] netlink: 'syz.2.3093': attribute type 2 has an invalid length. [ 909.032581][T17305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3093'. [ 909.102065][ T5551] device 0 left promiscuous mode [ 909.151347][T17244] device hsr_slave_0 entered promiscuous mode [ 909.194964][T17244] device hsr_slave_1 entered promiscuous mode [ 909.215835][T17244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.235666][T17244] Cannot create hsr debugfs directory [ 909.241267][ T5551] device 0 left promiscuous mode [ 909.395037][ T5551] tipc: Left network mode [ 910.001194][T17348] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3101'. [ 910.467213][T16518] Bluetooth: hci1: command 0x041b tx timeout [ 912.535740][T16518] Bluetooth: hci1: command 0x040f tx timeout [ 913.804820][T17381] netlink: 'syz.4.3106': attribute type 10 has an invalid length. [ 914.010534][T17400] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3109'. [ 914.064698][T17410] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3110'. [ 914.130940][T17244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 914.186880][T17244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 914.310070][T17244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 914.339523][T17244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 914.615928][T16518] Bluetooth: hci1: command 0x0419 tx timeout [ 914.722642][T17244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.893105][T17244] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.981564][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 914.994954][ T5582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 915.063344][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 915.096459][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 915.116979][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.124164][ T5579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.156988][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 915.191114][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 915.206330][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.213516][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.255417][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 915.299083][T17420] netlink: 'syz.2.3111': attribute type 10 has an invalid length. [ 915.461992][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 915.499836][T17457] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3118'. [ 915.595707][T17420] netlink: 'syz.2.3111': attribute type 10 has an invalid length. [ 915.712948][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 915.735449][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 915.771822][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 915.798005][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 915.826311][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 915.864031][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 916.084428][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 916.109167][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 916.154004][T17420] netlink: 'syz.2.3111': attribute type 10 has an invalid length. [ 916.298901][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 916.333366][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 916.362701][T17244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 916.396029][T17482] netlink: 'syz.0.3124': attribute type 1 has an invalid length. [ 916.716997][ T5551] device hsr_slave_0 left promiscuous mode [ 916.749209][ T5551] device hsr_slave_1 left promiscuous mode [ 916.759188][ T5551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.785849][ T5551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.826972][ T5551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.849684][ T5551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.878480][ T5551] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 916.920435][ T5551] batman_adv: batadv0: Removing interface: virt_wifi0 [ 916.962295][ T5551] bridge0: port 3(dummy0) entered disabled state [ 916.993873][ T5551] device bridge_slave_0 left promiscuous mode [ 917.012437][ T5551] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.115509][ T5551] device veth0_macvtap left promiscuous mode [ 918.123972][ T5551] team0 (unregistering): Port device geneve1 removed [ 918.676545][ T5551] team0 (unregistering): Port device team_slave_1 removed [ 918.804560][ T5551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.863208][ T5551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.919255][ T5551] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 919.190602][ T5551] team0 (unregistering): Port device bridge0 removed [ 919.222342][ T5551] bond0 (unregistering): Released all slaves [ 919.335919][T17494] netlink: 'syz.0.3126': attribute type 10 has an invalid length. [ 919.356105][T17508] netlink: 'syz.4.3128': attribute type 13 has an invalid length. [ 919.364098][T17508] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3128'. [ 919.423914][T17508] syz_tun: refused to change device tx_queue_len [ 919.455803][T17508] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 919.706907][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 919.721227][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 919.791541][T17244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.913111][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 919.926562][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 920.003076][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 920.020528][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 920.035946][T17522] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3132'. [ 920.064469][T17244] device veth0_vlan entered promiscuous mode [ 920.094893][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 920.122021][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 920.184669][T17244] device veth1_vlan entered promiscuous mode [ 920.252441][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 920.273547][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 920.312830][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 920.339562][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 920.358970][T17244] device veth0_macvtap entered promiscuous mode [ 920.468328][T17541] netlink: 'syz.3.3136': attribute type 27 has an invalid length. [ 920.499021][T17541] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.3136'. [ 920.533179][T17244] device veth1_macvtap entered promiscuous mode [ 921.810432][T17558] netlink: 'syz.2.3141': attribute type 11 has an invalid length. [ 921.847971][T17558] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.3141'. [ 925.330863][T17595] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 925.392099][T17595] device syzkaller0 entered promiscuous mode [ 925.454990][T17244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.483959][T17244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.518866][T17244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.553604][T17244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.580768][T17244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 925.608155][T17244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 925.641884][T17244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 925.951822][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 925.989988][ T4364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 926.080931][T17244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.122792][T17244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.133877][T17244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.145388][T17244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.170304][T17244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 926.187695][T17244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 926.205494][T17244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.234649][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 926.254216][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 926.303645][T17244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.333034][T17244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.343140][T17244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.364617][T17244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 926.539056][T17631] netlink: 'syz.4.3158': attribute type 15 has an invalid length. [ 926.576939][T17631] netlink: 'syz.4.3158': attribute type 7 has an invalid length. [ 926.671883][T17649] netlink: 'syz.0.3160': attribute type 21 has an invalid length. [ 926.691288][T17649] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3160'. [ 926.784508][T17649] bond0: (slave bridge_slave_1): Error: Slave has XDP program loaded, please unload before enslaving [ 926.901460][T17649] netlink: 'syz.0.3160': attribute type 10 has an invalid length. [ 926.931990][ T5564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 926.948857][ T5564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.258283][T17682] netlink: 'syz.4.3168': attribute type 4 has an invalid length. [ 928.268572][T17682] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3168'. [ 931.509681][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.516164][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.771284][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 931.821448][T17706] netlink: 'syz.0.3174': attribute type 39 has an invalid length. [ 931.833715][T17715] netlink: 'syz.4.3175': attribute type 21 has an invalid length. [ 931.841943][T17715] netlink: 'syz.4.3175': attribute type 20 has an invalid length. [ 931.902910][ T5564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.916134][ T5564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.939482][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 932.906994][T17750] device syzkaller0 entered promiscuous mode [ 933.116212][ T7037] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.131356][ T7037] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.139989][ T7037] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.148008][ T7037] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.156696][ T7037] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 933.166531][ T7037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 935.255926][ T7037] Bluetooth: hci2: command 0x0409 tx timeout [ 936.764781][ T5564] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.780435][T17778] netlink: 'syz.0.3189': attribute type 2 has an invalid length. [ 936.791928][T17778] netlink: 'syz.0.3189': attribute type 8 has an invalid length. [ 936.799931][T17778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3189'. [ 936.872594][ T5564] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.000091][ T5564] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.146721][ T5564] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.335859][ T7037] Bluetooth: hci2: command 0x041b tx timeout [ 937.414183][T17762] chnl_net:caif_netlink_parms(): no params data found [ 937.715747][T17815] device syzkaller0 entered promiscuous mode [ 938.224007][T17762] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.294022][T17762] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.317118][T17762] device bridge_slave_0 entered promiscuous mode [ 938.586484][T17762] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.593645][T17762] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.609954][T17762] device bridge_slave_1 entered promiscuous mode [ 938.624558][T17855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3202'. [ 938.836446][T17762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.953511][T17762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.065810][T17762] team0: Port device team_slave_0 added [ 939.123788][T17762] team0: Port device team_slave_1 added [ 939.215660][T17762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.223296][T17762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.249843][T17762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.317468][T17762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.328156][T17762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.355686][T17762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.425977][ T7037] Bluetooth: hci2: command 0x040f tx timeout [ 939.603989][T17762] device hsr_slave_0 entered promiscuous mode [ 939.655269][T17762] device hsr_slave_1 entered promiscuous mode [ 940.068502][T17899] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 940.105465][T17900] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3210'. [ 940.112304][T17904] netlink: 'syz.2.3209': attribute type 29 has an invalid length. [ 940.122362][T17900] : renamed from caif0 [ 940.146392][T17906] netlink: 'syz.2.3209': attribute type 29 has an invalid length. [ 940.200501][T17900] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 940.234971][T17899] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3210'. [ 940.264540][T17899] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 940.350093][T17906] netlink: 'syz.2.3209': attribute type 29 has an invalid length. [ 940.366680][T17914] netlink: 'syz.2.3209': attribute type 29 has an invalid length. [ 940.400382][T17915] netlink: 'syz.2.3209': attribute type 29 has an invalid length. [ 940.777637][T17930] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3214'. [ 941.497681][ T7037] Bluetooth: hci2: command 0x0419 tx timeout [ 943.970532][T17961] netlink: 'syz.2.3218': attribute type 39 has an invalid length. [ 943.979065][T17961] device macvlan0 entered promiscuous mode [ 944.090395][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.136127][ T5564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.156547][ T5564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.164059][ T5564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.386817][ T5564] device veth1_vlan left promiscuous mode [ 944.523298][T17983] netlink: 'syz.3.3222': attribute type 2 has an invalid length. [ 950.546363][ T5564] team0 (unregistering): Port device vlan0 removed [ 950.736731][ T5564] team0 (unregistering): Port device team_slave_1 removed [ 951.114034][T17983] device 0 entered promiscuous mode [ 951.281258][T17762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 951.326380][T17762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 951.380258][T17762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 951.427233][T17762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 951.446836][T18025] netlink: 'syz.2.3229': attribute type 10 has an invalid length. [ 951.464429][T18025] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3229'. [ 951.660472][T18035] netlink: 172 bytes leftover after parsing attributes in process `syz.3.3232'. [ 951.903462][T17762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.944245][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 951.964924][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 952.002949][T17762] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.033524][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 952.060948][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 952.095373][ T5578] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.102675][ T5578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.175530][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 952.204146][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 952.249039][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 952.285779][ T5578] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.293164][ T5578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.355123][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 952.412996][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 952.430455][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 952.474100][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 952.493346][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 952.506873][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 952.528040][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 952.547313][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 952.582271][T17762] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 952.650080][T17762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 952.669359][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 952.682142][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 952.714194][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 952.759407][T18051] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3234'. [ 953.079301][T18065] netlink: 'syz.1.3239': attribute type 27 has an invalid length. [ 953.117148][T18065] netlink: 'syz.1.3239': attribute type 4 has an invalid length. [ 953.165714][T18065] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3239'. [ 953.297002][T18065] netlink: 'syz.1.3239': attribute type 27 has an invalid length. [ 953.304899][T18065] netlink: 'syz.1.3239': attribute type 4 has an invalid length. [ 953.366072][T18065] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3239'. [ 953.723111][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 953.734057][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 953.789150][T17762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 954.755531][T18120] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3248'. [ 955.090500][T18130] netlink: 'syz.2.3249': attribute type 3 has an invalid length. [ 955.222409][T18130] netlink: 'syz.2.3249': attribute type 8 has an invalid length. [ 955.344505][T18130] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.3249'. [ 955.795852][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 955.837340][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 955.952526][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 955.965469][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 956.007429][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 956.024466][T18146] netlink: 'syz.3.3252': attribute type 29 has an invalid length. [ 956.041577][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 956.054433][T17762] device veth0_vlan entered promiscuous mode [ 956.067862][T18143] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.3251'. [ 956.096294][T18144] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.3251'. [ 956.150768][T18146] netlink: 'syz.3.3252': attribute type 29 has an invalid length. [ 956.173791][T17762] device veth1_vlan entered promiscuous mode [ 956.202131][T18154] netlink: 'syz.3.3252': attribute type 29 has an invalid length. [ 956.318058][T17762] device veth0_macvtap entered promiscuous mode [ 956.445984][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 956.456824][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 956.479325][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 956.501164][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 956.518208][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 956.545258][T17762] device veth1_macvtap entered promiscuous mode [ 956.592391][T18178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3256'. [ 956.634386][T17762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.656355][T17762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.675454][T17762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.692146][T17762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.710664][T17762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.743831][T17762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.778912][T17762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.818595][T18178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3256'. [ 956.874619][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 956.898124][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 956.928625][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 956.947871][T17762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.965771][T17762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.976166][T17762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.995865][T17762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.014885][T17762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 957.034793][T17762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 957.048427][T17762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.108806][T18178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3256'. [ 957.122077][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 957.142769][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 957.164554][T17762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.179998][T17762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.199248][T17762] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.215052][T17762] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.915238][ T5576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.942032][ T5576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.904989][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 962.916575][ T5567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.924554][ T5567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.944493][T18220] syzkaller1: tun_chr_ioctl cmd 21731 [ 962.956349][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 963.038738][T18222] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3178'. [ 963.480281][ T5578] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.509938][T18239] device wg2 entered promiscuous mode [ 963.642965][T18242] netlink: 'syz.2.3265': attribute type 10 has an invalid length. [ 964.061484][T18242] team0: Device wg1 is of different type [ 964.440187][ T7037] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 964.449146][ T7037] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 964.460900][ T4324] bond0: (slave syz_tun): Releasing backup interface [ 964.469185][ T7037] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 964.482212][ T7037] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 964.494634][ T7037] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 964.503809][ T7037] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 964.551508][T18252] device syzkaller0 entered promiscuous mode [ 966.535732][ T7037] Bluetooth: hci3: command 0x0409 tx timeout [ 968.632023][ T7037] Bluetooth: hci3: command 0x041b tx timeout [ 969.861893][ T5576] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.023961][ T5576] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.132288][T18294] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.3279'. [ 970.334037][ T5576] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.563771][ T5576] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.614590][T18255] chnl_net:caif_netlink_parms(): no params data found [ 970.696714][ T7037] Bluetooth: hci3: command 0x040f tx timeout [ 971.069390][T18318] netlink: 'syz.3.3282': attribute type 1 has an invalid length. [ 971.112751][ T5576] device 0 left promiscuous mode [ 971.207866][T18318] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.3282'. [ 971.216157][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.225420][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.255862][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.286382][T18255] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.305392][T18255] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.326248][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.334479][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.361865][T18255] device bridge_slave_0 entered promiscuous mode [ 971.451143][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.521528][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.527307][T18341] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.3285'. [ 971.553634][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.560891][T18341] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 971.572791][ T5576] device ip6gretap0 left promiscuous mode [ 971.572853][T18329] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 971.579585][ T5576] : port 1(ip6gretap0) entered disabled state [ 971.678444][T18333] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3283'. [ 971.712494][T18255] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.737527][T18255] bridge0: port 2(bridge_slave_1) entered disabled state [ 971.759006][T18255] device bridge_slave_1 entered promiscuous mode [ 971.994976][T18255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 972.095131][T18255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.306196][T18255] team0: Port device team_slave_0 added [ 972.314195][T18255] team0: Port device team_slave_1 added [ 972.552679][T18255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.629995][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.739193][T18255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.775882][T16518] Bluetooth: hci3: command 0x0419 tx timeout [ 972.827541][T18255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.839269][T18255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.902439][T18255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.013443][T18374] netlink: 'syz.2.3295': attribute type 21 has an invalid length. [ 973.073685][T18374] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.3295'. [ 973.234313][T18380] netlink: 'syz.2.3295': attribute type 7 has an invalid length. [ 973.518851][T18255] device hsr_slave_0 entered promiscuous mode [ 973.531794][T18255] device hsr_slave_1 entered promiscuous mode [ 973.569591][T18255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 973.595718][T18255] Cannot create hsr debugfs directory [ 974.332170][T18410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 974.360134][T18416] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 977.015178][ T5576] device veth1_macvtap left promiscuous mode [ 977.045726][ T5576] device veth0_macvtap left promiscuous mode [ 977.051918][ T5576] device veth1_vlan left promiscuous mode [ 977.083537][T18482] netlink: 'syz.4.3314': attribute type 2 has an invalid length. [ 977.115516][T18482] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3314'. [ 977.486116][ T5576] team0 (unregistering): Port device geneve1 removed [ 978.021802][ T5576] team0 (unregistering): Port device hsr_slave_0 removed [ 978.195307][ T5576] team0 (unregistering): Port device team_slave_1 removed [ 978.252474][ T5576] team0 (unregistering): Port device team_slave_0 removed [ 978.294959][ T5576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 978.342213][ T5576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.387581][ T5576] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 978.564132][ T5576] bond0 (unregistering): (slave team0): Releasing backup interface [ 978.600764][ T5576] bond0 (unregistering): Released all slaves [ 978.818346][T18255] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 978.850865][T18255] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 978.899328][T18255] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 978.986696][T18255] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 978.994381][T18504] netlink: 'syz.4.3319': attribute type 29 has an invalid length. [ 979.063868][T18504] netlink: 'syz.4.3319': attribute type 3 has an invalid length. [ 979.121175][T18504] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3319'. [ 979.282858][T18255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.341348][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 979.363991][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 979.395485][T18255] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.412213][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 979.429683][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 979.443734][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.450993][ T5583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.460897][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 979.507674][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 979.546661][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 979.560028][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.567279][ T5583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.624291][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 979.654249][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 979.694980][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 979.730956][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 979.742043][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 979.786079][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 979.808135][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 979.902357][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 979.921527][T18522] sctp: [Deprecated]: syz.2.3323 (pid 18522) Use of struct sctp_assoc_value in delayed_ack socket option. [ 979.921527][T18522] Use struct sctp_sack_info instead [ 979.942280][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 979.982982][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 980.035496][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 980.071163][T18255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 981.583869][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 981.602920][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 981.661685][T18255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.791805][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 981.821075][ T5564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 981.939721][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 981.966676][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 982.059970][T18255] device veth0_vlan entered promiscuous mode [ 982.103541][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 982.125485][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 982.175301][T18255] device veth1_vlan entered promiscuous mode [ 982.422498][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 982.446868][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 982.486463][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 982.506597][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 982.565030][T18255] device veth0_macvtap entered promiscuous mode [ 982.592618][T18255] device veth1_macvtap entered promiscuous mode [ 982.688419][T18255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.779904][T18255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 982.869126][T18255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 982.959882][T18255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.067555][T18255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.160656][T18255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.191319][T18586] netlink: 'syz.2.3337': attribute type 9 has an invalid length. [ 983.205262][T18586] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3337'. [ 983.281944][T18255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.377191][T18255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.464526][T18255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.486104][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 983.516305][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 983.561446][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 983.621048][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 983.653231][T18255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.684647][T18255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.724369][T18255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.779901][T18255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.800194][T18605] netlink: 'syz.2.3338': attribute type 29 has an invalid length. [ 983.828623][T18255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.858023][T18255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.881160][T18255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.900977][T18255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.918844][T18255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.934883][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 983.946437][ T5576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 983.982237][T18605] netlink: 'syz.2.3338': attribute type 29 has an invalid length. [ 984.003969][T18255] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.030821][T18255] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.044594][T18255] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.062521][T18255] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.556211][ T5600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.564237][ T5600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.613035][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 984.667446][ T5576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.675410][ T5576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.692712][ T5567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 984.738458][T18618] netlink: 'syz.4.3341': attribute type 10 has an invalid length. [ 984.944401][T18618] team0: Device wg1 is of different type [ 985.120628][T18636] netlink: 'syz.1.3344': attribute type 4 has an invalid length. [ 985.140976][T18636] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3344'. [ 985.169474][T18636] net_ratelimit: 25 callbacks suppressed [ 985.169491][T18636] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 985.420428][T18646] tap0: tun_chr_ioctl cmd 35108 [ 985.885900][T18664] netlink: 'syz.3.3349': attribute type 29 has an invalid length. [ 985.894396][T18663] netlink: 'syz.3.3349': attribute type 29 has an invalid length. [ 985.932698][T18663] netlink: 'syz.3.3349': attribute type 29 has an invalid length. [ 986.038436][T18664] netlink: 'syz.3.3349': attribute type 29 has an invalid length. [ 986.070039][T18663] netlink: 'syz.3.3349': attribute type 29 has an invalid length. [ 986.840810][T18700] IPv6: NLM_F_CREATE should be specified when creating new route [ 986.861003][T18700] IPv6: Can't replace route, no match found [ 988.703820][T18761] validate_nla: 3 callbacks suppressed [ 988.703839][T18761] netlink: 'syz.1.3369': attribute type 1 has an invalid length. [ 988.803826][T18763] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3370'. [ 988.960236][T18763] netlink: 'syz.4.3370': attribute type 19 has an invalid length. [ 989.005954][T18770] netlink: 'syz.3.3373': attribute type 1 has an invalid length. [ 989.018201][T18770] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3373'. [ 989.390674][T18780] device syzkaller0 entered promiscuous mode [ 992.638658][T18787] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 992.653721][T18787] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 992.663653][T18787] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 992.686558][T18807] device syzkaller0 entered promiscuous mode [ 992.953935][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.966782][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.020025][T16518] Bluetooth: hci5: command 0x0406 tx timeout [ 995.179054][T18818] netlink: 'syz.2.3383': attribute type 27 has an invalid length. [ 995.187513][T18818] netlink: 'syz.2.3383': attribute type 4 has an invalid length. [ 995.195273][T18818] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3383'. [ 995.427499][T18863] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3390'. [ 995.737135][T18866] netlink: 'syz.3.3393': attribute type 11 has an invalid length. [ 995.765341][T18866] netlink: 'syz.3.3393': attribute type 6 has an invalid length. [ 995.774503][T18866] netlink: 125060 bytes leftover after parsing attributes in process `syz.3.3393'. [ 996.852304][T18890] netlink: 'syz.2.3398': attribute type 10 has an invalid length. [ 996.961872][T18890] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 997.243393][T18913] netlink: 'syz.4.3404': attribute type 10 has an invalid length. [ 997.528745][T18914] netlink: 'syz.4.3404': attribute type 10 has an invalid length. [ 997.537773][T18927] delete_channel: no stack [ 997.543679][T18927] delete_channel: no stack [ 997.560173][T18923] netlink: 'syz.0.3407': attribute type 10 has an invalid length. [ 997.882819][T18923] team0: Device veth1_vlan failed to register rx_handler [ 998.267696][T18942] netlink: 'syz.1.3409': attribute type 29 has an invalid length. [ 999.421194][T18942] netlink: 'syz.1.3409': attribute type 29 has an invalid length. [ 999.645432][T18958] sctp: [Deprecated]: syz.3.3413 (pid 18958) Use of int in max_burst socket option deprecated. [ 999.645432][T18958] Use struct sctp_assoc_value instead [ 999.742984][T18967] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3416'. [ 1000.211711][T18988] validate_nla: 3 callbacks suppressed [ 1000.211749][T18988] netlink: 'syz.1.3422': attribute type 10 has an invalid length. [ 1000.266737][T18993] delete_channel: no stack [ 1000.278244][T18993] delete_channel: no stack [ 1000.322530][T18988] team0: Device veth1_vlan failed to register rx_handler [ 1000.403304][T18995] IPv6: pim6reg1: Disabled Multicast RS [ 1000.789910][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3426'. [ 1001.935024][T19054] netlink: 'syz.1.3448': attribute type 12 has an invalid length. [ 1002.004109][T19054] netlink: 'syz.1.3448': attribute type 15 has an invalid length. [ 1002.027741][T19060] netlink: 'syz.4.3438': attribute type 10 has an invalid length. [ 1002.066605][T19063] delete_channel: no stack [ 1002.148119][T19063] delete_channel: no stack [ 1002.224379][T19060] team0: Device veth1_vlan failed to register rx_handler [ 1003.300573][T19098] netlink: 'syz.4.3450': attribute type 29 has an invalid length. [ 1003.334351][T19098] netlink: 'syz.4.3450': attribute type 3 has an invalid length. [ 1003.380193][T19098] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1004.029740][T19116] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3454'. [ 1004.047291][T19118] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 1004.109242][T19118] netlink: 'syz.3.3455': attribute type 1 has an invalid length. [ 1004.156824][T19120] netlink: 'syz.3.3455': attribute type 29 has an invalid length. [ 1004.165028][T19120] netlink: 'syz.3.3455': attribute type 29 has an invalid length. [ 1004.229220][T19118] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3455'. [ 1004.622931][T19140] netlink: 56863 bytes leftover after parsing attributes in process `syz.0.3462'. [ 1008.141149][T19180] validate_nla: 2 callbacks suppressed [ 1008.141188][T19180] netlink: 'syz.1.3468': attribute type 39 has an invalid length. [ 1008.845927][T19210] netlink: 'syz.0.3475': attribute type 11 has an invalid length. [ 1008.936319][T19210] netlink: 'syz.0.3475': attribute type 6 has an invalid length. [ 1009.003632][T19210] netlink: 125060 bytes leftover after parsing attributes in process `syz.0.3475'. [ 1009.134060][T19217] netlink: 'syz.1.3476': attribute type 39 has an invalid length. [ 1009.421415][T19230] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3477'. [ 1009.566564][T19227] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3477'. [ 1009.791995][T19238] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1009.829822][T19238] delete_channel: no stack [ 1009.834810][T19238] delete_channel: no stack [ 1010.003674][T19241] netlink: 'syz.2.3482': attribute type 16 has an invalid length. [ 1010.025701][T19241] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3482'. [ 1010.048036][T19250] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.3483'. [ 1010.132274][T19247] netlink: 'syz.0.3493': attribute type 12 has an invalid length. [ 1010.175894][T19247] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3493'. [ 1010.321047][T19262] netlink: 'syz.2.3485': attribute type 3 has an invalid length. [ 1010.354187][T19262] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1010.376390][ T7037] Bluetooth: hci0: command 0x0406 tx timeout [ 1010.569092][T19266] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3488'. [ 1010.909226][T19275] netlink: 'syz.3.3489': attribute type 3 has an invalid length. [ 1010.920483][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3494'. [ 1011.063730][T19290] netlink: zone id is out of range [ 1011.067013][T19295] device bridge_slave_1 entered promiscuous mode [ 1011.123230][T19290] netlink: zone id is out of range [ 1011.164165][T19290] netlink: zone id is out of range [ 1011.184925][T19290] netlink: zone id is out of range [ 1011.194731][T19290] netlink: get zone limit has 8 unknown bytes [ 1012.156552][T19310] : port 1(syz_tun) entered blocking state [ 1012.172967][T19310] : port 1(syz_tun) entered disabled state [ 1012.186981][T19310] device syz_tun entered promiscuous mode [ 1013.243214][T19334] netlink: 'syz.2.3506': attribute type 10 has an invalid length. [ 1013.331261][T19334] device veth0_macvtap left promiscuous mode [ 1013.475864][T19344] netlink: 'syz.0.3509': attribute type 1 has an invalid length. [ 1013.570722][T19347] netlink: 'syz.0.3511': attribute type 2 has an invalid length. [ 1013.675079][T19355] netlink: 'syz.2.3512': attribute type 29 has an invalid length. [ 1015.814570][T19355] netlink: 'syz.2.3512': attribute type 29 has an invalid length. [ 1015.966883][T19360] __nla_validate_parse: 6 callbacks suppressed [ 1015.966901][T19360] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3513'. [ 1015.990612][T19360] tc_dump_action: action bad kind [ 1016.342662][T19379] netlink: 'syz.1.3518': attribute type 7 has an invalid length. [ 1016.353462][T19379] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3518'. [ 1016.373591][T19381] netlink: 'syz.2.3519': attribute type 8 has an invalid length. [ 1016.398714][T19381] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3519'. [ 1017.318114][T19392] netlink: 'syz.3.3523': attribute type 4 has an invalid length. [ 1017.365095][T19392] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1017.563331][T19401] netlink: 'syz.1.3526': attribute type 10 has an invalid length. [ 1017.616702][T19401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.632869][T19401] device bridge_slave_1 left promiscuous mode [ 1017.639471][T19401] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.728766][T19401] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1019.268253][T19409] Q6\bY4: renamed from lo [ 1019.291174][T19401] netlink: 'syz.1.3526': attribute type 10 has an invalid length. [ 1019.305179][T19418] netlink: 'syz.0.3529': attribute type 1 has an invalid length. [ 1019.325778][T19418] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1019.364606][T19419] netlink: 'syz.0.3529': attribute type 29 has an invalid length. [ 1019.387006][T19419] netlink: 'syz.0.3529': attribute type 29 has an invalid length. [ 1019.496298][T19418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1019.533027][T19418] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3529'. [ 1019.639689][T19430] device wlan1 entered promiscuous mode [ 1021.883496][T19490] netlink: 'syz.2.3545': attribute type 21 has an invalid length. [ 1022.209926][T19494] device sit0 entered promiscuous mode [ 1024.084465][T19539] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3557'. [ 1024.227857][T19546] netlink: 'syz.4.3559': attribute type 1 has an invalid length. [ 1024.242534][T19546] netlink: 'syz.4.3559': attribute type 4 has an invalid length. [ 1024.251701][T19546] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.3559'. [ 1024.264761][T19540] bridge0: port 3(batadv0) entered blocking state [ 1024.308413][T19540] bridge0: port 3(batadv0) entered disabled state [ 1024.362215][T19540] device batadv0 entered promiscuous mode [ 1024.383639][T19540] bridge0: port 3(batadv0) entered blocking state [ 1024.390582][T19540] bridge0: port 3(batadv0) entered forwarding state [ 1024.419097][ T5583] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1024.428423][ T5583] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1024.869151][T19564] delete_channel: no stack [ 1025.558301][T19584] netlink: 'syz.3.3569': attribute type 16 has an invalid length. [ 1025.665745][T19584] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3569'. [ 1025.692666][T19583] tipc: Started in network mode [ 1025.711786][T19583] tipc: Node identity 9215a268, cluster identity 4711 [ 1025.752421][T19583] tipc: Node number set to 2450891368 [ 1025.878935][T19589] netlink: 'syz.4.3570': attribute type 21 has an invalid length. [ 1025.910401][T19594] netlink: 'syz.4.3570': attribute type 3 has an invalid length. [ 1025.936445][T19594] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3570'. [ 1026.046759][T19597] delete_channel: no stack [ 1026.177976][T19601] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1026.207759][T19601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1026.316253][T19608] netlink: 'syz.0.3575': attribute type 10 has an invalid length. [ 1026.327163][T19610] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3577'. [ 1026.484070][T19608] team0: Device nlmon0 is of different type [ 1026.661364][T19625] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3576'. [ 1027.102921][T19634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3581'. [ 1027.136745][T19634] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3581'. [ 1027.155887][T19634] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1027.294403][T19641] netlink: 'syz.1.3584': attribute type 2 has an invalid length. [ 1027.393249][T19634] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3581'. [ 1027.418468][T19634] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1027.496611][T19634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1028.424455][T19654] netlink: 'syz.4.3587': attribute type 10 has an invalid length. [ 1028.527220][T19654] team0: Device nlmon0 is of different type [ 1029.141984][T19663] netlink: 'syz.1.3589': attribute type 21 has an invalid length. [ 1029.362128][T19681] netlink: 'syz.2.3593': attribute type 21 has an invalid length. [ 1029.496857][T19687] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1030.052855][T19702] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3596'. [ 1030.165221][T19704] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3601'. [ 1030.261322][T19710] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3601'. [ 1030.429136][T19701] device syzkaller0 entered promiscuous mode [ 1030.942576][ T7037] Bluetooth: hci1: command 0x0406 tx timeout [ 1034.118861][T19712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3603'. [ 1034.422489][T19750] netlink: 'syz.4.3607': attribute type 21 has an invalid length. [ 1035.116414][T19771] tap0: tun_chr_ioctl cmd 1074812118 [ 1035.292365][T19778] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3619'. [ 1035.310128][T19778] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1035.701155][T19793] sctp: [Deprecated]: syz.3.3623 (pid 19793) Use of int in max_burst socket option deprecated. [ 1035.701155][T19793] Use struct sctp_assoc_value instead [ 1036.747675][T19810] netlink: 'syz.3.3627': attribute type 10 has an invalid length. [ 1036.776378][T19810] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3627'. [ 1036.800351][T19813] netlink: 'syz.3.3627': attribute type 29 has an invalid length. [ 1036.820231][T19813] netlink: 'syz.3.3627': attribute type 29 has an invalid length. [ 1036.851106][T19810] netlink: 'syz.3.3627': attribute type 29 has an invalid length. [ 1036.879060][T19810] netlink: 'syz.3.3627': attribute type 29 has an invalid length. [ 1036.917726][T19810] netlink: 'syz.3.3627': attribute type 29 has an invalid length. [ 1038.167584][T19858] netlink: 'syz.4.3634': attribute type 10 has an invalid length. [ 1038.274576][T19858] team0: Device wg1 is of different type [ 1038.659492][T19866] netlink: 'syz.2.3637': attribute type 2 has an invalid length. [ 1038.712982][T19866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3637'. [ 1038.952314][T19866] netlink: 'syz.2.3637': attribute type 2 has an invalid length. [ 1039.029752][T19866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3637'. [ 1039.119889][T19866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3637'. [ 1039.168015][T19866] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3637'. [ 1039.499676][T19891] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3644'. [ 1039.522031][T19891] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1039.564296][T19893] validate_nla: 2 callbacks suppressed [ 1039.564313][T19893] netlink: 'syz.3.3645': attribute type 4 has an invalid length. [ 1040.436897][T19927] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3653'. [ 1040.474741][T19927] netlink: 'syz.4.3653': attribute type 10 has an invalid length. [ 1040.512843][T19927] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3653'. [ 1040.911282][T19949] netlink: 'syz.1.3660': attribute type 29 has an invalid length. [ 1040.950836][T19949] netlink: 'syz.1.3660': attribute type 29 has an invalid length. [ 1041.033283][T19949] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3660'. [ 1041.907390][T19969] netlink: 'syz.0.3665': attribute type 21 has an invalid length. [ 1041.915941][T19969] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3665'. [ 1041.926664][T19969] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3665'. [ 1044.120740][T19983] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3668'. [ 1044.200392][T19980] sock: sock_timestamping_bind_phc: sock not bind to device [ 1046.706123][T20062] netlink: 17023 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1047.310500][T20068] netlink: 'syz.4.3686': attribute type 41 has an invalid length. [ 1047.322676][T20068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3686'. [ 1047.372979][T20068] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1047.696323][T20081] netlink: 'syz.2.3690': attribute type 2 has an invalid length. [ 1047.730233][T20081] device 0 entered promiscuous mode [ 1048.157160][T20091] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.3694'. [ 1048.750661][T20101] netlink: 'syz.1.3697': attribute type 11 has an invalid length. [ 1048.759572][T20101] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3697'. [ 1048.904971][T20107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1049.515943][T20119] netlink: 'syz.4.3701': attribute type 3 has an invalid length. [ 1049.565981][T20119] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3701'. [ 1049.591195][T20123] device syzkaller0 entered promiscuous mode [ 1049.599376][T20127] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1049.606405][T20127] pim6reg0: linktype set to 780 [ 1049.628248][T20115] netlink: 'syz.4.3701': attribute type 21 has an invalid length. [ 1049.651214][T20115] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3701'. [ 1049.708464][T20115] netlink: 'syz.4.3701': attribute type 4 has an invalid length. [ 1049.741106][T20115] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3701'. [ 1049.822210][T20132] netlink: 'syz.2.3706': attribute type 3 has an invalid length. [ 1049.833112][T20132] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1053.274909][T20134] netlink: 'syz.2.3706': attribute type 21 has an invalid length. [ 1053.283188][T20134] netlink: 'syz.2.3706': attribute type 6 has an invalid length. [ 1053.291710][T20134] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1053.416880][T20161] netlink: 'syz.2.3713': attribute type 21 has an invalid length. [ 1053.425121][T20161] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1053.437892][T20161] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1053.619356][T20168] netlink: 'syz.1.3717': attribute type 28 has an invalid length. [ 1053.672231][T20174] netlink: 'syz.4.3716': attribute type 10 has an invalid length. [ 1053.764483][T20174] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1053.843923][T20181] netlink: 'syz.1.3719': attribute type 2 has an invalid length. [ 1053.975416][T20181] device 0 entered promiscuous mode [ 1054.298715][T20203] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1054.784242][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.790972][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.233434][T20208] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3725'. [ 1056.455680][ T7037] Bluetooth: hci2: command 0x0406 tx timeout [ 1058.675288][T20271] netlink: 'syz.2.3744': attribute type 10 has an invalid length. [ 1058.697076][T20271] device veth1_macvtap left promiscuous mode [ 1059.104855][T20284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3748'. [ 1059.143219][T20284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3748'. [ 1059.155029][T20284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3748'. [ 1060.299586][T20329] netlink: 'syz.3.3760': attribute type 2 has an invalid length. [ 1060.312647][T20329] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3760'. [ 1061.276869][T20354] netlink: 'syz.4.3763': attribute type 12 has an invalid length. [ 1061.292794][T20354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3763'. [ 1061.982639][T20375] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3772'. [ 1062.151041][T20381] netlink: 'syz.4.3773': attribute type 16 has an invalid length. [ 1062.161359][T20378] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3774'. [ 1062.174981][T20381] netlink: 'syz.4.3773': attribute type 3 has an invalid length. [ 1062.231141][T20381] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3773'. [ 1062.984948][T20412] netlink: 'syz.2.3782': attribute type 21 has an invalid length. [ 1063.016837][ T7037] Bluetooth: hci1: ISO packet for unknown connection handle 34 [ 1063.025493][T20412] netlink: 'syz.2.3782': attribute type 1 has an invalid length. [ 1063.041131][T20412] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.3782'. [ 1063.196690][T20420] bridge0: port 2(ip6gretap0) entered blocking state [ 1063.246007][T20420] bridge0: port 2(ip6gretap0) entered disabled state [ 1063.255347][T20420] device ip6gretap0 entered promiscuous mode [ 1063.291778][T20420] bridge0: port 2(ip6gretap0) entered blocking state [ 1063.298618][T20420] bridge0: port 2(ip6gretap0) entered forwarding state [ 1063.563678][T20433] IPv6: NLM_F_CREATE should be specified when creating new route [ 1063.578329][T20433] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1065.378129][T20473] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1065.877397][T20484] netlink: 'syz.4.3802': attribute type 30 has an invalid length. [ 1068.920788][T20498] ------------[ cut here ]------------ [ 1068.926589][T20498] WARNING: CPU: 1 PID: 20498 at kernel/events/core.c:6602 perf_pending_task+0x353/0x480 [ 1068.936694][T20498] Modules linked in: [ 1068.940625][T20498] CPU: 1 PID: 20498 Comm: syz.1.3803 Not tainted syzkaller #0 [ 1068.948171][T20498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1068.958351][T20498] RIP: 0010:perf_pending_task+0x353/0x480 [ 1068.964776][T20498] Code: e8 c2 77 da ff 84 db 75 10 e8 59 75 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 49 75 da ff e8 2c b7 58 ff eb e9 e8 3d 75 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1068.984677][T20498] RSP: 0018:ffffc900038b78e8 EFLAGS: 00010293 [ 1068.990861][T20498] RAX: ffffffff81a7cc53 RBX: ffff88805795fc58 RCX: ffff888079d59e00 [ 1068.998903][T20498] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1069.007120][T20498] RBP: ffff88805795fa20 R08: ffff8880b8f357cb R09: 1ffff110171e6af9 [ 1069.015122][T20498] R10: dffffc0000000000 R11: ffffed10171e6afa R12: ffff888079d59e00 [ 1069.023161][T20498] R13: ffff8880307a5d60 R14: 0000000000000000 R15: 1ffff1100af2bf44 [ 1069.031214][T20498] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1069.040223][T20498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1069.046878][T20498] CR2: 00007faa729cb9a0 CR3: 000000005535f000 CR4: 00000000003506e0 [ 1069.054881][T20498] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1069.062912][T20498] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1069.070958][T20498] Call Trace: [ 1069.074267][T20498] [ 1069.077266][T20498] task_work_run+0x1d0/0x260 [ 1069.081979][T20498] ? task_work_cancel+0x220/0x220 [ 1069.087077][T20498] ? do_raw_spin_unlock+0x11d/0x230 [ 1069.092311][T20498] do_exit+0x9d5/0x2570 [ 1069.096651][T20498] ? put_task_struct+0x80/0x80 [ 1069.101492][T20498] ? ct_nmi_exit+0x145/0x1c0 [ 1069.106158][T20498] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1069.112178][T20498] ? _raw_spin_lock_irq+0x86/0xf0 [ 1069.117287][T20498] ? lock_chain_count+0x20/0x20 [ 1069.122174][T20498] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1069.127278][T20498] do_group_exit+0x229/0x2e0 [ 1069.131921][T20498] ? lockdep_hardirqs_on+0x94/0x140 [ 1069.137198][T20498] get_signal+0x1259/0x1340 [ 1069.141807][T20498] ? kfree+0x30/0x1a0 [ 1069.145865][T20498] arch_do_signal_or_restart+0xc4/0x1310 [ 1069.151602][T20498] ? bpf_prog_free_id+0x1d0/0x1d0 [ 1069.156698][T20498] ? cpu_online+0xa0/0xa0 [ 1069.161056][T20498] ? bpf_prog_test_run+0x332/0x390 [ 1069.166284][T20498] ? get_sigframe_size+0x10/0x10 [ 1069.171327][T20498] ? exit_to_user_mode_loop+0x3b/0x110 [ 1069.176940][T20498] exit_to_user_mode_loop+0x70/0x110 [ 1069.182270][T20498] exit_to_user_mode_prepare+0xee/0x180 [ 1069.187907][T20498] syscall_exit_to_user_mode+0x16/0x40 [ 1069.193403][T20498] do_syscall_64+0x58/0xa0 [ 1069.197908][T20498] ? clear_bhb_loop+0x60/0xb0 [ 1069.202612][T20498] ? clear_bhb_loop+0x60/0xb0 [ 1069.207362][T20498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.213294][T20498] RIP: 0033:0x7faa71b9e159 [ 1069.217786][T20498] Code: Unable to access opcode bytes at 0x7faa71b9e12f. [ 1069.224843][T20498] RSP: 002b:00007faa729cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1069.233326][T20498] RAX: fffffffffffffffc RBX: 00007faa71e25fa0 RCX: 00007faa71b9e159 [ 1069.241343][T20498] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 1069.249371][T20498] RBP: 00007faa71c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1069.257405][T20498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.265402][T20498] R13: 00007faa71e26038 R14: 00007faa71e25fa0 R15: 00007fff5350b988 [ 1069.273490][T20498] [ 1069.276614][T20498] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1069.284165][T20498] CPU: 1 PID: 20498 Comm: syz.1.3803 Not tainted syzkaller #0 [ 1069.291693][T20498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1069.301776][T20498] Call Trace: [ 1069.305060][T20498] [ 1069.308015][T20498] dump_stack_lvl+0x188/0x24e [ 1069.312705][T20498] ? memcpy+0x3c/0x60 [ 1069.316686][T20498] ? show_regs_print_info+0x12/0x12 [ 1069.321972][T20498] ? load_image+0x410/0x410 [ 1069.326482][T20498] panic+0x2d3/0x710 [ 1069.330388][T20498] ? bpf_jit_dump+0xd0/0xd0 [ 1069.334905][T20498] __warn+0x2f8/0x4f0 [ 1069.338885][T20498] ? perf_pending_task+0x353/0x480 [ 1069.343998][T20498] ? perf_pending_task+0x353/0x480 [ 1069.349109][T20498] report_bug+0x2ba/0x4f0 [ 1069.354038][T20498] ? perf_pending_task+0x353/0x480 [ 1069.359179][T20498] handle_bug+0x3a/0x70 [ 1069.363335][T20498] exc_invalid_op+0x16/0x40 [ 1069.367837][T20498] asm_exc_invalid_op+0x16/0x20 [ 1069.372691][T20498] RIP: 0010:perf_pending_task+0x353/0x480 [ 1069.378426][T20498] Code: e8 c2 77 da ff 84 db 75 10 e8 59 75 da ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 49 75 da ff e8 2c b7 58 ff eb e9 e8 3d 75 da ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1069.398130][T20498] RSP: 0018:ffffc900038b78e8 EFLAGS: 00010293 [ 1069.404198][T20498] RAX: ffffffff81a7cc53 RBX: ffff88805795fc58 RCX: ffff888079d59e00 [ 1069.412196][T20498] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1069.420171][T20498] RBP: ffff88805795fa20 R08: ffff8880b8f357cb R09: 1ffff110171e6af9 [ 1069.428144][T20498] R10: dffffc0000000000 R11: ffffed10171e6afa R12: ffff888079d59e00 [ 1069.436113][T20498] R13: ffff8880307a5d60 R14: 0000000000000000 R15: 1ffff1100af2bf44 [ 1069.444093][T20498] ? perf_pending_task+0x353/0x480 [ 1069.449302][T20498] ? perf_pending_task+0x353/0x480 [ 1069.454411][T20498] task_work_run+0x1d0/0x260 [ 1069.458999][T20498] ? task_work_cancel+0x220/0x220 [ 1069.464023][T20498] ? do_raw_spin_unlock+0x11d/0x230 [ 1069.469227][T20498] do_exit+0x9d5/0x2570 [ 1069.473390][T20498] ? put_task_struct+0x80/0x80 [ 1069.478228][T20498] ? ct_nmi_exit+0x145/0x1c0 [ 1069.482826][T20498] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1069.488904][T20498] ? _raw_spin_lock_irq+0x86/0xf0 [ 1069.493929][T20498] ? lock_chain_count+0x20/0x20 [ 1069.498779][T20498] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1069.503801][T20498] do_group_exit+0x229/0x2e0 [ 1069.508391][T20498] ? lockdep_hardirqs_on+0x94/0x140 [ 1069.513587][T20498] get_signal+0x1259/0x1340 [ 1069.518100][T20498] ? kfree+0x30/0x1a0 [ 1069.522117][T20498] arch_do_signal_or_restart+0xc4/0x1310 [ 1069.527839][T20498] ? bpf_prog_free_id+0x1d0/0x1d0 [ 1069.532868][T20498] ? cpu_online+0xa0/0xa0 [ 1069.537207][T20498] ? bpf_prog_test_run+0x332/0x390 [ 1069.542319][T20498] ? get_sigframe_size+0x10/0x10 [ 1069.547269][T20498] ? exit_to_user_mode_loop+0x3b/0x110 [ 1069.552738][T20498] exit_to_user_mode_loop+0x70/0x110 [ 1069.558027][T20498] exit_to_user_mode_prepare+0xee/0x180 [ 1069.563597][T20498] syscall_exit_to_user_mode+0x16/0x40 [ 1069.569051][T20498] do_syscall_64+0x58/0xa0 [ 1069.573468][T20498] ? clear_bhb_loop+0x60/0xb0 [ 1069.578150][T20498] ? clear_bhb_loop+0x60/0xb0 [ 1069.582826][T20498] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1069.588718][T20498] RIP: 0033:0x7faa71b9e159 [ 1069.593133][T20498] Code: Unable to access opcode bytes at 0x7faa71b9e12f. [ 1069.600142][T20498] RSP: 002b:00007faa729cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1069.608557][T20498] RAX: fffffffffffffffc RBX: 00007faa71e25fa0 RCX: 00007faa71b9e159 [ 1069.616526][T20498] RDX: 0000000000000050 RSI: 00002000000001c0 RDI: 000000000000000a [ 1069.624534][T20498] RBP: 00007faa71c3503b R08: 0000000000000000 R09: 0000000000000000 [ 1069.632506][T20498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1069.640471][T20498] R13: 00007faa71e26038 R14: 00007faa71e25fa0 R15: 00007fff5350b988 [ 1069.648449][T20498] [ 1069.651839][T20498] Kernel Offset: disabled [ 1069.656163][T20498] Rebooting in 86400 seconds..