last executing test programs: 7.102496063s ago: executing program 1 (id=4620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000008f8e3dc63a473045851010000200000085000000bb00000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa4}, 0x70) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000010) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x9, 0x10}, 0xc) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000580)={r2, r3, 0x0, r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x840, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r5, &(0x7f0000000fc0)={&(0x7f00000008c0)=@hci={0x1f, 0x300, 0x2}, 0x80, 0x0}, 0x8041) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_bp={0x0}, 0x4440, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040), 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, 0x0) write$cgroup_devices(r7, &(0x7f00000005c0)=ANY=[], 0xfffffeff) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910a800000000005500ffff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc6284, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.038364427s ago: executing program 3 (id=4621): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x92, 0x8, 0x8, &(0x7f0000000540)}}, 0xd2) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=r3, 0x4) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3e6, '\x00', r2, r1, 0x1, 0x5, 0x2}, 0x50) (async) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0xffffffffffffff8d, &(0x7f0000000000)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d3f020a000000040000a1180002000000000084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100030300080000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f00000006c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffd}, @exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xb}, @call={0x85, 0x0, 0x0, 0x68}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000007c0)='GPL\x00', 0xaec, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000840)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000980)=[r1, r1, r1, r1, r1, r1, r1, r5], &(0x7f00000009c0)=[{0x5, 0x3, 0xb, 0x6}, {0x4, 0x4, 0x0, 0xa}, {0x5, 0x3, 0x4, 0x2}, {0x3, 0x4, 0x1, 0xc}, {0x4, 0x4, 0xb, 0x4}, {0x3, 0x2, 0x7, 0x2}, {0x0, 0x2, 0xb, 0x8}, {0x1, 0x5, 0x7, 0x7}, {0x5, 0x3, 0xd, 0xa}], 0x10, 0x7}, 0x94) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='io.stat\x00', 0x26e1, 0x0) ioctl$TUNGETFEATURES(r7, 0x5452, &(0x7f00000013c0)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x9, 0x1, 0xf, 0x6c202, r1, 0xff, '\x00', r2, r7, 0x5, 0x5, 0x2, 0xe, @value=r7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r10 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r10, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r10, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="d7", 0x1}], 0x1}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) (async) close(r12) (async) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x84, 0x7b, &(0x7f0000000000)=r13, 0x8) (async) close(0x3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775630d16a4683f52eb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370eb74c63e1c9f170e47bc1", 0xe2}, {&(0x7f0000000040)="5d4692468a7780f6b33b3eb6240fa72bd154063766b8ca65feb77d531f453c2f9589c418b54ea83ece4866b269e8dbdfbd7ec85970987ef1305345f7c8a76af9f5d196a28f8b3ac7510398f65e8105943aafb349d10708ddaeea99e8f656d2759cec272c374521bb33f93b185011efb1c4516fbf911e73f1920a35c6ab1d8223a85d284cc9913558b5efabc96b25aef5c9f6cf38bd35", 0x96}], 0x2}, 0x44800) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x17, 0x2, 0x400, 0x3, 0x4098, r5, 0x78d, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50) 6.841999241s ago: executing program 2 (id=4622): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="610773490cfcf2c1d66928af92fe23bd7cd59db8d56a49adce3e539f125b83243d02322aaeefae6603de0d6189d7fc2abdd319ae9eb0ced39711a8e16ecb71b7b1fab109e0762026019fd73bacc7dc1dc1e4d92d58052d59d1266a2a58acc1e73d4ef2de3d7fedf2f8ce8df01eed06306d269957ba", 0x75}, {&(0x7f0000000380)="09f42360d3e2eef10a92f57d9df642d650cc7a8f5c19daf2d1ca5c3a3d7fdccc57ea570024a7ec8daa31a477b0d1f58d53fdfdae8ddeea12069b0c3afc289df5b90cd5a841967c2ff4e949fd4e678eb186719212dcedcc9d4e350735646a0026a19887cb82ab15e57f1e35768b6adbc590976da1c81e978b93a162c609fd710f148bb786fce1079ed55d0936e81b047c629f23f79e9b8707bb4c893901e32a1317d926194e96178b34", 0xa9}, {&(0x7f0000000440)="5c88984a2439", 0x6}], 0x3}, 0x20008880) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x47, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}}, @generic={0x2, 0xb, 0x6, 0xfff8, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query, @snprintf, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ae9}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @exit, @alu={0x4, 0x0, 0xb, 0xa, 0x6, 0x10, 0x8}, @map_fd={0x18, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x5706, 0x1d, &(0x7f0000000280)=""/29, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x6, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6fe9}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYRES8=r2, @ANYBLOB="13320a"], 0x9a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=0x1, 0x26, 0x0, 0x1, &(0x7f0000000640)=[0x0], 0x1, 0x0, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x22, 0x1f, &(0x7f0000000940)=@raw=[@map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x8, 0x8, 0x8, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x6f}, @jmp={0x5, 0x0, 0x5, 0x8, 0x4, 0x30, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000a40)='syzkaller\x00', 0x3, 0x20, &(0x7f0000000a80)=""/32, 0x41000, 0x51, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x73c9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@cgroup, r0, 0x11, 0x2, r3, @void, @value=r5, @void, @void, r4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000003e3680a7131df43af74a42b722af9d2ecd6f5bb6d6d93cddbd5f1fab799b3e6d0cd8d21d60a5171db355a1b15e1281c0b332a0dc64b4fff7df2a8b06e2e7d92eb1e48ca86ccf6b2a012dd3b612c4bc4702f106a9d9e3f6d47d3889381d1e42d5250cc40c46508c13b20af0f5a94691c332a878b8018903f91f17dbc6658d95eb1"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000005c0), 0x6c, r6}, 0x38) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.777281895s ago: executing program 3 (id=4623): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r4, 0x4) close(r2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) 6.28484589s ago: executing program 4 (id=4625): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffff7fffffff, 0x69296873}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="9bff63cc5076303c827079828b0ac189c0c03bd8c435828784b40e99738779323838253ffd94d138ef9c7a2f4c0c2aca68824a09bc35a5cd00179932acf24a04f73bea9ff08c0a0e66c6ff62f0758b09d1034d1243d86b429a5fbffd6a42fb2b9dc8c5797ae84e34af6a3549abf335ef7c5932a3252ad58571a40736b1518073"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r3}, 0x20) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) close(0x3) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r12}, &(0x7f0000000440), &(0x7f0000000080)=r10}, 0x20) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="fcd691224dcb83f9de821e2f9c4a6a7f06336c6f601dc84d1b2d3e18ad61", @ANYRES64=r7, @ANYRESHEX=r13], 0xfdef) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r14) setsockopt$sock_attach_bpf(r15, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="d3058cc156a80ed118a5a1a16a6d7313c0fc955d33791a7e56", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 5.99830151s ago: executing program 1 (id=4626): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x81, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x1, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0xa0800, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0x2, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0xa, 0xfffffffffffffffc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r4, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2040) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, 0x0, 0x158}, 0x40) socket$kcm(0x29, 0x7, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0xfffffffffffffeee) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b05d25a806f8c6394f90424fc60", 0x14}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.890417767s ago: executing program 4 (id=4627): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000, 0x7}, 0x4800, 0x9, 0x8, 0x2, 0xfffffffffdf7bbfe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8918, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) sendmsg$kcm(r2, &(0x7f0000001f00)={&(0x7f0000000400)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000540)="6d8166ca60f9771a252f1c28ad9559b46b882a41735ad1dbc72ab4c5a1e80e7cbe87ac96166770db4bbd40eb22b2e3acc492f08d6645ec51541a70d040d3a4848d7d8ce60b194d9d478162902166909d7497800300a591d3256f4178d1cace6348d7d792789259971e553be5ba738895af05c82bc7c87b93978b84845d14b8e442e66bb30132ab2b9a1bfe234599149e723dd5e1fb28388915219d4c16443892f9df7dc1d1adb6144ecba07cf50801", 0xaf}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="b349b1169d2a88ca81d4e2589d28b9434797b4e413c319dbfb9c", 0x1a}, {&(0x7f00000017c0)="2200904aecfa246c1c82bbeae30159e6ed852ce2ea753701ecae3f27eda5c7c7a8a2d0cb7cd6dbffd7bebf461c52175ac7635357e41130d484434dabd8e74efce7f49a6da853659fdac35ef41b1ad42ce54a784d7dd77bf48e289cbdde2fedfeed6d37f068bedb009ae2f8ea6fed68c7e35827991a16dee4d1faa30781a8bd24a75ddb284d5b41955ce0d0d7f1a2e2059219796856d873500f16fb1f52", 0x9d}, {&(0x7f0000001880)="c7ae4f1815f7b59fad9be7b01d5757a8c5137716a9", 0x15}, {&(0x7f00000018c0)="d54c50735a7dea087205435c1429e4d5550786f265a3478c54b3452885a55eb2494efa8e5a59e0393ecf0b84c7db0afd547d5501871f34ee8054f5625c2beab77321aae53c27c9cfdca373c8509874d254e5ecf38883c63fc06145c20024ab1089", 0x61}, {&(0x7f0000001940)="81e9c421cb1e7d5e77a73c07023d972915796477a8189c9460810e3e9370298a3ed597951136acdd62811f647b921a058e65a054564bbaeb91f0e5ff9d7fdd875a3be218cba2f88ae7484b14bbb1ef4e9eb67ad8661a74a2d38738ded5d8641eb47afe79af56cc4f99463d1cbd0ca0", 0x6f}], 0x7, &(0x7f0000001b00)=[{0xd8, 0x0, 0x2, "e8d8ba0c4b70e209fd24ee14b8ff4af97451a7885db1cb00a47cddab499d1adc3afca02f879d2e9bc4ea491cf7662c2619afc2447fe780f617ac6766965dd1f4366e8e611a7a82c8d12cf62183e213b38bf89554f72639738186da702008a2cbb746e7b56e631a8463871918e8d4f3431d3d962c7344f7a50e8090a878b8e8897103a98121abe4c5a6a0a816d48e5219dd99a8eec21a9d353906619d64e3d7cb440d8e5c89991afe07c3cbe546761f39c65ef1fd6c9772bf4e547e44924795e37e568eb6839102"}, {0x80, 0x103, 0x5, "c189b421d09df884e2ff1e4937c2fbd9ddf4667d227b36e5f178ae86109d941f8171ccd4c5dc02adb061ca1ac2600bb878e74832ef7976e72091ea22258b47cdd626209cc75375726ceb34f3d922100e86b74bb0b86ddb6c4669259db5be32e6101def6411f4eb8464"}, {0x68, 0x102, 0xf0d, "f2d4b4c2d8f32dd506468004fd8015e24a954cfaf63223c98718e7aca03b0122d19ff067d5a74f669ef7040cc60ce098da9ec265f635c9906eb0f1aa5e4d6aab52dca5d25d8e3d90f7f60e2469373879ecc92dbc"}, {0x18, 0x104, 0x7f, "458a2878"}, {0x110, 0x102, 0x5, "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"}, {0xa8, 0x10b, 0x8, "732f4f7d7a9642ea226c140efb04754bd0f19cb7721cdb76cff36a9588c4908aed71ec6cc21e0e7764ceb07e251eaaa48090e18b0549830ff24fb8bbdf62076a5903b6ae887057e6e906fd11bc92c1b37872c38bf5c9c7af3a7acd7257c763adece33193d8e04bf26ed1dc47306e776c190e2a58db33d9d660ee2d0078fe6e0baa65ef5314ba559f4db9d3f6ef54b2a106aea4c36760e0"}, {0x50, 0x6, 0x1ff, "a4f9ace43c5f8becc1435b322b23d36639b18dae59f3ac3d4a813e1e12b783f7c7c149300ebbea46e50e2a3770143218eb6e064c56bd4f4729"}], 0x3e0}, 0x48010) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x8}, 0xd000, 0x8000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x0, 0xe, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x3500, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x6, 0x0, &(0x7f0000000380)="b10100000035", 0x0, 0x0, 0x700}, 0x50) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[], 0xfdef) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r1}) 3.445494988s ago: executing program 4 (id=4628): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.364404854s ago: executing program 3 (id=4629): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41ff, 0x2122, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x9, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) sendmsg(r3, &(0x7f0000000900)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="f1e604959e8232a77a62b767e1fa9e381c246bfef0d9e0", 0x17}, {&(0x7f0000000280)="5dc49a80b2b0f321bd", 0x9}, {&(0x7f00000002c0)="835fb00a6c5c6d203b21abe88b182fd4109971343ebe446c1438e3b545e05cbb55c97539a612e1de123bc7b8", 0x2c}, {&(0x7f0000000300)="de277321c40c47b3eb7bb7e2c6afde1d519b96af16ba5eea1d8e1236258ee2c0a1cb2626f66a485220b212e607a59ad82407dd0ec72b73868045042f26c92dbec8edc214a3ec1a6c29ef0bab44600ac8e5c0f1f8b026536b1bed1765e7d06cd02bbdb9e084457b11a5c8b1f01033b6b025eb51a98a6b04317d04d5c2d4ca116b34a048f71e9bc950ede3d310b3c120ef57afd6e7c44716445b238eabaed51079b34bcc82a3592f9c83e5dd4f19e7de221e9da5780f767c029e3d68f0714a88ad68e7ee8c1dd3d4c492450dc72aae7ec508dc441a3e2dee5195688410e7757bbdb627458c9ccb18a263ef16b8b3817dee21", 0xf1}], 0x4, &(0x7f00000005c0)=[{0x100, 0x3a, 0x2, "367037d4356d7567e368d064a9e353dabd380458c62b1684d9f158ece0e15c2f8db5fb259f75b34283283780102e50d88e96b63f6f177073d26609bd43478b4bb68b4c5be48109f5dd80b61da26b862a7e49313645d23e5b129d5c358e6179bc536dc87bda712d9dde8602e8a29f4cd3164b1f0f467739a5377b31f2b5b1853fce2e2aa406b85f791294cb5d28065d768f8b479946d01018051afbad688e1939cd87f27a9bb3cf2f1c620428ea17db9136112681df8d6f8a9d1638f8fa93f13e9d26a9864365f148cf37ae417a0871c250e6b60101b510ece6e013c65bc63ac1f2c06519299699331bf4319b"}, {0xc0, 0x118, 0x2, "712f57cd731a565fd0bafe716bb4775112978dd45d0bae3202b88bb9a2df4f9724dd49dd070880cd4e52ca961841b9d088db1f5aa309e0029eefa6b9395ad5aae210afa463592cf8b9690863a650b1a4562eb73e7b41a1f98c6ba871e115d01d271cd7bc92f2e45beeca1b5c70a55709df860ffd181317541058d9a4085e2bf02c8b88fb14141ec82e2e93b81646363de282f7572e44d9bd572018f33508b2cde4d20092dad08d4ed08a345779"}, {0x68, 0x116, 0x4, "acef2401b247e4734bd9239b384f1b8dd1e7476261cedf6164d3ea9c43dee9e80bc6a7eec212fa30cdd1f6794d3b84044fd3822d8586fef81f50da3dd3c4e7d70e875ab049703b00edddaf777617bf467f4153ebea06d818"}, {0xf0, 0x0, 0xd, "1d0f102d87c88f992b11c5fc1f7d8b66f3a0906c6c6bf9a2db2314d0ab7ccd18d3735d5cf7fd762cb5c3271ac7771aac5ce07fe67175fab213937a11df7a3657299ecf4393ca205facfbc73fc5e5c3dbe046168246840b85a7203bd63835ab0220b537d06e8eb97768eaf9f474849d0dd5c9a8d4df32b0b3bf7c25426fa0bdc44af8865ea6b0b4e90115718c65090dab644e1989bcc3c152b6af7d3b13794ed4668dbfddec45cec8e1659867d2684291c92d2155a0e9b8a99d20f2bbd9a4fe93827115579b090b66cd36949a6e4a94d5186718b38f47e38b45aa638a"}], 0x318}, 0x20000810) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0xa, &(0x7f0000000500)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x40012101) 3.360173154s ago: executing program 1 (id=4639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x1, @ANYRES64, @ANYRES16, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x10) r1 = syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0xfa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x4, 0xc8, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000e3ff01050000000300000005000093010004000a000000ffff00000600000002000000ff0f00000500000004000000400000000300000031e28cab08f3182c81000000100002007304000001000000060000000000000e0400"/131], 0x0, 0x8a, 0x0, 0x1, 0x6}, 0x28) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4000, 0xfffffffffffffffe}, 0x0, 0x7, 0xc2b8}, r1, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000037a95fbc00d20000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r5, 0x20, &(0x7f0000000800)={&(0x7f0000000740)=""/96, 0x60, 0x0, &(0x7f00000007c0)=""/19, 0x13}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x3, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000007a0e0000000000000900000018600000100000000000000000ffffffff004efe71c5c54c816e000000040000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x7, 0xbd, &(0x7f0000000b40)=""/189, 0x8e633ac22d001f5f, 0x12, '\x00', r9, @fallback=0x1b, r7, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xd, 0x2, 0x4}, 0x10, r10, r8, 0x3, &(0x7f0000000940)=[r6, 0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x4, 0xa, 0xf}, {0x3, 0x3, 0x8}, {0x0, 0x5, 0x7, 0x5}], 0x10, 0x3ff}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r11, 0x84, 0x85, &(0x7f0000000000), 0x90) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r10, 0x4) r12 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x9, 0x10001, 0x4, 0x100c8, r0, 0x8, '\x00', r9, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0xb, @void, @value, @value=r12}, 0x50) close(r4) recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r14 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r14, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) r15 = bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r13}, 0x8) write$cgroup_pressure(r15, &(0x7f0000000440)={'full', 0x20, 0x6, 0x20, 0x80000}, 0x2f) 3.184802067s ago: executing program 3 (id=4631): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c042, 0xac5d, 0x0, 0x0, 0x7}, 0x0, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x920, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0x1}, 0x2814, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1000000002060000040010000200000046300000229ebc46b2d2e1a2be556d", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x42) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r4, 0x4) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1e000000a2020000050000000400000000040000", @ANYRES32=r4, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200009fe532fe000400ff0000000000000080000000000000100000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) 3.184268527s ago: executing program 4 (id=4632): r0 = perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x9, 0xfd, 0x6, 0x56, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000540), 0x2}, 0x80, 0x7fffffff, 0xb, 0x5, 0x2, 0x4, 0x4, 0x0, 0x3, 0x0, 0xffffffffffffffff}, 0x0, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0xc7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x10d040, 0x10000, 0x0, 0x8, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r2, 0xffffffffffffffff, 0x4, r1}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000076000000bf0900000000000026090600000003e7040000000600000018010000756c6c2500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b703000000000000140000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x3, 0xdda, 0x9, 0x22, r2, 0x0, '\x00', r4, r2, 0x4, 0x1, 0x3, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) socket$kcm(0x10, 0x3, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) sendmsg$kcm(r6, 0x0, 0x0) recvmsg$kcm(r6, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2122) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff37}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xea86}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.960527962s ago: executing program 1 (id=4633): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) socket$kcm(0x21, 0x2, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000040), &(0x7f00000003c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xb}, 0x4100, 0x6, 0x20000000, 0x0, 0x10000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x400000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX], 0x10b8}, 0x20044010) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=[@timestamping={{0x10, 0x1, 0x25, 0x9}}], 0x10}, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$kcm(0x25, 0x5, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000fbffffff00000000fdfffdff850000002700000085000000d00000009500000000000000eab3a042ffb94cc64fd76fd704b5a3431a7a2ea1bcb1c887a25b8d6ac7b6bbed61b356d410"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x2}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="2e00000038000511d15a80698c63940d0224fc602f6e35530c000200681ec0003706000000000000006400d1bd74", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x14) recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002020) 2.878060558s ago: executing program 0 (id=4634): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000a"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c45c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0x312}, 0x1004, 0x4, 0x1, 0x7, 0x94da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x1}, 0x10}, 0x80) 2.745624798s ago: executing program 4 (id=4635): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24048081) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x31, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a7eb010018000000000000000c0000000c000000020000000000000000000004000011f432c7"], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000100)={0x0, 0xfffffef9, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="870ac5b2c7e21df86e86b8a95fc0a7660a00000000000061114c000000faff85000000440000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.667130953s ago: executing program 3 (id=4636): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x65}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1200, 0x2}}, 0x10, 0x0}, 0x4040000) socket$kcm(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) 2.526870423s ago: executing program 0 (id=4637): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x17, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0xb2b, 0x30}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000080)="41322a455cb62a100e6954d70f87ef3ed9c4f772b25b1e8612cba740eff1d4463da48d17e29e1053c5c113c3c01a580530a535ee49b0a7332d9dda24101d56f47a843942e49599507fa0c38bdfcc795c7c23e0da067a3735e8474c53f1f608e243c80c013bb230761da99481e3d795ab867812c1297b56ba8681f21f28eeb9168fdd6f2c57a658d7c9e7c898e664f6f2135eb436505d35e94a10012886965661a9ffdddc5b4592b539a3b73d1bed3bfec63bd18aeefa71485bbc376e92452f005589e8398e2ceeea6a4c4e455d2264bd92cc7ae22f21652b1e1537b51b1a4c7c04317a2eb7b733d9fe", &(0x7f0000000180)=""/212, &(0x7f0000000280)="ecfb68190d2a48981b85728f818fa1be7831b458162c7816baa5694c733ca38c032ef9da3ee7d30dd142170313f658f8357b06e1c830dbb06b16c54d82951faf08f804aef9c7492a539866f11c0214f801574d9999303bbd9319fedaf6", &(0x7f0000000300)="029d5c0a24ad9cf8d64baeb708f658535a8b9b5d781def2794f9f51df37fb5e33515ce9225324c927d7660140981340264ab1e", 0x40, r0}, 0x38) 2.394283182s ago: executing program 1 (id=4638): r0 = getpid() write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)=0x7fffffffffffffff, 0x12) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f00000001c0)=0xa00, &(0x7f0000000200)}, 0x20) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r3 = socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0xffffff53) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000010000850000007d000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x20}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x12000) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f92124fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x200}) 2.019913418s ago: executing program 0 (id=4640): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x100a, &(0x7f0000002500)=""/4106}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000636c77fbac141416ac141416830807034d2f87e5940c6aab845013f2325f1a39019403178da1880b251812a59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126f4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffffffffcb6, &(0x7f0000000000), &(0x7f0000000880)="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", 0x6}, 0x2c) 1.810057923s ago: executing program 3 (id=4641): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x84}, 0x110000, 0x0, 0x800002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x0, 0x88) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x8) socket$kcm(0x11, 0x20000000000000a, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x9, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000001240)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x96a6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) socket$kcm(0x2, 0x1, 0x84) getpid() r8 = perf_event_open(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a0600000000000000", 0x0, 0xfffffffa, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r1, @ANYRES64=r5]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="000000000000004a1aed040b1a1000950000f0ffbfffff4400000000000000"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) 1.762395156s ago: executing program 2 (id=4642): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.476605626s ago: executing program 2 (id=4643): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.461449677s ago: executing program 4 (id=4644): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r1, 0x58, &(0x7f0000002040)}, 0x57) 1.270037511s ago: executing program 1 (id=4645): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000fc9bbaff1c8d2ea00"/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$sock(r0, &(0x7f0000001b40)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @remote}, 0x1, 0x2, 0x7ff}}, 0x80, &(0x7f00000019c0)=[{&(0x7f0000000600)="4dbd2d3e210d6ada0034bdc8364c92f0aa918a7025f2f9040c758ada75fcec4d09c568d346371df8f1df322c52d13ec630ea6b8f8636e1a905f577a0ab1f33d48534053b9779416cddb8d5d644a0e78501b9a665dc1fb6551a8b0fabbb3874cd0475c02bae261ab02f509be3de56112f999e1f969323b9d70a6df7c3ae524641783eeb042d51711c158ce9b4786572bf6160d8f85e939a48a25a12ea544db65616662e3e734eda4274fafe", 0xab}, {&(0x7f00000006c0)="dbc995a0663532410a20c81e5bd9a8867db7b608e54e4e329905926585131b5cc3dd18de63faba504f711f907ca4c8bb6ca629a32213eaefa247960aa9759fe0d18be4628ae68cb04bf8dff69cc7740649fe53baa600ecacd9d2b79595856653ec6a714ca8fd224ba2a1264902447c35163b6ae2acfa6f2cd51ccd418c04e86cb3a047f1d16d2531df0411edac9d796bb977b4d71683f2715107d7511cf5365b2f4a3a0a7e471802ca6060912142a6b68235a71c70c04389dd21ad0c75df4c0760e8708bedf4e23aa9f5283e4753c3eb1cb7700beb1b918e8046982eefcfb4725fc2606d625bbf", 0xe7}, {&(0x7f00000007c0)="fcd22e7eda40e7080644f0da7eb80bfde38e4b3c4957ae218d9a3a46f772e712e0d3b107af236938f6cac2908b5e4da2fee326f7ce11956eaf53d7c7524ba0898f2e9a5889003e449908f85ac567d4fc01f949d4a27e42b1ca1d1dced8a3177b5c8dacbc264ee49c40102d98d96d64a5ddb376b47744fc0d3d2b37d744f6dbfbf4bb6d5020d2be66c726435919207e6994022ad566a90891aeb72b4e7895b8712158f373bb994d1d6808d2360fce158644fca784c7db331eb1c96acb43e8be2a031fd5dcfa", 0xc5}, {&(0x7f00000008c0)="086748a05482dcca941d59578f38a62dc6318d95b23c8de99737e7eadc385569aed95e332c00339ad55a6b9a2502b24da2db9a71517237853b0fce9befe847e5f765a9f9d501e9aa7dd1a8721ec2c6e9c1aca9ccf9350d2689f3390775bd25b3974ec6e96d112316627bb6905dc05302d6156055b345355810f5a7d5", 0x7c}, {&(0x7f0000000940)="0eac9a570518c367b51579e213bdfcbfa0a4710057ed60af775614e49d2258d45817f95c901db3e58c765aba88a30118793ca74660dae48e2dc4398d1e3af5fcb3162279850adefc6e6079cf88ace4afd7452a", 0x53}, {&(0x7f00000009c0)="68929efa11a7f390d2503135d0ca153d1adc4f7bcacd92538c243180f2ee5fe75bc6f47ce0c41b8a11da86d958c956781cba75c098a53b30e7eb78c9b1656becf72402149762d68da574110f732cfdc188585b2b233bd05790d99c5b804684640c04448781f8e405de796624b85f8de3a27a0ed7580505f61e3281f075adc1fc9f614a3c9e134f29a1f76d05316ced55d656bb33fed3860fd6a6963e8443a92317074b54aacf7a7b7a78c30dc230f2e3348bcd8600c55b48aad8b37c0ef61782e588638743f7bc54a504c5e4944b7f10f95d9305a2502ef5d07a62f35240530304c5c65f27626aab0d390e43ff37d1be28868c11eb315c30d063ab07ede9cbd0ab678b9cfbd25889eb2849e03e85e7657e65949743e54a71d3831b4f529fa3b8559638dc2887f3e138296542ad8bc7cd4b00a4a8f2943b5f871f17b1102f0e4d5417af312ee8c60eef4eb29f0c0a7e8c6a60b9053e6cc87f953722c83ac1a5927af97ab31f96f669a4ae42a52eb655537a9248412f05bfc039fd2b308e84a275a1cc7d2eac340086fc9b3be939150244d86af66895f6a387cfcebe9f93c71e29e3c0eef21ae9b0bf643f556f9db86fa957b1dca5c044f47c2dc71a9ea83381651bb9c7dd559bb4438f8fcf192508cc186c90053530b6167e1a8ec5728e6145b51e1fe7873faac5eb1a8311b0b93bae65261a284216b7c02bff101024a454eb16f4809782b8c07b7183df0f465ff2018f38617c057f0f8f54488bcdbae195734715f5bba87ce007a3462b9b14abe3bc579ee10c9397b02af5f9b1660c880d65ab5b79c5dd3511cf305c3b36392b953aec49c2782900b695aabec793ddc00bb3e71e095acbac32fd9ad0c66cf39350fec06ec9754581b1ea838dd62e34938d9eb1196f0e29054a90d19abfd684fae5fcbe2f178d16d3e865e7717565ec4ea402f968da7e8dca6b8348fbe1de31cc9089a7813eeb112dea404099019bd5b5221d7cae9b395e9da44ad3f694ecd3fd351724df29911fe25a91d376118044c6e7046b7ab6cca44980dfb7768894f7df7bb71c0cd952e55bc5b99b92b1c296f4635fc56d726fd21290333aa3c21dd25596381fa2c107974714092549365b1e3d7675e7179ce8c0fc3b6334590e70620560a66ca5a9fb5df8aad6d81da81fee55ffe6c01c654033f5015c382e08f465445acc8e32e78ab00e9141a09407422422f766e553d55f73fb594080d307a7d262a770314cb2a09eb0f6a4d01eeb16bf9237095456a7a69dcc759322acf318dcbf5b5ae9b2be1701be41aa18f0b171e6b4083250d6de48bbff99f65435231471f6cd306c5a22e0bdfa92eb18801ea918f2712203a1fcf20aa72454e5eedba6c98c0b75970ef7dc68645d6583d022c57b579faab8f15d583d54e2e08e6fb1fbb95ac92bddd6701f619aec07af86342727bffea59adcfacb6ccf0b851edbe720604e640cb6774a172f17070c6102be60c606d6fc53d9699e5c32fb5899b5184f8027098fe1771dd2197613ba7dc31e81fec34b16c48b8c303a07be96f05c2f59d92904650dda44a756ebb52c5b483e2c99ba3071c00eca6943718902c47fa44ea11624869f46d0dade838aad890ca0c18868d5ef8527085a1d7fb89aeafcb900c1a24e8ea835623a3d4ef66a8cd412ffa1ea2507b562779b4d128e72065426eb9d7beef57c134e0749729443b41bc901d57ca9b44e75b5ed8ceff82dbbdfed123c69f13291cc164174bc92a8e1bc1c103a562abc8f071d21e2b3f52e0043a7a6bf60545edacf7e732b26b9ca5203d49e495d5cc393b854fee9cd1e3503906465f3b748a527d8c70bf9570f4c1e2076bcd6826be0bb52b1a8b5d461da03f6ef925efc1dfbdb7d6a8981b6c4cfcfaa355d16682c75099843c11b9956ca3005571660797b67239ddd728c00c15a28a21fc54e3c89c9d27f4917b9e71ef0d01d66108130f24f14821561b0587aaf4cfbdbc28b188c0b9d3b2f90d71ae6bf06977c03c7e90e41952e226553c75591b7931ca755c1890faa0d7696303faa2e9994c97844fcb6b33a9ded27a9de532e060e964a0d94e2d4485173c202a2b21516bbc29b637deddb000116539e8394c94ca6f5aca4737245883872b40de94fb554d4d5f8cf96b1136e4d1f1edf235e0d1fb2b58d5ac893a535b9183a72c41d0eff76174694168ec91db69812f97cb937b522397d5865d94b4623cbd2b31eabf53afac74049e1f703eeb32f1a0c1339e5ab25bb6ae9fea7d5ec39d5a8dd6497523e80a5eeb8df93094b7ab7a55c07a10551652d7ed55f1f15431d694a419785e03610c27f14b24940411c97792ec0f380f38f7e2c16582c46297d217294acb01364644a5bea95a76e82bb0d4907ead4638225197ac612ffd2cc215f5d6d125d46ede7edf5d15a2697e9efb5cd81e56c0677d7c16232746d77c20406309833e018aeaa5c3861321b811a192c51458d503b22b77d4b04386c7202085c33d2561d7fc506a7b74ff3011b7beb73b0030454dc8967d476e2f59d6676e6e86c306e956461469d520948bd0fb984c061ac0708d12ac977edc33ecbdd3fd3a32502f1aa7417a23476e64a986a185d643f8e46c68db1570a0196739e870b0cd411ce01423a2852cb7acb3e5c81a56bac01ce972ee955121eef4c15a227c1a079a1737b3da596b5ca21361e0446ee0b2963a251e3a400accd98027f920493f3c44d4d909bf676e221dc29345308c49307a228587c7fbe9ac260c3160ab106c67c29e35db50569da3c7af442792370aa94eb5d2f6c85e80cad3b315b23f81633066eb4a0d63c23dde8429225c481f9d765b78812e22c13896de850ee3db8bd4aa9036c2c4d57d39eba4534127902a1246eaffa28e7d512e2aefd78d802ac28f181a3efad33ed7152e0197399a8d704630e924a849c9b73f890abe7eb1d06612c46c3045e1d1f8ded65da6ab019cbdf562641a896baf61b0c4fd9ea599021a38b127129defb1b628650da9748860dd42a2ab4352c0f61ecdedf25435ee3913abea51fc5eba52e606d58b306dbdec0dd5ab2721e2cb2f2c7d0322387106a4b69b9dddd824e471e9ec8ed167afa8381b8c20dd1618775471c314d0bdad00a4041993be406c0aaba0063897a405720562cbe6cd9318463066a965912d91357bd40daf4d683e30fa296ab8cc1ed7a9c6515aeac352fa820c9cba10aff9abe6cedff1a4af964392647915de5577df85cc074cb93b1ed408fd07dec19815734e446240082dcc1586ed5bd00d780579f70ec9cddbf03895bb3aac532b5138ee1106adb0a94a6c52b9c4b46d030f2dd026c381f8e7e8c5154993fd60b386913d7231cd43b8af997c61580fcc2c49ecceb740b0c163b15757dba858337fd33cf35affdf3bd965b22ca9070a78a31e86e006e9c15fb205127cebdd0f7d75a1bf1d1b81e93807fb464c8a1c995fc46186e1f7b82a8cdf86c2348dbf876a9ca848918818e8d8cd4dbd2a3c19e99e7ac18493752afabed9a0a7c34aaffcd1f53d58fe27ee1f6a660e0546e29f9bb35b88f30de5a46c86a3e97286788104f63438e41807f2f58dafbf9c5cb9f97aced7e3333eec7308107bc7251e0b9e4e154bea96e88aa6287f1f4760ea246f9aab9670ec3d15755f0b8ecdf0b2edd56e16a3b09db7a97871fa34c73a35f98d787ad74473853630a4241c21db9a858afd5b3b881e01bbb2982c991eab89eac6cde90506c7b8dd9c44143eb85217f9c2862abbf3c77ce989cfd8eb92bc3a86b2bd8635070cd770db360014fe1dfbf660469383518d48b06d0c95cbf24b044ed4bbd5db2c5cc0b9d9774b9c1274a1fbebdd6e5d53072fe401e0ebb3f214a1f643e7fc68361cc102555b9b8400907e105ad7c790def762dc98d6e500d60f622620a6d26d359b16ea25c3ca8197e0d0661f1c9ed593fa09a29c3ffa647c0e56f8627d83c79bd88c40137f165ab5c803b12bbc9f9f858043d2e08cabdebc333fb9bba486bcefe008eded721f3ca25fb71a8b19004cc40221b8e982fe58f6fc31bd174016d2b288377e0ad35ccd87c1bc429637992ad0f06a54062248c3b2756e0f0ea0dba0a367a3cdb2ff5167a7e2b486f2959f712a8a160d3fdc4c320addd905459283a2b16dbe7ba357abd9142877752315d8d76df51dde2e8bdf5a8150c7c0aacd49a2b131b41c3255e47e910794984c357f5c6c59cef2871d3feb359ee60a0bb809a83a21ce60a4d354ad0b49f05a4e7757dfa52977b0d18134f1363d49852ac38ad627cf0e5cadf898ea2342eb4f25ae2c742c42a6a8c35dcbb5c7d46aed0f6ee1006c75e1b1dd291f8126b09c068fcd0a2c003d60a538fc4c6417e0042d9aca27512419057edd9f565c768f8ddfb69d99b415ee17f70d47d81d31f93256a64e74893fc1f7c6157036d7cb7d74b2b20d745fc6ca903a7388731c69e47ba5cd551f7c5e0fecdd5c269e1ff8c0810c4d13ecc6479be259f6220e98d882172421ae3c005d579f9b6c4b6b1a32cdbbbe736c464430791736edad8c63035a21f4fdaded2d5af32b4e8252a801261bd652cdf608c1b0b2ed66b46efef32a2af25b66254a762425275b369b5be83d5d98b89026640d7fb70b58308dbef75945d0b307d4ac6eec7caa42e6e1a6231f3223b9cbbe56dc63608f6b5933c48b352791cffafb7948c0ed0c70100ef9ee3a79d056ca6dbc44078c59f3a2b8dd01a5d8a6dffe8c353048c13fb600c4805d0496005f05626b065886e59e45b2a03c6bd8b5ae8688facf5f2cc84dbac7c9700e126f417345140873497483f60fd4a2e62275d72045d51038531ab3a999e338e47d95a7525cf4950ca1e2cd5a07f55a53388a3ca0d3c0dcb65079cfcc156eb0e89faca23d21eaf0128f10891e5aa45206647ac2fe8a4ef8dc67f7221a4a6b0434cfacb83c86c8ce2dc5473170cb265a76941ae4f399a6bc296480a06605d696e5deb1f4e105a674f03a32573782dd56b61652ee5b23d9257b3e22beafec56c31fc0cb03c8e0bc1a63fa5ad8dec63c2783e6f2de871551181e178cc1c13db25592c9cfddf56a57e5929fdf839d5ffa2f8d1073dc1ec405f665d5fd0ec6f755e85b9622f557565bda69b082114735c5b68a5e1b2b22804882c556e38386deacc37f5717db5ca30d171205c59b9b867d915468ff6eb05445807e64fb41bd15910b63723905a42a71e55d990843bfe5fe0b18e89b207189ae18ae0210b06cb0546be9d11840ca4a97d6cace578717a432a0ba2ae652e0a1ab2ab20a4525f955327fdf8b173cd072ea05c36ca26aaa8d56c4e8a0656a1d4c0326ce0aa2a3581eeb2f2b07a067f8e06fee481bbe86c2749eaf290cf2d3932d0603dc9fc59ea2929d001461c4c64a9168099e8275105c2c4f5a1d41c5b8a1b60e170d8f48dd2b76c762436a39c0c48fd711cafb7e3120b030dc80852526034fe07c0ab9fb162ee938378d25d9140282d185ad713e3d8c85eebf3e2c593ac9f3b53857040368f2ed68d4f8be07e6e9896cabf344b23cc74b69d1fb111712d6c5ebddf42e75e5aa9574b80b24cfc9dc7ca84d1cd8589dfa8a1736d40a522781d96abab68d5f09083033029119479092dc8ff6af939066731cecc0449f7f9ed9b519e703931c124ed12430b3196c599804ba2e64269e4b35de08289245524782a5832268de104bf49dc64b327e57c7b711d10fd8a0c80cab4d793e57a534413bc9bd164ec1db8a9c2135873ed5af30057e1d1882ed18e3f946e4a3749f34b350899a447185a48f6ac7308429c9f9f24f7a743bdc44b0c9a851c", 0x1000}], 0x6, &(0x7f0000001a40)=[@timestamping={{0x14, 0x1, 0x25, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0xaf25}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x7e}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffa}}], 0xf0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, 0x1}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) close(r5) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0xd, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r7, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x3dfa}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x11e, 0x8, 0x0, 0x7c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x8240, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000280)={r5}) ioctl$SIOCSIFHWADDR(r5, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) 1.158872468s ago: executing program 2 (id=4646): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8000000000}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) socket$kcm(0x28, 0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.131556321s ago: executing program 0 (id=4647): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8020, 0x0, 0x1780, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x6a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 350.339585ms ago: executing program 0 (id=4648): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x2, 0x11, @local, 0x20}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffff97}, 0x40844) (async) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x8, 0x8, 0xe, 0x0, 0x7fff, 0x8000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x800, 0x4, @perf_bp={&(0x7f0000000000), 0xb}, 0x2010, 0x2, 0x80, 0x5, 0x7, 0x6, 0x0, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000005000000020000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000009920510ee852c59000000000000000000"], 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) (async) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r8, r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r9) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r4}, 0x8) 350.033235ms ago: executing program 2 (id=4649): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r1 = getpid() perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c882, 0xac5d, 0x0, 0x5}, r1, 0xffffffffffffffff, r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000004000000000000000000000000000000000040000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000280), &(0x7f0000000440)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 117.752061ms ago: executing program 0 (id=4650): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000004040000", @ANYRES8], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xa, &(0x7f0000000000), 0x11) socket$kcm(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x35, 0x1, 0x1, 0x81}, {0x61}, {0x6}]}) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) 0s ago: executing program 2 (id=4651): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x65}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1200, 0x2}}, 0x10, 0x0}, 0x4040000) socket$kcm(0xa, 0x2, 0x73) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): etlink: 'syz.1.3043': attribute type 27 has an invalid length. [ 657.308764][T15286] device vlan0 left promiscuous mode [ 657.310317][T15304] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3043'. [ 657.338783][T15286] @: port 1(vlan0) entered disabled state [ 657.875172][ T4285] Bluetooth: hci3: command 0x041b tx timeout [ 658.360019][T15305] netlink: 'syz.1.3043': attribute type 10 has an invalid length. [ 658.372792][T15305] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.380541][T15305] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.404028][T15305] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.411923][T15305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.419858][T15305] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.427741][T15305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.484156][T15305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 658.869620][T15273] chnl_net:caif_netlink_parms(): no params data found [ 658.967743][T15322] netlink: 'syz.3.3046': attribute type 11 has an invalid length. [ 658.981755][T15322] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3046'. [ 659.015719][T15325] netlink: 'syz.3.3046': attribute type 11 has an invalid length. [ 659.023652][T15325] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3046'. [ 659.430916][T15273] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.526214][T15273] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.575397][T15273] device bridge_slave_0 entered promiscuous mode [ 659.616218][T15273] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.660152][T15273] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.708552][T15273] device bridge_slave_1 entered promiscuous mode [ 659.958375][T15321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.965325][ T4285] Bluetooth: hci3: command 0x040f tx timeout [ 660.016497][T15273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.102633][T15273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.239821][T15273] team0: Port device team_slave_0 added [ 660.270153][T15273] team0: Port device team_slave_1 added [ 660.466441][T15273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.473841][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.505634][T15273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.600746][ T42] bond0: (slave netdevsim0): Releasing backup interface [ 660.646173][T15273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.653916][T15273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.725028][T15273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.700335][T15273] device hsr_slave_0 entered promiscuous mode [ 661.720093][T15273] device hsr_slave_1 entered promiscuous mode [ 661.747048][T15273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.768774][T15273] Cannot create hsr debugfs directory [ 661.891849][T15372] netlink: 'syz.0.3059': attribute type 29 has an invalid length. [ 661.991228][T15372] netlink: 'syz.0.3059': attribute type 29 has an invalid length. [ 662.035361][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 662.062380][T15374] netlink: 'syz.0.3059': attribute type 29 has an invalid length. [ 664.159204][T15422] netlink: 'syz.2.3068': attribute type 27 has an invalid length. [ 664.178280][T15422] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3068'. [ 664.351032][T15423] netlink: 'syz.2.3068': attribute type 10 has an invalid length. [ 664.802820][T15273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 664.833137][T15273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 664.949260][T15273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 665.065462][T15273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 665.112972][T15444] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3073'. [ 665.576855][T15444] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 665.627453][T15444] CPU: 1 PID: 15444 Comm: syz.0.3073 Not tainted syzkaller #0 [ 665.635560][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 665.646212][T15444] Call Trace: [ 665.649659][T15444] [ 665.652838][T15444] dump_stack_lvl+0x188/0x24e [ 665.657943][T15444] ? show_regs_print_info+0x12/0x12 [ 665.663215][T15444] ? load_image+0x400/0x400 [ 665.667801][T15444] sysfs_warn_dup+0x8a/0xa0 [ 665.672584][T15444] sysfs_do_create_link_sd+0xc0/0x110 [ 665.678033][T15444] device_add+0x7ed/0xfb0 [ 665.682516][T15444] wiphy_register+0x1d9f/0x2ac0 [ 665.687472][T15444] ? cfg80211_event_work+0x40/0x40 [ 665.692659][T15444] ? minstrel_ht_alloc+0x894/0xa20 [ 665.697950][T15444] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 665.704189][T15444] ieee80211_register_hw+0x2d00/0x39f0 [ 665.709755][T15444] ? ieee80211_register_hw+0xf11/0x39f0 [ 665.715397][T15444] ? ieee80211_register_hw+0xf11/0x39f0 [ 665.721040][T15444] ? ieee80211_tasklet_handler+0x20/0x20 [ 665.726757][T15444] ? memset+0x1e/0x40 [ 665.730802][T15444] ? __hrtimer_init+0x186/0x270 [ 665.735733][T15444] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 665.741623][T15444] hwsim_new_radio_nl+0xafa/0xce0 [ 665.746718][T15444] genl_family_rcv_msg_doit+0x22a/0x330 [ 665.752326][T15444] ? end_current_label_crit_section+0x170/0x170 [ 665.758704][T15444] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 665.764641][T15444] ? bpf_lsm_capable+0x5/0x10 [ 665.769353][T15444] ? security_capable+0x85/0xb0 [ 665.774283][T15444] genl_rcv_msg+0x604/0x790 [ 665.778838][T15444] ? genl_bind+0x360/0x360 [ 665.783289][T15444] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 665.789683][T15444] netlink_rcv_skb+0x1fb/0x450 [ 665.794507][T15444] ? genl_bind+0x360/0x360 [ 665.798959][T15444] ? netlink_ack+0x1170/0x1170 [ 665.803771][T15444] ? down_read+0x1a8/0x2d0 [ 665.808280][T15444] genl_rcv+0x24/0x40 [ 665.812293][T15444] netlink_unicast+0x74d/0x8d0 [ 665.817112][T15444] netlink_sendmsg+0x8ad/0xbd0 [ 665.821928][T15444] ? netlink_getsockopt+0x550/0x550 [ 665.827172][T15444] ? aa_sock_msg_perm+0x94/0x150 [ 665.832176][T15444] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 665.837641][T15444] ? security_socket_sendmsg+0x7c/0xa0 [ 665.843327][T15444] ? netlink_getsockopt+0x550/0x550 [ 665.848667][T15444] ____sys_sendmsg+0x5be/0x970 [ 665.853497][T15444] ? __sys_sendmsg_sock+0x30/0x30 [ 665.858559][T15444] ? __import_iovec+0x315/0x500 [ 665.863456][T15444] ? import_iovec+0x6f/0xa0 [ 665.867995][T15444] ___sys_sendmsg+0x2a2/0x360 [ 665.872735][T15444] ? try_to_wake_up+0x6ae/0x1080 [ 665.877805][T15444] ? __sys_sendmsg+0x290/0x290 [ 665.882780][T15444] __se_sys_sendmsg+0x1bb/0x2a0 [ 665.888036][T15444] ? __x64_sys_sendmsg+0x80/0x80 [ 665.893078][T15444] ? lockdep_hardirqs_on+0x94/0x140 [ 665.898331][T15444] do_syscall_64+0x4c/0xa0 [ 665.902887][T15444] ? clear_bhb_loop+0x60/0xb0 [ 665.907796][T15444] ? clear_bhb_loop+0x60/0xb0 [ 665.912752][T15444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 665.918904][T15444] RIP: 0033:0x7efd4eb9c819 [ 665.923554][T15444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.943483][T15444] RSP: 002b:00007efd4fab6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 665.951943][T15444] RAX: ffffffffffffffda RBX: 00007efd4ee16090 RCX: 00007efd4eb9c819 [ 665.960141][T15444] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 665.968158][T15444] RBP: 00007efd4ec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 665.976374][T15444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.984692][T15444] R13: 00007efd4ee16128 R14: 00007efd4ee16090 R15: 00007ffd2d1d8038 [ 665.992768][T15444] [ 666.802541][ T42] device hsr_slave_0 left promiscuous mode [ 666.829949][ T42] device hsr_slave_1 left promiscuous mode [ 666.942182][ T42] device veth1_macvtap left promiscuous mode [ 666.963396][ T42] device veth0_macvtap left promiscuous mode [ 667.043722][ T42] device veth1_vlan left promiscuous mode [ 667.241622][T15493] netlink: 'syz.3.3083': attribute type 2 has an invalid length. [ 667.261601][T15493] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3083'. [ 667.982622][ T42] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 668.078798][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.330184][ T42] bond0 (unregistering): Released all slaves [ 668.460816][T15273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.493773][T15504] netlink: 'syz.0.3086': attribute type 29 has an invalid length. [ 668.548319][T15504] netlink: 'syz.0.3086': attribute type 29 has an invalid length. [ 668.559923][T15507] netlink: 'syz.0.3086': attribute type 29 has an invalid length. [ 668.591353][T15506] netlink: 'syz.3.3087': attribute type 10 has an invalid length. [ 668.613690][T15506] bond0: (slave bond_slave_0): Releasing backup interface [ 668.681733][T15273] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.709082][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 668.735899][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.780903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 668.799545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.845517][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.852752][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.861213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 668.941396][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 668.971206][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.985573][T13117] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.992843][T13117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.035835][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 669.105062][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.116981][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 669.134614][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.160893][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 669.188923][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 669.206247][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 669.217615][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 669.227595][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.243707][T15273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 669.256652][T15273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 669.282659][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 669.298920][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 669.832679][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 669.846722][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 669.873380][T15273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.680710][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 670.712088][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 670.750734][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 670.773132][T15549] netlink: 'syz.0.3096': attribute type 29 has an invalid length. [ 670.782488][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 670.825061][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 670.845321][T15549] netlink: 'syz.0.3096': attribute type 29 has an invalid length. [ 670.888693][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 670.943258][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 671.010913][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 671.083689][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 671.130111][T15546] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3095'. [ 671.616688][T15559] netlink: 'syz.0.3099': attribute type 12 has an invalid length. [ 671.648527][T15559] netlink: 'syz.0.3099': attribute type 15 has an invalid length. [ 671.712188][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 671.726876][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 671.789886][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 671.804706][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 671.840507][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 671.859992][T15555] delete_channel: no stack [ 671.902889][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 671.952122][T15273] device veth0_vlan entered promiscuous mode [ 672.011108][T15273] device veth1_vlan entered promiscuous mode [ 672.105323][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 672.125716][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 672.154410][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 672.197519][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 672.223026][T15273] device veth0_macvtap entered promiscuous mode [ 672.264122][T15273] device veth1_macvtap entered promiscuous mode [ 672.316111][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.345010][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.371282][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.420728][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.457749][T15273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.481637][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 672.502583][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 672.531771][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 672.564180][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 672.606007][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.642920][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.715000][T15273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.744849][T15273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.787328][T15273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.927564][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 672.958033][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 673.005682][T15273] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.030079][T15273] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.060337][T15273] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.089929][T15273] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.420517][T15585] device syzkaller0 entered promiscuous mode [ 673.561938][T15602] netlink: 'syz.3.3109': attribute type 4 has an invalid length. [ 674.721539][T15616] netlink: 'syz.0.3112': attribute type 2 has an invalid length. [ 674.740048][T15616] netlink: 'syz.0.3112': attribute type 1 has an invalid length. [ 676.579803][T15601] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 676.589637][T15601] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 676.602200][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.614022][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.626187][T15601] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 676.697168][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 676.770670][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.786199][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.806522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 677.163342][T15635] netlink: 'syz.4.3038': attribute type 10 has an invalid length. [ 677.232737][T15635] device veth0_macvtap left promiscuous mode [ 677.963601][T15646] netlink: 'syz.0.3120': attribute type 10 has an invalid length. [ 678.268155][T15646] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 678.389316][T15657] netlink: 'syz.1.3124': attribute type 2 has an invalid length. [ 678.435906][T15657] netlink: 'syz.1.3124': attribute type 8 has an invalid length. [ 678.455197][T15657] __nla_validate_parse: 23 callbacks suppressed [ 678.455219][T15657] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3124'. [ 678.646371][T15661] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3125'. [ 678.822178][T15661] netlink: 'syz.4.3125': attribute type 4 has an invalid length. [ 678.866677][T15661] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3125'. [ 678.944098][T14575] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 678.954381][T14575] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 678.968950][T14575] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 678.996159][T14575] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 679.004397][T14575] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 679.012486][T14575] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 679.075250][T15675] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3128'. [ 679.132799][T15679] netlink: 'syz.0.3129': attribute type 3 has an invalid length. [ 679.196527][T15679] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.3129'. [ 679.342669][T15693] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3132'. [ 679.420841][T15693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3132'. [ 679.476963][T15693] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3132'. [ 679.494931][T15693] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3132'. [ 679.509160][T15693] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3132'. [ 679.547772][T15698] bridge_slave_1: default FDB implementation only supports local addresses [ 679.837136][T13119] device 0 left promiscuous mode [ 679.927383][T13119] device 0 left promiscuous mode [ 679.954047][T15668] chnl_net:caif_netlink_parms(): no params data found [ 680.015434][T15716] ksmbd: Unknown IPC event: 10, ignore. [ 680.043067][T13119] device 1 left promiscuous mode [ 680.291585][T15668] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.299754][T15668] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.308683][T15668] device bridge_slave_0 entered promiscuous mode [ 680.351156][T15724] netlink: 'syz.3.3143': attribute type 4 has an invalid length. [ 680.363925][T15734] netlink: 'syz.0.3141': attribute type 4 has an invalid length. [ 680.377739][T15724] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 680.607616][T15668] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.638194][T15668] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.687437][T15668] device bridge_slave_1 entered promiscuous mode [ 680.851601][T15743] device wlan1 entered promiscuous mode [ 680.957741][T15668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.037088][T15668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.075320][T14575] Bluetooth: hci1: command 0x0409 tx timeout [ 681.152801][T15668] team0: Port device team_slave_0 added [ 681.256095][T15668] team0: Port device team_slave_1 added [ 681.416846][T15668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.424405][T15668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.552701][T15668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.709999][T15768] tc_dump_action: action bad kind [ 681.738740][T15668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.747529][T15668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 681.902811][T15668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.993984][T13119] device gretap0 left promiscuous mode [ 682.030919][T13119] Ÿë: port 2(gretap0) entered disabled state [ 682.272154][T15668] device hsr_slave_0 entered promiscuous mode [ 682.299314][T15668] device hsr_slave_1 entered promiscuous mode [ 682.322912][T15668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 682.356810][T15668] Cannot create hsr debugfs directory [ 682.599174][T15803] netlink: 'syz.0.3159': attribute type 28 has an invalid length. [ 683.155672][T14575] Bluetooth: hci1: command 0x041b tx timeout [ 683.499115][T13119] device veth0_to_team left promiscuous mode [ 683.523061][T13119] Ÿë: port 1(veth0_to_team) entered disabled state [ 683.596806][T13119] device hsr_slave_0 left promiscuous mode [ 683.640753][T13119] device hsr_slave_1 left promiscuous mode [ 683.696928][T13119] device veth0_macvtap left promiscuous mode [ 683.703320][T13119] device veth1_vlan left promiscuous mode [ 685.234990][T14575] Bluetooth: hci1: command 0x040f tx timeout [ 686.671699][T15668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 686.750316][T15668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 686.833710][T15668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 686.910692][T15668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 687.092645][T15881] netlink: 'syz.4.3176': attribute type 7 has an invalid length. [ 687.197585][T15881] netlink: 'syz.4.3176': attribute type 10 has an invalid length. [ 687.265069][T15881] __nla_validate_parse: 68 callbacks suppressed [ 687.265090][T15881] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3176'. [ 687.315035][T14575] Bluetooth: hci1: command 0x0419 tx timeout [ 687.355914][T15881] bridge0: port 3(veth0_vlan) entered blocking state [ 687.362875][T15881] bridge0: port 3(veth0_vlan) entered disabled state [ 687.439832][T15881] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 687.592485][T15668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.751590][T15892] mac80211_hwsim hwsim2 ªªªªªª: renamed from wlan0 [ 687.837044][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 687.877210][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 687.892732][T15668] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.975184][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 687.996179][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.028494][T13119] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.036381][T13119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.075394][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 688.118795][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.147949][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.178173][T13119] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.185749][T13119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.213541][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 688.248671][T15899] netlink: 'syz.4.3181': attribute type 10 has an invalid length. [ 688.270412][T15899] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3181'. [ 688.332722][T15899] bridge0: port 3(veth0_vlan) entered blocking state [ 688.373918][T15899] bridge0: port 3(veth0_vlan) entered disabled state [ 688.441236][T15899] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 688.476383][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 688.487245][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 688.500123][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 688.509889][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 688.520223][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 688.544173][T13119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 688.601641][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 688.615987][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 688.640179][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 688.686208][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 688.726681][T15668] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.024991][T13123] tipc: Subscription rejected, illegal request [ 689.207137][T15929] sctp: [Deprecated]: syz.0.3186 (pid 15929) Use of struct sctp_assoc_value in delayed_ack socket option. [ 689.207137][T15929] Use struct sctp_sack_info instead [ 689.585325][T15943] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.3193'. [ 689.621428][T15943] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.3193'. [ 689.914088][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 689.943566][T13123] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 689.991174][T15668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.052406][T15959] netlink: 'syz.4.3196': attribute type 22 has an invalid length. [ 690.087135][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3196'. [ 690.218530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.229550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.345726][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 690.362048][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 690.389983][T15668] device veth0_vlan entered promiscuous mode [ 690.408520][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 690.417415][T15972] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3198'. [ 690.432907][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.461039][T15668] device veth1_vlan entered promiscuous mode [ 690.489626][T15972] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3198'. [ 691.718792][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.725387][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.388858][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 692.448738][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 692.583683][T15668] device veth0_macvtap entered promiscuous mode [ 692.604347][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 692.623767][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 692.650296][T15668] device veth1_macvtap entered promiscuous mode [ 692.683141][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 692.710652][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 692.733370][T16010] netlink: 'syz.4.3203': attribute type 6 has an invalid length. [ 692.750572][T16010] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3203'. [ 693.074082][T16036] netlink: 'syz.0.3208': attribute type 10 has an invalid length. [ 693.130700][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.148260][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.167315][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.189199][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.209708][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.228556][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.266310][T15668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.275129][T13122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 693.285580][T13122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 693.302967][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.315312][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.327034][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.339895][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.350834][T15668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.368139][T15668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.391856][T15668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.410218][T16039] netlink: 'syz.3.3210': attribute type 12 has an invalid length. [ 693.438265][T16039] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3210'. [ 693.469286][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 693.500100][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 693.548945][T15668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.581530][T15668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.736805][T15668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.836932][T15668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.387469][T16051] netlink: 'syz.0.3214': attribute type 3 has an invalid length. [ 694.478419][T16051] netlink: 'syz.0.3214': attribute type 39 has an invalid length. [ 694.661647][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.690246][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.711651][T11340] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 694.782279][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.808125][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.843584][T13122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 696.295067][T16107] netlink: 'syz.3.3225': attribute type 7 has an invalid length. [ 696.351938][T16107] netlink: 126644 bytes leftover after parsing attributes in process `syz.3.3225'. [ 696.463213][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 696.473846][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 696.482780][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 696.526151][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 696.535291][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 696.542851][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 696.661282][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.183801][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.517903][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.698464][ T9] bond0: (slave netdevsim0): Releasing backup interface [ 697.793616][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.834355][T16134] netlink: 'syz.1.3233': attribute type 28 has an invalid length. [ 697.865613][T16134] netlink: 'syz.1.3233': attribute type 29 has an invalid length. [ 697.922012][T16134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3233'. [ 697.925147][T16131] netlink: 'syz.2.3231': attribute type 21 has an invalid length. [ 698.111827][T16138] netlink: 'syz.1.3233': attribute type 10 has an invalid length. [ 698.196287][T16138] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3233'. [ 698.595381][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 699.737651][T16114] chnl_net:caif_netlink_parms(): no params data found [ 699.865796][ T9] device 0 left promiscuous mode [ 700.087827][ T9] device .*! left promiscuous mode [ 700.206362][ T9] device 1 left promiscuous mode [ 700.283525][T16114] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.293578][T16114] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.356347][T16114] device bridge_slave_0 entered promiscuous mode [ 700.359549][T16166] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3238'. [ 700.485160][T16114] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.509022][T16114] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.588906][T16114] device bridge_slave_1 entered promiscuous mode [ 700.676085][ T4285] Bluetooth: hci0: command 0x041b tx timeout [ 701.060884][T16178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3241'. [ 701.156286][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.394582][T16178] device bridge_slave_0 left promiscuous mode [ 701.403668][T16178] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.601624][T16114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.735407][T16114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.999157][T16114] team0: Port device team_slave_0 added [ 702.102711][T16114] team0: Port device team_slave_1 added [ 702.161074][T16207] sock: sock_set_timeout: `syz.1.3245' (pid 16207) tries to set negative timeout [ 702.357854][T16114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.391981][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.452504][T16114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.580594][T16114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.605823][T16114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.687891][T16114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.755087][T14575] Bluetooth: hci0: command 0x040f tx timeout [ 703.176359][T16114] device hsr_slave_0 entered promiscuous mode [ 703.205331][T16114] device hsr_slave_1 entered promiscuous mode [ 703.247613][T16114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.268915][T16114] Cannot create hsr debugfs directory [ 703.503112][T16234] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.3252'. [ 703.724608][T16236] netlink: 'syz.2.3251': attribute type 9 has an invalid length. [ 703.772806][T16236] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3251'. [ 704.845191][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 704.940707][ T9] device macsec0 left promiscuous mode [ 704.957281][ T9] €: port 1(macsec0) entered disabled state [ 704.974706][ T9] device hsr_slave_1 left promiscuous mode [ 705.020725][ T9] device veth1_macvtap left promiscuous mode [ 706.208308][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.504441][ T9] bond0 (unregistering): Released all slaves [ 706.700371][T16114] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 706.754075][T16114] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 706.801266][T16114] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 706.825907][T16114] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 707.482546][T16114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.542164][T13124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 707.577432][T13124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 707.633561][T16114] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.699912][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 707.730864][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 707.760356][T13121] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.767647][T13121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.825548][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 707.839230][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 707.852501][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 707.896634][T13121] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.904130][T13121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.913096][T16318] netlink: 'syz.1.3267': attribute type 9 has an invalid length. [ 707.923626][T16318] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3267'. [ 707.950504][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 707.972663][T16316] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3267'. [ 707.996306][T16319] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3269'. [ 708.008154][T16316] netlink: zone id is out of range [ 708.013807][T16316] netlink: zone id is out of range [ 708.029900][T16316] netlink: zone id is out of range [ 708.054967][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 708.064259][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 708.065590][T16316] netlink: zone id is out of range [ 708.091043][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 708.108666][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 708.122080][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 708.134684][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 708.137216][T16316] netlink: zone id is out of range [ 708.151306][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 708.159556][T16316] netlink: zone id is out of range [ 708.172321][T16316] netlink: zone id is out of range [ 708.194541][T16114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 708.225100][T16316] netlink: zone id is out of range [ 708.231607][T16114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 708.240282][T16316] netlink: zone id is out of range [ 708.249628][T16316] netlink: zone id is out of range [ 708.257307][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 708.274123][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 708.296169][T13121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.585891][T16348] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3275'. [ 709.670905][T16348] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3275'. [ 710.132611][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 710.175339][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 710.250439][T16114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.426886][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 710.456505][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 710.536151][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 710.569824][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 710.642047][T16114] device veth0_vlan entered promiscuous mode [ 710.665060][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 710.713630][T13117] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 710.763587][T16114] device veth1_vlan entered promiscuous mode [ 710.893542][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 710.914338][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 710.942757][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 710.984197][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 711.028725][T16114] device veth0_macvtap entered promiscuous mode [ 711.063225][T16386] FAULT_INJECTION: forcing a failure. [ 711.063225][T16386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.087576][T16114] device veth1_macvtap entered promiscuous mode [ 711.122986][T16386] CPU: 1 PID: 16386 Comm: syz.2.3281 Not tainted syzkaller #0 [ 711.130659][T16386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 711.141126][T16386] Call Trace: [ 711.144549][T16386] [ 711.147720][T16386] dump_stack_lvl+0x188/0x24e [ 711.152916][T16386] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 711.159151][T16386] ? show_regs_print_info+0x12/0x12 [ 711.164520][T16386] ? load_image+0x400/0x400 [ 711.169290][T16386] should_fail_ex+0x399/0x4d0 [ 711.172164][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.174361][T16386] _copy_from_user+0x2c/0x170 [ 711.190034][T16386] __sys_bpf+0x2ea/0x780 [ 711.194445][T16386] ? bpf_link_show_fdinfo+0x380/0x380 [ 711.199997][T16386] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 711.206501][T16386] __x64_sys_bpf+0x78/0x90 [ 711.210979][T16386] do_syscall_64+0x4c/0xa0 [ 711.215562][T16386] ? clear_bhb_loop+0x60/0xb0 [ 711.220668][T16386] ? clear_bhb_loop+0x60/0xb0 [ 711.225736][T16386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 711.231863][T16386] RIP: 0033:0x7fc9ef59c819 [ 711.236512][T16386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.256396][T16386] RSP: 002b:00007fc9f03d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 711.264971][T16386] RAX: ffffffffffffffda RBX: 00007fc9ef815fa0 RCX: 00007fc9ef59c819 [ 711.267288][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.273422][T16386] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000005 [ 711.292098][T16386] RBP: 00007fc9f03d2090 R08: 0000000000000000 R09: 0000000000000000 [ 711.300671][T16386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.309142][T16386] R13: 00007fc9ef816038 R14: 00007fc9ef815fa0 R15: 00007ffcf32f8d78 [ 711.319743][T16386] [ 711.354894][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.399778][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.444855][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.467150][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.510432][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 711.524485][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.560267][T16114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.582454][T16401] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3285'. [ 711.605413][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 711.613939][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 711.661774][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 711.702382][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 711.735713][T16395] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.765527][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.825768][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.844845][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 711.864849][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 711.931625][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.011365][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.077676][T16114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.139644][T16114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.152516][T16114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.161783][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 712.172763][ T7285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 712.184056][T16411] netlink: 'syz.2.3286': attribute type 21 has an invalid length. [ 712.203227][T16411] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3286'. [ 712.265496][T16114] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.297782][T16114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.355187][T16114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.375197][T16114] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.733467][T13121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.753056][T13121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.853483][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 712.883852][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.924234][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.940648][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 713.105984][T16441] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3293'. [ 713.571303][T16455] FAULT_INJECTION: forcing a failure. [ 713.571303][T16455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.651327][T16455] CPU: 0 PID: 16455 Comm: syz.3.3295 Not tainted syzkaller #0 [ 713.659073][T16455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 713.669276][T16455] Call Trace: [ 713.672695][T16455] [ 713.675872][T16455] dump_stack_lvl+0x188/0x24e [ 713.680629][T16455] ? show_regs_print_info+0x12/0x12 [ 713.685990][T16455] ? load_image+0x400/0x400 [ 713.690819][T16455] ? __lock_acquire+0x7d10/0x7d10 [ 713.695920][T16455] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 713.701986][T16455] should_fail_ex+0x399/0x4d0 [ 713.706728][T16455] strncpy_from_user+0x32/0x350 [ 713.711667][T16455] bpf_prog_load+0x1f3/0x1560 [ 713.716408][T16455] ? map_freeze+0x390/0x390 [ 713.721040][T16455] ? __might_fault+0xa6/0x120 [ 713.725870][T16455] ? __might_fault+0xa6/0x120 [ 713.730861][T16455] ? __might_fault+0xc2/0x120 [ 713.735590][T16455] ? __might_fault+0xa6/0x120 [ 713.740337][T16455] ? bpf_lsm_bpf+0x5/0x10 [ 713.744713][T16455] ? security_bpf+0x7a/0xa0 [ 713.749324][T16455] __sys_bpf+0x5b8/0x780 [ 713.753698][T16455] ? bpf_link_show_fdinfo+0x380/0x380 [ 713.759233][T16455] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 713.765522][T16455] __x64_sys_bpf+0x78/0x90 [ 713.770001][T16455] do_syscall_64+0x4c/0xa0 [ 713.774476][T16455] ? clear_bhb_loop+0x60/0xb0 [ 713.779194][T16455] ? clear_bhb_loop+0x60/0xb0 [ 713.783908][T16455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 713.789935][T16455] RIP: 0033:0x7f5c9719c819 [ 713.794551][T16455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.814280][T16455] RSP: 002b:00007f5c97f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 713.822824][T16455] RAX: ffffffffffffffda RBX: 00007f5c97415fa0 RCX: 00007f5c9719c819 [ 713.830920][T16455] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000005 [ 713.839095][T16455] RBP: 00007f5c97f96090 R08: 0000000000000000 R09: 0000000000000000 [ 713.847092][T16455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.855169][T16455] R13: 00007f5c97416038 R14: 00007f5c97415fa0 R15: 00007ffced3b3a08 [ 713.863338][T16455] [ 714.371640][T16471] netlink: 'syz.1.3299': attribute type 11 has an invalid length. [ 714.401813][T16471] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3299'. [ 714.449469][T16480] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 714.466104][T16480] syzkaller0: owner set to 0 [ 714.977440][T16494] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3306'. [ 715.024305][T16498] IPv6: Can't replace route, no match found [ 715.287362][T16506] net_ratelimit: 3 callbacks suppressed [ 715.287382][T16506] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 715.405590][T16508] netlink: 'syz.2.3309': attribute type 10 has an invalid length. [ 715.437201][T16508] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3309'. [ 715.586877][T16511] FAULT_INJECTION: forcing a failure. [ 715.586877][T16511] name failslab, interval 1, probability 0, space 0, times 0 [ 715.615913][T16511] CPU: 1 PID: 16511 Comm: syz.3.3311 Not tainted syzkaller #0 [ 715.623508][T16511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 715.634606][T16511] Call Trace: [ 715.637974][T16511] [ 715.641078][T16511] dump_stack_lvl+0x188/0x24e [ 715.645864][T16511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 715.652133][T16511] ? show_regs_print_info+0x12/0x12 [ 715.657704][T16511] ? load_image+0x400/0x400 [ 715.662373][T16511] should_fail_ex+0x399/0x4d0 [ 715.667256][T16511] should_failslab+0x5/0x20 [ 715.671962][T16511] slab_pre_alloc_hook+0x59/0x310 [ 715.677295][T16511] ? __get_vm_area_node+0x122/0x330 [ 715.682600][T16511] __kmem_cache_alloc_node+0x4f/0x260 [ 715.688258][T16511] ? __get_vm_area_node+0x122/0x330 [ 715.693821][T16511] kmalloc_node_trace+0x22/0xe0 [ 715.698929][T16511] __get_vm_area_node+0x122/0x330 [ 715.704787][T16511] __vmalloc_node_range+0x357/0x13b0 [ 715.710177][T16511] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 715.715917][T16511] ? perf_trace_preemptirq_template+0x268/0x320 [ 715.722490][T16511] ? free_vm_area+0x50/0x50 [ 715.727176][T16511] ? end_current_label_crit_section+0x170/0x170 [ 715.733708][T16511] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 715.739387][T16511] __vmalloc+0x76/0x80 [ 715.743553][T16511] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 715.749341][T16511] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 715.755097][T16511] ? bpf_lsm_capable+0x5/0x10 [ 715.760054][T16511] bpf_prog_alloc+0x1c/0x1b0 [ 715.764763][T16511] bpf_prog_load+0x7c9/0x1560 [ 715.769582][T16511] ? map_freeze+0x390/0x390 [ 715.774184][T16511] ? rcu_is_watching+0x11/0xa0 [ 715.779135][T16511] ? __sys_bpf+0x300/0x780 [ 715.783756][T16511] ? bpf_lsm_bpf+0x5/0x10 [ 715.788257][T16511] ? security_bpf+0x7a/0xa0 [ 715.793031][T16511] __sys_bpf+0x5b8/0x780 [ 715.797431][T16511] ? bpf_link_show_fdinfo+0x380/0x380 [ 715.803164][T16511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 715.809593][T16511] __x64_sys_bpf+0x78/0x90 [ 715.814179][T16511] do_syscall_64+0x4c/0xa0 [ 715.818743][T16511] ? clear_bhb_loop+0x60/0xb0 [ 715.823616][T16511] ? clear_bhb_loop+0x60/0xb0 [ 715.828638][T16511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.834716][T16511] RIP: 0033:0x7f5c9719c819 [ 715.839318][T16511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.859369][T16511] RSP: 002b:00007f5c97f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 715.868149][T16511] RAX: ffffffffffffffda RBX: 00007f5c97415fa0 RCX: 00007f5c9719c819 [ 715.876446][T16511] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000005 [ 715.885031][T16511] RBP: 00007f5c97f96090 R08: 0000000000000000 R09: 0000000000000000 [ 715.893266][T16511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.901508][T16511] R13: 00007f5c97416038 R14: 00007f5c97415fa0 R15: 00007ffced3b3a08 [ 715.909636][T16511] [ 715.996216][T16511] syz.3.3311: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 716.055017][T16511] CPU: 0 PID: 16511 Comm: syz.3.3311 Not tainted syzkaller #0 [ 716.062676][T16511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 716.073570][T16511] Call Trace: [ 716.077175][T16511] [ 716.080546][T16511] dump_stack_lvl+0x188/0x24e [ 716.085642][T16511] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 716.092472][T16511] ? show_regs_print_info+0x12/0x12 [ 716.097732][T16511] ? load_image+0x400/0x400 [ 716.102371][T16511] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 716.109175][T16511] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 716.116085][T16511] warn_alloc+0x242/0x330 [ 716.120496][T16511] ? rcu_is_watching+0x11/0xa0 [ 716.125615][T16511] ? zone_watermark_ok_safe+0x270/0x270 [ 716.131210][T16511] ? lockdep_hardirqs_on+0x94/0x140 [ 716.136894][T16511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 716.143577][T16511] __vmalloc_node_range+0x37c/0x13b0 [ 716.149395][T16511] ? perf_trace_preemptirq_template+0x268/0x320 [ 716.155887][T16511] ? free_vm_area+0x50/0x50 [ 716.160558][T16511] ? end_current_label_crit_section+0x170/0x170 [ 716.166951][T16511] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 716.172684][T16511] __vmalloc+0x76/0x80 [ 716.176847][T16511] ? bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 716.182660][T16511] bpf_prog_alloc_no_stats+0x3a/0x3a0 [ 716.188666][T16511] ? bpf_lsm_capable+0x5/0x10 [ 716.193398][T16511] bpf_prog_alloc+0x1c/0x1b0 [ 716.198055][T16511] bpf_prog_load+0x7c9/0x1560 [ 716.202891][T16511] ? map_freeze+0x390/0x390 [ 716.207494][T16511] ? rcu_is_watching+0x11/0xa0 [ 716.212377][T16511] ? __sys_bpf+0x300/0x780 [ 716.217198][T16511] ? bpf_lsm_bpf+0x5/0x10 [ 716.221690][T16511] ? security_bpf+0x7a/0xa0 [ 716.226617][T16511] __sys_bpf+0x5b8/0x780 [ 716.231179][T16511] ? bpf_link_show_fdinfo+0x380/0x380 [ 716.236870][T16511] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 716.243885][T16511] __x64_sys_bpf+0x78/0x90 [ 716.248591][T16511] do_syscall_64+0x4c/0xa0 [ 716.253102][T16511] ? clear_bhb_loop+0x60/0xb0 [ 716.258047][T16511] ? clear_bhb_loop+0x60/0xb0 [ 716.262984][T16511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 716.268976][T16511] RIP: 0033:0x7f5c9719c819 [ 716.273522][T16511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.293460][T16511] RSP: 002b:00007f5c97f96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 716.301922][T16511] RAX: ffffffffffffffda RBX: 00007f5c97415fa0 RCX: 00007f5c9719c819 [ 716.309933][T16511] RDX: 0000000000000048 RSI: 0000200000000140 RDI: 0000000000000005 [ 716.317958][T16511] RBP: 00007f5c97f96090 R08: 0000000000000000 R09: 0000000000000000 [ 716.326062][T16511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.334273][T16511] R13: 00007f5c97416038 R14: 00007f5c97415fa0 R15: 00007ffced3b3a08 [ 716.342668][T16511] [ 716.425725][T16511] Mem-Info: [ 716.428961][T16511] active_anon:11730 inactive_anon:0 isolated_anon:0 [ 716.428961][T16511] active_file:21633 inactive_file:40185 isolated_file:0 [ 716.428961][T16511] unevictable:768 dirty:112 writeback:0 [ 716.428961][T16511] slab_reclaimable:21409 slab_unreclaimable:93926 [ 716.428961][T16511] mapped:29799 shmem:1361 pagetables:598 [ 716.428961][T16511] sec_pagetables:0 bounce:0 [ 716.428961][T16511] kernel_misc_reclaimable:0 [ 716.428961][T16511] free:1309091 free_pcp:10640 free_cma:0 [ 716.545471][T16511] Node 0 active_anon:40720kB inactive_anon:0kB active_file:86532kB inactive_file:160540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119296kB dirty:448kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10876kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no [ 716.646394][T16519] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3313'. [ 716.688668][T16511] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 716.765270][T16511] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.858088][T16511] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 716.874099][T16511] Node 0 DMA32 free:1321024kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:40288kB inactive_anon:0kB active_file:86532kB inactive_file:160540kB unevictable:1536kB writepending:448kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:29964kB local_pcp:16404kB free_cma:0kB [ 716.929411][T16511] lowmem_reserve[]: 0 0 1 1 1 [ 716.991790][T16528] device syzkaller0 entered promiscuous mode [ 717.010262][T16511] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 717.054940][T16511] lowmem_reserve[]: 0 0 0 0 0 [ 717.059775][T16511] Node 1 Normal free:3899852kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:19528kB local_pcp:10816kB free_cma:0kB [ 717.162379][T16511] lowmem_reserve[]: 0 0 0 0 0 [ 717.169075][T16511] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 717.183194][T16511] Node 0 DMA32: 786*4kB (ME) 1745*8kB (ME) 851*16kB (UME) 485*32kB (ME) 395*64kB (UME) 1041*128kB (UM) 320*256kB (UME) 94*512kB (UM) 32*1024kB (UM) 11*2048kB (UME) 226*4096kB (UM) = 1315808kB [ 717.209018][T16511] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 717.235002][T16511] Node 1 Normal: 227*4kB (UME) 46*8kB (UME) 27*16kB (UME) 27*32kB (UE) 23*64kB (UME) 14*128kB (UME) 5*256kB (UM) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3899852kB [ 717.255811][T16511] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 717.266481][T16511] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 717.278870][T16511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 717.292997][T16511] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 717.304244][T16511] 63179 total pagecache pages [ 717.313072][T16511] 0 pages in swap cache [ 717.325457][T16511] Free swap = 124996kB [ 717.331533][T16511] Total swap = 124996kB [ 717.340082][T16511] 2097051 pages RAM [ 717.347116][T16511] 0 pages HighMem/MovableOnly [ 717.355419][T16511] 415207 pages reserved [ 717.360975][T16511] 0 pages cma reserved [ 717.770016][T16545] netlink: 'syz.1.3322': attribute type 3 has an invalid length. [ 717.795288][T16545] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3322'. [ 719.978514][T16537] IPv6: Can't replace route, no match found [ 719.994733][T16549] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3322'. [ 720.314900][T16560] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3325'. [ 720.771752][T16575] netlink: 'syz.3.3331': attribute type 3 has an invalid length. [ 720.789032][T16575] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.3331'. [ 720.805048][T16576] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3331'. [ 721.210285][T16586] sctp: [Deprecated]: syz.2.3334 (pid 16586) Use of struct sctp_assoc_value in delayed_ack socket option. [ 721.210285][T16586] Use struct sctp_sack_info instead [ 721.461027][T16592] IPv6: Can't replace route, no match found [ 722.829847][T16623] netlink: 'syz.1.3345': attribute type 10 has an invalid length. [ 722.968854][T16623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 723.006469][T16623] team0: Port device bond0 added [ 723.097289][T16632] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3347'. [ 723.367563][T16628] netlink: 'syz.4.3348': attribute type 21 has an invalid length. [ 723.377421][T16628] netlink: 14530 bytes leftover after parsing attributes in process `syz.4.3348'. [ 723.395131][T16636] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3350'. [ 723.943319][T16656] netlink: 'syz.1.3355': attribute type 21 has an invalid length. [ 723.956153][T16656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3355'. [ 724.281276][T16669] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3356'. [ 724.597706][T14575] Bluetooth: hci2: ISO packet for unknown connection handle 3870 [ 726.877850][T16651] netlink: 'syz.0.3354': attribute type 10 has an invalid length. [ 726.893601][T16651] team0: Device ipvlan1 failed to register rx_handler [ 726.943605][T16682] netlink: 'syz.1.3362': attribute type 10 has an invalid length. [ 726.955209][T16682] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3362'. [ 726.964265][T16682] device hsr0 entered promiscuous mode [ 726.975801][T16682] bridge0: port 3(hsr0) entered blocking state [ 726.982391][T16682] bridge0: port 3(hsr0) entered disabled state [ 726.999727][T16682] bridge0: port 3(hsr0) entered blocking state [ 727.006274][T16682] bridge0: port 3(hsr0) entered forwarding state [ 727.372852][T16709] netlink: 'syz.0.3367': attribute type 16 has an invalid length. [ 727.459665][T16709] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3367'. [ 727.595097][T16712] netlink: 'syz.2.3370': attribute type 21 has an invalid length. [ 727.678403][T16712] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3370'. [ 727.721719][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'. [ 727.767975][T16710] Ÿë: port 1(veth0_to_team) entered blocking state [ 727.795607][T16710] Ÿë: port 1(veth0_to_team) entered disabled state [ 727.824625][T16710] device veth0_to_team entered promiscuous mode [ 728.083114][T16718] netlink: 'syz.3.3372': attribute type 10 has an invalid length. [ 728.092514][T16718] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3372'. [ 728.187021][T16728] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3374'. [ 731.526799][T16776] device syzkaller0 entered promiscuous mode [ 731.575836][T16792] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3389'. [ 734.208888][T16805] device wlan1 entered promiscuous mode [ 734.228407][T16807] netlink: 'syz.0.3398': attribute type 15 has an invalid length. [ 734.239472][T16807] netlink: 'syz.0.3398': attribute type 7 has an invalid length. [ 734.710834][T16819] netlink: 'syz.0.3400': attribute type 1 has an invalid length. [ 734.740179][T16819] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3400'. [ 734.753103][T16824] netlink: 'syz.4.3402': attribute type 2 has an invalid length. [ 734.763362][T14575] Bluetooth: hci2: command 0x0406 tx timeout [ 734.791480][T16824] netlink: 'syz.4.3402': attribute type 1 has an invalid length. [ 734.808824][T16824] netlink: 185292 bytes leftover after parsing attributes in process `syz.4.3402'. [ 735.093374][T16844] netlink: 'syz.0.3408': attribute type 29 has an invalid length. [ 735.812741][T16868] netlink: 'syz.4.3416': attribute type 27 has an invalid length. [ 735.824193][T16868] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3416'. [ 736.295823][T16875] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 736.346880][T16875] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.3418'. [ 736.759928][T16894] netlink: 'syz.0.3424': attribute type 11 has an invalid length. [ 736.792436][T16895] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3423'. [ 736.827708][T16894] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.3424'. [ 736.847371][T16894] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3424'. [ 737.251705][T16907] netlink: 'syz.2.3428': attribute type 17 has an invalid length. [ 737.274864][T16907] netlink: 'syz.2.3428': attribute type 16 has an invalid length. [ 737.313956][T16907] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3428'. [ 738.532434][T16943] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3439'. [ 739.140613][T16955] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 739.634903][T16955] device syzkaller0 entered promiscuous mode [ 742.800419][T16961] device syzkaller0 entered promiscuous mode [ 742.868457][T16983] validate_nla: 1 callbacks suppressed [ 742.868477][T16983] netlink: 'syz.0.3448': attribute type 21 has an invalid length. [ 742.900965][T16983] netlink: 'syz.0.3448': attribute type 5 has an invalid length. [ 745.645082][T16999] netlink: 'syz.0.3451': attribute type 4 has an invalid length. [ 745.662311][T17001] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3451'. [ 745.973613][T17007] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3453'. [ 746.048504][T17015] netlink: 'syz.4.3456': attribute type 10 has an invalid length. [ 746.794394][T17015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.873077][T17015] team0: Port device bond0 added [ 746.891885][T17017] netlink: 'syz.4.3456': attribute type 21 has an invalid length. [ 747.748534][T17030] device wlan1 entered promiscuous mode [ 747.996453][T17032] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3463'. [ 748.131180][T17036] delete_channel: no stack [ 748.232743][T17032] team0: Port device team_slave_0 removed [ 748.257368][T17032] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 748.285501][T17051] netlink: 'syz.1.3467': attribute type 21 has an invalid length. [ 749.354383][T17079] netlink: 'syz.1.3477': attribute type 29 has an invalid length. [ 749.373079][T17079] netlink: 'syz.1.3477': attribute type 29 has an invalid length. [ 749.451268][T17081] netlink: 'syz.1.3477': attribute type 29 has an invalid length. [ 749.481656][T17079] netlink: 'syz.1.3477': attribute type 29 has an invalid length. [ 749.953104][T17092] netlink: 'syz.4.3482': attribute type 3 has an invalid length. [ 749.984900][T17092] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3482'. [ 750.510374][T17105] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.563407][T17110] netlink: 'syz.1.3485': attribute type 10 has an invalid length. [ 750.580958][T17110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.612450][T17110] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 750.643945][T17111] netlink: 'syz.1.3485': attribute type 10 has an invalid length. [ 750.680917][T17111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3485'. [ 750.704963][T17111] device batadv0 entered promiscuous mode [ 750.722240][T17111] bond0: (slave batadv0): Releasing backup interface [ 750.749483][T17111] bridge0: port 4(batadv0) entered blocking state [ 750.766716][T17111] bridge0: port 4(batadv0) entered disabled state [ 750.788611][T17114] netlink: 'syz.2.3486': attribute type 23 has an invalid length. [ 750.804998][T17114] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3486'. [ 751.325393][T11340] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 751.335604][T11340] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 751.771001][T17134] netlink: 'syz.4.3491': attribute type 3 has an invalid length. [ 751.815114][T17134] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3491'. [ 751.992024][T17133] IPv6: NLM_F_CREATE should be specified when creating new route [ 752.044040][T17133] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3491'. [ 753.226012][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.232671][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.718897][T17147] tun0: tun_chr_ioctl cmd 1074025681 [ 755.903711][T17158] netlink: 'syz.1.3496': attribute type 10 has an invalid length. [ 755.920368][T17158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.101783][T17158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.138835][T17158] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 756.223740][T17160] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3497'. [ 759.691304][T17212] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3512'. [ 759.908576][T17217] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3513'. [ 760.056826][T17223] netlink: 'syz.0.3515': attribute type 10 has an invalid length. [ 760.072597][T17223] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3515'. [ 760.355657][T14575] Bluetooth: hci4: command 0x0406 tx timeout [ 761.429860][T17248] netlink: 'syz.3.3521': attribute type 13 has an invalid length. [ 761.461451][T17248] netlink: 'syz.3.3521': attribute type 14 has an invalid length. [ 761.481311][T17248] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3521'. [ 761.781984][T17248] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3521'. [ 761.822107][T17248] openvswitch: netlink: Message has 6 unknown bytes. [ 761.982350][T17258] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3524'. [ 762.073845][T17258] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.3524'. [ 762.091005][T17258] netlink: 6320 bytes leftover after parsing attributes in process `syz.4.3524'. [ 762.117215][T17258] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3524'. [ 762.136326][T17258] tc_dump_action: action bad kind [ 762.665291][T17271] device vcan0 entered promiscuous mode [ 762.671341][T17271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 762.767861][T17276] netlink: 'syz.2.3531': attribute type 10 has an invalid length. [ 762.807872][T17276] device wlan1 left promiscuous mode [ 763.006836][T17276] team0: Port device wlan1 added [ 763.386377][T17286] netlink: 'syz.0.3535': attribute type 10 has an invalid length. [ 765.537192][T17286] team0: Device vxcan1 is of different type [ 765.679656][T17292] netlink: 'syz.2.3537': attribute type 29 has an invalid length. [ 768.698884][T17292] netlink: 'syz.2.3537': attribute type 29 has an invalid length. [ 769.194184][T17323] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 769.201151][T17323] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 769.238488][T17321] netlink: 'syz.3.3543': attribute type 4 has an invalid length. [ 769.247755][T17321] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3543'. [ 769.321577][T17321] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 769.426689][T17334] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3546'. [ 769.459216][T17334] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.3546'. [ 769.755022][T17342] netlink: 'syz.4.3548': attribute type 10 has an invalid length. [ 769.773140][T17342] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3548'. [ 770.995138][T17353] netlink: 'syz.0.3550': attribute type 10 has an invalid length. [ 771.121006][T17353] team0: Port device wlan1 added [ 771.397248][T17358] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3553'. [ 771.475409][T17362] netlink: 'syz.1.3553': attribute type 12 has an invalid length. [ 771.540135][T17361] netlink: 'syz.3.3552': attribute type 29 has an invalid length. [ 771.595105][T17362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3553'. [ 771.617067][T17361] netlink: 'syz.3.3552': attribute type 29 has an invalid length. [ 771.632523][T17365] netlink: 'syz.3.3552': attribute type 29 has an invalid length. [ 771.688197][T17357] bridge0: port 3(hsr0) entered disabled state [ 771.700319][T17357] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.714790][T17357] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.785851][T17361] netlink: 'syz.3.3552': attribute type 1 has an invalid length. [ 771.806589][T17361] netlink: 'syz.3.3552': attribute type 3 has an invalid length. [ 771.814462][T17361] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3552'. [ 772.296842][T17386] netlink: 14544 bytes leftover after parsing attributes in process `syz.4.3561'. [ 773.977648][T17406] validate_nla: 1 callbacks suppressed [ 773.977667][T17406] netlink: 'syz.1.3565': attribute type 10 has an invalid length. [ 774.362073][T17415] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3569'. [ 774.678947][T17428] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3571'. [ 774.740347][T17430] netlink: 'syz.1.3573': attribute type 12 has an invalid length. [ 774.811226][T17430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3573'. [ 774.874012][T17424] netlink: 'syz.0.3571': attribute type 12 has an invalid length. [ 774.899831][T17424] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3571'. [ 774.988511][T17431] netlink: 'syz.1.3573': attribute type 29 has an invalid length. [ 775.095106][T17439] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3575'. [ 775.288310][T17442] netlink: 'syz.3.3575': attribute type 3 has an invalid length. [ 775.354536][T17442] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3575'. [ 775.496338][T17428] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.504344][T17428] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.548856][T17431] netlink: 'syz.1.3573': attribute type 29 has an invalid length. [ 775.576779][T17445] netlink: 'syz.3.3575': attribute type 10 has an invalid length. [ 775.633334][T17445] team0: Device vxcan1 is of different type [ 776.578215][T11340] tipc: Subscription rejected, illegal request [ 776.966726][T17484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3588'. [ 777.020143][T17484] netlink: 'syz.2.3588': attribute type 12 has an invalid length. [ 777.054972][T17484] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3588'. [ 777.105653][T17488] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.098379][T17557] netlink: 'syz.1.3607': attribute type 2 has an invalid length. [ 779.152772][T17557] netlink: 'syz.1.3607': attribute type 1 has an invalid length. [ 779.199097][T17557] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.3607'. [ 780.895586][ T4285] Bluetooth: hci3: command 0x0406 tx timeout [ 783.229746][T17612] netlink: 'syz.4.3623': attribute type 10 has an invalid length. [ 783.894244][T17617] netlink: 'syz.0.3631': attribute type 39 has an invalid length. [ 784.306920][T17624] netlink: 'syz.1.3625': attribute type 21 has an invalid length. [ 785.012283][T17648] netlink: 'syz.1.3633': attribute type 29 has an invalid length. [ 785.041354][T17648] netlink: 'syz.1.3633': attribute type 29 has an invalid length. [ 785.069353][T17650] netlink: 'syz.1.3633': attribute type 29 has an invalid length. [ 785.114923][T17647] delete_channel: no stack [ 786.840621][T17691] netlink: 'syz.3.3639': attribute type 3 has an invalid length. [ 786.865251][T17691] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3639'. [ 787.411416][T17715] netlink: 'syz.2.3644': attribute type 29 has an invalid length. [ 787.556531][T17718] netlink: 'syz.2.3644': attribute type 11 has an invalid length. [ 787.575282][T17718] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3644'. [ 788.292117][T17710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 790.514517][T17735] sock: sock_timestamping_bind_phc: sock not bind to device [ 790.883597][T17749] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.3655'. [ 791.055047][T17758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3658'. [ 791.102606][T17752] netlink: 'syz.1.3657': attribute type 3 has an invalid length. [ 791.119244][T17758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3658'. [ 791.149757][T17752] netlink: 'syz.1.3657': attribute type 1 has an invalid length. [ 791.193945][T17752] netlink: 21959 bytes leftover after parsing attributes in process `syz.1.3657'. [ 792.104031][T17777] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3664'. [ 792.177228][T17777] netlink: zone id is out of range [ 792.235359][T17777] netlink: zone id is out of range [ 792.259959][T17777] netlink: zone id is out of range [ 792.302378][T17777] netlink: zone id is out of range [ 792.328305][T17777] netlink: zone id is out of range [ 792.345120][T17777] netlink: zone id is out of range [ 792.362914][T17777] netlink: zone id is out of range [ 792.393171][T17777] netlink: zone id is out of range [ 792.411417][T17777] netlink: zone id is out of range [ 792.428736][T17777] netlink: zone id is out of range [ 793.715779][T17792] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3665'. [ 794.286709][T17808] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3670'. [ 795.325174][T17832] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3676'. [ 796.810817][T17878] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3688'. [ 797.752336][T17909] netlink: 'syz.3.3698': attribute type 10 has an invalid length. [ 797.910922][T17915] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3697'. [ 797.953977][T17909] team0: Port device geneve1 added [ 798.350850][T17929] net_ratelimit: 139 callbacks suppressed [ 798.350871][T17929] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 798.477153][T17929] netlink: 'syz.3.3703': attribute type 39 has an invalid length. [ 798.930221][T17935] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.453669][T17949] device syzkaller0 entered promiscuous mode [ 801.314902][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 810.062170][T18120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3753'. [ 810.336970][T18130] netlink: 16162 bytes leftover after parsing attributes in process `syz.4.3756'. [ 810.771404][T18134] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.3757'. [ 810.793195][T18134] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3757'. [ 810.877700][T18138] netlink: 'syz.1.3758': attribute type 12 has an invalid length. [ 810.944858][T18138] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.3758'. [ 811.394270][T18145] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3759'. [ 811.489856][T18145] netlink: zone id is out of range [ 811.547513][T18145] netlink: zone id is out of range [ 811.567714][T18143] netlink: 'syz.0.3761': attribute type 3 has an invalid length. [ 811.652351][T18145] netlink: zone id is out of range [ 811.689622][T18143] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3761'. [ 811.713419][T18145] netlink: zone id is out of range [ 811.765033][T18145] netlink: zone id is out of range [ 811.801416][T18145] netlink: zone id is out of range [ 811.827330][T18157] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3764'. [ 811.852655][T18145] netlink: del zone limit has 4 unknown bytes [ 812.685280][T18170] pimreg: tun_chr_ioctl cmd 2147767520 [ 813.264177][T18205] netlink: 'syz.3.3778': attribute type 3 has an invalid length. [ 813.308052][T18205] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3778'. [ 813.420326][T18207] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3779'. [ 814.619226][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.625824][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.918272][T18247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 815.965393][T18247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.065728][T18247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.085489][T18247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.677039][T18253] @: port 1(vlan0) entered blocking state [ 816.695137][T18253] @: port 1(vlan0) entered disabled state [ 816.736253][T18253] device vlan0 entered promiscuous mode [ 817.164409][T18264] netlink: 'syz.1.3795': attribute type 10 has an invalid length. [ 817.200257][T18264] __nla_validate_parse: 1 callbacks suppressed [ 817.200373][T18264] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3795'. [ 817.253112][T18271] netlink: 'syz.0.3798': attribute type 3 has an invalid length. [ 817.296795][T18264] device batadv_slave_1 entered promiscuous mode [ 817.309298][T18271] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3798'. [ 817.359126][T18264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.389529][T18264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 818.959835][T18297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3806'. [ 819.016445][T18297] netlink: 'syz.2.3806': attribute type 10 has an invalid length. [ 819.463217][T18312] netlink: 'syz.3.3809': attribute type 21 has an invalid length. [ 819.526977][T18292] delete_channel: no stack [ 819.893837][T18324] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3812'. [ 819.942052][T18320] netlink: 'syz.0.3811': attribute type 10 has an invalid length. [ 820.030559][T18320] bond0: (slave bond_slave_0): Releasing backup interface [ 820.306476][T18336] netlink: 'syz.1.3816': attribute type 27 has an invalid length. [ 821.799411][T14575] Bluetooth: hci0: command 0x0406 tx timeout [ 823.056027][T18336] bond0: (slave bond_slave_0): Releasing backup interface [ 823.472923][T18356] netlink: 'syz.3.3821': attribute type 4 has an invalid length. [ 823.528787][T18356] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3821'. [ 823.738117][T18365] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3823'. [ 824.200610][T18371] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3827'. [ 824.329778][T18372] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3828'. [ 824.591517][T18390] netlink: 'syz.1.3831': attribute type 3 has an invalid length. [ 824.693922][T18390] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3831'. [ 827.260670][T18431] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3844'. [ 827.337431][T18436] netlink: 71 bytes leftover after parsing attributes in process `syz.3.3846'. [ 827.466515][T18439] netlink: 'syz.4.3847': attribute type 21 has an invalid length. [ 827.886021][T18450] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3846'. [ 828.351396][T18460] netlink: 'syz.1.3849': attribute type 10 has an invalid length. [ 828.405790][T18460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3849'. [ 828.443915][T18460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.460691][T18465] netlink: 'syz.2.3854': attribute type 2 has an invalid length. [ 828.486736][T18447] netlink: 15478 bytes leftover after parsing attributes in process `syz.1.3849'. [ 828.660840][T18465] device 0 entered promiscuous mode [ 829.201547][T18477] netlink: 'syz.0.3857': attribute type 10 has an invalid length. [ 829.265808][T18477] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3857'. [ 829.309186][T18477] device batadv_slave_1 entered promiscuous mode [ 829.389816][T18477] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.426737][T18477] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.682155][T18493] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3862'. [ 830.110989][T18505] IPv6: pim6reg1: Disabled Multicast RS [ 830.347326][T18512] netlink: 'syz.2.3866': attribute type 21 has an invalid length. [ 831.332739][T18521] netlink: 'syz.0.3869': attribute type 9 has an invalid length. [ 831.369938][T18521] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.3869'. [ 831.934102][T18539] netlink: 'syz.2.3875': attribute type 10 has an invalid length. [ 831.975457][T18539] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3875'. [ 832.027338][T18539] device batadv_slave_1 entered promiscuous mode [ 832.059629][T18539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.092148][T18539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.778239][T18559] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3879'. [ 837.213511][T18628] netlink: 'syz.2.3897': attribute type 2 has an invalid length. [ 837.254159][T18628] netlink: 'syz.2.3897': attribute type 8 has an invalid length. [ 837.321220][T18628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3897'. [ 837.359332][T18634] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3898'. [ 837.392765][T18630] netlink: 'syz.2.3897': attribute type 2 has an invalid length. [ 837.448658][T18630] netlink: 'syz.2.3897': attribute type 8 has an invalid length. [ 837.487563][T18630] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3897'. [ 838.012359][T18654] netlink: 'syz.2.3903': attribute type 1 has an invalid length. [ 838.021564][T18654] netlink: 126288 bytes leftover after parsing attributes in process `syz.2.3903'. [ 838.032327][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3903'. [ 838.499338][T18659] netlink: 'syz.3.3905': attribute type 1 has an invalid length. [ 838.525006][T18659] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.3905'. [ 839.710949][T18696] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3917'. [ 840.161204][T18709] netlink: 'syz.3.3921': attribute type 10 has an invalid length. [ 840.233381][T18709] device geneve0 entered promiscuous mode [ 840.339318][T18709] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 840.432785][T18717] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3922'. [ 840.532610][T18719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3924'. [ 840.571134][T18721] netlink: 'syz.0.3925': attribute type 3 has an invalid length. [ 840.609363][T18721] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3925'. [ 840.664630][T18726] netlink: 'syz.2.3927': attribute type 1 has an invalid length. [ 840.786726][T18729] netlink: 'syz.3.3926': attribute type 2 has an invalid length. [ 842.885299][T18786] validate_nla: 2 callbacks suppressed [ 842.885318][T18786] netlink: 'syz.3.3944': attribute type 1 has an invalid length. [ 843.085402][T18786] netlink: 'syz.3.3944': attribute type 1 has an invalid length. [ 843.093351][T18786] __nla_validate_parse: 4 callbacks suppressed [ 843.093368][T18786] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.3944'. [ 843.642716][T18812] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3954'. [ 843.687783][T18812] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3954'. [ 843.999509][T18809] IPv6: Can't replace route, no match found [ 844.026771][T18821] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 844.069352][T18826] netlink: 'syz.4.3956': attribute type 2 has an invalid length. [ 844.090291][T18826] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.3956'. [ 844.774739][T18834] bridge0: port 3(ip6gretap0) entered blocking state [ 844.800788][T18837] netlink: 'syz.3.3961': attribute type 11 has an invalid length. [ 844.823828][T18834] bridge0: port 3(ip6gretap0) entered disabled state [ 844.861235][T18837] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3961'. [ 844.948386][T18834] device ip6gretap0 entered promiscuous mode [ 844.980752][T18837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.153715][T18849] netlink: 'syz.1.3965': attribute type 1 has an invalid length. [ 846.278445][T18849] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3965'. [ 846.462539][T18850] team0: Port device team_slave_0 removed [ 846.490527][T18850] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 847.326276][T18863] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3968'. [ 847.693190][T18875] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3971'. [ 847.786480][T18874] device pim6reg1 entered promiscuous mode [ 847.991660][T18884] : port 1(ip6gretap0) entered blocking state [ 847.999108][T18884] : port 1(ip6gretap0) entered disabled state [ 848.007346][T18884] device ip6gretap0 entered promiscuous mode [ 848.062543][T18880] device ip6gretap0 left promiscuous mode [ 848.077889][T18880] : port 1(ip6gretap0) entered disabled state [ 848.563837][T18908] netlink: 'syz.0.3980': attribute type 1 has an invalid length. [ 848.580781][T18910] device macsec0 entered promiscuous mode [ 848.593287][T18910] device veth1_macvtap left promiscuous mode [ 848.658189][T18911] syz.1.3982[18911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.658309][T18911] syz.1.3982[18911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 848.746055][T18905] netlink: 'syz.0.3980': attribute type 1 has an invalid length. [ 848.791934][T18905] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.3980'. [ 849.490718][T18928] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3987'. [ 850.753694][T18963] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3995'. [ 851.125861][T18969] netlink: 'syz.0.3999': attribute type 13 has an invalid length. [ 851.154968][T18969] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3999'. [ 851.208660][T18969] syz_tun: refused to change device tx_queue_len [ 851.223885][T18969] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 851.274607][T18971] netlink: 'syz.0.3999': attribute type 13 has an invalid length. [ 851.305660][T18971] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3999'. [ 851.330968][T18971] syz_tun: refused to change device tx_queue_len [ 851.354893][T18971] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 851.418604][T18974] device bridge_slave_1 left promiscuous mode [ 851.428142][T18974] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.510474][T18974] device bridge_slave_0 left promiscuous mode [ 851.524582][T18974] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.717770][T18975] netlink: 'syz.0.3999': attribute type 10 has an invalid length. [ 851.777858][T18975] team0: Port device netdevsim0 added [ 851.928027][T18981] netlink: 'syz.4.4001': attribute type 3 has an invalid length. [ 851.986539][T18981] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4001'. [ 852.114238][T18985] device syzkaller0 entered promiscuous mode [ 852.132799][T18985] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 852.305518][T18989] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4002'. [ 853.178153][T19030] netlink: 'syz.1.4012': attribute type 3 has an invalid length. [ 853.243867][T19030] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4012'. [ 853.794262][T19048] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4021'. [ 854.478406][T19067] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4035'. [ 855.797885][T19088] pimreg0: tun_chr_ioctl cmd 35111 [ 855.806596][T19091] netlink: 'syz.0.4034': attribute type 10 has an invalid length. [ 855.897150][T19088] netlink: 'syz.4.4027': attribute type 2 has an invalid length. [ 855.954494][T19088] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.4027'. [ 856.655759][T19114] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4040'. [ 857.128072][T19128] netlink: 'syz.4.4045': attribute type 10 has an invalid length. [ 857.373247][T19133] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4048'. [ 857.579180][T19133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.655696][T19133] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 857.795975][T19133] bond0 (unregistering): Released all slaves [ 858.310817][T19165] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4054'. [ 858.754443][T19173] netlink: 'syz.0.4059': attribute type 10 has an invalid length. [ 858.810919][T19173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4059'. [ 858.906642][T19176] netlink: 'syz.0.4059': attribute type 10 has an invalid length. [ 859.014128][T19176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.118072][T19176] team0: Port device bond0 added [ 859.166015][T19168] IPv6: Can't replace route, no match found [ 859.556440][T19179] mac80211_hwsim hwsim36 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 860.390892][T19211] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4068'. [ 861.030816][T19195] device syzkaller0 entered promiscuous mode [ 867.282932][T19234] IPv6: Can't replace route, no match found [ 867.309044][T19235] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 867.476929][T19257] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4081'. [ 867.652599][T19263] netlink: 'syz.3.4083': attribute type 2 has an invalid length. [ 867.834540][T19263] device 0 entered promiscuous mode [ 868.512946][T19294] netlink: 'syz.2.4090': attribute type 29 has an invalid length. [ 868.559827][T19294] netlink: 'syz.2.4090': attribute type 29 has an invalid length. [ 868.571379][T19296] netlink: 'syz.2.4090': attribute type 29 has an invalid length. [ 868.639811][T19294] netlink: 'syz.2.4090': attribute type 29 has an invalid length. [ 869.003672][T19316] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4095'. [ 869.127717][T19299] IPv6: Can't replace route, no match found [ 869.295242][T19299] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 869.576425][T19329] netlink: 'syz.4.4098': attribute type 3 has an invalid length. [ 869.616091][T19333] netlink: 'syz.4.4098': attribute type 21 has an invalid length. [ 869.624004][T19333] netlink: 'syz.4.4098': attribute type 11 has an invalid length. [ 869.626153][T19329] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.4098'. [ 869.645432][ T8894] wlan1: Trigger new scan to find an IBSS to join [ 869.684026][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.704044][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.713454][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.723043][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.732445][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.741748][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.751311][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.760669][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.770231][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 869.780140][T19337] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 870.255214][T19338] device syzkaller0 entered promiscuous mode [ 870.984676][T19358] netlink: 'syz.0.4108': attribute type 29 has an invalid length. [ 871.725824][T13123] wlan1: Trigger new scan to find an IBSS to join [ 872.682152][ T8894] wlan1: Trigger new scan to find an IBSS to join [ 873.715862][T19358] netlink: 'syz.0.4108': attribute type 29 has an invalid length. [ 873.750045][T19375] mac80211_hwsim hwsim42 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 873.760342][T13121] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 873.776478][T13121] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 873.803741][T18099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 874.004585][T19383] netlink: 'syz.2.4113': attribute type 3 has an invalid length. [ 874.047418][T19383] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4113'. [ 874.308925][T19407] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4128'. [ 874.675483][T18099] wlan1: Creating new IBSS network, BSSID 76:84:15:ff:09:9e [ 874.683502][ T7289] wlan1: Trigger new scan to find an IBSS to join [ 874.701709][T18099] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 875.701964][T19437] netlink: 'syz.1.4127': attribute type 29 has an invalid length. [ 875.728899][T19437] netlink: 'syz.1.4127': attribute type 29 has an invalid length. [ 875.770013][T19440] netlink: 'syz.1.4127': attribute type 29 has an invalid length. [ 875.793663][T19435] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4126'. [ 875.837768][T19437] netlink: 'syz.1.4127': attribute type 29 has an invalid length. [ 876.049112][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.064643][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.533510][T19466] netlink: 'syz.1.4132': attribute type 13 has an invalid length. [ 876.642897][T19466] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4132'. [ 876.823922][T19466] syz_tun: refused to change device tx_queue_len [ 876.912269][T19466] net_ratelimit: 3256 callbacks suppressed [ 876.912314][T19466] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 877.401965][T19505] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4141'. [ 877.645247][T13115] wlan1: Trigger new scan to find an IBSS to join [ 877.840504][T19516] netlink: 'syz.1.4147': attribute type 22 has an invalid length. [ 878.316941][T19527] netlink: 'syz.4.4151': attribute type 29 has an invalid length. [ 878.325862][T19527] netlink: 'syz.4.4151': attribute type 29 has an invalid length. [ 878.386818][T19531] IPv6: NLM_F_CREATE should be specified when creating new route [ 878.639896][ T4327] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 879.442597][T19559] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4160'. [ 879.752553][T19569] validate_nla: 2 callbacks suppressed [ 879.752574][T19569] netlink: 'syz.1.4164': attribute type 3 has an invalid length. [ 879.914930][T19569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4164'. [ 880.554581][T19594] device syzkaller0 entered promiscuous mode [ 881.908453][T19618] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4176'. [ 884.703845][T19616] netlink: 'syz.2.4174': attribute type 10 has an invalid length. [ 884.712760][T19616] device hsr0 entered promiscuous mode [ 884.719415][T19616] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 884.732351][T19620] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.4174'. [ 885.019533][T19636] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4178'. [ 885.277013][T19646] netlink: 'syz.0.4183': attribute type 10 has an invalid length. [ 885.292807][T19646] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4183'. [ 886.411908][T19685] netlink: 'syz.2.4194': attribute type 30 has an invalid length. [ 887.394171][T19720] netlink: 'syz.1.4202': attribute type 10 has an invalid length. [ 887.448387][T19720] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4202'. [ 887.545450][T19720] device dummy0 entered promiscuous mode [ 887.629829][T19720] bridge0: port 5(dummy0) entered blocking state [ 887.685442][T19720] bridge0: port 5(dummy0) entered disabled state [ 888.399083][T19750] netlink: 'syz.1.4210': attribute type 19 has an invalid length. [ 888.435082][T19750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4210'. [ 889.485963][T19774] IPv6: Can't replace route, no match found [ 891.782537][T19783] netlink: 'syz.0.4216': attribute type 28 has an invalid length. [ 891.805038][T19783] netlink: 'syz.0.4216': attribute type 29 has an invalid length. [ 891.813363][T19783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4216'. [ 891.906974][T19792] netlink: 'syz.0.4216': attribute type 10 has an invalid length. [ 891.945095][T19792] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4216'. [ 895.526964][T19809] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4224'. [ 895.578243][T19800] netlink: 'syz.3.4217': attribute type 13 has an invalid length. [ 895.608808][T19800] netlink: 'syz.3.4217': attribute type 58 has an invalid length. [ 895.644955][T19800] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4217'. [ 895.972693][T19822] netlink: 'syz.1.4226': attribute type 12 has an invalid length. [ 896.017945][T19822] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4226'. [ 896.058472][T19821] netlink: 'syz.1.4226': attribute type 12 has an invalid length. [ 896.105023][T19821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4226'. [ 896.188315][T19831] netlink: 'syz.2.4229': attribute type 1 has an invalid length. [ 896.224384][T19831] netlink: 'syz.2.4229': attribute type 4 has an invalid length. [ 896.236372][T19831] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4229'. [ 896.275134][T19834] netlink: 'syz.2.4229': attribute type 5 has an invalid length. [ 896.549968][T19841] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4232'. [ 897.242899][T19852] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4238'. [ 897.268342][T19853] netlink: 'syz.4.4237': attribute type 28 has an invalid length. [ 897.291306][T19853] netlink: 'syz.4.4237': attribute type 29 has an invalid length. [ 897.345171][T19853] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4237'. [ 897.450466][T19855] netlink: 'syz.4.4237': attribute type 10 has an invalid length. [ 897.516936][T19855] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4237'. [ 897.798480][T19867] netlink: 'syz.3.4241': attribute type 2 has an invalid length. [ 897.874542][T19867] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.4241'. [ 898.348606][T19865] netlink: 'syz.3.4241': attribute type 20 has an invalid length. [ 898.547381][T19872] netlink: 'syz.0.4243': attribute type 1 has an invalid length. [ 898.594237][T19872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4243'. [ 898.905638][T19890] delete_channel: no stack [ 899.192338][T19897] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4249'. [ 899.265157][T19900] bridge0: port 1(team0) entered blocking state [ 899.293122][T19900] bridge0: port 1(team0) entered disabled state [ 899.315718][T19911] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4252'. [ 899.422861][T19900] device team0 entered promiscuous mode [ 899.444996][T19900] device team_slave_0 entered promiscuous mode [ 899.453555][T19900] device team_slave_1 entered promiscuous mode [ 899.475898][T19900] device geneve1 entered promiscuous mode [ 899.822260][T19919] netlink: 'syz.4.4253': attribute type 10 has an invalid length. [ 899.869614][T19919] device wlan1 left promiscuous mode [ 899.961763][T19927] netlink: 'syz.3.4257': attribute type 28 has an invalid length. [ 900.032552][T19927] netlink: 'syz.3.4257': attribute type 29 has an invalid length. [ 900.074874][T19927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4257'. [ 900.143546][T19919] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 900.255243][T19927] netlink: 'syz.3.4257': attribute type 10 has an invalid length. [ 900.294906][T19927] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4257'. [ 904.571781][T19943] device syzkaller0 entered promiscuous mode [ 904.602516][T19956] netlink: 'syz.2.4261': attribute type 10 has an invalid length. [ 904.735091][T19956] team0: Port device geneve1 added [ 905.486493][T19984] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4268'. [ 908.652432][T20026] netlink: 'syz.1.4276': attribute type 28 has an invalid length. [ 908.689890][T13123] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 908.716878][T20026] netlink: 'syz.1.4276': attribute type 29 has an invalid length. [ 908.799999][T20026] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4276'. [ 908.906419][T20034] netlink: 'syz.1.4276': attribute type 10 has an invalid length. [ 909.131016][T20034] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4276'. [ 911.161215][T20059] netlink: 16083 bytes leftover after parsing attributes in process `syz.4.4289'. [ 915.812457][T20103] netlink: 'syz.3.4297': attribute type 2 has an invalid length. [ 916.118124][T20103] netlink: 'syz.3.4297': attribute type 1 has an invalid length. [ 916.246023][T20103] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.4297'. [ 917.180858][T20110] netlink: 'syz.2.4301': attribute type 10 has an invalid length. [ 917.734631][T20110] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 917.870257][T20124] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.4302'. [ 917.973953][T20124] netlink: 'syz.3.4302': attribute type 3 has an invalid length. [ 918.283535][T20137] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4307'. [ 919.128613][T20137] device hsr_slave_0 left promiscuous mode [ 919.166882][T20137] device hsr_slave_1 left promiscuous mode [ 919.183975][T20160] netlink: 'syz.2.4312': attribute type 3 has an invalid length. [ 919.284045][T20160] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4312'. [ 919.338162][T20158] netlink: 'syz.2.4312': attribute type 2 has an invalid length. [ 919.370626][T20149] netlink: 'syz.4.4310': attribute type 21 has an invalid length. [ 919.390411][T20149] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4310'. [ 919.405254][T20149] netlink: 'syz.4.4310': attribute type 4 has an invalid length. [ 919.422728][T20149] netlink: 'syz.4.4310': attribute type 5 has an invalid length. [ 919.449896][T20149] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4310'. [ 919.534014][T20159] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4312'. [ 919.811887][T20172] netlink: 'syz.4.4316': attribute type 3 has an invalid length. [ 919.834053][T20172] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.4316'. [ 919.913589][T20171] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4315'. [ 920.211678][T20188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4320'. [ 921.178672][T20215] validate_nla: 2 callbacks suppressed [ 921.178693][T20215] netlink: 'syz.1.4326': attribute type 3 has an invalid length. [ 921.270656][T20215] __nla_validate_parse: 5 callbacks suppressed [ 921.270677][T20215] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4326'. [ 921.589200][T20225] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4329'. [ 921.705397][T20227] netlink: 'syz.0.4329': attribute type 3 has an invalid length. [ 921.730672][T20227] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4329'. [ 921.797391][T20225] netlink: 'syz.0.4329': attribute type 2 has an invalid length. [ 921.991091][T20239] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4332'. [ 922.286814][T20240] delete_channel: no stack [ 922.633093][T20249] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4337'. [ 922.837229][T20258] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4339'. [ 923.286018][T20267] netlink: 'syz.2.4342': attribute type 17 has an invalid length. [ 923.314146][T20267] netlink: 'syz.2.4342': attribute type 16 has an invalid length. [ 923.347884][T20267] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4342'. [ 923.742132][ T7271] wlan1: Trigger new scan to find an IBSS to join [ 923.880533][T20273] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4344'. [ 924.133806][T20273] netlink: 'syz.3.4344': attribute type 3 has an invalid length. [ 924.200253][T20273] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4344'. [ 924.297583][T20273] netlink: 'syz.3.4344': attribute type 2 has an invalid length. [ 924.577164][T20292] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4348'. [ 924.974844][T20309] device hsr_slave_0 left promiscuous mode [ 925.013177][T20309] device hsr_slave_1 left promiscuous mode [ 925.430992][T20326] device aaaaaaaaaaaaaaa entered promiscuous mode [ 925.666845][T20333] delete_channel: no stack [ 926.301636][T20349] __nla_validate_parse: 4 callbacks suppressed [ 926.301658][T20349] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4364'. [ 926.822973][T20355] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.4365'. [ 926.860581][T20355] netlink: 'syz.4.4365': attribute type 3 has an invalid length. [ 926.896687][T20355] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4365'. [ 926.959741][T20355] netlink: 'syz.4.4365': attribute type 2 has an invalid length. [ 927.193382][T20362] netlink: 'syz.3.4368': attribute type 2 has an invalid length. [ 927.283431][T20362] device 0 entered promiscuous mode [ 927.314532][T20360] netlink: 'syz.0.4367': attribute type 11 has an invalid length. [ 927.380420][T20360] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4367'. [ 927.394327][T20367] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.4368'. [ 927.728124][T20380] netlink: 'syz.2.4373': attribute type 21 has an invalid length. [ 927.778261][T20380] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4373'. [ 928.254110][T20388] netlink: 'syz.3.4376': attribute type 29 has an invalid length. [ 928.266737][T20384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 928.317099][T20388] netlink: 'syz.3.4376': attribute type 29 has an invalid length. [ 928.364630][T20393] netlink: 'syz.3.4376': attribute type 29 has an invalid length. [ 928.675089][ T7271] wlan1: Trigger new scan to find an IBSS to join [ 928.773310][T20417] netlink: 'syz.4.4385': attribute type 6 has an invalid length. [ 928.782554][T20417] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4385'. [ 928.824202][T20418] netlink: 'syz.2.4384': attribute type 21 has an invalid length. [ 928.857484][T20414] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4383'. [ 928.875949][T20418] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4384'. [ 928.938982][T20418] netlink: 'syz.2.4384': attribute type 5 has an invalid length. [ 928.995200][T20418] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4384'. [ 929.716838][T13123] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 935.560752][T20514] device sit0 entered promiscuous mode [ 937.480319][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.486926][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.524190][T20543] __nla_validate_parse: 2 callbacks suppressed [ 937.524214][T20543] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4415'. [ 937.649820][T20543] bridge_slave_1: default FDB implementation only supports local addresses [ 938.080860][T20553] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4418'. [ 938.319882][T20554] delete_channel: no stack [ 938.470821][T20562] validate_nla: 2 callbacks suppressed [ 938.470841][T20562] netlink: 'syz.1.4421': attribute type 29 has an invalid length. [ 938.902958][T20562] netlink: 'syz.1.4421': attribute type 29 has an invalid length. [ 938.918964][T20569] netlink: 'syz.4.4423': attribute type 10 has an invalid length. [ 939.069153][T20569] team0 (unregistering): Port device team_slave_1 removed [ 939.177553][T20569] team0 (unregistering): Port device bond0 removed [ 939.299441][T20565] netlink: 'syz.1.4421': attribute type 29 has an invalid length. [ 941.134370][T20636] netlink: 'syz.1.4441': attribute type 10 has an invalid length. [ 941.163696][T20638] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4442'. [ 941.174851][T20636] netlink: 3819 bytes leftover after parsing attributes in process `syz.1.4441'. [ 941.224876][T20638] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4442'. [ 941.268693][T20635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4442'. [ 941.398554][T20630] netlink: 'syz.0.4439': attribute type 21 has an invalid length. [ 941.485966][T20630] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4439'. [ 941.575043][T20630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4439'. [ 942.207203][T20673] netlink: 'syz.4.4452': attribute type 11 has an invalid length. [ 942.262562][T20678] netlink: 'syz.4.4452': attribute type 4 has an invalid length. [ 942.304171][T20673] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4452'. [ 942.397930][T20678] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4452'. [ 942.531260][T20672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 942.583680][T20684] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4455'. [ 944.630469][T20730] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4467'. [ 945.109798][T20745] device syzkaller0 entered promiscuous mode [ 945.284474][T20753] netlink: 'syz.4.4474': attribute type 3 has an invalid length. [ 945.315047][T20753] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4474'. [ 946.205180][T20779] netlink: 'syz.2.4482': attribute type 10 has an invalid length. [ 947.749784][T20779] team0: Port device hsr_slave_0 added [ 948.148899][T20789] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4484'. [ 949.161944][T20787] delete_channel: no stack [ 949.187989][T20795] TCP: TCP_TX_DELAY enabled [ 949.908796][T20822] netlink: 'syz.4.4492': attribute type 2 has an invalid length. [ 949.917266][T20822] netlink: 196452 bytes leftover after parsing attributes in process `syz.4.4492'. [ 949.980465][T20824] netlink: 'syz.2.4493': attribute type 29 has an invalid length. [ 950.004109][T20825] netlink: 'syz.4.4492': attribute type 3 has an invalid length. [ 950.013829][T20825] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.4492'. [ 950.032588][T20824] netlink: 'syz.2.4493': attribute type 29 has an invalid length. [ 950.051510][T20826] netlink: 'syz.2.4493': attribute type 29 has an invalid length. [ 950.062451][T20824] netlink: 'syz.2.4493': attribute type 29 has an invalid length. [ 950.339536][T20830] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4494'. [ 950.868789][T20855] netlink: 'syz.1.4502': attribute type 10 has an invalid length. [ 951.337454][T20864] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4505'. [ 951.429128][T20869] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4504'. [ 951.952949][T20886] netlink: 'syz.0.4510': attribute type 21 has an invalid length. [ 952.017192][T20886] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4510'. [ 952.154565][T20885] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4509'. [ 952.289971][T20886] netlink: 'syz.0.4510': attribute type 6 has an invalid length. [ 952.350173][T20886] netlink: 1034 bytes leftover after parsing attributes in process `syz.0.4510'. [ 952.997135][T20902] netlink: 'syz.0.4513': attribute type 10 has an invalid length. [ 953.015129][T20902] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4513'. [ 953.760089][T20923] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4518'. [ 954.001497][T20930] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4520'. [ 954.393886][T20936] netlink: 'syz.2.4522': attribute type 10 has an invalid length. [ 954.421043][T20936] device veth0_macvtap left promiscuous mode [ 958.470672][T20974] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.4534'. [ 958.526325][T20977] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4535'. [ 958.882454][T20982] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4533'. [ 958.903080][T20984] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4538'. [ 959.281987][T20998] bridge0: port 5(dummy0) entered disabled state [ 959.797204][T13117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 959.955319][T20998] bridge0: port 4(batadv0) entered disabled state [ 959.999475][T20998] bridge0: port 3(hsr0) entered disabled state [ 960.044085][T20998] device bridge_slave_1 left promiscuous mode [ 960.055785][T20998] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.077419][T20998] device bridge_slave_0 left promiscuous mode [ 960.083958][T20998] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.186222][T20998] bond0: (slave bridge0): Releasing backup interface [ 960.211501][T20998] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 962.577995][T21058] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.4555'. [ 963.062076][T21064] netlink: 'syz.1.4558': attribute type 10 has an invalid length. [ 963.104735][T21064] device veth0_macvtap left promiscuous mode [ 964.224471][T21112] netlink: 'syz.4.4565': attribute type 10 has an invalid length. [ 964.378207][T21122] netlink: 'syz.2.4572': attribute type 10 has an invalid length. [ 964.432970][T21122] netlink: 'syz.2.4572': attribute type 19 has an invalid length. [ 964.464414][T21122] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4572'. [ 964.579029][T21123] netlink: 'syz.2.4572': attribute type 3 has an invalid length. [ 964.597874][T21123] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4572'. [ 964.736145][T21131] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.4575'. [ 964.845277][T21131] openvswitch: netlink: Flow actions attr not present in new flow. [ 964.864261][T21136] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4575'. [ 965.380492][T21153] netlink: 'syz.2.4580': attribute type 10 has an invalid length. [ 965.961706][T21153] device geneve0 entered promiscuous mode [ 966.000186][T21153] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 966.305195][T21164] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4583'. [ 966.780103][T21182] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.4588'. [ 966.933846][T21168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4585'. [ 966.993025][T21176] netlink: 'syz.0.4584': attribute type 21 has an invalid length. [ 967.849686][T14575] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 968.644191][T21226] netlink: 'syz.3.4598': attribute type 10 has an invalid length. [ 968.661234][T21226] device veth0_macvtap left promiscuous mode [ 968.727149][T21231] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4600'. [ 969.092894][T21239] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4601'. [ 969.210916][T21244] device syzkaller0 entered promiscuous mode [ 969.540646][T21263] netlink: 'syz.2.4604': attribute type 1 has an invalid length. [ 969.555664][T21263] netlink: 'syz.2.4604': attribute type 3 has an invalid length. [ 969.563759][T21263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4604'. [ 972.474627][T21278] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4612'. [ 972.651514][T21284] netlink: 'syz.1.4614': attribute type 10 has an invalid length. [ 972.821989][T21284] team0: Port device wlan1 added [ 973.134028][T21309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4621'. [ 973.918796][T21319] device syzkaller0 entered promiscuous mode [ 973.960777][T21325] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4625'. [ 973.994050][T21323] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4624'. [ 976.683490][ T7277] wlan1: Trigger new scan to find an IBSS to join [ 976.751188][T21338] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.4628'. [ 977.024288][T21352] netlink: 'syz.3.4631': attribute type 10 has an invalid length. [ 977.040707][T21352] device wlan1 left promiscuous mode [ 977.087412][T21352] device wlan1 entered promiscuous mode [ 977.102368][T21352] team0: Device wlan1 is of different type [ 977.240712][T21355] netlink: 'syz.1.4633': attribute type 2 has an invalid length. [ 977.249569][T21355] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4633'. [ 978.258720][T21370] netlink: 'syz.1.4638': attribute type 3 has an invalid length. [ 978.315042][T21370] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4638'. [ 978.425027][T21377] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4642'. [ 978.770463][T21386] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4643'. [ 978.791269][T21384] netlink: 'syz.3.4641': attribute type 11 has an invalid length. [ 978.836049][T21384] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.4641'. [ 979.682261][ T7277] wlan1: Trigger new scan to find an IBSS to join [ 981.332521][T13117] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 981.375027][T21393] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 981.384984][T21373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 981.396148][ T7289] ------------[ cut here ]------------ [ 981.402440][ T7289] WARNING: CPU: 0 PID: 7289 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 981.412690][ T7289] Modules linked in: [ 981.417040][ T7289] CPU: 0 PID: 7289 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 981.425241][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 981.436082][ T7289] Workqueue: cfg80211 cfg80211_event_work [ 981.441888][ T7289] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 981.448471][ T7289] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 a5 ed f7 0f 0b eb bb e8 08 a5 ed f7 <0f> 0b eb b2 e8 ff a4 ed f7 0f 0b e9 77 fd ff ff e8 f3 a4 ed f7 0f [ 981.468995][ T7289] RSP: 0018:ffffc90004ecfaa0 EFLAGS: 00010293 [ 981.475184][ T7289] RAX: ffffffff8994cf88 RBX: dffffc0000000000 RCX: ffff88802ec01dc0 [ 981.483582][ T7289] RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 981.492058][ T7289] RBP: ffffc90004ecfb70 R08: ffffffff90af72a7 R09: 1ffffffff215ee54 [ 981.500251][ T7289] R10: dffffc0000000000 R11: fffffbfff215ee55 R12: ffff888067a2b5b8 [ 981.508417][ T7289] R13: 1ffff920009d9f5c R14: 000000000000001f R15: ffff888079a90c90 [ 981.516670][ T7289] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 981.525758][ T7289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 981.532518][ T7289] CR2: 000055555d09b4e8 CR3: 0000000077b5f000 CR4: 00000000003506f0 [ 981.540878][ T7289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 981.549043][ T7289] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 981.557419][ T7289] Call Trace: [ 981.560853][ T7289] [ 981.564134][ T7289] ? mutex_lock_nested+0x10/0x10 [ 981.569391][ T7289] ? trace_rdev_return_void+0x240/0x240 [ 981.575316][ T7289] cfg80211_process_wdev_events+0x3ad/0x550 [ 981.581389][ T7289] cfg80211_process_rdev_events+0x9d/0x110 [ 981.587556][ T7289] ? process_one_work+0x7b0/0x1160 [ 981.593019][ T7289] cfg80211_event_work+0x2b/0x40 [ 981.598199][ T7289] process_one_work+0x8a2/0x1160 [ 981.603229][ T7289] ? worker_detach_from_pool+0x240/0x240 [ 981.609119][ T7289] ? _raw_spin_lock_irq+0x86/0xf0 [ 981.614215][ T7289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 981.619367][ T7289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 981.625025][ T7289] ? kthread_data+0x4b/0xc0 [ 981.629707][ T7289] worker_thread+0xaa2/0x1270 [ 981.634560][ T7289] kthread+0x29d/0x330 [ 981.638772][ T7289] ? worker_clr_flags+0x1a0/0x1a0 [ 981.643914][ T7289] ? kthread_blkcg+0xd0/0xd0 [ 981.648622][ T7289] ret_from_fork+0x1f/0x30 [ 981.653425][ T7289] [ 981.656616][ T7289] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 981.664051][ T7289] CPU: 0 PID: 7289 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 981.671738][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 981.681890][ T7289] Workqueue: cfg80211 cfg80211_event_work [ 981.687880][ T7289] Call Trace: [ 981.691212][ T7289] [ 981.694191][ T7289] dump_stack_lvl+0x188/0x24e [ 981.698970][ T7289] ? memcpy+0x3c/0x60 [ 981.703025][ T7289] ? show_regs_print_info+0x12/0x12 [ 981.708298][ T7289] ? load_image+0x400/0x400 [ 981.712993][ T7289] panic+0x2e5/0x730 [ 981.717072][ T7289] ? bpf_jit_dump+0xd0/0xd0 [ 981.721654][ T7289] ? ret_from_fork+0x1f/0x30 [ 981.726318][ T7289] __warn+0x2f8/0x4f0 [ 981.730368][ T7289] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 981.736188][ T7289] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 981.742012][ T7289] report_bug+0x2ba/0x4f0 [ 981.746420][ T7289] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 981.752038][ T7289] handle_bug+0x3a/0x70 [ 981.756279][ T7289] exc_invalid_op+0x16/0x40 [ 981.760823][ T7289] asm_exc_invalid_op+0x16/0x20 [ 981.765707][ T7289] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 981.772021][ T7289] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 a5 ed f7 0f 0b eb bb e8 08 a5 ed f7 <0f> 0b eb b2 e8 ff a4 ed f7 0f 0b e9 77 fd ff ff e8 f3 a4 ed f7 0f [ 981.792019][ T7289] RSP: 0018:ffffc90004ecfaa0 EFLAGS: 00010293 [ 981.798120][ T7289] RAX: ffffffff8994cf88 RBX: dffffc0000000000 RCX: ffff88802ec01dc0 [ 981.806122][ T7289] RDX: 0000000000000000 RSI: ffffffff8a8c10a0 RDI: ffffffff8adf0d20 [ 981.814469][ T7289] RBP: ffffc90004ecfb70 R08: ffffffff90af72a7 R09: 1ffffffff215ee54 [ 981.822484][ T7289] R10: dffffc0000000000 R11: fffffbfff215ee55 R12: ffff888067a2b5b8 [ 981.830491][ T7289] R13: 1ffff920009d9f5c R14: 000000000000001f R15: ffff888079a90c90 [ 981.838659][ T7289] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 981.844287][ T7289] ? mutex_lock_nested+0x10/0x10 [ 981.849281][ T7289] ? trace_rdev_return_void+0x240/0x240 [ 981.854889][ T7289] cfg80211_process_wdev_events+0x3ad/0x550 [ 981.860879][ T7289] cfg80211_process_rdev_events+0x9d/0x110 [ 981.866791][ T7289] ? process_one_work+0x7b0/0x1160 [ 981.871956][ T7289] cfg80211_event_work+0x2b/0x40 [ 981.876966][ T7289] process_one_work+0x8a2/0x1160 [ 981.882502][ T7289] ? worker_detach_from_pool+0x240/0x240 [ 981.888377][ T7289] ? _raw_spin_lock_irq+0x86/0xf0 [ 981.893555][ T7289] ? _raw_spin_lock_irq+0xb7/0xf0 [ 981.898653][ T7289] ? _raw_spin_lock_irqsave+0x100/0x100 [ 981.904630][ T7289] ? kthread_data+0x4b/0xc0 [ 981.909219][ T7289] worker_thread+0xaa2/0x1270 [ 981.914078][ T7289] kthread+0x29d/0x330 [ 981.918402][ T7289] ? worker_clr_flags+0x1a0/0x1a0 [ 981.923479][ T7289] ? kthread_blkcg+0xd0/0xd0 [ 981.928381][ T7289] ret_from_fork+0x1f/0x30 [ 981.933207][ T7289] [ 981.936838][ T7289] Kernel Offset: disabled [ 981.941279][ T7289] Rebooting in 86400 seconds..