last executing test programs: 4m36.771443431s ago: executing program 2 (id=1175): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x94, 0x2, 0xffffffff, 0x8800, 0xffffffffffffffff, 0x5d, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x200020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x2, &(0x7f0000000000), 0x8) socket$kcm(0x29, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000180)="e0419e10804b11d23d0dd910de509e88d142", &(0x7f00000001c0)=""/227, &(0x7f00000003c0)="12ec415e75ab8501e92b660bab509bc516c66cc9", &(0x7f0000000400)="06ea37607f09a04607c7e86a33bd978aa7250a13ae099b08366783e3361f6d", 0x6, r0}, 0x38) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) 4m36.682430645s ago: executing program 2 (id=1177): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x2f6e, 0x2}, 0xc05e, 0x200000000000c8, 0x2, 0x6, 0xfffffffffffffff8, 0x7fffffff, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffb}, 0x0, 0x1, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) bpf$ITER_CREATE(0x21, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) r4 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x95b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x2f6e, 0x2}, 0xc05e, 0x200000000000c8, 0x2, 0x6, 0xfffffffffffffff8, 0x7fffffff, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffb}, 0x0, 0x1, 0xffffffffffffffff, 0xa) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, 0x0, &(0x7f00000001c0)}, 0x20) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) (async) socket$kcm(0x10, 0x2, 0x10) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x95b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) (async) 4m36.326756042s ago: executing program 2 (id=1180): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1, 0x0, 0x27}, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32=r1, @ANYRES8=r0], 0xfe33) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000002", @ANYRES32=r1, @ANYRES8=r0], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) (async) close(r6) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000200)=r7, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000040000008500000005000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b703000005000000850000007b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m36.071127554s ago: executing program 2 (id=1186): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2100009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x7ff}, 0x1002a0, 0x0, 0x0, 0x6}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@union={0xf, 0x4, 0x0, 0x5, 0x1, 0x200, [{0x8, 0x0, 0x1000}, {0x8, 0x4, 0x40}, {0xc, 0x3, 0x9}, {0x5, 0x3}]}]}, {0x0, [0x2e, 0x3e, 0x30, 0x30, 0x0]}}, &(0x7f0000000300)=""/180, 0x5b, 0xb4, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@union={0xf, 0x4, 0x0, 0x5, 0x1, 0x200, [{0x8, 0x0, 0x1000}, {0x8, 0x4, 0x40}, {0xc, 0x3, 0x9}, {0x5, 0x3}]}]}, {0x0, [0x2e, 0x3e, 0x30, 0x30, 0x0]}}, &(0x7f0000000300)=""/180, 0x5b, 0xb4, 0x1}, 0x28) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0xc112, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0xa, 0xfa, 0xb, 0x0, 0xf, 0x400, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x761aa170, 0x81}, 0x40, 0xe, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0x2, r0, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2, 0xa, 0xfa, 0xb, 0x0, 0xf, 0x400, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x761aa170, 0x81}, 0x40, 0xe, 0x7, 0x9, 0x1, 0x2, 0x0, 0x0, 0x8, 0x0, 0xffffffff}, 0x0, 0x2, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) (async) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed0779fcb90acbb4199889ae9cda14dee23f5a698d09f0aa3a0d9a5e2423e77138f4b3bdd1c24d0cee4cdb9cbb6df138362de9f4774c461afb8f5a973af29f1d822f86bab67762e8dc6229971f9fd9627bb26a0f0d8a10850b0830b8fb", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89ed, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) (async) r4 = openat$cgroup_procs(r2, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) write$cgroup_int(r3, &(0x7f0000000040), 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000074000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018000000", @ANYRES32, @ANYBLOB="00000000d5160000b70500000800000085000000a500000095"], 0x0, 0x5, 0x1011, &(0x7f00000016c0)=""/4113}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa40, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 4m35.779295688s ago: executing program 2 (id=1188): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0xfe, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000ed00000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x10042) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r1, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r10, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0xa, 0x2, 0x73) recvmsg(r11, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x42) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r12) syz_clone(0x20900000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m35.490824211s ago: executing program 2 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000e9f850000002e00000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x324a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x1a220, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0xa, 0xf6, 0x5, 0x0, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x5, 0x5, 0x4, 0x0, 0x1, 0x5, 0x1000, 0x0, 0x7, 0x0, 0xfff}, r1, 0xe, r3, 0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m20.408271881s ago: executing program 32 (id=1190): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000030000000000000000000e9f850000002e00000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x324a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x1a220, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x80, 0xa, 0xf6, 0x5, 0x0, 0x0, 0x6, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000200), 0x2}, 0x5, 0x5, 0x4, 0x0, 0x1, 0x5, 0x1000, 0x0, 0x7, 0x0, 0xfff}, r1, 0xe, r3, 0x1) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.815589951s ago: executing program 5 (id=2493): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_bp={&(0x7f0000000100)}, 0x10c002, 0xac60, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x3, 0x2, 0x8, 0x1, 0x0, 0x3, 0x80c02, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x100, 0x4}, 0x10983, 0x8, 0x3b, 0x0, 0x9ed, 0x2, 0x4, 0x0, 0x1000, 0x0, 0x1}, 0xffffffffffffffff, 0xe, r0, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, @perf_config_ext={0x4000000c, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xfffffffffffffffc, r1, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x2b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe4, 0x5, 0xd, 0xc, 0x0, 0xfffffffffffffffe, 0xc4000, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x1, 0x10}, 0x2, 0x8, 0x3, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0xcd}, 0x0, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cc, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000001c0)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000690432000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x2, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000880)='memory.high\x00', 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@fallback, 0x0, 0x1, 0x800, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], &(0x7f00000007c0), 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)={@fallback=r8, r8, 0xc, 0x2, 0x0, @void, @value=r8, @void, @void, r9}, 0x20) 3.749012564s ago: executing program 4 (id=2496): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc2a00e9bfde908990817b364e51afe9c8dab05b16a6437211f9f0570759f1cae63487ff68fffffffffffe8e3932e2b75a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba7541189070000f50c000000d8e5b1dc91c5499be2097784a94b6cc2d272ac751d8bce5db4862c1b2eab7007ceea158dbc329bab5f8450147b2b9629fdd6cdb5507d3a76dbaf6f93d161caa513f8aa41f795507856ea0015166c56ea0103220ed5a66834be086ef206a8606b04fc8462cbbe8233f308397006da8e243ec9fb19f3fab2b0f46d73a9f2d7c674cdbe4d7f76f5fbd05043e81f435fccf5063a93aa9b4c7f686705944ceafb57ab1bd88dc50dd21d8267"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000001080)=""/133, 0x85, 0x0, &(0x7f0000000580)=""/118, 0x76}}, 0x10) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x3, 0x0, &(0x7f00000007c0)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x44, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000951132e9f042b9515704950f9a41af7648a70de0ec86392738aefa6769f3fd211ae5a3df20b6ffa5c64aefe3a8143916ad725cdf17a2215c374d0b029f556c28fd98b29bf5f1f09212a88e5cf068d2b377ce011e93ba5a1338ce87f54d9038be98bc8e0b97ef1556ba34a5", @ANYRES32, @ANYRES16=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES8=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRES16], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x1, 0x2, 0x3, 0x8, 0x2}], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000500)=[{0x2, 0x5, 0xd, 0x9}, {0x1, 0x3, 0x9, 0x7}], 0x10, 0x9}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0600000009000000420000000800000000000400", @ANYRES32=r3, @ANYBLOB="520400"/20, @ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="01000000040000000500000000000000000000000000000000000000e6ccf00eb0483719784dcce8a349dde7a6d257eeccda03ef0769db4fde1dfe6e5f1c05030795d9d66abca36311220fac9a779ae43e4b7307399fd465c831a8d0a21b91c558a9521c077ba1ce0a28c08f1cd39fda7f213be6d43881b5d66d2b2e2c132faafb4b86d176ccb409da839ae05cc9cdefa7a9af3e3628d6b94b9c8afc66da74e39f568eb030af"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) (async, rerun: 64) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x7, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d31, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa5, 0x3}, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x10, r7, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) (async, rerun: 32) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) (async) r9 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(r9, 0x6, 0x9, &(0x7f0000000c40)=r9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_netprio_ifpriomap(r10, &(0x7f0000000200), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r11, &(0x7f0000000580)=ANY=[@ANYBLOB="626174616476303239005d15efbcb3e05041e9112887cd697233aaf058c5699b14ecfd2655fdc2f7c38674ba558b66a864dca9f5940397c44ffdf30ba50f505cc5860c8f0f61be91027034d484c6fe876420ee65bac53962ed249dd943bf8504343822cdd86dc73f4c4681"], 0xa) (async) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x87, 0x9, 0xc3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2f0, 0xf72a}, 0x0, 0x3, 0xfffffff9, 0x3, 0x0, 0x9, 0xc, 0x0, 0x1, 0x0, 0x6}, r8, 0x10, 0xffffffffffffffff, 0x6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000001200)=ANY=[@ANYBLOB="9feb01001800177d086500001400000014000000060000000200000001000006040000000600000000000000000061616100"], &(0x7f0000001300)=""/160, 0x32, 0xa0, 0x1}, 0x28) (async) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xa) (async, rerun: 64) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup=r8, 0x23, 0x1, 0x7, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400), 0x0}, 0x40) (rerun: 64) 2.97746444s ago: executing program 4 (id=2500): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000200000000000000667585f7c37cec817d776c36efa690cdb71f41ef568ac0e51954ac7418e12e290c36a4424c72d8000ad60d79da7189253434cd35426a210e7e76e6d1b8d42a06cce531d4d2295db525aeef03e3783ee675f50d2dc96b7fc2676bfcd7418bbe10bf69384b2eb99ec36444585b80ee3874c791120aa3c1ade2c6af14c9908648c78a4a357d8a78f8c154da6c35e3cd19e624c1b37096d2d1b9979c088ceebfe9b5f3abebea384edbdc420a72b38a69e665024bc6442aa82a99c392fea3e6e47d75c517f477af5b843cb7e06021e2fa04ad450c52ea88323ade0100"/253, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r2}, 0xc) 2.963685591s ago: executing program 5 (id=2502): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00"], 0x0, 0x5}, 0x94) gettid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047452, &(0x7f0000001200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) 2.750610761s ago: executing program 4 (id=2504): socketpair(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, &(0x7f0000000200)=r2, 0x4) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000004c0)=@base={0xa, 0x16, 0xb4, 0xd4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)=""/4111, 0x100f}, {&(0x7f0000002b40)=""/4082, 0xff2}, {&(0x7f0000002a40)=""/235, 0xeb}, {&(0x7f0000000280)=""/199, 0xc7}], 0x4}, 0x40000000) recvmsg$kcm(r4, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10, r3}, 0x18) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000280)=r5, 0x4) sendmsg$kcm(r0, &(0x7f0000001b80)={&(0x7f0000000540)=@llc={0x1a, 0x118, 0x36, 0xc2, 0x6, 0x4, @remote}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)="f443cd5cfe54398daadb166194ba8f99cc8c7eaae4ab001eafac8a190906702ba62ec02099fa500d8cf050b58cf1486c560e620fd69dda34b4d770734ea5edb76c8d9843e4e8a3aae783e16efb77e1a80edb1c7c9789a1128ee21c3c75405cfb094b5df511e5b448d24fa9d846592862ad9de8a21e", 0x75}, {&(0x7f0000000640)="40d3454c9f559f6a7cf3d5d35273d735e9e7b46b95a9615cc61b8d852a13f2267354312f2921bf02a049a5bd23a2c2986bd9f9427a2061c5168ef74ee455817eda6bfe33e19d5eec2339e68b84c1a25681baba9a4a6c2a2daa13f9a1a306cb331c13270a81b20418d3b4ed13ae0c2dafbe9f873c1dd44c962e7052b8a62ba9289d530f65f4b0f50b2fe0d374a44c7e970915c09f0fab527578be9c01c6932b6e40c9ced0ccd9bb1b61211a0d1eb76676a573dce993a1055a910e619a", 0xbc}], 0x2, &(0x7f0000001980)=[{0xd8, 0x108, 0xe8b, "a0d8de4accc8bc0b5d8fbce9aa0b2d30215f63cd5bd6b6da1341f4dbf2eae56019f24bcae4108873ff0ced61fa7188773abb5dab0356ec0e23ebc2e5144b7e184bf5b12f28d2b7b51bc52c95e519ed7af6b3ac102cb7d6cfa868374779e580bad4372e22d4f5c0e91a7cb78bb3e388d3b007219319e01af62508ddc56ff61de913c11c4ce797bac35e6fc5bf965978d237fdd200384ff02cc8c7bccf171263ff4f881c33fe94bc1801561ad035ac18fe671814f9ab75c2a990b4f0aa23f9a1f83b89f1c03217d0d8"}, {0x18, 0x117, 0x54a, "bfea57877937"}, {0xc8, 0x101, 0x24, "f5728a0c3b95a36728dea01bddd7b99666dea954dcf92ca3e1f3e57d393524314ac0b0162a154f50a36fa588536cd8441edd7e05b12c77672c845bed0da872374a94a3dbc0677095c90c1911fb766e2a927a7037938fba9221718ac9e99b540c79006b5718f3775b55b6252a66069846055b087d99237d5dd1639a5e94940e26d1478911462295621744754abc05f03235297677c0d710d89ab96550f3e3c2b9604f4e6a8a6358993b78fa7d5d202de35a19feda42b3"}, {0x38, 0x29, 0xc079bc9, "83eaa4988d1341af8f882fc3e53ac058bb19db6a3ca12ab17fd2a5b73ccaf17a06381a48"}], 0x1f0}, 0x8080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x6, 0x3}, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x8b00, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000180)={'batadv_slave_1\x00', @broadcast}) 2.748490701s ago: executing program 3 (id=2505): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x114244, 0x0, 0xafe8, 0x4, 0x4, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close(r3) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) (async) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000180)=r4, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xc8eb, '\x00', r6, r4, 0x4, 0x0, 0x4}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 2.687809093s ago: executing program 0 (id=2506): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r6}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000008000000000000000600000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r2}, 0x20) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0xd, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000080), &(0x7f0000000240)=r0}, 0x20) 2.616624217s ago: executing program 5 (id=2507): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000003c0), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x702, 0x64, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x4, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="5802003300fbffffff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000bcfffff400000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="fa2841a88c63d755fc2c8eff834524101847f705e01d0d5229e5a106eadc48882669167f7401eac7f90baf82d5ee631a09b04e3146f5ff50869c9020e80b205f563c8d9a9ef59951c21bd989352f3b470e451dc859cd522741619502656bcd0ffaa52937de486a92ef43adf549cd153c679d934243e3d40d21c7622157ad035afc0f3f7ea8eb8f94a2b0e432ca3446221d8c72698ade0a6098eb4f51e348aba1d83261e1c4aa5545e235b58d3be74deb1e3d9b8a2b220338b10ce81a0a288ce4c47d6f363708984e97eee8fc6468ac90d44e3095284e1a95faa46a898d01e2d8bd663151cb8273e7c0e9667cd14720f05e59133fd9", @ANYRES32=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x31, r3}, 0x16) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8178e, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7}, 0x1d, 0x8, 0x2, 0x1, 0xa0, 0x1f, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0, 0x1a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000008000000000000000001801000020646c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 2.55128635s ago: executing program 1 (id=2508): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xf, 0x0, 0xff, 0x6, 0x0, 0x2, 0x802, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000000c0), 0x8}, 0x8400, 0x401, 0x4, 0x3, 0x80000001, 0x101, 0x4, 0x0, 0x200, 0x0, 0x6}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r5, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r8, 0x8) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x10e0c0, 0x0, 0x40000, 0x6, 0x8, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, r0, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000005300000085000000a00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r10 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1e, 0x1, 0x0, 0xfd, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3}, 0x10c002, 0xac5d, 0x10000200}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0xfe, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0479e865c63100000008010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40) 2.477171754s ago: executing program 0 (id=2509): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x28030, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x1e900, 0x0, 0xfffffffc, 0x9, 0xb0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 2.207113576s ago: executing program 3 (id=2510): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='io.stat\x00', 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x10, &(0x7f0000000640)=@raw=[@map_val={0x18, 0x1}, @jmp={0x5, 0x1, 0x4, 0x6, 0x2, 0x50}, @call={0x85, 0x0, 0x0, 0x99}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000700)='syzkaller\x00', 0x1ff, 0x16, &(0x7f0000000780)=""/22, 0x41000, 0x1, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000008c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xb, 0x6b4, 0x4}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000940)=[{0x4, 0x8, 0x2, 0x2}, {0x3, 0x2, 0x0, 0x7}, {0x5, 0x4, 0x3, 0x2}, {0x1, 0x5, 0x3, 0x5}, {0x2, 0x2, 0x2, 0x7}, {0x3, 0x5, 0x10, 0x7}, {0x3, 0x1, 0x10, 0x8}], 0x10, 0x9}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 32) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x19}, 0x90) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="b038dba9e1b00900000008000000080000000b00000000000000", @ANYRES32, @ANYBLOB="010100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.095241951s ago: executing program 5 (id=2511): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x9}, 0x10c002, 0xac5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, 0x100) (async) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6}, 0x100) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) socket$kcm(0x10, 0x2, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x45000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x45000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f9, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x2}, 0x0, 0x0, 0xfffffffd, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0x2) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x102000}, 0x0, 0x0, r4, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c090000000000000000000000000401ab272f1f8e72d9d4476ea47f96e53d84fa3ff49c075af7ce00"], &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) (async) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) (async) recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1009}, {&(0x7f00000019c0)=""/221, 0xe9}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f00000009c0)=""/173, 0xad}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000a80)=""/209, 0xd1}], 0x8}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x4, 0x0, 0x0, 0x3ff, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x4a5879d13a3b08c2, 0x7, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x7fffffffd}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000e160146c00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 1.993677946s ago: executing program 1 (id=2512): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0xff, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r0], 0x9a) close(0xffffffffffffffff) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x6d, 0x47, &(0x7f0000000000)="d3fc2b61c5a472f6ddf874b97c4fa334818e55a2a9bfb5372c98558796dc8a9cfd00d01561f11c891d610a1d0cdb267b30c24ad94efc8acca037050299f3d074226743a27fd68d84f394fd8f25bfca5dbcddaa251d64439854e3dbbd92c702177d5e97a6311d409084f6848742", &(0x7f0000000080)=""/71, 0x19e4, 0x0, 0xba, 0x6b, &(0x7f0000000100)="65b848eec303af9ffc059eb6596940c7c08395e96d81c21b3f5c48e5f3cb31dd768214c87661f7ac83e101575016939d485a76ed8c44c5cd76889998ca3f408b3b3942e78a3fce4bf3c46d3ae5f7f4bdba198d7ecd332f7317d3dfdf7dcaeb4a40c913101e2bb84a4a2245b37aed2e2b14d163d33168ed10d55513c01bc580bdb4497fa456cbe693e98174ee40f58186abd27253f0d381d3c589224e65212373237f8809bc25681eccdfd3367e5f6f31465dd5a58f50ceba08d6", &(0x7f0000000240)="9d6a3d5a783746a1411ee8a874bbaafcfb65551fa60b749685b5b97b70a82722d45fc3f508011297ce8f0c552c708960ab8f622424024a4e7dc5e068b8d1df6f9df2e4d424059105ce8971a48ead30bae66ebec52db161becb5a804760773db2ef3c36911bd588202babb7", 0x6, 0x0, 0x80000001}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) close(r1) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0xff, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r0], 0x9a) (async) close(0xffffffffffffffff) (async) socket$kcm(0xa, 0x5, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x0, 0x2b, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x6d, 0x47, &(0x7f0000000000)="d3fc2b61c5a472f6ddf874b97c4fa334818e55a2a9bfb5372c98558796dc8a9cfd00d01561f11c891d610a1d0cdb267b30c24ad94efc8acca037050299f3d074226743a27fd68d84f394fd8f25bfca5dbcddaa251d64439854e3dbbd92c702177d5e97a6311d409084f6848742", &(0x7f0000000080)=""/71, 0x19e4, 0x0, 0xba, 0x6b, &(0x7f0000000100)="65b848eec303af9ffc059eb6596940c7c08395e96d81c21b3f5c48e5f3cb31dd768214c87661f7ac83e101575016939d485a76ed8c44c5cd76889998ca3f408b3b3942e78a3fce4bf3c46d3ae5f7f4bdba198d7ecd332f7317d3dfdf7dcaeb4a40c913101e2bb84a4a2245b37aed2e2b14d163d33168ed10d55513c01bc580bdb4497fa456cbe693e98174ee40f58186abd27253f0d381d3c589224e65212373237f8809bc25681eccdfd3367e5f6f31465dd5a58f50ceba08d6", &(0x7f0000000240)="9d6a3d5a783746a1411ee8a874bbaafcfb65551fa60b749685b5b97b70a82722d45fc3f508011297ce8f0c552c708960ab8f622424024a4e7dc5e068b8d1df6f9df2e4d424059105ce8971a48ead30bae66ebec52db161becb5a804760773db2ef3c36911bd588202babb7", 0x6, 0x0, 0x80000001}, 0x50) (async) 1.989664246s ago: executing program 0 (id=2513): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000140)=""/237, 0x1a, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, r1, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x891b, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000050000000300000000000010080000000300000000000011030000000000000000000000010000040400ecb4f50ed002e2a8d6a3f65103000000000000"], 0x0, 0x51}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000a00000000000000000000000000000000b7f7295f2fa42ccd4b5c2cfcc07531d5cd61f465398eb94290bc70742d93357eb80ac8399a4318ba167e32cbf7de1f91e69cf6befb8508b3030000000000000070fac320e9d92e3f754901fc1485b19b5b59da554ed3b5d8a281", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 1.887322941s ago: executing program 3 (id=2514): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001380)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000040000000000008006000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fdff09007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000ea1addb98500000082000000850000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001480)={{r2, 0xffffffffffffffff}, &(0x7f0000001400), &(0x7f0000001440)=r4}, 0x20) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5b8}], 0x10}, 0x180) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x1bd16ea9, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0xffffffffffffffff, 0x1, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x0, 0x1, 0x1}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x957c3a44b51c8164, 0x2, 0x9, 0x7, 0x4003, 0x1, 0x2, '\x00', 0x0, r0, 0x5, 0x1, 0x3}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x11, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70e, 0x0, 0x0, 0x0, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @jmp={0x5, 0x1, 0x3, 0x7, 0x2, 0x50, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x7fffffff, 0x6c, &(0x7f0000000180)=""/108, 0x63ecd58f9f5b1077, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x7, 0x8, 0xc2c4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000680)=[r7, r8, r9, r10, 0x1, r11, r12, r13], &(0x7f00000006c0)=[{0x4, 0x2, 0x6, 0x9}, {0x4, 0x5, 0x6, 0x2}, {0x3, 0x5, 0x7, 0x1}, {0x5, 0x5, 0x7, 0xa}, {0x0, 0x3, 0x2, 0x4}, {0x0, 0x1, 0xb, 0x1}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r14 = socket$kcm(0x2, 0x5, 0x84) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r14, 0x84, 0x78, &(0x7f00000000c0)=r15, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_lsm={0x1d, 0x15, &(0x7f0000001540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff80}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xb01}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}]}, &(0x7f0000001600)='syzkaller\x00', 0xb, 0xe9, &(0x7f0000001640)=""/233, 0x40f00, 0x4, '\x00', 0x0, 0x1b, r0, 0x8, &(0x7f0000001740)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001780)={0x1, 0x2, 0x0, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000017c0)=[r15, r7, r3], &(0x7f0000001800)=[{0x2, 0x2, 0x6, 0x6}, {0x5, 0x5, 0x10, 0xb}, {0x2, 0x1, 0xa}, {0x0, 0x1, 0x3, 0x3}, {0x1, 0x3, 0x4, 0x2}, {0x1, 0x3, 0x3}, {0x3, 0x3, 0x8, 0x3}], 0x10, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d40)={r12, &(0x7f0000000800)="571207326aa74d3d518fff8d593c34db93540735b539d8df5ea3f111dd4f52a317bcfd591d714bf9775b2b0628ed330cf23be4a535d772654c8d26765203996e053c82c03af93af89924f3a46f225438bba6f299e2d866194b04182b3849fec2e341c549250e8fafd448d86b678733f1a0878dd3218c089813b5d4f31e05def521938dde63e27d1eebffcf18316ff34df3b058196b1b505818629afab9befe2864a090df90206a0cb595e4402cadb4f1f9982c5556feac5979c7af83799e", &(0x7f0000000c40)=""/231}, 0x20) 1.812682534s ago: executing program 5 (id=2515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRES16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2d, 'pids'}, {0x2d, 'cpu'}]}, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000100c21400002fbd6c", 0xf}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x6b, &(0x7f0000000000)=r9, 0x10) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001380)={'bond_slave_0\x00', 0x1000}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x4, [@fwd={0x10}, @fwd={0x1}, @union={0xe, 0x5, 0x0, 0x5, 0x1, 0x7f, [{0x7, 0x2, 0xfffff0e1}, {0x9, 0x4, 0x9}, {0x10, 0x1, 0x2}, {0x5, 0x4, 0x9}, {0x0, 0x5, 0x7}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000540)=""/164, 0x7c, 0xa4, 0x0, 0x3, 0x10000}, 0x28) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000011c0)={0x6, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="18660000780000000000000009000000"], &(0x7f0000000180)='GPL\x00', 0x80000001, 0x9b, &(0x7f0000000340)=""/155, 0x41000, 0x23, '\x00', r2, 0x25, r10, 0x8, &(0x7f0000000640)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x3, 0x1a342abe, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[r0, r0, r0, r1, r0, r0, r0], &(0x7f0000000700)=[{0x1, 0x1, 0x10, 0xa}, {0x3, 0x3, 0x7, 0x7}, {0x1, 0x5, 0x1, 0x1}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001300)={@ifindex=r2, 0x5, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001340)={@map=r0, r11, 0x4, 0x0, 0x0, @void, @value=r1, @void, @void, r12}, 0x20) 1.804954435s ago: executing program 1 (id=2516): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11c412, 0x1, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000000300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000100"/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x8001}, 0x108000, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611034000000fbff63012c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000006c0)={r1, &(0x7f0000000500)="60ad6a0299b75775386547e148228f3498e0c63584d79d84c40b2f3c20c3b9ad81568497a6571e4a7f721a6fb1d1d8010c4251521bb0438ebfde63f1a2631ac906b0418b346dc397a58a98d724a71f4ae681bb06e6b918a4246c8de8b3378731b848d0883d3f1bbfce098f652b41d70bf284241783bc4f41d4ce0c2013153ab288103344f2fe8982db64f219d82773067bbf5a2e43e6b0aad1fdea5bafb8e4347296d9162c2c712900e77ca9c9a2df3db172ca00f170453c0dbfddc24cefda2853c05e72d2bdeffd743d583536786a", &(0x7f0000000600)=""/184, 0x4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="14c7", 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000011008139504636c9024f630ccb65be0001000000000000000005fb2515b7b00812be74bda544eca14000", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x80, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1ff, 0x0, 0xa8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000540)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8932, &(0x7f0000000000)={'veth1_to_batadv\x00', @random="fbffff000080"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[@ANYBLOB, @ANYBLOB], 0xfdef) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x19, 0x0, &(0x7f0000000980)='GPL\x00', 0x79, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a40)=[{0x1, 0x1, 0x4, 0x3}], 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 1.627341594s ago: executing program 4 (id=2517): perf_event_open(&(0x7f0000000d00)={0x4, 0x80, 0x6d, 0x1, 0x0, 0x3, 0x0, 0x4, 0x102402, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext, 0x100188, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbf0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000280)=0x9) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'ip6erspan0\x00', 0x1}) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) (async, rerun: 32) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a6009003fbed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b", 0xd4}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async, rerun: 64) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (rerun: 64) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000040000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4004850) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000, 0x1}, 0x712, 0x0, 0xc2ba, 0x8, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xdee}, 0x0, 0xf, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async, rerun: 64) r7 = socket$kcm(0x2, 0x1, 0x84) (rerun: 64) setsockopt$sock_attach_bpf(r7, 0x84, 0x14, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) 1.376432026s ago: executing program 0 (id=2518): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async, rerun: 64) close(0xffffffffffffffff) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x100000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4a040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xf7fffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x4, 0x3, 0x0, 0x10, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8983, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') (async) socket$kcm(0xa, 0x5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x0, 0x7, 0x0, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time_for_children\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f80)={0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x4004004) (async) r4 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782dbe3ff040220080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f00040000005f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20040014) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='T\x00'], 0x88}, 0x0) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0xfffffffffffffe13) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00000001c0)={r2}) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (rerun: 32) 1.291404459s ago: executing program 1 (id=2519): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000f00)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x144, 0x144, 0x9, [@enum64={0x1, 0x3, 0x0, 0x13, 0x1, 0x7, [{0x7, 0x7, 0xac9d}, {0x8, 0x7, 0x1}, {0xb, 0x5}]}, @enum64={0x3, 0xa, 0x0, 0x13, 0x0, 0x2, [{0xa, 0x971, 0x63d}, {0x2, 0x7b26d85a, 0x575c}, {0x3, 0x40, 0x6}, {0x6, 0x3, 0x3}, {0x7, 0x1, 0x956}, {0xd, 0x1, 0x4c8f4bd5}, {0xc, 0x9, 0x1ff}, {0xb, 0x2, 0x4}, {0x6, 0x3, 0xfffffffc}, {0x3, 0x17a, 0xa8}]}, @enum64={0x7, 0x2, 0x0, 0x13, 0x1, 0x6, [{0x2, 0x1ff, 0xdd}, {0xa, 0x401, 0xa95}]}, @union={0x0, 0x7, 0x0, 0x5, 0x1, 0x6, [{0x2, 0x1, 0x2ec522e0}, {0xc, 0x4, 0xfffff3dd}, {0xf, 0x5, 0x28000000}, {0xe, 0x4, 0xb}, {0x10, 0x2, 0x80000001}, {0x3, 0x4, 0x3}, {0x4, 0x4, 0x5}]}, @struct={0xb, 0x0, 0x0, 0x4, 0x0, 0x1}]}, {0x0, [0x30, 0x0, 0x0, 0x61, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000640)=""/223, 0x165, 0xdf, 0x0, 0xe, 0x10000, @value=r3}, 0x28) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000850000002500000095f1ff0000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000003c0), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r8}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='GPL\x00') perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = gettid() syz_open_procfs$namespace(r9, &(0x7f0000000200)='ns/time\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020754d0400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000180100002020642500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 826.211861ms ago: executing program 4 (id=2520): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x40000000, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x8000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) write$cgroup_subtree(r1, 0x0, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46", 0xb}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f00000003c0), 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r3}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000440)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x7, 0x7f}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f94a24fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x0) 587.919632ms ago: executing program 3 (id=2521): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000180)="f0cf92c36a7650a14b0aa68960066474423029affba63ad42cb4cd27503c36628efd2918b02725ad0479c4f94046fa78c0cd4770d831729d392db5217d6b16a47d7a077519ff5b7590e7d256c42205aa98278452cf35e169c5e2044a1c724c1b5bc8c17c64a39dab9374bfe5683356102b2eb5f2bba15c7a9ab1f40b9b53e08dcbf35399c8ecaec4dec7a5690222733becc40a755b8334545e563ee171b89e26da98488d0d6e4efd27f5261a8f5e6426d2f9ca161e41ecf6e497df", 0xbb}], 0x1, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}], 0x60}, 0x2000000) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[], 0xa) 451.713129ms ago: executing program 5 (id=2522): socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x10, 0x0, 0x11) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 450.242639ms ago: executing program 0 (id=2523): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000010000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe80, 0x0, &(0x7f0000000000)="c1dfb061cd21d3084d94d3540800", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 449.516039ms ago: executing program 1 (id=2524): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008600699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) 391.455392ms ago: executing program 3 (id=2525): r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14690, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0xb3b, 0xffffffffffbffff8}, 0x842, 0x0, 0x6, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x4c, 0x0, 0x4) r3 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x28, 0x6, 0x0, 0x44) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000204000000000000000000000b020000000000000061"], 0x0, 0x52}, 0x20) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)}, 0x10042) 253.354888ms ago: executing program 0 (id=2526): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1, r0}, 0xc) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000037000b63d25a80649ceb96d50124fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 158.585373ms ago: executing program 3 (id=2527): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000012c0)={0x6, 0x1f, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb}, {}, {}, [@jmp={0x5, 0x0, 0x6, 0x7d01ed65f5e48059, 0x8, 0xffffffffffffffff}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x1000, &(0x7f0000000180)=""/4096, 0x40f00, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001180)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000011c0)={0x3, 0x0, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000001240)=[{0x2, 0x1, 0x1, 0x6}, {0x4, 0x5, 0x4, 0x2}, {0x5, 0x2, 0x2, 0x1}, {0x3, 0x1, 0x0, 0x2}, {0x3, 0x1, 0x9, 0x5}, {0x4, 0x3, 0xe, 0x3}, {0x4, 0x2, 0xe}]}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{0x1, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)='%-5lx \x00'}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001440)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18) (async) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000002e80)={&(0x7f0000001480)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000001500)="d5e257fd2920797615801acbaf30db2aad640a49c755c8999490e4704ca4817215b05dfab89e0e5f538f1efc0368ab545cc2f0d270f4b5a124c2b442d30f36e4afe63110094f9086f57c5eb7a4723774a4e1584307e42ffb56833e17b5e0382efe35c86495daa013423689bd51fc01624b3b703ef9491939ebf20ed246d4e69eb7cf58ed8f5e58bd39ff062fd0d6ca31451705e1df6fa16d14b9df0841d3216ed2edfd30e0df010dac1aa40cd5a038e8b46a77377051c8bf1d3d02d2a52c960757c6db1107668f58926a5e781750fb", 0xcf}, {&(0x7f0000001600)="9d3a22cd33ac5dbdc80601b1fd6d29d42bde5e330bd721c83b1584314de162fcb39a88bf9f795f0bb119fc6513bf8b453d0a7f1cd8cb09a14ed8a3a44bc336ea481336977ee5d00294224ae0c725b33e1006bb2ae16d54dfc4d2fb78f10930a02da26e3704c02528bf44435ee4710f182c0e1f999ca64d350cc9abf50dc908d5d39868c924b164867b450fe6", 0x8c}, {&(0x7f00000016c0)="54dcc731e2324a6c7b52176fd4fa06a95f207917ff8e133cca7691fc5829e4201212f70743f3c5aa1fb8025070", 0x2d}, {&(0x7f0000001700)="712630ac6969c6021eba63464e9e0138c4013a3f6ede95b79b7c4a6c662e873a011d3d478b1987859a47f8fde777b17b0c21a58ebbe73924abed6f749e941105b46736ef3e6eefdb16b20c9a644af146a2c82afd6264726ee42f95adc1e0a09b4849f6d34662cdc93c4a127c014674944b23b555baccd9a4018efa15", 0x7c}, {&(0x7f0000001780)="d80d4519030d032d1b59dfce229c526793c778b5b9afc5fb1197adefb6781ccfebaf7187ee029d010d733c21cca4a7b61c5f64e5f0d8819e7a9b7f0c50cd47531f381688e9127fb0214caafbeb9ac5e2ac5fd3fcb8e23f3a327e522b75eb113827379ea31cf97bc7db50eb", 0x6b}, {&(0x7f0000001800)="470fb6075ad918265fe2a25ac679f9a8ad86a711e582ebbde517885e628b1286558ad1ad81307f3cef5e4360d55fd67ec342e39108081f6f6a3518f6b3312aa4952dbd0365b317e89f5bbe0f5798f4fe4ac3edec4a1aeea7f5d22b337d34435b3c4be05ea1f79548fba8eee14583e265958f094c83a7999fd0782b4eed7168cf2fb28e997829d6d5530fe86d491fb2b4e9fbde0c8393061e79e916a6d33327ab82c632b31f4d809265959879d2f71e1d305ef330019b83ec5c23b9d99eafa1b3e545a4168dcfbaf9dabeca4988c052198509b2d0f9eca59051e1a92cb57c71648cd2985c4296a5c2dd885270244e9f375d", 0xf1}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="03d121e7bfacbeec1cc66125212dab89c61f23fe6a982e16cbb0db8da39cacbbd0a4254160f78d27927fa2854c8019f9abbd7144b2e7d23720ac7269521e003b3be3bbe92ae6ff41601cc0d3084ae788839744c8ca3cf031435b0bbb8ed1d9663245e4b7d13d9e9556769a9bd38e8079fe6a9cd87629fbd1fc1d7e1a5f378d3fa9a733f84384f9010b61fd37c597a83eea242c5e07", 0x95}, {&(0x7f00000029c0)="b8197dfcbcf59ba58f4f7548160234d43cb3a7aafbc7d998525cb56027f2aff3baa6b4cd897677243afd67e723357951dbe0ec3fa96b34b3c3", 0x39}, {&(0x7f0000002a00)="acfea68146c1e670e8dc2d12f8268d7b3a991f7fd2477b0852d779fffb4edf38f39a91e609b6af1fd6f526e6cad77017b043c35237e38bd53f9173ddf285b4f15c6aa0c7d8638cbdb0a8f63dcd6705a3f15a6dea26b61281b686c9e61dc0c6dcf803326b86f3c63c9bf5f73d06b4dec2aad5a71c0836ea1c04040416c910e8ca17388666b426466038e7e54cf7d97e3a7bb5e24e4b6487c39ef8a7c7ba9e1dd397ce", 0xa2}], 0xa, &(0x7f0000002b80)=[{0x88, 0x10b, 0x4, "51b983c44054417a63b94c9e7463b0b7ca086cd8511c63e49513de5f49f13621c33b235c8dfb9b58c201013df964e42182bbad8cab078e7d14e7a32bcaaa702a49b989107661052d10717e2c12be1d2250e623f8929a79b1c9ff8553e752419eb7842e8acc1368848e05f682bb5a5741e4"}, {0xa8, 0x11, 0x0, "806f082257008fbfb65d57a8d49f6917f85c15c86f3c4eae1258d709c3a054c183831a87cca7cb562bb88f625fd796ff3487016eb4906b3e6bd534bee80d897c62b92c213467ebea3e6902b4d646ef828e22c012f211461212ef72aa7a1b62d29a08e7eaf7a777d524a22c164c678ee470ab6c1bd7e8d3aaccaefe26f12b5f4ab4786ce0e07ecb24f681cc32ca6de45a2c4b"}, {0xd8, 0x10c, 0x7, "abcc81ba88da571f9ae2b107ad396edc36ede0fb67e3e036ffebff2c54a0e90756e794db686f3e499cf3bf5a42e322a22951a2681d29344749a173b45b0d93e01f8d47ffbed6b9f21565d5e02403f398b17660a8c33e0b7ea0a6d1b16743e691654083a19c120bcf9f58e76cea7804f579d658cc2ad3cbbd837ff23eb270040c765e15e13b325a7daf9272c8ffee38c4486d0c88754707042978a572d7727975d248b4c4112cae8feaee298bbe3e1cb0c73be4027b5d070c5928027dd1471fb1d4ac3c166858"}, {0xc0, 0x107, 0xa6a, "d6b08c8d9bdc5412179dfd05b9d3fd1084213e1271bfc9434094f26510a8a7b22831d23833bcd881fd907c74936f6662db9732001780ecf9e0a8c31ad6e3afd186d051ea40e9b21a376e625fb53d6fd4c5475ebc5e707ba1e27aa00471caf4df3ca3230e5b1c33c2ada6d32843066a8442e46926a598022437f5af4e0d44d9dae673218770bd1dd1ad324067d82ec555c0f1b4752d42dcc92e3e63de3e536742c09a01f72d515b057317f20682"}], 0x2c8}, 0x20040804) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000031c0)={0x6, 0x1b, &(0x7f0000002ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000}, [@generic={0xa7, 0x3, 0x2, 0x87, 0xfff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xb, 0x2, 0xb, 0x50, 0x10}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x7, 0x1, 0x7, 0x8}]}, &(0x7f0000002fc0)='syzkaller\x00', 0x80, 0x91, &(0x7f0000003000)=""/145, 0x41100, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000030c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000003100)={0x3, 0xe, 0x1, 0x80000000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003140)=[r1, r1, r1, r1, r1], &(0x7f0000003180)=[{0x4, 0x3, 0xc, 0xc}], 0x10, 0x10}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003380)={@fallback=r2, 0x0, 0x1, 0x8, &(0x7f0000003280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000032c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003300)=[0x0, 0x0, 0x0], &(0x7f0000003340)=[0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003400)={0x5, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000033c0)={@map=r1, r3, 0x13, 0x2020, 0x0, @void, @void, @value=r6, @void, r5}, 0x20) r7 = syz_clone(0x40000, &(0x7f00000034c0)="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", 0x1000, &(0x7f00000044c0), &(0x7f0000004500), &(0x7f0000004540)="7f0ceea00dc43f629d0fb60eaabf724440d65796a7cd7c8db5289cb5d0a8bdbbbf941e0417869a38d70bc0fff8e3e4376c95a60c37606364dd3f07102495a009f78762e395e73a050f4cb642aca724b564e929102cecb72f290725a0a47d857a3f476f987ec03223481e5b75c850e780a3aa1cbf5ab8e455cbb210ab7e56be0bde117dd3e0a9b07341166c2d62f59e6c12449c451fddbcb4ff6f26b46a02fcb13022d1f0c9188caa269e7f72a87f644ab86c504274f7d47a546b1b0a7e2e6e79e615b1165261f935aa27e73ea961a6db26e4a9be1be60d") r8 = perf_event_open(&(0x7f0000003440)={0x0, 0x80, 0x7, 0x9, 0x1, 0xd4, 0x0, 0x92, 0xdc2a0, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x9, 0x1}, 0x1, 0xfd0, 0x400, 0x3, 0xdb, 0x2, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff}, r7, 0x9, 0xffffffffffffffff, 0xa) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000004640)={0x0, r0}, 0x8) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000047c0)={r1, 0x58, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r2, &(0x7f0000004880)={&(0x7f0000004680)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004700)=[{&(0x7f00000046c0)}], 0x1, &(0x7f0000004800)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x68}, 0x4000011) (async) r10 = openat$cgroup_ro(r4, &(0x7f00000048c0)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r10, 0x80082407, &(0x7f0000004900)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000004940)={0x2, 0x0, [0x0, 0x0]}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000004980)='GPL\x00') (async) r11 = socket$kcm(0x29, 0x5, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004c80)={r3, 0xe0, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000049c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000004a00)=[0x0], &(0x7f0000004a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000004a80)=[{}], 0x8, 0x10, &(0x7f0000004ac0), &(0x7f0000004b00), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000004b40)}}, 0x10) syz_open_procfs$namespace(r7, &(0x7f0000004cc0)='ns/time_for_children\x00') (async) getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000004d00)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x89e2, &(0x7f0000004d40)={r13}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000004ec0)={r4, 0x20, &(0x7f0000004e80)={&(0x7f0000004d80)=""/167, 0xa7, 0x0, &(0x7f0000004e40)=""/20, 0x14}}, 0x10) (async) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000004f00)={r10}, 0x8) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000005040)={@map=r10, 0x31, 0x0, 0x6, &(0x7f0000004f40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000004f80)=[0x0], &(0x7f0000004fc0)=[0x0, 0x0], &(0x7f0000005000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005080)={@ifindex=r12, r3, 0x16, 0x0, r14, @void, @value=r4, @void, @void, r15}, 0x20) (async) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000005100)=@generic={&(0x7f00000050c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005500)={0x6, 0x18, &(0x7f00000051c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x25d6}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x8, 0x6, 0x9, 0x4, 0xffffffffffffffff}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @map_val={0x18, 0x0, 0x2, 0x0, r14, 0x0, 0x0, 0x0, 0x400}, @alu={0x4, 0x0, 0x8, 0x3, 0xb, 0x98, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @exit, @map_fd={0x18, 0x1}]}, &(0x7f0000005280)='syzkaller\x00', 0x2, 0xcb, &(0x7f00000052c0)=""/203, 0xa1600, 0x32, '\x00', r12, 0x25, r10, 0x8, &(0x7f00000053c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000005400)={0x0, 0xc, 0x40, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000005440)=[r14, r1], &(0x7f0000005480)=[{0x1, 0x2, 0x5, 0xc}, {0x0, 0x5, 0x10, 0x7}, {0x3, 0x2, 0x9, 0x8}, {0x5, 0x5, 0x3, 0x9}, {0x2, 0x5, 0xe, 0x5}, {0x0, 0x3, 0xf, 0xa}, {0x1, 0x2, 0x9, 0x8}], 0x10, 0x7}, 0x94) 107.370935ms ago: executing program 1 (id=2528): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x18, 0x0, 0x1, 0x1}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x5, 0x5}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_clone(0x410644f5, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=2529): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe8, &(0x7f00000002c0)=""/232, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x200008}, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {0x2}, {}, {}, {0x1}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe8, &(0x7f00000002c0)=""/232, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x200008}, 0x2}, 0x94) (async) kernel console output (not intermixed with test programs): 6.414412][ T7970] Call Trace: [ 226.417736][ T7970] [ 226.420677][ T7970] dump_stack_lvl+0x188/0x24e [ 226.425376][ T7970] ? show_regs_print_info+0x12/0x12 [ 226.430587][ T7970] ? load_image+0x410/0x410 [ 226.435108][ T7970] ? verify_lock_unused+0x140/0x140 [ 226.440331][ T7970] should_fail_ex+0x390/0x4c0 [ 226.445034][ T7970] should_failslab+0x5/0x20 [ 226.449548][ T7970] slab_pre_alloc_hook+0x59/0x300 [ 226.454592][ T7970] kmem_cache_alloc+0x56/0x2f0 [ 226.459373][ T7970] ? skb_clone+0x1e7/0x370 [ 226.461784][ T7972] netlink: 'syz.4.875': attribute type 9 has an invalid length. [ 226.463795][ T7970] skb_clone+0x1e7/0x370 [ 226.463830][ T7970] __netlink_deliver_tap+0x3e4/0x7e0 [ 226.463858][ T7970] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.463878][ T7970] netlink_deliver_tap+0x19c/0x1b0 [ 226.463897][ T7970] netlink_unicast+0x777/0x920 [ 226.471881][ T7972] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.875'. [ 226.475763][ T7970] netlink_sendmsg+0x8ad/0xbd0 [ 226.475794][ T7970] ? netlink_getsockopt+0x550/0x550 [ 226.475813][ T7970] ? apparmor_socket_sendmsg+0x8a/0x330 [ 226.475837][ T7970] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 226.475855][ T7970] ? security_socket_sendmsg+0x7c/0xa0 [ 226.475876][ T7970] ? netlink_getsockopt+0x550/0x550 [ 226.536714][ T7970] ____sys_sendmsg+0x5ed/0x9a0 [ 226.541503][ T7970] ? __sys_sendmsg_sock+0x30/0x30 [ 226.546530][ T7970] ? __import_iovec+0x306/0x510 [ 226.551398][ T7970] ? import_iovec+0x6f/0xa0 [ 226.555908][ T7970] ___sys_sendmsg+0x2a2/0x360 [ 226.560595][ T7970] ? __sys_sendmsg+0x2a0/0x2a0 [ 226.565377][ T7970] ? __lock_acquire+0x7c40/0x7c40 [ 226.570431][ T7970] __se_sys_sendmsg+0x1c3/0x2b0 [ 226.575292][ T7970] ? __x64_sys_sendmsg+0x80/0x80 [ 226.580246][ T7970] ? lockdep_hardirqs_on+0x94/0x140 [ 226.585448][ T7970] do_syscall_64+0x4c/0xa0 [ 226.589866][ T7970] ? clear_bhb_loop+0x60/0xb0 [ 226.594540][ T7970] ? clear_bhb_loop+0x60/0xb0 [ 226.599220][ T7970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 226.605120][ T7970] RIP: 0033:0x7f30b8d9e159 [ 226.609537][ T7970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.629147][ T7970] RSP: 002b:00007f30b9bcd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.637565][ T7970] RAX: ffffffffffffffda RBX: 00007f30b9025fa0 RCX: 00007f30b8d9e159 [ 226.645539][ T7970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 226.653508][ T7970] RBP: 00007f30b9bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 226.661476][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.669446][ T7970] R13: 00007f30b9026038 R14: 00007f30b9025fa0 R15: 00007ffe952ccab8 [ 226.677439][ T7970] [ 226.759153][ T7966] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 226.793901][ T7966] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 226.823635][ T7966] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 226.921730][ T7975] netlink: 152 bytes leftover after parsing attributes in process `syz.0.876'. [ 226.942024][ T7975] bond0: (slave bond_slave_0): Releasing backup interface [ 226.966474][ T7975] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 227.089803][ T7982] netlink: 'syz.2.877': attribute type 10 has an invalid length. [ 227.108810][ T7982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.877'. [ 227.135071][ T7982] device ipvlan1 entered promiscuous mode [ 227.163707][ T7982] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 228.010230][ T7995] netlink: 168 bytes leftover after parsing attributes in process `syz.0.881'. [ 228.130353][ T7998] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.882'. [ 228.710819][ T8023] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.887'. [ 229.181872][ T8041] netlink: 'syz.0.893': attribute type 21 has an invalid length. [ 229.334022][ T8056] netlink: 68 bytes leftover after parsing attributes in process `syz.3.895'. [ 229.412767][ T8055] netlink: 'syz.2.894': attribute type 10 has an invalid length. [ 229.485888][ T8055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.894'. [ 229.626852][ T8055] batman_adv: batadv0: Adding interface: veth0_vlan [ 229.711826][ T8055] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.750500][ T8055] batman_adv: batadv0: Interface activated: veth0_vlan [ 229.858806][ T8069] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 233.023605][ T8084] netlink: 'syz.3.899': attribute type 10 has an invalid length. [ 233.041247][ T8084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.899'. [ 233.063619][ T8084] device dummy0 entered promiscuous mode [ 233.079437][ T8087] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.901'. [ 233.145322][ T8084] bond0: (slave dummy0): Releasing backup interface [ 233.256678][ T8084] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 233.590538][ T8097] netlink: 'syz.4.903': attribute type 27 has an invalid length. [ 233.605311][ T8097] netlink: 152 bytes leftover after parsing attributes in process `syz.4.903'. [ 233.635533][ T8097] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.638932][ T8119] netlink: 'syz.4.907': attribute type 15 has an invalid length. [ 234.664192][ T8119] netlink: 156 bytes leftover after parsing attributes in process `syz.4.907'. [ 234.883117][ T8135] netlink: 'syz.0.912': attribute type 4 has an invalid length. [ 234.919507][ T8135] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.912'. [ 235.227728][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.353428][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.362471][ T8148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.370583][ T8148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.435234][ T8148] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 235.463738][ T8148] batman_adv: batadv0: Removing interface: veth0_vlan [ 235.666231][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 235.678930][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 235.691564][ T8156] netlink: 33 bytes leftover after parsing attributes in process `syz.1.919'. [ 235.705728][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 235.721864][ T8156] netlink: 33 bytes leftover after parsing attributes in process `syz.1.919'. [ 236.279546][ T8168] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 236.645614][ T8188] device syzkaller0 entered promiscuous mode [ 236.806673][ T8197] device syzkaller0 entered promiscuous mode [ 236.947049][ T8186] device syzkaller0 left promiscuous mode [ 236.968953][ T4289] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 237.368513][ T8222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.399871][ T8222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.414295][ T8222] bond0 (unregistering): Released all slaves [ 237.439522][ T8226] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 237.449431][ T8226] netlink: 'syz.0.935': attribute type 4 has an invalid length. [ 237.458561][ T8226] virt_wifi0: mtu greater than device maximum [ 237.466294][ T8226] team0: Device virt_wifi0 failed to change mtu [ 239.321279][ T8238] __nla_validate_parse: 14 callbacks suppressed [ 239.321292][ T8238] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.937'. [ 239.344109][ T8241] netlink: 'syz.1.938': attribute type 10 has an invalid length. [ 239.359947][ T8243] netlink: 'syz.0.937': attribute type 2 has an invalid length. [ 239.367983][ T8243] netlink: 'syz.0.937': attribute type 8 has an invalid length. [ 239.377357][ T8243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.937'. [ 239.462073][ T8249] device syzkaller0 entered promiscuous mode [ 239.548322][ T8264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.942'. [ 242.607533][ T8264] netlink: 60 bytes leftover after parsing attributes in process `syz.4.942'. [ 242.840762][ T8301] netlink: 56343 bytes leftover after parsing attributes in process `syz.3.951'. [ 242.937663][ T8302] netlink: 'syz.2.953': attribute type 2 has an invalid length. [ 242.966341][ T8302] netlink: 'syz.2.953': attribute type 8 has an invalid length. [ 242.975786][ T8302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.953'. [ 242.988662][ T8307] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 242.999285][ T8300] delete_channel: no stack [ 243.028638][ T8307] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 243.109147][ T8312] netlink: 152 bytes leftover after parsing attributes in process `syz.0.956'. [ 243.137698][ T8307] netlink: 'syz.4.954': attribute type 29 has an invalid length. [ 243.256456][ T8323] netlink: 180 bytes leftover after parsing attributes in process `syz.3.958'. [ 244.182186][ T8354] netlink: 'syz.3.967': attribute type 16 has an invalid length. [ 244.196082][ T8354] netlink: 156 bytes leftover after parsing attributes in process `syz.3.967'. [ 244.217163][ T8353] netlink: 56343 bytes leftover after parsing attributes in process `syz.2.966'. [ 244.742327][ T8379] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 245.334431][ T8409] netlink: 'syz.0.980': attribute type 29 has an invalid length. [ 245.357125][ T8410] netlink: 56343 bytes leftover after parsing attributes in process `syz.4.982'. [ 245.447463][ T8409] netlink: 'syz.0.980': attribute type 29 has an invalid length. [ 245.749175][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.1.987'. [ 245.816239][ T8431] netlink: 'syz.0.989': attribute type 29 has an invalid length. [ 245.825054][ T8431] netlink: 'syz.0.989': attribute type 29 has an invalid length. [ 245.833575][ T8431] netlink: 'syz.0.989': attribute type 29 has an invalid length. [ 245.841948][ T8431] netlink: 'syz.0.989': attribute type 29 has an invalid length. [ 246.299898][ T8443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.307304][ T8443] IPv6: NLM_F_CREATE should be set when creating new route [ 246.314719][ T8443] IPv6: NLM_F_CREATE should be set when creating new route [ 246.321962][ T8443] IPv6: NLM_F_CREATE should be set when creating new route [ 246.755319][ T8455] netlink: 'syz.3.995': attribute type 29 has an invalid length. [ 246.784886][ T8455] netlink: 'syz.3.995': attribute type 3 has an invalid length. [ 246.824614][ T8455] netlink: 132 bytes leftover after parsing attributes in process `syz.3.995'. [ 247.094986][ T8466] netlink: 10 bytes leftover after parsing attributes in process `syz.4.998'. [ 247.684490][ T7234] wlan1: Trigger new scan to find an IBSS to join [ 247.993185][ T8484] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 249.229349][ T8510] netlink: 'syz.1.1009': attribute type 2 has an invalid length. [ 249.820370][ T8547] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1012'. [ 250.205593][ T8560] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1018'. [ 250.496344][ T8574] netlink: 'syz.0.1019': attribute type 3 has an invalid length. [ 250.523722][ T8574] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1019'. [ 250.726779][ T7221] wlan1: Trigger new scan to find an IBSS to join [ 250.869686][ T8586] netlink: 'syz.1.1025': attribute type 21 has an invalid length. [ 250.901854][ T8586] netlink: 'syz.1.1025': attribute type 1 has an invalid length. [ 252.119053][ T8596] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1027'. [ 252.175460][ T8596] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 252.404401][ T8608] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 252.434479][ T8608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1029'. [ 252.691285][ T8618] netlink: 'syz.0.1033': attribute type 21 has an invalid length. [ 252.740179][ T8618] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1033'. [ 253.000448][ T8623] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1034'. [ 253.128476][ T8621] netlink: 'syz.2.1034': attribute type 10 has an invalid length. [ 253.684083][ T4321] wlan1: Creating new IBSS network, BSSID 06:e5:18:37:46:c1 [ 254.079187][ T8621] team0: Device gre0 is of different type [ 254.710853][ T8624] device syzkaller0 entered promiscuous mode [ 255.159842][ T8662] tap0: tun_chr_ioctl cmd 1074025680 [ 255.525678][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.532723][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.794890][ T8696] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 255.824642][ T8696] netlink: 'syz.2.1051': attribute type 4 has an invalid length. [ 255.832406][ T8696] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1051'. [ 255.942113][ T8703] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 256.022309][ T8709] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1054'. [ 256.060901][ T8703] netlink: 'syz.2.1051': attribute type 4 has an invalid length. [ 256.082156][ T8703] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1051'. [ 256.465493][ T8728] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1056'. [ 256.517525][ T8732] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1058'. [ 256.595892][ T8732] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1058'. [ 256.646253][ T8732] netlink: zone id is out of range [ 256.651903][ T8732] netlink: zone id is out of range [ 256.911014][ T8750] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1062'. [ 257.593359][ T8778] netlink: 'syz.2.1068': attribute type 10 has an invalid length. [ 257.692242][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 257.699167][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 257.706724][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 257.737977][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 257.753036][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 257.779270][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 257.791487][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 257.827332][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 257.845162][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 257.964303][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 257.969410][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 258.014087][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 258.025338][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 258.030796][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 258.118764][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 258.184161][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 258.189187][ T8749] tap0: tun_chr_ioctl cmd 35108 [ 258.245265][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 258.250732][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 258.459175][ T8746] tap0: tun_chr_ioctl cmd 1074025673 [ 258.726066][ T8793] netlink: 'syz.4.1070': attribute type 2 has an invalid length. [ 258.960210][ T8793] device 0 entered promiscuous mode [ 259.196913][ T8811] netlink: 'syz.1.1074': attribute type 21 has an invalid length. [ 259.361318][ T8815] netlink: 'syz.2.1076': attribute type 10 has an invalid length. [ 259.436419][ T8821] netlink: 8221 bytes leftover after parsing attributes in process `syz.1.1079'. [ 259.648470][ T8832] netlink: 'syz.1.1081': attribute type 3 has an invalid length. [ 259.662331][ T8832] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1081'. [ 259.832621][ T8841] netlink: 1030 bytes leftover after parsing attributes in process `syz.0.1083'. [ 261.331488][ T8879] netlink: 'syz.2.1093': attribute type 15 has an invalid length. [ 261.655150][ T8885] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1094'. [ 262.317589][ T8906] netlink: 'syz.0.1102': attribute type 2 has an invalid length. [ 262.333797][ T8906] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1102'. [ 262.411714][ T8906] netlink: 'syz.0.1102': attribute type 2 has an invalid length. [ 262.464920][ T8906] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1102'. [ 262.544132][ T8919] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1104'. [ 262.592771][ T8919] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 262.671415][ T8922] device sit0 entered promiscuous mode [ 262.852308][ T8929] netlink: 'syz.3.1106': attribute type 10 has an invalid length. [ 262.961417][ T8930] netlink: 'syz.0.1107': attribute type 1 has an invalid length. [ 262.983936][ T8930] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1107'. [ 263.286034][ T8934] netlink: 'syz.1.1108': attribute type 3 has an invalid length. [ 263.334145][ T8934] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1108'. [ 263.747919][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1110'. [ 264.009931][ T8948] netlink: 'syz.2.1113': attribute type 4 has an invalid length. [ 264.019561][ T8946] device syzkaller0 entered promiscuous mode [ 264.038534][ T8948] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1113'. [ 269.127642][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1120'. [ 269.137959][ T8988] device sit0 left promiscuous mode [ 269.206646][ T8986] device sit0 entered promiscuous mode [ 269.263946][ T8990] netlink: 'syz.1.1121': attribute type 10 has an invalid length. [ 269.304016][ T8990] netlink: 'syz.1.1121': attribute type 19 has an invalid length. [ 269.343086][ T8990] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1121'. [ 269.492500][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 269.509544][ T9006] netlink: 'syz.3.1126': attribute type 13 has an invalid length. [ 269.517932][ T9006] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1126'. [ 269.559050][ T9006] syz_tun: refused to change device tx_queue_len [ 269.583960][ T9006] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 269.602188][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 269.714397][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 269.775774][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 269.916002][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.032223][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.078113][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.131632][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.159455][ T9028] netlink: 'syz.1.1130': attribute type 3 has an invalid length. [ 270.180572][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.196337][ T9024] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.1129'. [ 270.206064][ T9028] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1130'. [ 270.223805][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.270087][ T9024] openvswitch: netlink: Flow actions attr not present in new flow. [ 270.281772][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.305694][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.351424][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.495274][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.510903][ T9032] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1131'. [ 270.514423][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.558833][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.620657][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.646701][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.706675][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.760504][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.815576][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.869409][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.920993][ T9001] ref_ctr_offset mismatch. inode: 0x47d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 270.946538][ T9045] netlink: 'syz.0.1136': attribute type 29 has an invalid length. [ 271.000390][ T9048] netlink: 'syz.3.1137': attribute type 10 has an invalid length. [ 271.019325][ T9048] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1137'. [ 271.176834][ T9053] netlink: 'syz.2.1139': attribute type 21 has an invalid length. [ 271.194824][ T9053] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.213936][ T9053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.221449][ T9053] IPv6: NLM_F_CREATE should be set when creating new route [ 271.229514][ T9053] IPv6: NLM_F_CREATE should be set when creating new route [ 271.237215][ T9053] IPv6: NLM_F_CREATE should be set when creating new route [ 271.301121][ T9055] netlink: 'syz.4.1140': attribute type 10 has an invalid length. [ 273.401668][ T9099] netlink: 'syz.2.1150': attribute type 29 has an invalid length. [ 273.415673][ T9098] netlink: 46607 bytes leftover after parsing attributes in process `syz.2.1150'. [ 273.426031][ T9099] netlink: 'syz.2.1150': attribute type 29 has an invalid length. [ 273.962193][ T9110] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1154'. [ 273.975793][ T9110] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1154'. [ 273.987795][ T9110] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 274.330942][ T9122] netlink: 'syz.0.1157': attribute type 10 has an invalid length. [ 274.339159][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1157'. [ 274.349314][ T9122] bridge0: port 3(dummy0) entered blocking state [ 274.357140][ T9122] bridge0: port 3(dummy0) entered disabled state [ 274.381188][ T9122] device dummy0 entered promiscuous mode [ 274.400698][ T9122] bridge0: port 3(dummy0) entered blocking state [ 274.407223][ T9122] bridge0: port 3(dummy0) entered forwarding state [ 274.419893][ T9125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1158'. [ 274.443747][ T9114] bridge0: port 4(dummy0) entered disabled state [ 274.450660][ T9114] bridge0: port 3(hsr0) entered disabled state [ 274.457367][ T9114] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.467416][ T9114] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.477672][ T9114] device bridge0 entered promiscuous mode [ 276.026057][ T9169] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1170'. [ 276.050012][ T9171] netlink: 'syz.2.1171': attribute type 21 has an invalid length. [ 276.085623][ T9171] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 276.093912][ T9171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1171'. [ 276.279746][ T9171] netlink: 'syz.2.1171': attribute type 21 has an invalid length. [ 276.287785][ T9171] netlink: 'syz.2.1171': attribute type 4 has an invalid length. [ 276.295996][ T9171] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1171'. [ 276.635765][ T9193] netlink: 'syz.4.1174': attribute type 10 has an invalid length. [ 276.909989][ T9214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1181'. [ 276.989463][ T9219] netlink: 'syz.4.1183': attribute type 29 has an invalid length. [ 277.053561][ T9219] netlink: 'syz.4.1183': attribute type 29 has an invalid length. [ 277.079030][ T9221] netlink: 'syz.4.1183': attribute type 29 has an invalid length. [ 277.203096][ T9219] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1183'. [ 277.759257][ T9259] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1189'. [ 277.795031][ T9259] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 277.823377][ T9259] CPU: 1 PID: 9259 Comm: syz.4.1189 Not tainted syzkaller #0 [ 277.830806][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.840902][ T9259] Call Trace: [ 277.844199][ T9259] [ 277.847143][ T9259] dump_stack_lvl+0x188/0x24e [ 277.851837][ T9259] ? show_regs_print_info+0x12/0x12 [ 277.857032][ T9259] ? load_image+0x410/0x410 [ 277.861546][ T9259] sysfs_warn_dup+0x8a/0xa0 [ 277.866053][ T9259] sysfs_do_create_link_sd+0xc0/0x110 [ 277.871428][ T9259] device_add+0x83b/0x1050 [ 277.875856][ T9259] wiphy_register+0x1d8b/0x2aa0 [ 277.880719][ T9259] ? cfg80211_event_work+0x40/0x40 [ 277.885825][ T9259] ? minstrel_ht_alloc+0x894/0xa20 [ 277.890941][ T9259] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 277.897008][ T9259] ieee80211_register_hw+0x2d48/0x39f0 [ 277.902470][ T9259] ? ieee80211_register_hw+0xf41/0x39f0 [ 277.908011][ T9259] ? ieee80211_register_hw+0xf41/0x39f0 [ 277.913560][ T9259] ? ieee80211_tasklet_handler+0x20/0x20 [ 277.919191][ T9259] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 277.925086][ T9259] ? __debug_object_init+0xed/0x440 [ 277.930283][ T9259] ? memset+0x1e/0x40 [ 277.934258][ T9259] ? __hrtimer_init+0x189/0x270 [ 277.939106][ T9259] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 277.944842][ T9259] ? memcpy+0x3c/0x60 [ 277.948820][ T9259] hwsim_new_radio_nl+0xab7/0xc90 [ 277.953854][ T9259] genl_family_rcv_msg_doit+0x22f/0x350 [ 277.959395][ T9259] ? end_current_label_crit_section+0x170/0x170 [ 277.965638][ T9259] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 277.971532][ T9259] ? bpf_lsm_capable+0x5/0x10 [ 277.976207][ T9259] ? security_capable+0x85/0xb0 [ 277.981055][ T9259] genl_rcv_msg+0x601/0x790 [ 277.985566][ T9259] ? genl_bind+0x360/0x360 [ 277.989982][ T9259] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 277.996323][ T9259] netlink_rcv_skb+0x1ef/0x440 [ 278.001083][ T9259] ? genl_bind+0x360/0x360 [ 278.005496][ T9259] ? netlink_ack+0x1160/0x1160 [ 278.010259][ T9259] ? down_read+0x1a8/0x2d0 [ 278.014674][ T9259] genl_rcv+0x24/0x40 [ 278.018666][ T9259] netlink_unicast+0x7ad/0x920 [ 278.023430][ T9259] netlink_sendmsg+0x8ad/0xbd0 [ 278.028194][ T9259] ? netlink_getsockopt+0x550/0x550 [ 278.033387][ T9259] ? apparmor_socket_sendmsg+0x8a/0x330 [ 278.038935][ T9259] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 278.044214][ T9259] ? security_socket_sendmsg+0x7c/0xa0 [ 278.049668][ T9259] ? netlink_getsockopt+0x550/0x550 [ 278.054863][ T9259] ____sys_sendmsg+0x5ed/0x9a0 [ 278.059630][ T9259] ? __sys_sendmsg_sock+0x30/0x30 [ 278.064644][ T9259] ? __import_iovec+0x306/0x510 [ 278.069504][ T9259] ? import_iovec+0x6f/0xa0 [ 278.074006][ T9259] ___sys_sendmsg+0x2a2/0x360 [ 278.078679][ T9259] ? __sys_sendmsg+0x2a0/0x2a0 [ 278.083481][ T9259] __se_sys_sendmsg+0x1c3/0x2b0 [ 278.088330][ T9259] ? __x64_sys_sendmsg+0x80/0x80 [ 278.093273][ T9259] ? lockdep_hardirqs_on+0x94/0x140 [ 278.098468][ T9259] do_syscall_64+0x4c/0xa0 [ 278.102876][ T9259] ? clear_bhb_loop+0x60/0xb0 [ 278.107544][ T9259] ? clear_bhb_loop+0x60/0xb0 [ 278.112219][ T9259] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 278.118108][ T9259] RIP: 0033:0x7fc44139e159 [ 278.122517][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.142111][ T9259] RSP: 002b:00007fc4421aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.150519][ T9259] RAX: ffffffffffffffda RBX: 00007fc441625fa0 RCX: 00007fc44139e159 [ 278.158484][ T9259] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 278.166451][ T9259] RBP: 00007fc44143506b R08: 0000000000000000 R09: 0000000000000000 [ 278.174413][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.182376][ T9259] R13: 00007fc441626038 R14: 00007fc441625fa0 R15: 00007ffdd7c73628 [ 278.190355][ T9259] [ 280.164662][ T9305] netlink: 'syz.0.1198': attribute type 29 has an invalid length. [ 280.172872][ T9305] netlink: 'syz.0.1198': attribute type 29 has an invalid length. [ 280.200840][ T9304] netlink: 'syz.0.1198': attribute type 29 has an invalid length. [ 280.448236][ T9316] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1202'. [ 280.498352][ T9318] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 280.652890][ T9321] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1204'. [ 281.043945][ T9332] netlink: 'syz.4.1206': attribute type 2 has an invalid length. [ 281.048810][ T9330] netlink: 'syz.4.1206': attribute type 2 has an invalid length. [ 281.072203][ T9333] netlink: 'syz.4.1206': attribute type 10 has an invalid length. [ 281.072245][ T9328] netlink: 'syz.4.1206': attribute type 10 has an invalid length. [ 281.088143][ T9333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1206'. [ 281.088285][ T9334] netlink: 'syz.3.1207': attribute type 39 has an invalid length. [ 281.172888][ T9328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1206'. [ 281.975709][ T9334] device macvlan0 entered promiscuous mode [ 282.010859][ T9333] netlink: 'syz.4.1206': attribute type 10 has an invalid length. [ 282.035548][ T9333] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1206'. [ 282.062215][ T9332] device 1 entered promiscuous mode [ 282.095904][ T9330] device 2 entered promiscuous mode [ 282.268730][ T9343] netlink: 'syz.3.1209': attribute type 21 has an invalid length. [ 282.285381][ T9343] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1209'. [ 283.407951][ T9369] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1218'. [ 283.446405][ T9369] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 283.488863][ T9369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.526823][ T9397] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1225'. [ 284.714209][ T9396] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1225'. [ 286.366134][ T7196] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 287.019349][ T9426] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1233'. [ 287.063006][ T9427] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1233'. [ 287.225409][ T9442] validate_nla: 4 callbacks suppressed [ 287.225424][ T9442] netlink: 'syz.4.1237': attribute type 10 has an invalid length. [ 287.265882][ T9442] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1237'. [ 287.302946][ T9442] bridge0: port 4(dummy0) entered disabled state [ 287.309622][ T9442] bridge0: port 3(hsr0) entered disabled state [ 287.316016][ T9442] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.323627][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.360951][ T9442] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 287.386775][ T9452] netlink: 'syz.3.1239': attribute type 3 has an invalid length. [ 287.395946][ T9452] netlink: 'syz.3.1239': attribute type 153 has an invalid length. [ 287.409490][ T9442] bridge0: port 4(dummy0) entered blocking state [ 287.416027][ T9442] bridge0: port 4(dummy0) entered forwarding state [ 287.422877][ T9442] bridge0: port 3(hsr0) entered blocking state [ 287.429232][ T9442] bridge0: port 3(hsr0) entered forwarding state [ 287.435871][ T9442] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.443089][ T9442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.450582][ T9442] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.457848][ T9442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.471295][ T9452] netlink: 85736 bytes leftover after parsing attributes in process `syz.3.1239'. [ 287.486355][ T9442] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 287.513449][ T9453] netlink: 'syz.3.1239': attribute type 3 has an invalid length. [ 287.535171][ T9453] netlink: 'syz.3.1239': attribute type 153 has an invalid length. [ 287.593265][ T9453] netlink: 85736 bytes leftover after parsing attributes in process `syz.3.1239'. [ 287.925708][ T9470] device veth1_macvtap left promiscuous mode [ 287.931751][ T9470] device macsec0 entered promiscuous mode [ 287.961564][ T9470] device veth1_macvtap entered promiscuous mode [ 288.410442][ T9495] netlink: 'syz.3.1252': attribute type 2 has an invalid length. [ 288.431476][ T9495] netlink: 'syz.3.1252': attribute type 8 has an invalid length. [ 288.440242][ T9495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1252'. [ 288.498311][ T9495] netlink: 'syz.3.1252': attribute type 10 has an invalid length. [ 288.544416][ T9495] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1252'. [ 289.015137][ T9501] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1253'. [ 289.037652][ T9507] netlink: 'syz.0.1255': attribute type 22 has an invalid length. [ 289.053600][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 290.325000][ T9533] pim6reg0: tun_chr_ioctl cmd 1074025673 [ 290.363665][ T9532] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 290.369540][ T9532] pim6reg0: linktype set to 780 [ 290.834526][ T9543] netlink: 125520 bytes leftover after parsing attributes in process `syz.3.1262'. [ 291.213948][ T9551] Dead loop on virtual device ip6_vti0, fix it urgently! [ 291.577192][ T9562] netlink: 'syz.1.1270': attribute type 29 has an invalid length. [ 292.083092][ T9568] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1272'. [ 292.284502][ T9570] validate_nla: 2 callbacks suppressed [ 292.284540][ T9570] netlink: 'syz.1.1273': attribute type 29 has an invalid length. [ 292.345411][ T9570] netlink: 'syz.1.1273': attribute type 29 has an invalid length. [ 292.371364][ T9571] netlink: 'syz.1.1273': attribute type 29 has an invalid length. [ 292.390355][ T9572] netlink: 'syz.1.1273': attribute type 29 has an invalid length. [ 292.479925][ T9579] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1275'. [ 293.680670][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 293.690342][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 293.701361][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 293.709741][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 293.717984][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 293.725875][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.125252][ T9619] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1286'. [ 294.674421][ T9607] chnl_net:caif_netlink_parms(): no params data found [ 295.025238][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.032462][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.083025][ T9607] device bridge_slave_0 entered promiscuous mode [ 295.113522][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.147485][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.227061][ T9607] device bridge_slave_1 entered promiscuous mode [ 295.282966][ T9607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.337486][ T9607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.422735][ T9607] team0: Port device team_slave_0 added [ 295.438630][ T9607] team0: Port device team_slave_1 added [ 295.463162][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.538846][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.643574][ T9607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.691149][ T9607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.725851][ T9607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.764106][ T4284] Bluetooth: hci5: command 0x0409 tx timeout [ 295.842825][ T9607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.582777][ T9663] netlink: 'syz.3.1295': attribute type 2 has an invalid length. [ 296.600260][ T9663] netlink: 'syz.3.1295': attribute type 1 has an invalid length. [ 296.610566][ T9663] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.1295'. [ 296.626976][ T9607] device hsr_slave_0 entered promiscuous mode [ 296.666374][ T9607] device hsr_slave_1 entered promiscuous mode [ 296.686243][ T9607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.731366][ T9607] Cannot create hsr debugfs directory [ 296.764796][ T9665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 297.235229][ T9673] netlink: 'syz.4.1297': attribute type 10 has an invalid length. [ 297.340074][ T9673] bridge0: port 3(hsr0) entered disabled state [ 297.455810][ T9673] device hsr0 left promiscuous mode [ 297.466400][ T9673] bridge0: port 3(hsr0) entered disabled state [ 297.588106][ T9673] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 297.683698][ T9680] netlink: 'syz.1.1298': attribute type 10 has an invalid length. [ 297.771862][ T9680] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1298'. [ 297.843524][ T4284] Bluetooth: hci5: command 0x041b tx timeout [ 297.852404][ T9680] device bridge0 left promiscuous mode [ 297.966538][ T9680] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 298.029092][ T9680] bridge0: port 4(dummy0) entered blocking state [ 298.035662][ T9680] bridge0: port 4(dummy0) entered forwarding state [ 298.042549][ T9680] bridge0: port 3(hsr0) entered blocking state [ 298.048911][ T9680] bridge0: port 3(hsr0) entered forwarding state [ 298.055544][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.063120][ T9680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.070649][ T9680] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.077949][ T9680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.190834][ T9680] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 298.280079][ T9681] netlink: 'syz.1.1298': attribute type 3 has an invalid length. [ 298.310846][ T9681] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1298'. [ 298.528201][ T9607] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 298.600693][ T9607] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 298.658986][ T9706] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1303'. [ 298.684103][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 298.736560][ T9706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.777307][ T9607] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 298.841095][ T9607] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 298.920364][ T9713] netlink: 'syz.4.1304': attribute type 29 has an invalid length. [ 298.980184][ T9713] netlink: 'syz.4.1304': attribute type 3 has an invalid length. [ 299.023747][ T9713] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1304'. [ 299.145243][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.707551][ T9719] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1306'. [ 299.729490][ T9607] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.778582][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 299.799922][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 299.810671][ T9732] netlink: 'syz.4.1308': attribute type 29 has an invalid length. [ 299.875493][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.904889][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.923528][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 299.939141][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.946358][ T7216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.032698][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 300.076275][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.104929][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.112081][ T7216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.173828][ T7216] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 300.194910][ T9732] netlink: 'syz.4.1308': attribute type 29 has an invalid length. [ 300.215010][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.249736][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.313602][ T9733] netlink: 'syz.4.1308': attribute type 29 has an invalid length. [ 300.321971][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.366426][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.392035][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.434375][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.497306][ T9731] netlink: 'syz.4.1308': attribute type 29 has an invalid length. [ 300.508987][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.532823][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.557457][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.584678][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.611601][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.752932][ T9607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 301.615354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 301.622861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 301.668498][ T9607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.003270][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 302.706211][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 302.730425][ T7196] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.333553][ T9818] delete_channel: no stack [ 307.120795][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 307.129718][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 307.138315][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 307.146422][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 307.177454][ T9607] device veth0_vlan entered promiscuous mode [ 307.214231][ T9607] device veth1_vlan entered promiscuous mode [ 307.316951][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 307.331668][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 307.374499][ T9607] device veth0_macvtap entered promiscuous mode [ 307.451701][ T9607] device veth1_macvtap entered promiscuous mode [ 307.508309][ T9830] -1: renamed from syzkaller0 [ 307.547058][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.563293][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.587717][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.619782][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 307.639069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 307.657554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.667101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.681256][ T9607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.707935][ T9607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.720074][ T9607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.746130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.761152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.819386][ T9607] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.828538][ T9607] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.837662][ T9607] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.847734][ T9607] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.949069][ T7210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.972260][ T7210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.989828][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.018769][ T7212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.030096][ T7212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.039128][ T7210] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.217525][ T9855] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.1335'. [ 308.242637][ T9858] sock: sock_timestamping_bind_phc: sock not bind to device [ 308.293162][ T9855] netlink: 6955 bytes leftover after parsing attributes in process `syz.3.1335'. [ 309.206648][ T9896] netlink: 'syz.0.1345': attribute type 21 has an invalid length. [ 309.247148][ T4289] Bluetooth: Frame is too long (len 149, expected len 4) [ 309.267921][ T9896] netlink: 'syz.0.1345': attribute type 6 has an invalid length. [ 309.307927][ T9896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1345'. [ 309.453568][ T9895] -1: renamed from syzkaller0 [ 309.486592][ T9913] device pim6reg1 entered promiscuous mode [ 309.915127][ T9924] netlink: 'syz.0.1352': attribute type 27 has an invalid length. [ 309.936222][ T9924] netlink: 'syz.0.1352': attribute type 3 has an invalid length. [ 309.952683][ T9924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1352'. [ 310.031359][ T9924] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1352'. [ 310.795929][ T9935] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1355'. [ 310.814807][ T9935] bridge_slave_1: default FDB implementation only supports local addresses [ 310.982760][ T9923] delete_channel: no stack [ 311.339928][ T9958] netlink: 'syz.4.1361': attribute type 49 has an invalid length. [ 313.336424][ T9997] netlink: 'syz.3.1369': attribute type 3 has an invalid length. [ 313.400306][ T9997] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1369'. [ 313.596605][T10009] netlink: 'syz.1.1372': attribute type 15 has an invalid length. [ 313.741650][T10008] netlink: 'syz.4.1373': attribute type 1 has an invalid length. [ 314.670351][T10015] delete_channel: no stack [ 314.699694][T10015] delete_channel: no stack [ 315.749891][T10050] netlink: 'syz.3.1383': attribute type 29 has an invalid length. [ 315.761246][T10050] netlink: 'syz.3.1383': attribute type 29 has an invalid length. [ 315.786690][T10050] netlink: 'syz.3.1383': attribute type 29 has an invalid length. [ 315.810830][T10050] netlink: 'syz.3.1383': attribute type 29 has an invalid length. [ 315.824060][T10050] netlink: 'syz.3.1383': attribute type 29 has an invalid length. [ 316.107127][T10064] delete_channel: no stack [ 316.111697][T10064] delete_channel: no stack [ 316.517474][T10065] netlink: 'syz.3.1383': attribute type 29 has an invalid length. [ 316.990125][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.996644][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.079738][T10073] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.1388'. [ 317.412507][T10077] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 317.432777][T10077] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1389'. [ 317.786464][T10088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.842851][T10088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.860564][T10088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.881916][T10088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.956073][T10094] netlink: 'syz.4.1394': attribute type 16 has an invalid length. [ 317.982565][T10094] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1394'. [ 318.046758][T10091] netlink: 'syz.1.1392': attribute type 17 has an invalid length. [ 318.058511][T10091] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1392'. [ 318.243418][ T7216] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.538632][T10108] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1395'. [ 318.642891][T10104] device syzkaller0 entered promiscuous mode [ 318.934684][T10113] netlink: 'syz.5.1398': attribute type 2 has an invalid length. [ 318.955501][T10113] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1398'. [ 319.004446][T10119] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1398'. [ 319.171673][T10131] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1400'. [ 319.229146][T10130] netlink: 'syz.0.1400': attribute type 11 has an invalid length. [ 319.251115][T10130] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1400'. [ 320.812727][T10139] validate_nla: 3 callbacks suppressed [ 320.812743][T10139] netlink: 'syz.3.1401': attribute type 2 has an invalid length. [ 320.836316][T10151] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1404'. [ 320.860528][T10151] device hsr_slave_0 left promiscuous mode [ 320.906301][T10151] device hsr_slave_1 left promiscuous mode [ 321.267254][T10166] netlink: 'syz.3.1408': attribute type 1 has an invalid length. [ 321.292107][T10166] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.1408'. [ 321.846651][T10187] netlink: 'syz.1.1413': attribute type 10 has an invalid length. [ 322.541947][T10212] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.1419'. [ 322.598665][T10212] openvswitch: netlink: Flow actions attr not present in new flow. [ 322.657921][T10187] team0: Device gre0 is of different type [ 323.031199][T10221] tipc: Started in network mode [ 323.049405][T10221] tipc: Node identity 9215a268, cluster identity 4711 [ 323.071985][T10221] tipc: Node number set to 2450891368 [ 323.132046][T10224] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1421'. [ 323.202356][T10220] delete_channel: no stack [ 323.652398][T10232] netlink: 'syz.4.1424': attribute type 19 has an invalid length. [ 323.691904][T10232] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1424'. [ 323.878563][T10243] netlink: 'syz.5.1427': attribute type 3 has an invalid length. [ 323.971533][T10243] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1427'. [ 324.737951][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.773924][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.793596][T10258] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1433'. [ 324.814240][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.820080][T10261] tap0: tun_chr_ioctl cmd 1074025677 [ 324.833588][T10261] tap0: linktype set to 6 [ 324.848564][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.886609][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.892067][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.923466][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.963476][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.983746][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 324.989245][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.043485][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.063505][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.069019][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.081484][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.096546][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.106693][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.130070][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.147738][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.163398][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.179115][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.238569][T10278] sock: sock_set_timeout: `syz.5.1436' (pid 10278) tries to set negative timeout [ 325.257986][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.283400][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.314122][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.344825][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.350305][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.367195][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.372686][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.379651][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.388655][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.396930][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.402431][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 325.417465][T10259] tap0: tun_chr_ioctl cmd 1074025673 [ 327.448614][ T4289] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 327.695414][T10300] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1443'. [ 329.437786][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1453'. [ 329.529311][T10349] netlink: 'syz.0.1454': attribute type 11 has an invalid length. [ 329.557770][T10349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1454'. [ 329.605991][T10349] netlink: 'syz.0.1454': attribute type 11 has an invalid length. [ 329.624587][T10349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1454'. [ 329.869859][T10358] netlink: 'syz.3.1457': attribute type 19 has an invalid length. [ 329.903561][T10358] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1457'. [ 330.407756][T10383] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1460'. [ 330.467363][T10383] bond0: (slave bond_slave_0): Releasing backup interface [ 330.506969][T10383] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 330.831425][T10396] netlink: 'syz.5.1466': attribute type 4 has an invalid length. [ 331.727616][T10416] netlink: 'syz.0.1472': attribute type 19 has an invalid length. [ 331.760332][T10416] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1472'. [ 331.825800][T10421] netlink: 108384 bytes leftover after parsing attributes in process `syz.3.1473'. [ 332.199316][T10427] netlink: 87536 bytes leftover after parsing attributes in process `syz.0.1475'. [ 332.743409][T10449] netlink: 'syz.5.1482': attribute type 21 has an invalid length. [ 332.751901][T10449] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 332.768245][T10446] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1483'. [ 332.800550][T10448] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1483'. [ 332.861134][T10448] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 332.909119][T10453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.222998][T10463] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 333.280801][T10463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 334.056457][T10477] netlink: 'syz.3.1491': attribute type 11 has an invalid length. [ 334.131913][T10477] netlink: 'syz.3.1491': attribute type 11 has an invalid length. [ 335.589112][T10503] netlink: 'syz.5.1496': attribute type 21 has an invalid length. [ 335.638148][T10503] IPv6: NLM_F_CREATE should be specified when creating new route [ 335.646401][T10503] IPv6: Can't replace route, no match found [ 336.622269][T10516] __nla_validate_parse: 5 callbacks suppressed [ 336.622307][T10516] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1499'. [ 337.497548][T10544] device bridge_slave_0 entered promiscuous mode [ 337.534419][T10542] netlink: 'syz.5.1506': attribute type 10 has an invalid length. [ 337.865290][T10548] netlink: 'syz.3.1505': attribute type 10 has an invalid length. [ 338.207837][T10548] team0: Device gre0 is of different type [ 338.334889][T10536] netlink: 'syz.4.1504': attribute type 10 has an invalid length. [ 338.353029][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1504'. [ 338.385550][T10536] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 338.852170][T10552] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1507'. [ 338.905143][T10573] netlink: 'syz.4.1511': attribute type 3 has an invalid length. [ 338.953279][T10573] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1511'. [ 339.018063][T10552] team0: Port device team_slave_0 removed [ 339.301163][T10563] device syzkaller0 entered promiscuous mode [ 341.204777][T10580] netlink: 'syz.1.1513': attribute type 10 has an invalid length. [ 341.213293][T10580] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1513'. [ 342.061377][T10620] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.1524'. [ 342.292706][T10621] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1522'. [ 342.735390][T10624] netlink: 'syz.0.1522': attribute type 2 has an invalid length. [ 342.780122][T10624] netlink: 'syz.0.1522': attribute type 8 has an invalid length. [ 342.812723][T10624] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1522'. [ 342.837470][T10636] netlink: 'syz.4.1527': attribute type 3 has an invalid length. [ 342.859265][T10636] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1527'. [ 346.786879][T10667] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1533'. [ 350.297312][ T7196] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.774019][T10680] netlink: 'syz.5.1536': attribute type 10 has an invalid length. [ 350.781919][T10680] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 351.888917][T10683] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1537'. [ 351.905093][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 351.929867][T10683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.399912][T10707] netlink: 'syz.0.1544': attribute type 3 has an invalid length. [ 352.445884][T10707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1544'. [ 352.482439][T10706] device syzkaller0 entered promiscuous mode [ 352.574162][T10702] netlink: 'syz.4.1542': attribute type 10 has an invalid length. [ 354.450923][T10721] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 354.464975][T10721] team0: Device vxcan1 is of different type [ 354.674879][T10748] netlink: 'syz.3.1551': attribute type 29 has an invalid length. [ 354.766604][T10748] netlink: 'syz.3.1551': attribute type 29 has an invalid length. [ 354.815130][T10745] netlink: 'syz.3.1551': attribute type 29 has an invalid length. [ 354.976936][T10756] netlink: 'syz.3.1551': attribute type 29 has an invalid length. [ 356.497916][T10823] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1568'. [ 356.624816][T10827] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 356.695560][T10827] syzkaller1: group set to 778 [ 358.084317][T10885] netlink: 'syz.1.1573': attribute type 2 has an invalid length. [ 358.098362][T10885] device 0 entered promiscuous mode [ 358.209188][T10899] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.1575'. [ 358.260125][T10902] netlink: 'syz.4.1576': attribute type 6 has an invalid length. [ 358.294174][T10902] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1576'. [ 359.322458][T10948] netlink: 'syz.0.1588': attribute type 12 has an invalid length. [ 359.374869][T10948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1588'. [ 359.906200][T10970] netlink: 'syz.1.1596': attribute type 5 has an invalid length. [ 360.041841][T10979] netlink: 'syz.5.1598': attribute type 6 has an invalid length. [ 360.070611][T10979] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1598'. [ 360.223267][T10990] netlink: 'syz.1.1601': attribute type 10 has an invalid length. [ 362.009672][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.064238][T10990] device bridge_slave_1 left promiscuous mode [ 362.082218][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.122397][T10990] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 362.946304][T11041] netlink: 'syz.5.1612': attribute type 10 has an invalid length. [ 363.032055][T11046] netlink: 'syz.1.1614': attribute type 11 has an invalid length. [ 363.088070][T11046] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1614'. [ 363.137081][T11041] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 363.168324][T11048] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1615'. [ 363.183765][T11051] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1615'. [ 364.402677][T11050] netlink: 'syz.1.1614': attribute type 21 has an invalid length. [ 364.416103][T11050] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1614'. [ 364.835814][T11087] netlink: 'syz.3.1623': attribute type 21 has an invalid length. [ 365.359737][T11107] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 365.673032][T11107] team0: Device gre0 is of different type [ 368.577468][T11126] netlink: 'syz.1.1630': attribute type 21 has an invalid length. [ 368.628465][T11126] netlink: 'syz.1.1630': attribute type 20 has an invalid length. [ 369.054855][T11148] device veth1_macvtap left promiscuous mode [ 369.073388][T11148] device macsec0 left promiscuous mode [ 369.141443][T11141] netlink: 'syz.5.1635': attribute type 17 has an invalid length. [ 369.173538][T11141] netlink: 'syz.5.1635': attribute type 16 has an invalid length. [ 369.213498][T11141] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1635'. [ 370.220992][T11177] netlink: 'syz.4.1643': attribute type 2 has an invalid length. [ 370.283974][T11153] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.1639'. [ 370.976635][T11211] mac80211_hwsim hwsim2 : renamed from wlan0 [ 371.531282][T11226] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 371.577047][T11226] netlink: 'syz.5.1651': attribute type 3 has an invalid length. [ 371.642078][T11226] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1651'. [ 375.857187][T11238] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 375.879876][T11238] netlink: 'syz.3.1656': attribute type 33 has an invalid length. [ 375.894685][T11238] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1656'. [ 375.904278][T11238] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 375.981803][T11238] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.032664][T11248] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1656'. [ 376.076298][T11253] netlink: 'syz.3.1656': attribute type 33 has an invalid length. [ 376.108806][T11253] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1656'. [ 376.133558][T11253] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 376.161524][T11253] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.502388][T11267] netlink: 'syz.0.1662': attribute type 27 has an invalid length. [ 376.614510][T11266] delete_channel: no stack [ 376.697287][T11272] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 376.738693][T11272] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1664'. [ 376.771016][T11272] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 377.001833][T11300] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.1667'. [ 377.162752][T11294] device syzkaller0 entered promiscuous mode [ 378.408939][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.422303][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.824166][T11308] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 379.824805][T11300] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 379.835197][T11308] team0: Port device virt_wifi0 added [ 379.856269][T11300] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 379.870003][T11300] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 380.198417][T11338] netlink: 'syz.0.1676': attribute type 21 has an invalid length. [ 380.276232][T11339] netlink: 'syz.0.1676': attribute type 21 has an invalid length. [ 380.460632][T11343] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.1678'. [ 381.268710][T11350] netlink: 154020 bytes leftover after parsing attributes in process `syz.5.1681'. [ 381.332566][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1681'. [ 381.381108][T11350] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 384.810818][T11381] netlink: 'syz.5.1689': attribute type 2 has an invalid length. [ 386.600290][T11403] netlink: 'syz.1.1695': attribute type 10 has an invalid length. [ 386.635498][T11403] team0: Device wlan1 is of different type [ 386.816004][T11419] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1701'. [ 387.229043][T11438] netlink: 'syz.3.1705': attribute type 11 has an invalid length. [ 387.243582][T11438] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1705'. [ 387.297336][T11436] netlink: 'syz.3.1705': attribute type 11 has an invalid length. [ 387.340514][T11436] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1705'. [ 387.384267][T11440] netlink: 'syz.5.1707': attribute type 21 has an invalid length. [ 387.499541][T11449] netlink: 'syz.0.1710': attribute type 2 has an invalid length. [ 387.513802][T11449] netlink: 'syz.0.1710': attribute type 4 has an invalid length. [ 387.528486][T11449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1710'. [ 388.869531][T11498] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 388.887137][T11498] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1723'. [ 389.639644][T11524] netlink: 'syz.1.1731': attribute type 3 has an invalid length. [ 389.647691][T11524] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.1731'. [ 391.409582][T11580] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1743'. [ 391.476678][T11588] netlink: 'syz.1.1744': attribute type 10 has an invalid length. [ 391.494989][T11588] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1744'. [ 391.529371][T11588] bridge0: port 4(dummy0) entered disabled state [ 391.536869][T11588] bridge0: port 3(hsr0) entered disabled state [ 391.543551][T11588] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.947398][T11610] netlink: 'syz.4.1749': attribute type 3 has an invalid length. [ 391.988023][T11610] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1749'. [ 391.997663][T11614] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1750'. [ 392.026383][T11615] tun0: tun_chr_ioctl cmd 1074812118 [ 392.074273][T11618] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1751'. [ 392.096016][T11618] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 392.117298][T11613] tipc: Started in network mode [ 392.122198][T11613] tipc: Node identity 9215a268, cluster identity 4711 [ 392.162376][T11613] tipc: Node number set to 2450891368 [ 392.490794][T11637] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1756'. [ 392.525045][T11637] netlink: 'syz.3.1756': attribute type 39 has an invalid length. [ 394.215582][T11699] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1766'. [ 394.496631][T11711] netlink: 'syz.4.1771': attribute type 3 has an invalid length. [ 394.537296][T11711] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1771'. [ 396.020703][T11746] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1778'. [ 396.094548][T11762] tap0: tun_chr_ioctl cmd 1074025677 [ 396.104179][T11762] tap0: linktype set to 774 [ 396.506174][T11778] netlink: 'syz.1.1785': attribute type 21 has an invalid length. [ 397.707449][T11807] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1793'. [ 397.723245][T11807] netlink: 6324 bytes leftover after parsing attributes in process `syz.4.1793'. [ 397.752734][T11807] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1793'. [ 398.231839][T11828] netlink: 'syz.1.1799': attribute type 21 has an invalid length. [ 398.353347][T11828] netlink: 'syz.1.1799': attribute type 2 has an invalid length. [ 398.387124][T11828] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1799'. [ 400.935143][T11872] netlink: 'syz.0.1810': attribute type 16 has an invalid length. [ 400.943026][T11872] netlink: 'syz.0.1810': attribute type 3 has an invalid length. [ 401.045471][T11872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1810'. [ 401.095083][T11879] netlink: 'syz.3.1811': attribute type 10 has an invalid length. [ 402.304586][T11916] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1820'. [ 402.500207][T11926] netlink: 'syz.4.1822': attribute type 10 has an invalid length. [ 403.352960][T11955] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1832'. [ 403.382978][T11942] netlink: 'syz.1.1826': attribute type 21 has an invalid length. [ 403.392333][T11956] cgroup: fork rejected by pids controller in /syz4 [ 403.412484][T11942] netlink: 'syz.1.1826': attribute type 6 has an invalid length. [ 403.449423][T11942] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1826'. [ 403.480122][T11939] delete_channel: no stack [ 405.532427][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.570741][ T7225] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.593439][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.602329][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.613550][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.621270][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 405.628711][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.777712][ T7225] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.079085][ T7225] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.312748][ T7225] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.347346][T12120] netlink: 'syz.0.1848': attribute type 19 has an invalid length. [ 406.364757][T12120] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.1848'. [ 407.115550][T12101] chnl_net:caif_netlink_parms(): no params data found [ 407.137371][ T7225] device 0 left promiscuous mode [ 407.307478][ T7225] device 1 left promiscuous mode [ 407.493033][ T7225] device 2 left promiscuous mode [ 407.534697][T12101] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.586059][T12101] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.614933][T12101] device bridge_slave_0 entered promiscuous mode [ 407.683730][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 407.751719][T12101] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.776321][T12101] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.808238][T12101] device bridge_slave_1 entered promiscuous mode [ 408.185293][T12101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.338320][T12101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.443953][T12101] team0: Port device team_slave_0 added [ 408.540430][T12101] team0: Port device team_slave_1 added [ 408.710657][T12101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.722693][T12101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.754061][T12101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.782280][T12196] netlink: 'syz.5.1863': attribute type 9 has an invalid length. [ 408.845674][T12101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.852669][T12101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.898371][T12101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.197791][T12101] device hsr_slave_0 entered promiscuous mode [ 409.232451][T12101] device hsr_slave_1 entered promiscuous mode [ 409.253883][T12101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.261578][T12101] Cannot create hsr debugfs directory [ 409.769008][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 410.099921][T12216] netlink: 'syz.5.1867': attribute type 21 has an invalid length. [ 410.108421][T12216] netlink: 'syz.5.1867': attribute type 1 has an invalid length. [ 410.121221][T12216] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1867'. [ 411.378342][T12249] : port 1(team0) entered blocking state [ 411.412656][T12249] : port 1(team0) entered disabled state [ 411.442364][T12249] device team0 entered promiscuous mode [ 411.519577][T12249] device team_slave_0 entered promiscuous mode [ 411.581775][T12249] device team_slave_1 entered promiscuous mode [ 411.621454][T12249] device hsr_slave_0 entered promiscuous mode [ 411.811898][T12252] device team0 left promiscuous mode [ 411.817377][T12252] device team_slave_0 left promiscuous mode [ 411.834191][T12252] device team_slave_1 left promiscuous mode [ 411.842995][T12252] device hsr_slave_0 left promiscuous mode [ 411.849276][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 411.866103][T12252] : port 1(team0) entered disabled state [ 411.930624][T12258] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1875'. [ 411.974325][T12264] netlink: 'syz.5.1876': attribute type 39 has an invalid length. [ 412.233899][T12267] netlink: 'syz.1.1877': attribute type 10 has an invalid length. [ 412.659856][ T7225] device hsr_slave_0 left promiscuous mode [ 412.666621][ T7225] device hsr_slave_1 left promiscuous mode [ 412.679724][ T7225] bridge0: port 4(dummy0) entered disabled state [ 412.689416][ T7225] device bridge_slave_1 left promiscuous mode [ 412.699145][ T7225] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.712126][ T7225] device bridge_slave_0 left promiscuous mode [ 412.722125][ T7225] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.165077][ T7225] team0 (unregistering): Port device team_slave_1 removed [ 413.202196][ T7225] team0 (unregistering): Port device team_slave_0 removed [ 413.240734][ T7225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.519332][ T7225] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 413.528496][ T7225] bond0 (unregistering): Released all slaves [ 413.606122][T12276] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1879'. [ 413.772272][T12101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.810796][T12101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.921787][T12101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.928749][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 414.073503][T12101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 414.390893][T12101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.438835][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.460324][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.496748][T12101] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.516176][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.540640][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.556856][ T7191] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.564046][ T7191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.601453][T12320] netlink: 'syz.1.1889': attribute type 2 has an invalid length. [ 414.630143][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 414.645789][T12320] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1889'. [ 414.698023][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 414.742755][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 414.788503][ T7191] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.795724][ T7191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.850076][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 414.917080][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 414.966583][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.009524][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.060823][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 415.081399][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 415.139779][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 415.227683][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 415.273039][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.306141][T12335] netlink: 'syz.5.1893': attribute type 3 has an invalid length. [ 415.328201][T12101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.333492][T12335] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1893'. [ 415.383969][T12101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.416955][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 415.435510][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.491461][T12334] netlink: 'syz.0.1894': attribute type 10 has an invalid length. [ 415.543819][T12334] team0: Device vxcan1 is of different type [ 415.717802][T12339] netlink: 'syz.1.1895': attribute type 29 has an invalid length. [ 415.804746][T12339] netlink: 'syz.1.1895': attribute type 29 has an invalid length. [ 415.909874][T12341] netlink: 'syz.1.1895': attribute type 29 has an invalid length. [ 416.213602][T12358] netlink: 'syz.0.1897': attribute type 2 has an invalid length. [ 416.323708][ T4284] Bluetooth: hci5: command 0x0406 tx timeout [ 416.338315][T12353] netlink: 'syz.0.1897': attribute type 10 has an invalid length. [ 416.407470][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1897'. [ 418.218362][T12341] netlink: 'syz.1.1895': attribute type 29 has an invalid length. [ 418.226682][T12342] netlink: 'syz.1.1895': attribute type 29 has an invalid length. [ 418.238896][T12345] netlink: 16150 bytes leftover after parsing attributes in process `syz.5.1896'. [ 418.266293][T12358] device 0 entered promiscuous mode [ 418.281952][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1897'. [ 418.689325][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.709700][ T7191] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.750145][T12101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.860743][T12404] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1900'. [ 420.321598][T12396] device syzkaller0 entered promiscuous mode [ 420.773764][T12439] validate_nla: 4 callbacks suppressed [ 420.773780][T12439] netlink: 'syz.1.1907': attribute type 3 has an invalid length. [ 420.789199][T12439] netlink: 'syz.1.1907': attribute type 8 has an invalid length. [ 420.801867][T12439] netlink: 'syz.1.1907': attribute type 7 has an invalid length. [ 420.811507][T12439] netlink: 194740 bytes leftover after parsing attributes in process `syz.1.1907'. [ 422.358643][T12442] tun0: tun_chr_ioctl cmd 2147767507 [ 422.367946][T12446] netlink: 'syz.3.1908': attribute type 21 has an invalid length. [ 422.377968][T12446] netlink: 'syz.3.1908': attribute type 6 has an invalid length. [ 422.397107][T12446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1908'. [ 422.542346][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 422.574180][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 422.636301][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 422.654191][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 422.669226][T12101] device veth0_vlan entered promiscuous mode [ 422.688448][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 422.699398][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 422.717794][T12101] device veth1_vlan entered promiscuous mode [ 422.772652][T12453] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.817533][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 422.829496][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 422.840952][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 422.852712][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 422.864333][T12101] device veth0_macvtap entered promiscuous mode [ 422.880495][T12101] device veth1_macvtap entered promiscuous mode [ 422.900552][T12461] netlink: 'syz.1.1909': attribute type 3 has an invalid length. [ 422.936382][T12101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.941062][T12461] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1909'. [ 422.962931][T12101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.016669][T12101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.038526][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 423.066820][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 423.079758][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 423.099496][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 423.113848][T12458] netlink: 'syz.1.1909': attribute type 21 has an invalid length. [ 423.121695][T12458] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1909'. [ 423.157672][T12458] netlink: 'syz.1.1909': attribute type 4 has an invalid length. [ 423.168827][T12458] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1909'. [ 423.181018][T12101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.194782][T12101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.212157][T12101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.236280][T12101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.264445][T12101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.281148][T12101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.290760][T12101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.377868][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 423.390202][ T7204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.576931][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.594505][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.653286][ T7234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 425.730815][ T7198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.771610][ T7198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.806152][ T7198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 425.829566][T12490] netlink: 'syz.5.1917': attribute type 3 has an invalid length. [ 425.850986][T12490] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1917'. [ 426.012541][T12490] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1917'. [ 427.088054][T12532] netlink: 'syz.0.1926': attribute type 10 has an invalid length. [ 427.150358][T12532] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1926'. [ 427.887475][T12545] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1928'. [ 428.216657][T12551] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1932'. [ 428.562846][T12569] netlink: 'syz.3.1935': attribute type 9 has an invalid length. [ 428.611813][T12569] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1935'. [ 428.677094][T12571] netlink: 'syz.1.1936': attribute type 7 has an invalid length. [ 428.762928][T12571] netlink: 'syz.1.1936': attribute type 7 has an invalid length. [ 428.810731][T12571] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.1936'. [ 429.664272][T12595] netlink: 'syz.5.1943': attribute type 10 has an invalid length. [ 430.671258][T12595] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.700490][T12595] bond0: (slave team0): Enslaving as an active interface with an up link [ 430.727437][T12601] netlink: 'syz.0.1944': attribute type 12 has an invalid length. [ 431.111468][T12614] can: request_module (can-proto-4) failed. [ 431.117742][T12619] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1950'. [ 431.212284][T12622] device sit0 entered promiscuous mode [ 431.416233][T12619] netlink: 'syz.5.1950': attribute type 10 has an invalid length. [ 431.434475][T12619] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1950'. [ 432.200457][T12635] netlink: 134056 bytes leftover after parsing attributes in process `syz.5.1954'. [ 432.250371][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1955'. [ 433.402552][T12654] netlink: 'syz.0.1958': attribute type 16 has an invalid length. [ 433.433625][T12654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1958'. [ 433.895746][T12675] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1963'. [ 434.028083][T12675] device bridge_slave_1 entered promiscuous mode [ 434.529107][T12685] netlink: 271 bytes leftover after parsing attributes in process `syz.5.1966'. [ 434.892063][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 434.981059][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 434.990616][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 435.000105][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 435.009522][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 435.019273][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 435.028737][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 435.038267][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 435.047778][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 435.057149][T12706] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 436.532998][T12730] device syzkaller0 entered promiscuous mode [ 436.796582][T12765] netlink: 'syz.4.1983': attribute type 9 has an invalid length. [ 436.806454][T12765] netlink: 90128 bytes leftover after parsing attributes in process `syz.4.1983'. [ 438.347166][T12753] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1981'. [ 438.360462][T12745] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1981'. [ 438.608952][T12775] netlink: 'syz.3.1986': attribute type 9 has an invalid length. [ 438.695160][T12780] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1988'. [ 439.848526][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.855029][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.296493][T12827] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1999'. [ 441.371883][T12832] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1998'. [ 441.426417][T12832] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.461876][T12832] net_ratelimit: 3256 callbacks suppressed [ 441.461890][T12832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.513538][T12834] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1998'. [ 441.537697][T12834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.567296][T12834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.673069][T12836] netlink: 'syz.5.2000': attribute type 3 has an invalid length. [ 441.710105][T12836] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2000'. [ 441.722754][T12847] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2002'. [ 442.069752][T12857] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2004'. [ 442.167245][T12861] netlink: 'syz.3.2006': attribute type 4 has an invalid length. [ 442.183379][T12861] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2006'. [ 442.628703][T12885] netlink: 'syz.5.2013': attribute type 2 has an invalid length. [ 442.656952][T12885] netlink: 'syz.5.2013': attribute type 8 has an invalid length. [ 442.677139][T12885] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2013'. [ 442.820877][T12888] device syzkaller0 entered promiscuous mode [ 442.948991][T12898] netlink: 11562 bytes leftover after parsing attributes in process `syz.5.2016'. [ 443.515582][T12913] netlink: 212908 bytes leftover after parsing attributes in process `syz.3.2019'. [ 443.532207][T12913] netlink: zone id is out of range [ 445.217521][T12902] netlink: 'syz.5.2016': attribute type 10 has an invalid length. [ 445.225698][T12902] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2016'. [ 445.234812][T12902] device dummy0 entered promiscuous mode [ 445.241348][T12902] bridge0: port 3(dummy0) entered blocking state [ 445.247923][T12902] bridge0: port 3(dummy0) entered disabled state [ 445.256375][T12902] bridge0: port 3(dummy0) entered blocking state [ 445.262789][T12902] bridge0: port 3(dummy0) entered forwarding state [ 445.283751][T12915] netlink: 'syz.4.2020': attribute type 21 has an invalid length. [ 445.291698][T12915] netlink: 'syz.4.2020': attribute type 1 has an invalid length. [ 445.503073][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 445.588066][T12930] netlink: 'syz.3.2021': attribute type 10 has an invalid length. [ 445.778201][T12946] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.2026'. [ 446.028205][T12958] netlink: 'syz.1.2028': attribute type 29 has an invalid length. [ 446.029610][T12959] netlink: 'syz.1.2028': attribute type 29 has an invalid length. [ 446.359554][T12976] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2031'. [ 446.415857][T12958] netlink: 'syz.1.2028': attribute type 29 has an invalid length. [ 446.603450][T12984] device wlan1 entered promiscuous mode [ 446.738080][ T4284] Bluetooth: hci1: Malformed Event: 0x2f [ 446.889400][T13000] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2036'. [ 447.126088][T13006] __nla_validate_parse: 1 callbacks suppressed [ 447.126105][T13006] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2037'. [ 450.664849][T13055] validate_nla: 6 callbacks suppressed [ 450.664866][T13055] netlink: 'syz.3.2049': attribute type 21 has an invalid length. [ 450.704094][T13055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2049'. [ 450.738758][T13055] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 450.773382][T13054] netlink: 'syz.3.2049': attribute type 21 has an invalid length. [ 450.797497][T13054] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2049'. [ 450.823572][T13054] netlink: 'syz.3.2049': attribute type 1 has an invalid length. [ 450.842599][T13060] netlink: 'syz.4.2052': attribute type 21 has an invalid length. [ 450.878893][T13060] netlink: 'syz.4.2052': attribute type 7 has an invalid length. [ 450.929447][T13068] netlink: 'syz.5.2051': attribute type 21 has an invalid length. [ 451.051219][T13073] netlink: 'syz.5.2051': attribute type 21 has an invalid length. [ 451.801337][T13103] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2055'. [ 451.863014][T13104] netlink: 'syz.1.2056': attribute type 9 has an invalid length. [ 451.977526][T13104] netlink: 90128 bytes leftover after parsing attributes in process `syz.1.2056'. [ 453.290717][T13139] netlink: 'syz.3.2066': attribute type 3 has an invalid length. [ 453.329256][T13139] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2066'. [ 454.089289][T13155] device syzkaller0 entered promiscuous mode [ 454.156185][ T7225] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 454.475613][T13168] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2073'. [ 454.978342][T13166] device syzkaller0 entered promiscuous mode [ 455.099575][T13185] netlink: 119 bytes leftover after parsing attributes in process `syz.4.2078'. [ 460.710986][T13203] validate_nla: 2 callbacks suppressed [ 460.711002][T13203] netlink: 'syz.1.2082': attribute type 3 has an invalid length. [ 460.743539][T13203] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.2082'. [ 465.033270][T13202] netlink: 'syz.5.2083': attribute type 1 has an invalid length. [ 465.049997][T13202] netlink: 'syz.5.2083': attribute type 4 has an invalid length. [ 465.070777][T13202] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.2083'. [ 465.329996][T13222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2088'. [ 465.357654][T13222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2088'. [ 465.432342][T13225] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2089'. [ 465.455358][T13225] openvswitch: netlink: Message has 6 unknown bytes. [ 466.030053][T13240] device syzkaller0 entered promiscuous mode [ 466.142077][T13255] netlink: 'syz.4.2097': attribute type 11 has an invalid length. [ 466.203474][T13255] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2097'. [ 466.322617][T13258] netlink: 'syz.4.2097': attribute type 11 has an invalid length. [ 466.407869][T13258] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2097'. [ 466.648876][T13264] netlink: 'syz.1.2100': attribute type 11 has an invalid length. [ 466.658649][T13264] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2100'. [ 468.145562][T13262] netlink: 'syz.1.2100': attribute type 16 has an invalid length. [ 468.153512][T13262] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2100'. [ 468.162764][T13262] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 468.185364][T13278] netlink: 'syz.4.2104': attribute type 12 has an invalid length. [ 468.206470][T13278] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2104'. [ 468.424752][T13286] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2107'. [ 468.601926][T13289] netlink: 'syz.5.2106': attribute type 10 has an invalid length. [ 468.700048][T13289] bridge0: port 3(dummy0) entered disabled state [ 468.758752][T13289] device dummy0 left promiscuous mode [ 468.777828][T13289] bridge0: port 3(dummy0) entered disabled state [ 468.850342][T13289] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 468.862570][T13312] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2110'. [ 470.401584][T13358] netlink: 'syz.0.2120': attribute type 29 has an invalid length. [ 470.553683][T13358] netlink: 'syz.0.2120': attribute type 29 has an invalid length. [ 470.571132][T13369] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2123'. [ 470.927987][T13380] device syzkaller0 entered promiscuous mode [ 471.270235][T13392] netlink: 'syz.0.2129': attribute type 3 has an invalid length. [ 471.311310][T13392] netlink: 'syz.0.2129': attribute type 1 has an invalid length. [ 471.321288][T13392] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2129'. [ 474.282727][T13402] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2131'. [ 474.293032][T13402] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 474.314359][T13406] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2131'. [ 474.643679][T13419] netlink: 'syz.0.2134': attribute type 10 has an invalid length. [ 474.703960][T13419] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2134'. [ 475.097918][T13424] device syzkaller0 entered promiscuous mode [ 477.588232][T13472] netlink: 'syz.1.2140': attribute type 16 has an invalid length. [ 477.639514][T13472] netlink: 'syz.1.2140': attribute type 3 has an invalid length. [ 477.676851][T13472] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2140'. [ 479.386386][T13503] netlink: 49791 bytes leftover after parsing attributes in process `syz.5.2145'. [ 480.416857][T13524] netlink: 'syz.4.2153': attribute type 10 has an invalid length. [ 480.793925][T13524] team0: Port device wlan1 added [ 480.862484][T13539] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 481.017763][T13539] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2158'. [ 481.833660][T13553] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2162'. [ 481.934194][T13553] openvswitch: netlink: Message has 6 unknown bytes. [ 482.132466][T13567] netlink: 'syz.5.2165': attribute type 2 has an invalid length. [ 482.227580][T13567] netlink: 'syz.5.2165': attribute type 1 has an invalid length. [ 482.346599][T13567] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.2165'. [ 482.402184][T13583] netlink: 'syz.4.2169': attribute type 29 has an invalid length. [ 482.511803][T13583] netlink: 'syz.4.2169': attribute type 29 has an invalid length. [ 482.523248][T13579] netlink: 'syz.4.2169': attribute type 1 has an invalid length. [ 482.565074][T13579] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2169'. [ 482.983028][T13589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 482.990340][T13589] IPv6: NLM_F_CREATE should be set when creating new route [ 482.997657][T13589] IPv6: NLM_F_CREATE should be set when creating new route [ 483.004922][T13589] IPv6: NLM_F_CREATE should be set when creating new route [ 483.109127][T13590] netlink: 'syz.4.2170': attribute type 2 has an invalid length. [ 483.132896][T13590] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2170'. [ 483.181634][T13598] syz.1.2171[13598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.724948][ T7227] wlan1: Trigger new scan to find an IBSS to join [ 485.492098][T13633] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2178'. [ 486.693417][T13668] : port 1(veth0_to_team) entered blocking state [ 486.711004][T13668] : port 1(veth0_to_team) entered disabled state [ 486.727664][T13668] device veth0_to_team entered promiscuous mode [ 487.072208][T13673] netlink: 'syz.4.2188': attribute type 3 has an invalid length. [ 487.119593][T13673] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2188'. [ 487.725683][T13704] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2192'. [ 489.434063][T13745] netlink: 'syz.0.2199': attribute type 10 has an invalid length. [ 489.657972][T13749] sock: sock_set_timeout: `syz.3.2202' (pid 13749) tries to set negative timeout [ 489.727149][T13745] team0: Port device wlan1 added [ 489.782506][T13745] netlink: 'syz.0.2199': attribute type 10 has an invalid length. [ 489.959710][T13745] netlink: 'syz.0.2199': attribute type 10 has an invalid length. [ 490.033674][T13745] netlink: 'syz.0.2199': attribute type 10 has an invalid length. [ 490.227388][T13765] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2206'. [ 490.524901][T13770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'. [ 490.573626][T13770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'. [ 490.623722][T13773] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'. [ 490.696717][T13774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2209'. [ 491.219211][T13781] netlink: 'syz.3.2212': attribute type 10 has an invalid length. [ 491.255396][T13781] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2212'. [ 491.891235][T13795] device syzkaller0 entered promiscuous mode [ 491.930210][T13805] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2217'. [ 491.974782][T13806] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2213'. [ 492.804864][T13806] team0: Port device team_slave_0 removed [ 492.811095][T13806] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 493.076618][T13824] Dead loop on virtual device ip6_vti0, fix it urgently! [ 493.332218][T13838] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2225'. [ 495.403715][T13836] device syzkaller0 entered promiscuous mode [ 495.611556][T13849] netlink: 'syz.1.2227': attribute type 3 has an invalid length. [ 495.693456][T13849] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2227'. [ 496.436045][T13864] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2230'. [ 496.580614][T13864] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 496.623351][T13864] CPU: 0 PID: 13864 Comm: syz.3.2230 Not tainted syzkaller #0 [ 496.630889][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.640985][T13864] Call Trace: [ 496.644297][T13864] [ 496.647270][T13864] dump_stack_lvl+0x188/0x24e [ 496.652054][T13864] ? show_regs_print_info+0x12/0x12 [ 496.657306][T13864] ? load_image+0x410/0x410 [ 496.661919][T13864] sysfs_warn_dup+0x8a/0xa0 [ 496.666553][T13864] sysfs_do_create_link_sd+0xc0/0x110 [ 496.671984][T13864] device_add+0x83b/0x1050 [ 496.676527][T13864] wiphy_register+0x1d8b/0x2aa0 [ 496.681528][T13864] ? cfg80211_event_work+0x40/0x40 [ 496.686684][T13864] ? minstrel_ht_alloc+0x894/0xa20 [ 496.691921][T13864] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 496.698140][T13864] ieee80211_register_hw+0x2d48/0x39f0 [ 496.703726][T13864] ? ieee80211_register_hw+0xf41/0x39f0 [ 496.709312][T13864] ? ieee80211_register_hw+0xf41/0x39f0 [ 496.714928][T13864] ? ieee80211_tasklet_handler+0x20/0x20 [ 496.720599][T13864] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 496.726648][T13864] ? __debug_object_init+0xed/0x440 [ 496.731952][T13864] ? memset+0x1e/0x40 [ 496.736013][T13864] ? __hrtimer_init+0x189/0x270 [ 496.740950][T13864] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 496.746802][T13864] ? memcpy+0x3c/0x60 [ 496.750811][T13864] hwsim_new_radio_nl+0xab7/0xc90 [ 496.755888][T13864] genl_family_rcv_msg_doit+0x22f/0x350 [ 496.761492][T13864] ? end_current_label_crit_section+0x170/0x170 [ 496.767809][T13864] ? trace_call_bpf+0xbf/0x6b0 [ 496.772643][T13864] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 496.778574][T13864] ? bpf_lsm_capable+0x5/0x10 [ 496.783356][T13864] ? security_capable+0x85/0xb0 [ 496.788273][T13864] genl_rcv_msg+0x601/0x790 [ 496.792816][T13864] ? genl_bind+0x360/0x360 [ 496.797243][T13864] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 496.803624][T13864] netlink_rcv_skb+0x1ef/0x440 [ 496.808399][T13864] ? genl_bind+0x360/0x360 [ 496.812830][T13864] ? netlink_ack+0x1160/0x1160 [ 496.817633][T13864] ? down_read+0x1a8/0x2d0 [ 496.822068][T13864] genl_rcv+0x24/0x40 [ 496.826061][T13864] netlink_unicast+0x7ad/0x920 [ 496.830860][T13864] netlink_sendmsg+0x8ad/0xbd0 [ 496.835661][T13864] ? netlink_getsockopt+0x550/0x550 [ 496.840878][T13864] ? apparmor_socket_sendmsg+0x8a/0x330 [ 496.846448][T13864] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 496.851846][T13864] ? security_socket_sendmsg+0x7c/0xa0 [ 496.857363][T13864] ? netlink_getsockopt+0x550/0x550 [ 496.862577][T13864] ____sys_sendmsg+0x5ed/0x9a0 [ 496.867423][T13864] ? __sys_sendmsg_sock+0x30/0x30 [ 496.872454][T13864] ? __import_iovec+0x306/0x510 [ 496.877391][T13864] ? import_iovec+0x6f/0xa0 [ 496.881920][T13864] ___sys_sendmsg+0x2a2/0x360 [ 496.886627][T13864] ? __sys_sendmsg+0x2a0/0x2a0 [ 496.891524][T13864] __se_sys_sendmsg+0x1c3/0x2b0 [ 496.896387][T13864] ? ct_nmi_exit+0x145/0x1c0 [ 496.900997][T13864] ? __x64_sys_sendmsg+0x80/0x80 [ 496.905984][T13864] ? lockdep_hardirqs_on+0x94/0x140 [ 496.911204][T13864] do_syscall_64+0x4c/0xa0 [ 496.915628][T13864] ? clear_bhb_loop+0x60/0xb0 [ 496.920311][T13864] ? clear_bhb_loop+0x60/0xb0 [ 496.925001][T13864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.930905][T13864] RIP: 0033:0x7fd47699e159 [ 496.935333][T13864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.954946][T13864] RSP: 002b:00007fd4777ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.963371][T13864] RAX: ffffffffffffffda RBX: 00007fd476c26090 RCX: 00007fd47699e159 [ 496.971348][T13864] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000011 [ 496.979322][T13864] RBP: 00007fd476a3506b R08: 0000000000000000 R09: 0000000000000000 [ 496.987305][T13864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.995284][T13864] R13: 00007fd476c26128 R14: 00007fd476c26090 R15: 00007fff474ca6e8 [ 497.003304][T13864] [ 501.007429][T13903] netlink: 'syz.1.2240': attribute type 1 has an invalid length. [ 501.063655][T13903] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2240'. [ 501.242195][T13908] netlink: 'syz.4.2242': attribute type 1 has an invalid length. [ 501.251344][T13909] netlink: 'syz.4.2242': attribute type 1 has an invalid length. [ 501.259592][T13908] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2242'. [ 501.270335][T13909] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2242'. [ 501.298733][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.305268][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.584278][T13912] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2243'. [ 501.815598][ T4284] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 502.922055][T13953] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2257'. [ 503.008287][T13953] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2257'. [ 503.025161][T13952] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2257'. [ 503.181960][T13966] netlink: 'syz.5.2258': attribute type 3 has an invalid length. [ 503.200101][T13966] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2258'. [ 503.446118][T13973] netlink: 'syz.3.2262': attribute type 3 has an invalid length. [ 503.475803][T13973] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 503.524466][T13973] netlink: 'syz.3.2262': attribute type 1 has an invalid length. [ 503.561240][T13973] netlink: 197708 bytes leftover after parsing attributes in process `syz.3.2262'. [ 503.843736][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 504.099415][T13989] netlink: 'syz.5.2267': attribute type 10 has an invalid length. [ 504.119439][T13989] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.127702][T13989] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.182431][T13989] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.189867][T13989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.197869][T13989] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.205331][T13989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.229570][T13989] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 504.545298][T14007] netlink: 'syz.1.2270': attribute type 10 has an invalid length. [ 504.602196][T14006] netlink: 'syz.5.2271': attribute type 21 has an invalid length. [ 505.348282][T14026] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2277'. [ 506.080615][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.192138][T14062] bond0: (slave team0): Enslaving as an active interface with an up link [ 508.226308][T14141] validate_nla: 3 callbacks suppressed [ 508.226341][T14141] netlink: 'syz.0.2307': attribute type 21 has an invalid length. [ 508.406202][T14139] delete_channel: no stack [ 508.456594][T14141] __nla_validate_parse: 4 callbacks suppressed [ 508.456630][T14141] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2307'. [ 509.312706][T14170] netlink: 'syz.5.2316': attribute type 29 has an invalid length. [ 509.331270][T14170] netlink: 'syz.5.2316': attribute type 29 has an invalid length. [ 509.358773][T14171] netlink: 'syz.5.2316': attribute type 29 has an invalid length. [ 510.000658][T14194] netlink: 'syz.0.2322': attribute type 2 has an invalid length. [ 510.038455][T14194] netlink: 'syz.0.2322': attribute type 1 has an invalid length. [ 510.527607][T14198] netlink: 'syz.4.2323': attribute type 1 has an invalid length. [ 510.543406][T14198] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.2323'. [ 512.457200][T14228] netlink: 'syz.0.2331': attribute type 39 has an invalid length. [ 512.682376][T14233] netlink: 10027 bytes leftover after parsing attributes in process `syz.0.2331'. [ 512.911478][T14236] netlink: 'syz.0.2331': attribute type 39 has an invalid length. [ 512.930481][T14238] netlink: 10027 bytes leftover after parsing attributes in process `syz.0.2331'. [ 513.858897][T14254] device syzkaller0 entered promiscuous mode [ 515.818250][T14256] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2335'. [ 516.470690][T14265] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2337'. [ 519.130367][T14282] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2342'. [ 519.985084][T14266] netlink: 46607 bytes leftover after parsing attributes in process `syz.1.2338'. [ 520.015081][T14281] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2342'. [ 520.033963][T14282] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 520.103273][T14282] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 520.148302][T14282] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 520.591971][T14298] netlink: 'syz.0.2347': attribute type 5 has an invalid length. [ 523.209286][T14325] device syzkaller0 entered promiscuous mode [ 523.224857][T14330] netlink: 'syz.0.2356': attribute type 13 has an invalid length. [ 523.233635][T14330] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2356'. [ 523.247754][T14330] erspan0: refused to change device tx_queue_len [ 523.255646][T14330] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 523.266022][T14330] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 523.283871][T14333] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.2356'. [ 523.821782][T14365] netlink: 'syz.3.2363': attribute type 9 has an invalid length. [ 523.838481][T14365] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2363'. [ 524.035082][T14372] netlink: 'syz.4.2364': attribute type 2 has an invalid length. [ 524.087117][T14372] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.2364'. [ 526.773314][T14381] netlink: 'syz.0.2368': attribute type 2 has an invalid length. [ 526.786896][T14381] netlink: 'syz.0.2368': attribute type 8 has an invalid length. [ 526.801990][T14381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2368'. [ 527.027513][T14433] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2377'. [ 527.068193][T14432] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2377'. [ 527.119174][T14432] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 527.172164][T14432] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.238658][T14433] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2377'. [ 527.253046][T14433] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 527.282146][T14433] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.472561][T14458] sctp: [Deprecated]: syz.0.2384 (pid 14458) Use of int in maxseg socket option. [ 527.472561][T14458] Use struct sctp_assoc_value instead [ 527.531102][T14460] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2385'. [ 528.963637][ T4284] Bluetooth: hci3: command 0x0406 tx timeout [ 529.162529][T14492] netlink: 5427 bytes leftover after parsing attributes in process `syz.5.2394'. [ 529.194760][T14492] netlink: 52477 bytes leftover after parsing attributes in process `syz.5.2394'. [ 529.225623][T14492] netlink: 71676 bytes leftover after parsing attributes in process `syz.5.2394'. [ 529.283981][T14500] netlink: 'syz.3.2395': attribute type 10 has an invalid length. [ 529.291892][T14500] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2395'. [ 529.340805][T14500] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 529.536727][T14511] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2399'. [ 529.546655][T14517] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2400'. [ 529.572778][T14521] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2400'. [ 530.129309][T14544] device syzkaller0 entered promiscuous mode [ 530.173382][T14547] netlink: 'syz.0.2407': attribute type 49 has an invalid length. [ 530.181666][T14547] netlink: 'syz.0.2407': attribute type 49 has an invalid length. [ 530.483843][T14562] netlink: 'syz.3.2410': attribute type 10 has an invalid length. [ 530.560382][T14562] device dummy0 left promiscuous mode [ 534.088636][T14577] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2414'. [ 534.097872][T14581] netlink: 'syz.4.2417': attribute type 10 has an invalid length. [ 534.232227][T14581] team0: Device gre0 is of different type [ 534.295017][T14595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2419'. [ 534.314467][T14603] netlink: 'syz.1.2421': attribute type 21 has an invalid length. [ 534.348701][T14601] IPv6: NLM_F_CREATE should be specified when creating new route [ 534.370020][T14601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.377338][T14601] IPv6: NLM_F_CREATE should be set when creating new route [ 534.384647][T14601] IPv6: NLM_F_CREATE should be set when creating new route [ 534.391883][T14601] IPv6: NLM_F_CREATE should be set when creating new route [ 534.425235][T14610] netlink: 'syz.4.2422': attribute type 2 has an invalid length. [ 534.431447][T14603] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 534.467241][T14603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.517009][T14610] device .*! entered promiscuous mode [ 534.719959][T14618] netlink: 'syz.3.2425': attribute type 3 has an invalid length. [ 534.738318][T14618] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2425'. [ 535.071451][T14634] netlink: 'syz.5.2429': attribute type 1 has an invalid length. [ 536.340541][T14634] netlink: 105120 bytes leftover after parsing attributes in process `syz.5.2429'. [ 537.554725][T14667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2432'. [ 539.149793][T14675] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2437'. [ 541.279983][T14714] netlink: 'syz.1.2445': attribute type 39 has an invalid length. [ 541.372072][T14726] netlink: 'syz.3.2446': attribute type 3 has an invalid length. [ 541.387530][T14726] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2446'. [ 541.721707][T14732] netlink: 'syz.0.2451': attribute type 10 has an invalid length. [ 541.748399][T14732] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2451'. [ 541.942445][T14740] netlink: 'syz.1.2453': attribute type 10 has an invalid length. [ 541.966794][T14740] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2453'. [ 543.511363][T14775] netlink: 'syz.3.2463': attribute type 3 has an invalid length. [ 543.542344][T14775] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2463'. [ 544.071161][T14800] netlink: 'syz.5.2473': attribute type 2 has an invalid length. [ 544.111809][T14800] netlink: 'syz.5.2473': attribute type 1 has an invalid length. [ 544.134066][T14805] netlink: 'syz.3.2474': attribute type 10 has an invalid length. [ 544.136098][T14800] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.2473'. [ 544.189643][T14805] team0: Device veth1_vlan failed to register rx_handler [ 544.277970][T14812] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2475'. [ 544.630334][T14825] device syzkaller0 entered promiscuous mode [ 544.689225][T14829] netlink: 'syz.5.2478': attribute type 16 has an invalid length. [ 544.708774][T14829] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2478'. [ 549.181700][T14849] netlink: 'syz.4.2482': attribute type 10 has an invalid length. [ 549.191347][T14849] device veth0_macvtap left promiscuous mode [ 549.235892][T14869] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2488'. [ 549.249072][T14869] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2488'. [ 549.261428][T14869] bond0: (slave bond_slave_0): Releasing backup interface [ 549.278348][T14869] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 549.521654][T14887] netlink: 'syz.3.2492': attribute type 1 has an invalid length. [ 549.543439][T14887] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2492'. [ 549.627626][T14890] netlink: 'syz.0.2494': attribute type 29 has an invalid length. [ 549.636390][T14890] netlink: 'syz.0.2494': attribute type 29 has an invalid length. [ 550.048092][T14895] : port 1(ip6gretap0) entered blocking state [ 550.058040][T14895] : port 1(ip6gretap0) entered disabled state [ 550.074359][T14895] device ip6gretap0 entered promiscuous mode [ 550.082918][T14898] device ip6gretap0 left promiscuous mode [ 550.091857][T14898] : port 1(ip6gretap0) entered disabled state [ 550.308883][T14925] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2503'. [ 550.331734][T14925] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 550.352322][T14925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 550.515504][T14938] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2504'. [ 550.543204][T14938] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2504'. [ 550.553008][T14938] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2504'. [ 550.573802][T14938] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2504'. [ 550.855932][T14943] netlink: 'syz.1.2508': attribute type 10 has an invalid length. [ 550.885680][T14943] bridge0: port 3(hsr0) entered disabled state [ 550.897119][T14943] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 550.910214][T14943] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 550.923516][T14943] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 550.937333][T14943] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.963806][T14947] netlink: 'syz.0.2509': attribute type 21 has an invalid length. [ 550.971821][T14947] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2509'. [ 550.983524][T14947] netlink: 'syz.0.2509': attribute type 5 has an invalid length. [ 550.996686][T14947] netlink: 'syz.0.2509': attribute type 6 has an invalid length. [ 551.022423][T14947] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2509'. [ 551.264156][ T4284] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 551.294262][ T4284] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 551.379817][T14959] netlink: 'syz.0.2513': attribute type 10 has an invalid length. [ 551.477085][T14959] netlink: 'syz.0.2513': attribute type 10 has an invalid length. [ 552.712817][T14999] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.722247][T14999] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.841626][T14999] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.849761][T14999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.859951][T14999] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.867895][T14999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.957233][T14999] team0: Port device bridge0 added [ 552.983271][T15008] device bridge_slave_1 left promiscuous mode [ 552.990542][T15008] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.078701][T15008] device bridge_slave_0 left promiscuous mode [ 553.105324][T15008] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.135542][ T28] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 553.169531][ T28] Not tainted syzkaller #0 [ 553.180073][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.193350][ T28] task:rcu_tasks_kthre state:D stack:27216 pid:12 ppid:2 flags:0x00004000 [ 553.202606][ T28] Call Trace: [ 553.230144][ T28] [ 553.238978][ T28] __schedule+0x107f/0x4030 [ 553.251590][ T28] ? perf_trace_lock+0xf8/0x390 [ 553.264834][ T28] ? trace_event_raw_event_lock+0x230/0x230 [ 553.274346][ T28] ? release_firmware_map_entry+0x187/0x187 [ 553.284742][ T28] schedule+0xb9/0x180 [ 553.295907][ T28] schedule_timeout+0xbd/0x2d0 [ 553.306374][ T28] ? console_conditional_schedule+0x40/0x40 [ 553.318091][ T28] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 553.347965][ T28] ? __lock_acquire+0x7c40/0x7c40 [ 553.356145][ T28] ? lock_chain_count+0x20/0x20 [ 553.361256][ T28] ? _raw_spin_lock_irq+0xb7/0xf0 [ 553.366895][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 553.372600][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 553.378067][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 553.383511][ T28] ? wait_for_completion+0x26f/0x590 [ 553.388901][ T28] wait_for_completion+0x2c2/0x590 [ 553.394150][ T28] ? io_schedule+0xd0/0xd0 [ 553.398604][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 553.404623][ T28] ? debug_object_active_state+0x6b/0x380 [ 553.410359][ T28] __synchronize_srcu+0x2b3/0x350 [ 553.415534][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 553.421460][ T28] ? synchronize_srcu_expedited+0x20/0x20 [ 553.427287][ T28] ? rcu_read_lock_any_held+0x130/0x130 [ 553.432864][ T28] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 553.438488][ T28] ? synchronize_srcu+0x18f/0x1b0 [ 553.443842][ T28] rcu_tasks_wait_gp+0x49f/0xac0 [ 553.448801][ T28] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 553.454055][ T28] ? lock_chain_count+0x20/0x20 [ 553.459029][ T28] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 553.465040][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 553.470261][ T28] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 553.475819][ T28] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 553.481742][ T28] ? _raw_spin_unlock+0x40/0x40 [ 553.486798][ T28] rcu_tasks_one_gp+0xd27/0xef0 [ 553.491677][ T28] ? rcu_tasks_one_gp+0xe5/0xef0 [ 553.496674][ T28] rcu_tasks_kthread+0x6e/0x90 [ 553.501479][ T28] kthread+0x29d/0x330 [ 553.505996][ T28] ? rcu_tasks_postgp+0x10/0x10 [ 553.510859][ T28] ? kthread_blkcg+0xd0/0xd0 [ 553.515506][ T28] ret_from_fork+0x1f/0x30 [ 553.520062][ T28] [ 553.524232][ T28] [ 553.524232][ T28] Showing all locks held in the system: [ 553.531974][ T28] 1 lock held by rcu_tasks_kthre/12: [ 553.539684][ T28] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 553.552496][ T28] 1 lock held by rcu_tasks_trace/13: [ 553.557843][ T28] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 553.569005][ T28] 3 locks held by kworker/1:1/26: [ 553.574073][ T28] #0: ffff88814d056538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 553.585284][ T28] #1: ffffc90000a1fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 553.598260][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1500 [ 553.609450][ T28] 1 lock held by khungtaskd/28: [ 553.614442][ T28] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 553.624483][ T28] 2 locks held by getty/4030: [ 553.629167][ T28] #0: ffff88802fe96098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 553.639157][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 553.649452][ T28] 3 locks held by kworker/1:3/4262: [ 553.654763][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 553.665505][ T28] #1: ffffc90003ed7d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 553.675940][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 553.686640][ T28] 2 locks held by kworker/0:4/4318: [ 553.691844][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 553.702275][ T28] #1: ffffc900045c7d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 553.713774][ T28] 3 locks held by kworker/u4:44/14396: [ 553.719234][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 553.730345][ T28] #1: ffffc9000398fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 553.740829][ T28] #2: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 553.750007][ T28] 1 lock held by syz.5.2522/15008: [ 553.755179][ T28] #0: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x80d/0xfb0 [ 553.766540][ T28] 1 lock held by syz.0.2526/15014: [ 553.771677][ T28] #0: ffffffff8cb82ae8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2a/0x140 [ 553.781483][ T28] 2 locks held by syz.1.2528/15022: [ 553.786711][ T28] #0: ffffffff8dd575c8 (bpf_dispatcher_xdp.mutex){+.+.}-{3:3}, at: bpf_dispatcher_change_prog+0xc8/0xf10 [ 553.798182][ T28] #1: ffffffff8cb334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3c0/0x890 [ 553.809201][ T28] 2 locks held by syz.1.2528/15028: [ 553.814466][ T28] #0: ffffffff8dd48210 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x324/0x5b0 [ 553.824065][ T28] #1: ffffffff8dd550a8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x240 [ 553.866780][ T28] [ 553.869315][ T28] ============================================= [ 553.869315][ T28] [ 553.881380][ T28] NMI backtrace for cpu 1 [ 553.885741][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 553.892955][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.903015][ T28] Call Trace: [ 553.906303][ T28] [ 553.909243][ T28] dump_stack_lvl+0x188/0x24e [ 553.913938][ T28] ? ct_irq_enter_irqson+0x170/0x170 [ 553.919326][ T28] ? show_regs_print_info+0x12/0x12 [ 553.924539][ T28] ? load_image+0x410/0x410 [ 553.929061][ T28] ? vprintk_emit+0x59f/0x6a0 [ 553.933798][ T28] ? nmi_cpu_backtrace+0x1cb/0x460 [ 553.938944][ T28] nmi_cpu_backtrace+0x3e6/0x460 [ 553.943902][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 553.950065][ T28] ? _printk+0xda/0x130 [ 553.954234][ T28] ? load_image+0x410/0x410 [ 553.958760][ T28] ? load_image+0x410/0x410 [ 553.963287][ T28] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 553.969365][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 553.975537][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 553.981535][ T28] watchdog+0xf0e/0xf50 [ 553.985774][ T28] ? watchdog+0x1ed/0xf50 [ 553.990131][ T28] kthread+0x29d/0x330 [ 553.994215][ T28] ? hungtask_pm_notify+0x40/0x40 [ 553.999249][ T28] ? kthread_blkcg+0xd0/0xd0 [ 554.003851][ T28] ret_from_fork+0x1f/0x30 [ 554.008337][ T28] [ 554.011846][ T28] Sending NMI from CPU 1 to CPUs 0: [ 554.017113][ C0] NMI backtrace for cpu 0 [ 554.017121][ C0] CPU: 0 PID: 15022 Comm: syz.1.2528 Not tainted syzkaller #0 [ 554.017136][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.017144][ C0] RIP: 0010:__lock_acquire+0xf0a/0x7c40 [ 554.017168][ C0] Code: 00 74 12 4c 89 f7 e8 55 69 6f 00 49 b8 00 00 00 00 00 fc ff df 48 89 9c 24 a8 00 00 00 4d 89 3e 48 8b 44 24 68 42 0f b6 04 00 <84> c0 0f 85 f9 59 00 00 41 8b 1c 24 48 85 db 74 5d 83 fb 31 0f 83 [ 554.017180][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00000046 [ 554.017193][ C0] RAX: 0000000000000000 RBX: ffff888079cbc6d0 RCX: ffffffff81640e2d [ 554.017204][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b0f248 [ 554.017212][ C0] RBP: ffffc900000078b0 R08: dffffc0000000000 R09: 1ffffffff2161e49 [ 554.017223][ C0] R10: dffffc0000000000 R11: fffffbfff2161e4a R12: ffff888079cbc6d8 [ 554.017233][ C0] R13: ffff888079cbbc00 R14: ffff888079cbc780 R15: 4817e2ebbae01ab3 [ 554.017243][ C0] FS: 00007f4ed65cd6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 554.017256][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.017266][ C0] CR2: 00007f0a651ef2f8 CR3: 0000000077fd5000 CR4: 00000000003506f0 [ 554.017279][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 554.017294][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 554.017303][ C0] Call Trace: [ 554.017308][ C0] [ 554.017324][ C0] ? perf_trace_lock+0xf8/0x390 [ 554.017342][ C0] ? verify_lock_unused+0x140/0x140 [ 554.017362][ C0] ? perf_trace_lock_acquire+0x101/0x3f0 [ 554.017382][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 554.017399][ C0] ? trace_event_raw_event_lock+0x230/0x230 [ 554.017422][ C0] lock_acquire+0x1bb/0x4a0 [ 554.017440][ C0] ? ktime_get+0x7b/0x270 [ 554.017462][ C0] ? read_lock_is_recursive+0x10/0x10 [ 554.017482][ C0] ? perf_event_output_forward+0x282/0x2f0 [ 554.017530][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 554.017549][ C0] ? perf_get_page_size+0x430/0x430 [ 554.017568][ C0] ? ktime_get+0x7b/0x270 [ 554.017584][ C0] seqcount_lockdep_reader_access+0xcd/0x1d0 [ 554.017601][ C0] ? ktime_get+0x7b/0x270 [ 554.017616][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 554.017631][ C0] ? sched_clock_cpu+0x6e/0x260 [ 554.017651][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 554.017675][ C0] ktime_get+0x7b/0x270 [ 554.017694][ C0] perf_swevent_hrtimer+0x4f8/0x630 [ 554.017716][ C0] ? cpu_clock_event_read+0x50/0x50 [ 554.017748][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 554.017763][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 554.017784][ C0] ? _raw_spin_unlock+0x40/0x40 [ 554.017809][ C0] __hrtimer_run_queues+0x4e7/0xc90 [ 554.017824][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 554.017845][ C0] ? cpu_clock_event_read+0x50/0x50 [ 554.017868][ C0] ? hrtimer_interrupt+0x980/0x980 [ 554.017883][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 554.017906][ C0] hrtimer_interrupt+0x399/0x980 [ 554.017935][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 554.017964][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 554.017982][ C0] [ 554.017986][ C0] [ 554.017991][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 554.018005][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 554.018021][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 554.018032][ C0] RSP: 0018:ffffc9000e946df8 EFLAGS: 00000202 [ 554.018043][ C0] RAX: 0000000000000000 RBX: ffffc9000e946ea8 RCX: 0000000000000000 [ 554.018052][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc9000e946f08 [ 554.018061][ C0] RBP: dffffc0000000000 R08: ffffc9000e946f07 R09: ffffc9000e946ef8 [ 554.018071][ C0] R10: dffffc0000000000 R11: fffff52001d28de1 R12: dffffc0000000000 [ 554.018081][ C0] R13: ffffc9000e948000 R14: ffffc9000e946ee0 R15: ffffc9000e946edd [ 554.018102][ C0] unwind_next_frame+0x8da/0x1fd0 [ 554.018184][ C0] ? skb_release_data+0x654/0x7e0 [ 554.018201][ C0] ? stack_trace_save+0xf0/0xf0 [ 554.018218][ C0] arch_stack_walk+0x10c/0x140 [ 554.018243][ C0] ? kfree_skb_reason+0x163/0x370 [ 554.018259][ C0] stack_trace_save+0xa6/0xf0 [ 554.018276][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 554.018303][ C0] save_stack+0x121/0x230 [ 554.018351][ C0] ? __reset_page_owner+0x190/0x190 [ 554.018366][ C0] ? free_unref_page_prepare+0x8e5/0x9e0 [ 554.018415][ C0] ? free_unref_page+0x2e/0x3f0 [ 554.018432][ C0] ? skb_release_data+0x654/0x7e0 [ 554.018452][ C0] ? page_ext_get+0x1e/0x2a0 [ 554.018496][ C0] ? page_ext_get+0x1de/0x2a0 [ 554.018516][ C0] __reset_page_owner+0x51/0x190 [ 554.018534][ C0] free_unref_page_prepare+0x8e5/0x9e0 [ 554.018557][ C0] free_unref_page+0x2e/0x3f0 [ 554.018574][ C0] ? compound_order+0x3e/0x110 [ 554.018594][ C0] skb_release_data+0x654/0x7e0 [ 554.018613][ C0] kfree_skb_reason+0x163/0x370 [ 554.018628][ C0] ip6_parse_tlv+0x1910/0x1f30 [ 554.018689][ C0] ipv6_parse_hopopts+0x2e8/0x5f0 [ 554.018708][ C0] ip6_rcv_core+0x1039/0x1700 [ 554.018725][ C0] ? ip6_rcv_core+0xc2/0x1700 [ 554.018745][ C0] ipv6_list_rcv+0x23a/0x440 [ 554.018766][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 554.018784][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 554.018800][ C0] __netif_receive_skb_list_core+0x57e/0x770 [ 554.018850][ C0] ? set_rps_cpu+0x660/0x660 [ 554.018870][ C0] netif_receive_skb_list_internal+0x93f/0xca0 [ 554.018893][ C0] ? netif_receive_skb_list_internal+0x4ad/0xca0 [ 554.018912][ C0] ? netif_receive_skb_core+0x230/0x230 [ 554.018929][ C0] ? __xdp_release_frame+0x21/0x320 [ 554.018976][ C0] ? __xdp_build_skb_from_frame+0x3c4/0xb30 [ 554.018999][ C0] netif_receive_skb_list+0x51/0x4e0 [ 554.019016][ C0] ? bpf_test_run_xdp_live+0x178c/0x1a90 [ 554.019038][ C0] bpf_test_run_xdp_live+0x17ac/0x1a90 [ 554.019068][ C0] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 554.019088][ C0] ? xdp_convert_md_to_buff+0x330/0x330 [ 554.019127][ C0] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 554.019151][ C0] ? bpf_test_init+0x119/0x140 [ 554.019167][ C0] ? xdp_convert_md_to_buff+0x5b/0x330 [ 554.019188][ C0] bpf_prog_test_run_xdp+0x757/0xf80 [ 554.019207][ C0] ? __lock_acquire+0x7c40/0x7c40 [ 554.019233][ C0] ? dev_put+0x80/0x80 [ 554.019258][ C0] ? dev_put+0x80/0x80 [ 554.019275][ C0] bpf_prog_test_run+0x31c/0x390 [ 554.019342][ C0] __sys_bpf+0x62b/0x780 [ 554.019363][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 554.019391][ C0] ? lock_chain_count+0x20/0x20 [ 554.019415][ C0] __x64_sys_bpf+0x78/0x90 [ 554.019433][ C0] do_syscall_64+0x4c/0xa0 [ 554.019447][ C0] ? clear_bhb_loop+0x60/0xb0 [ 554.019460][ C0] ? clear_bhb_loop+0x60/0xb0 [ 554.019475][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.019495][ C0] RIP: 0033:0x7f4ed579e159 [ 554.019508][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.019519][ C0] RSP: 002b:00007f4ed65cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 554.019533][ C0] RAX: ffffffffffffffda RBX: 00007f4ed5a25fa0 RCX: 00007f4ed579e159 [ 554.019543][ C0] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 554.019551][ C0] RBP: 00007f4ed583506b R08: 0000000000000000 R09: 0000000000000000 [ 554.019560][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.019568][ C0] R13: 00007f4ed5a26038 R14: 00007f4ed5a25fa0 R15: 00007ffcb4b1ad48 [ 554.019587][ C0] [ 554.771152][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 554.778053][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 554.785266][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.795337][ T28] Call Trace: [ 554.798622][ T28] [ 554.801561][ T28] dump_stack_lvl+0x188/0x24e [ 554.806252][ T28] ? memcpy+0x3c/0x60 [ 554.810244][ T28] ? show_regs_print_info+0x12/0x12 [ 554.815448][ T28] ? load_image+0x410/0x410 [ 554.819978][ T28] panic+0x2d3/0x710 [ 554.823879][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 554.829521][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 554.834040][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 554.839604][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 554.845769][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 554.851932][ T28] watchdog+0xf4d/0xf50 [ 554.856098][ T28] ? watchdog+0x1ed/0xf50 [ 554.860442][ T28] kthread+0x29d/0x330 [ 554.864515][ T28] ? hungtask_pm_notify+0x40/0x40 [ 554.869543][ T28] ? kthread_blkcg+0xd0/0xd0 [ 554.874141][ T28] ret_from_fork+0x1f/0x30 [ 554.878739][ T28] [ 554.882049][ T28] Kernel Offset: disabled [ 554.886372][ T28] Rebooting in 86400 seconds..