last executing test programs: 1m44.650050817s ago: executing program 3 (id=2929): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000c80)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36513001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e455fe2bb24ef66970746c7f1f2a5c4c3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/288, 0x112}, {&(0x7f0000001d00)=""/4067, 0xfe3}, {&(0x7f0000000a00)=""/213, 0xfb}, {&(0x7f0000000680)=""/156, 0xa2}, {&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f0000000240)=""/236, 0xea}, {&(0x7f0000000940)=""/171, 0xab}, {&(0x7f0000000180)=""/185, 0xb9}], 0x8}, 0x10182) 1m44.356410153s ago: executing program 3 (id=2931): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="0e0200000700000000000000090000008500000005000d001801000020646c2500000000002020436030495a9297a90007010000f8ffffffb702000008000000b70300000300000085000000170000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x4, 0x80, 0x80, 0x3, 0x7, 0x1, 0x0, 0x3, 0x90, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x487d, 0x633}, 0x108462, 0x10, 0x0, 0x0, 0xfc, 0xffffffff, 0x1, 0x0, 0xffffffc0, 0x0, 0x7}, 0x0, 0xe, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x10, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000800000000018490000fdffffff00000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x5, 0xe, 0x0, &(0x7f00000001c0)="0100400871a7832e6b7303c3cd59", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x0, 0x80, 0xf8, 0x9d, 0x3, 0x97, 0x0, 0x4, 0x202e4, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000004, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x80441, 0x8, 0x2, 0x4, 0x4c42, 0x6c2, 0x4, 0x0, 0x7, 0x0, 0xfffffffffffff917}) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1m43.742824308s ago: executing program 3 (id=2937): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0x1, 0x1, 0x3, 0x0, 0x23, 0x10, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x6}, 0x1480, 0x7, 0x7c, 0x0, 0x8, 0x9, 0x8692, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) r3 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x410, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x300}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0680050003000300", 0x33fe0}], 0x1}, 0x0) 1m43.483401064s ago: executing program 3 (id=2940): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040), 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x5, 0x90, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000500)="2e0000002e008f866b29924a6f130000005e140608000000000022727f0000a31802dd00003b1fcc7336507fb18f", 0x2e}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) perf_event_open(&(0x7f0000000840)={0xabe013c12450b94e, 0x80, 0x29, 0x8, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f00000002c0), 0x10}, 0x100000, 0x8010004, 0x9e8, 0x5, 0x208, 0x20002, 0x0, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0x400000000008, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000540)="aa5237fc22fdac18d2dd9e9aa643247c0fab0d9e0874ecd5fa48fc277cac54bb60f0b1a51150562bc083b1500c34c73c489762c0d55d48a9f3d905d99d0061a6be55f12d6b342f7a07180d19acfca22bbe57159f17b454", 0x57}, {&(0x7f0000000700)="c93fda25307d5eb032ea7b7a4bd99b173f79068c08890ae449c89c6da61268bc1ce51fa665358c45d448be5e66ddc97300635d56c811e2fdfb2ce9028cb58f028163b90583a3af6013e5fb9ed9f3dd973e082e95e6d9b872b8256062ed7c50a1a2e54ede5bbccdfb0da809665599c22219c9d3bb918182236b08e34d7d28894dad0a94ed2f09074abcd0a712d08af787ca2a63f137832eb3d7661e1a6ec44157258084763a3c3cea1c0da9ca6cae427b85bea6162801771c3862a850ccdcd3f02eccced840", 0xc5}], 0x3, 0x0, 0x0, 0x10}, 0x8041) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x27, 0x4, 0x10, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r6, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1m43.077982343s ago: executing program 3 (id=2942): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000006911320000000000851000000200000085000000b200000095000000000000009500a505000000007b26568149598740b23a8f0867327c9291542b3b026607ebba19f8d9dee8657b2b67fa0e7e793a69864a"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x7400}, 0x4050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f9, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x802a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x9}, [@generic={0x91, 0x1, 0x1, 0x37}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811208000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x407}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r3, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001000)=[{&(0x7f0000000100)="7e1ff1f13e79bf3b53dcd3fe07def1d3ef372461121bd019d659abc5414a603963e4ec4b3d5ac94961d2925ce495c8161d485bdfcf8d604a7a4411430fedf8333487", 0x42}, {&(0x7f00000002c0)="09458755569f278187077e405a3ce94379834abf0ff596f8a0a34a0fee11e49ca4ebb37fcc3a657ec2ef57f0067df4622e5ea1da16f6e0a7bdfa883c9dfaecf5b605ed7572f522cb13456ad9ed8f4357042f5019bbe33436eb94537514ab4a97e9db704494048c4cdfd445575f420692740c8d347f68ef5f6897", 0x7a}, {&(0x7f0000000640)="67fdd35f1bd472c0c4ff26d5464786aff594b0eb4f3c6bf3c2c6a490a4dd66ad3536c194a396b53b9d690d3ee4854925d91f9f13bdf613f987287018467e22afd6840336f0505a916668556b27f5ea53d81b4b10ec2765298c4f9428cf9bee40124e297af0af45e30e8ac8578832c7e089ea240bf1e4517293c3fcb6c42347d2af30dd8d43d00d52d0c50c1b0e09798c67e56a516aa83b5f25ebf1117ab5738a6d71342f87662b830c3f4705bc0e51f5c7", 0xb1}, {&(0x7f00000001c0)="e53d1d468182ee39bb7d97fc9cb9d41324cdcc28745ae4c79b963162b434f4", 0x1f}, {&(0x7f0000000740)="552378f8898a44741ba8571ba6502897eecce365acce5a3426f77b9e2aac7a4e665f0206eb2bec64ce2fd5700bb4341f0d60ebf337154f50fe5fa1312219a64fa6a4c6c57b0c89dd7a9c66181e15981eb1e3c0b0b81f01c9f6bc402a6d6062d78b781efe49a3798aeb3ef1e59884bc874c7aa19922f313a666740de15efa949b5bb934d96ad2ecff601518854ad6e1a1ff96365d8defb72af64d52bdb9125cf98ba912e6a2a6bc78ed8aaba9bb4fcb0c6c6c7002505d2fc3d41ca3ce1f16da1f7d33731f29695d8d286b7da55e298dbe840f5e2dc9e3e56aed98ec808d0549", 0xdf}, {&(0x7f0000000840)="494d8aa83e1ff23d41044d8469460fafa26517b650d9c5f2dc6c47355d9e12de6c8448ddfbcf1eaa7d2f3e394e9436f44bfa7f910984cf57919a942a9ae7a6e363dc055018692338dc17421660f91aa0c480c8db83dc6a4c23379e6a560f36044193b0319d8ceef94b97e728071cc19cc691d9c07662ca0ae0be1d4d65b1d99417f79c4c7377dea206d81349d0a76c90046bdd1de9d0ea2e45845aa511f007b4690001b913b657cd71e04079cf065b20b85aaeb01a72ae56a9c9709a134d94c25cdbee31cd1ed82b8414515da9123429132024872c059e", 0xd7}, {&(0x7f0000000940)="bc7946de06f494e11a97db5172aba0a7040f6635b0e49bc88a505e48e10186c8b64b50f2e8105ef255997fd4abffe715fb7db48f41ce6212a512da05007b28650f3f68bbb9a2729e1bdc", 0x4a}, {&(0x7f00000009c0)="7522baf98b066bf1e3a4799f56e6745b858fe781a8e189f45ce03c0bfa467c0f3dc9c5ca1c91c56bb323aae1c15e6a5fea2b973727537e3f9b22b2ba83581ad90706f84bc3382238aa5e255b4cc8cfeea22d3f5d26075c403a94501c1e35920b2125860e45e4537dbcfac4c5f6819a6f594131858d9737066e96f097ca82b800c09e51398fc41f50f3a8a116500a1116f9fe93f9e6c876aa22e63466388d940e156fc8df08b8c431557215", 0xab}, {&(0x7f0000000a80)="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", 0xfa}, {&(0x7f0000000b80)="f4dd9b589feed38c1545b99159484c0e626f67d866e1f1693a455ba1c48ebe067aad6efb458a1407e7e0690948c2a88e70e7e5950f3760cc77719f06e2a73f6cb7b5e8fe1506c3f66bb2e58112e6fb5c1daf2c9ca0a6110dfed16aac6a4b74d88be567298e39f5e15dfbba51c9bb0bc05bd79c135954f64750360a5b673b2e8d1e4045c51066a1e13a61014f76f745df439fc51033fc12b9d480a2bb1fffc7a6c02d26e2ccd006feb7845b2806a0801c1643a208932f706ed93413532da51e", 0xbf}], 0xa, &(0x7f0000000f00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x3f}, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop, @end]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x98}, 0x4008000) 1m42.714228261s ago: executing program 3 (id=2945): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x209058}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3f, 0x4a3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x5f, 0x5f, 0x61, 0xe]}}, 0x0, 0x2e, 0x0, 0x1, 0x2}, 0x28) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x3, 0x10) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0x10003, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 1m26.75344435s ago: executing program 32 (id=2945): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x209058}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3f, 0x4a3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x5f, 0x5f, 0x61, 0xe]}}, 0x0, 0x2e, 0x0, 0x1, 0x2}, 0x28) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x3, 0x10) syz_clone(0x41200000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="1400000016000b63d25a80648c25940121", 0x11}, {&(0x7f0000000280)="e26248", 0x3}], 0x2}, 0x40050) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0x10003, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) 6.266303566s ago: executing program 1 (id=3379): r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x19c565, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x400, 0x5, 0x9, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='.\x00', r2, 0x4000, r0}, 0x18) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="3200000000000000000000000300009fa9ccd0fd6c50fac1f25a1298bf7798c50002d3bc298bc35c91d1fa4889979f0e6e3fb876e34a8b7f5a05ba93c159c586f94658442fd16e700896d3af110c168fcf05535bab17a71a3adcf275a83dfb676ff8d221a3cd6e29d59c16dbf08bbab17d7bb2dff40d343bfb4dbd", @ANYRES32=r1, @ANYBLOB="5c7b02466c85b564170b4ed55747a5e46337b849987e3081f2a81e98ff59f0d0a1d11e3874cc6fb054b7905b7cae9cb4e8ad3a0a9e88d5f9bb82d54bb0af857b4866a8", @ANYBLOB="0100000003000000040000001000"/28], 0x50) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000009c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000003100)=""/4092, 0xffc}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f00000005c0)=""/233, 0xe9}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40002100) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000340)={'bridge0\x00', 0x2}) recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(r6, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10002) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x50) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000700053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='syzkaller\x00') 6.0847892s ago: executing program 1 (id=3380): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000002000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan0\x00', @random}) 5.740134657s ago: executing program 0 (id=3383): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffdd, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x3a}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0xa, 0x5, 0x7, 0x4}, 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x26, 0x300, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 5.737738577s ago: executing program 1 (id=3384): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000800), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000080) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x10}, 0x18) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r1], 0x50) syz_clone(0x8000000, 0x0, 0x0, &(0x7f00000016c0), &(0x7f0000001700), 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x89}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x480c4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x4}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x889, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r5 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000180), 0x2, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x15, 0x5, 0x0) 4.621611403s ago: executing program 4 (id=3391): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(0xffffffffffffffff, &(0x7f0000003040)={&(0x7f00000004c0)=@llc={0x1a, 0x110, 0x3, 0x6, 0xc0, 0x7, @multicast}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000000600)="c7ff794aff5a8142b7356a9800912a4e1bc9cdf99e76c21458bb862178697b36392dbffc3fd2cea8d9d564b14b711047bbbe88652548b004b535d8f9df3d0288efe33e6338a702759d6e0ad5027186827007de2d5702988bebb3449ccd48ebc4eba8942189a3e5ca86057786a4fae4e89219dbe376c781170714c79d39de11e5528d61e3523c4918040c1f369e42b84c997cacd91f6553ce7d5bb45f8ee2d26ea0f6b4249571b877fbca5c01d9405edd5f6f9ffc4d0601233e83f3af7b9adb03222b74b656711109dda77a46c055f4c49484cba90d72258aadefe17f6e414166f9cedd8c7b", 0xe5}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000002dc0)="2904f8581c2b89a1f769dc7c0e35637030748751318c94a6e9b1872dcb8e433a7f3d5544b8e3edcdcbb1a93c802a5e03f4d783063b0c83603e", 0x39}, {&(0x7f0000002e00)="e402a1fe3a261dcc9cfb178deb", 0xd}, {&(0x7f0000002e40)="93de4f02478e9aa003b1f3bdb058a8259ea8ae2f985be6bf8770d82a74874017af19b474a9f66ff1caaf49a90fb434e1369d2613b24acfbbfb570b6b31d89ea50c5ef8487b4ebf370218a29050846a6cca9368c66f9be587262bb65a", 0x5c}, {&(0x7f0000002ec0)="39e0d8c8806bbc1e03e374d43d918fda0759fb627b5a2f9a9fac980ca51e3ebf9af7fe41d6a9e629a0983724d31f9179dbceb3f499", 0x35}], 0x6, &(0x7f0000002f80)=[{0x40, 0x6, 0x2, "9d538abd00cad920e068cecf5795965e8e86c04c3294b0a7bbd106c8f4426a9bc5009c021e5a5d09341335"}, {0x50, 0x1a, 0x401, "b8846099b8fddaf16e586f6d3c8c8f88e136f8b6d549518d80300c922fce9a8ece128311842a632cf63e967c7fd92eb59d020d54675d733506"}], 0x90}, 0x40840) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x1, 0x23, 0x0, 0x1, 0x3}, 0x50) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r9, 0x0, 0xfdef) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 4.079237636s ago: executing program 4 (id=3393): perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0xf, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8919, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8dd095618e1f4dff3a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004) (async, rerun: 64) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 64) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) (async) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)}, 0x900000000000000) (async, rerun: 32) socket$kcm(0xf, 0x3, 0x2) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x8000, 0x4}, 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6}, 0x0, 0x0}, 0x20) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYBLOB='\a'], 0x10) socket$kcm(0xa, 0x5, 0x0) 3.830949371s ago: executing program 1 (id=3394): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f030000000000fc007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa12006558"], 0xcfa4) write$cgroup_netprio_ifpriomap(r2, &(0x7f0000000040)={'lo', 0x32, 0x31}, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) sendmsg$unix(r0, &(0x7f0000000840)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000440)="b0dbc54a33b21b469fef05e0130d9310460de23d17b8df43dd95e95ca84a49cfdab6051c074caa2cf868fda8c8f2a9d14be0df637c4d01a59873686b6225778a180f35a41753bd722bf4", 0x4a}, {&(0x7f00000004c0)="e67c1ebd50c78efc61af0cad822d83c3b92da2c79a0ea94544c46071f74a989b53a32b351d8b8f9e8ec32238b4366c0e8623ff262a282db2a0371c3bb2bd88a3b896fca9831da1b2c04be8", 0x4b}, {&(0x7f00000006c0)="1d77eb9098d903b59aa32df8190c82b5394cc9fbad86131116360ad41f4db5b0a6fd533a92546720c390073eed4595b0c940c2a18f5ffe06b1d597a2354572b0833e33c62179abdf4671ab164d6f78451ccf8aed8e718c5bd210f7510a2b5e74f30a1575ebad8921070d94063f10b56bd8d698faaa6b2b083e35380449b18942c0e477e67409494b73d75ca501024597d8560c723a99ea493a01fb916500344690036beb15215016ac259c50f06fcf19eb2b404fba9c91b935db0d8d4bc8d47767f713dbe18fccf33a54576f61d956157ac232632b32c51cdfe4fc96a5fb98d3184de7799381ca6e5a9ba7e5d2c20db2d0bb99a7ffea", 0xf6}, {&(0x7f00000007c0)="07fc6ac89c9c601d43345f997371a02cfb2c89eb53f851dce94ff4b6deb74149caa6b9a146afe1990287bbeafb6131967754a064819dc632d88a4d", 0x3b}], 0x4}, 0x8000) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, &(0x7f00000000c0)=r2, 0x4) recvmsg$kcm(r4, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 3.234192835s ago: executing program 2 (id=3395): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20082, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x2, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d", 0x15}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001100)={&(0x7f0000000f00)="792430b008799f0a7687478df6252a9683d044a843d0001bc06f0c1c59857ab553f959f26c1848e779b864f4d1c3d27a3c8a373f323383d33b105b1a270b86734f4fac6e0e773acc", &(0x7f0000000f80)=""/1, &(0x7f0000000fc0)="9d73db17836754edca4b9751e30131175ced4cb5bfaa6eee6f186929faa80685f5c7d73a104b8b0de265994fba577027cb78e32a23a439ac5ab05be5cbdc67b3cb97239a23e1efbddee2d441ebd5db6633b3e15567", &(0x7f0000001040)="b72b0e459f664bdea0c699790dec69c4504c80de5bc19e2d407a6fefef1ec9c37971c22374f4e35fac82727fb30fcf7a36650f4d4cbc9806fd49fa80a63297f08f0187e537729910a156b71510183bb267926af02b7999f562e36c303d3925aba6bb57581bbfec81ef74ebc78f92a2b292699ff079ca5d4cf84b29fed5ea75e7df049f7f0c4d64eb9537f4df1969721864017df25493362e445e443a3f96fc066d7b8170c2ed006b2845be736a766608", 0x6, 0x1, 0x4}, 0x38) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x9}, 0x8) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d6370751a"], 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x26) 3.206581366s ago: executing program 4 (id=3396): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122f00", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8b, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext={0x8, 0x6}, 0xa80, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007112bd000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'rose0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 3.191725396s ago: executing program 0 (id=3397): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.992810461s ago: executing program 0 (id=3398): r0 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x9c, @mcast1, 0x4, 0xffffffff}, 0x80, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000240)) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257075bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b257183fa3bcd48666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09601f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebd00000000000000005839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dcc718a09f4886afc26abba34635d0e8b54bc76be40d435aa8b5202db761014b1b999a12df6bee431a666100"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x40, 0x71, 0x10, 0x1d}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x2, &(0x7f0000000040)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)="5c00000014006b030231a6080c000af32c0cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1000000e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.820551355s ago: executing program 0 (id=3399): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0xa, 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x1814) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0x1}], 0x1}, 0x40041) (async) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0x1}], 0x1}, 0x40041) sendmsg$inet(r0, 0x0, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000e847f6a9e71dfa00000008a4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e0000000400000004000000ffff010000000000", @ANYRES32=0x1, @ANYBLOB="000000e847f6a9e71dfa00000008a4000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900"/16], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900"/16], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYRESDEC], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000004180)=ANY=[@ANYBLOB="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", @ANYRES8=r5, @ANYRESHEX=r6, @ANYRES64=r1, @ANYRES32=r4], 0x0, 0x0, 0x42}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2.738834267s ago: executing program 1 (id=3400): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x20, 0x2, 0x16, &(0x7f0000000100)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fcffffff0000000007000000850000007b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000040)="b90103600033f0000000000081001fffffe100004000632f77fbac141411e0000601be3e7d2a", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="180000003d000b08d25a80648c7494f90224fc6058000240", 0x18}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x9, 0x8}, 0x100c, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) 2.58935106s ago: executing program 2 (id=3401): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0xc001, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x817a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000020005fb0a0002000a0ada1b40d803000003000000ff", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x400c005) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0xfffe, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x49, 0x0, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, 0x0, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911161000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b70300000008000085000000a0000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000003fc0)={&(0x7f00000002c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000003e00)=[{&(0x7f0000000580)="a07d6791eb5613ff1d07f1377461992ba505b2dbb3ad32dc18d2b9ebc20afb81125d7e0f394d6caccb3930db26ce13792c07c78f1afadf745008e2a9b207afd150b0ef55721a878065e6e37d7d1c9d4c24bcb48256d08a43571796aa9f8096db75e79f9ef2e795bf2ce1b9b1df72c0c1aea78e9808f61dabc80b1594ec03af1c8b0f9b535e731017cccd414ce3a15d1dcbc62637b293b6f5862aa319d7a6", 0x9e}, {&(0x7f0000002e00)="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", 0x1000}], 0x2, &(0x7f0000003e40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5e}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0xd8, 0x0, 0x7, {[@rr={0x7, 0xb, 0x35, [@multicast2, @remote]}, @timestamp={0x44, 0x24, 0x7a, 0x0, 0x7, [0x7, 0x8001, 0x107, 0x80000001, 0x401, 0x9, 0x5, 0x5]}, @timestamp_addr={0x44, 0x3c, 0xef, 0x1, 0x0, [{@broadcast}, {@broadcast, 0x8}, {@local, 0x7}, {@multicast1, 0x8}, {@remote, 0x8}, {@local, 0x6}, {@loopback, 0x1}]}, @lsrr={0x83, 0x1b, 0x3e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @multicast1, @multicast1, @empty]}, @cipso={0x86, 0x3f, 0x3, [{0x2, 0x7, "0ea80869d1"}, {0x7, 0x9, "9dce7632984cd9"}, {0x1, 0xa, "aff1381de2559a57"}, {0x1, 0xf, "f533dadd36729abe34750161b2"}, {0x7, 0x4, "f479"}, {0x2, 0x7, "08bc18e86a"}, {0x6, 0x5, "6ef79f"}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x140}, 0x400180d1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r7) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f00000006c0)="16c0876fe6692b3e358fafe76ffb1643c28cae1b5adb009be8b1fb8bdcc7dd78ee93d6a1ec260621a38c4b0eaf25f7730ee399e64750c7279ef366edab07bd332a41b3e0d9eeb577086c2f5edf8058f0741bb3e8449081f79ac0286f76ae8962bb92303dc7f0fbb247d18413f364000c2bec4db4f5680f12b1976796e819c9e43d9acdf9bb9d140dbf146a9d0f05520ffd92d9b38dd7e1261836bf22e87fbcb26cf4caefee8dab9e9943b066ff23ef6852ac745abfb6c943d663bd1262efe8dd965fd006b7c028c2c39f35a54116a6a7100b291ff574398513ce8d2ee10bfa11402e4a3ba49c22539407f5a7b8d89e8ede"}, 0x20) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) socket$kcm(0x2, 0x3, 0x84) 2.499895912s ago: executing program 4 (id=3402): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x8901, &(0x7f0000000040)) sendmsg$inet(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000080)="90", 0x1}], 0x1}, 0x24004011) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.877497337s ago: executing program 0 (id=3403): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async, rerun: 64) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff2d, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000b05d25a806c8c6f94f90224fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) (async) close(r1) (async, rerun: 32) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x16e, 0x16e, 0x3, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x1}, @struct={0x3, 0x5, 0x0, 0x4, 0x0, 0x75, [{0x4, 0x0, 0x8}, {0xf, 0x1, 0x3}, {0x1, 0x4, 0x2116}, {0x8, 0x5, 0x7}, {0x6, 0x1, 0x1}]}, @var={0x7, 0x0, 0x0, 0xe, 0x3, 0x1}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x1, 0x0, 0xfffffff0}], "23de"}, @enum={0xe, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x5}, {0x3, 0x9}, {0xd, 0x8}, {0xf, 0xb}, {0x6, 0xc}, {0xe, 0x7}, {0x5, 0x80000000}]}, @float={0xa, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x6}, @union={0xc, 0x9, 0x0, 0x5, 0x1, 0x0, [{0x2, 0x4, 0x9}, {0xb, 0x3, 0x80}, {0x3, 0x4, 0x3b}, {0xb, 0x1, 0x5}, {0x1, 0x5, 0x80}, {0xe}, {0xb, 0x5, 0x148400}, {0x8, 0x1, 0x2}, {0x2, 0x10001}]}, @func={0xb, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5050ca24e38ab98a]}}, &(0x7f0000000ac0)=""/71, 0x18b, 0x47, 0x0, 0x8000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, r4}, 0x94) (async, rerun: 64) r5 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b23, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) write$cgroup_subtree(r6, &(0x7f0000000740)=ANY=[@ANYRESHEX=r5, @ANYBLOB="4128af980b5205d7930fe1d2f4971c9c4abfd59e6fecb993bf1f6031c8f30d2fe109a306b21abe5abb975cd47852e1ec214e9d74514aa8e64ee11e31102e7fe0baaabb42d968540be758d3bec96ca3e723652671e084616f63aecf918f90e985eac1c1fe57276afd53f1ae0e21a961565de5a2a7c7849835d55abb3032335bfe8eed141d47bc8a30398d50e1fe32210cee45d9036c5ad02cf96a89be3519a288b42526334833e67549d2c0e73480a78025392c24fc10"], 0xfe33) (async) socket$kcm(0xa, 0x3, 0x106) (async) socket$kcm(0xa, 0x3, 0x106) (async) r7 = socket$kcm(0x10, 0x2, 0x4) (async) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000004e23250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) (async, rerun: 64) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) (rerun: 64) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x10100) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)) 1.772532559s ago: executing program 4 (id=3404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (async) r2 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r4, r2, 0x0, 0x1, 0xfffffffffffffffe}, 0x17) (async) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000bc0)={0x0, 0x5, 0x20}, 0xc) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000340)={'batadv_slave_1\x00', 0x800}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xe, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000500000000000000090000000f1740000e00000009cf0104040001009500000000000000697dbd8fbc33dedbcdfeebcbc164758e03e2ab3924bd9de2a1642b3596dba66b0de29954270c4643a1952ea66f2feef5161398794b20f63ba3e8d0de92e98db88dd5668d7d25e6c55b31b92a52847c46568e81844b3f116a81d548760151daeb8ac53793fab33e0cd5ef68e085139c8909742a744476df4ea3c701e13bd28c3a"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1, r5, r6], 0x0, 0x10, 0xef}, 0x94) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x10, 0x0, 0x1300) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x14, &(0x7f0000000840)=@framed={{0xffffff85, 0x0, 0x0, 0x11, 0xff, 0x76}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000700)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x800}) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x20, 0xb, 0x9, 0xfffff008}, {0x6, 0x0, 0x0, 0xa}]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r9, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x800, 0x2, 0xfffff801, 0x2150, r9, 0x1, '\x00', r10, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) 1.770521249s ago: executing program 2 (id=3405): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000002369fe428a9b36211812"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x50) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x22, 0x2, 0xf0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000300), 0x4) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r1, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x229, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40b1, 0x0, 0x0, 0x1, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0xa, 0x7, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x42225bad}, 0x5004, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x26}, 0x28) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x340440c4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x2, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x80000, 0x1, 0x2000000c, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xb, 0xffffffffffffffff, 0xb) (async) recvmsg$unix(r6, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, &(0x7f0000000040)=r8, 0x4) (async) socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) 1.498538616s ago: executing program 2 (id=3406): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.489154176s ago: executing program 2 (id=3407): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, 0x0, 0x2d, 0x0, 0x1, 0x7fffffff}, 0x28) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xf}, 0x0, 0x3, 0x7fff, 0x6, 0x0, 0x10000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r4) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001801000020206925000000006300a8b57b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 67.282948ms ago: executing program 0 (id=3408): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x2000c0c0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x20, 0x10, &(0x7f0000000000)={0x0, 0x5}, 0xfffffffffffffd00}, 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x40, 0x20, 0x1, 0x0, 0xfffc, 0x8a412, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x4}, 0x10000a, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x40, 0x20, 0x1, 0x0, 0xfffc, 0x8a412, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x4}, 0x10000a, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000000)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000000)=r2, 0x4) 3.33743ms ago: executing program 2 (id=3409): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0xa, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0xa, 0x2, 0x3a) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x2a, 0x37b}, 0x10, 0x11a81, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe, 0xdc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x1}]}, {0x0, [0x30, 0x61, 0x2e]}}, 0x0, 0x29, 0x0, 0x1}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 2.92196ms ago: executing program 4 (id=3410): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20082, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x2, 0x2, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d", 0x15}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8922, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001100)={&(0x7f0000000f00)="792430b008799f0a7687478df6252a9683d044a843d0001bc06f0c1c59857ab553f959f26c1848e779b864f4d1c3d27a3c8a373f323383d33b105b1a270b86734f4fac6e0e773acc", &(0x7f0000000f80)=""/1, &(0x7f0000000fc0)="9d73db17836754edca4b9751e30131175ced4cb5bfaa6eee6f186929faa80685f5c7d73a104b8b0de265994fba577027cb78e32a23a439ac5ab05be5cbdc67b3cb97239a23e1efbddee2d441ebd5db6633b3e15567", &(0x7f0000001040)="b72b0e459f664bdea0c699790dec69c4504c80de5bc19e2d407a6fefef1ec9c37971c22374f4e35fac82727fb30fcf7a36650f4d4cbc9806fd49fa80a63297f08f0187e537729910a156b71510183bb267926af02b7999f562e36c303d3925aba6bb57581bbfec81ef74ebc78f92a2b292699ff079ca5d4cf84b29fed5ea75e7df049f7f0c4d64eb9537f4df1969721864017df25493362e445e443a3f96fc066d7b8170c2ed006b2845be736a766608", 0x6, 0x1, 0x4}, 0x38) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0x9}, 0x8) openat$cgroup_int(r3, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r3, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="2d6370751a"], 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080065e0050200000000002f77fbac141416e000030a44079f03b180006000000000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x26) 0s ago: executing program 1 (id=3411): r0 = gettid() r1 = perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x1, 0x9, 0x0, 0x40, 0x0, 0x7, 0x40800, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x4f4, 0x7}, 0x1000c, 0x3, 0x5, 0x5, 0x8, 0x7f, 0xca, 0x0, 0x2, 0x0, 0x10000}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x5, 0x4, 0x6, 0x0, 0x4, 0x12, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000000000), 0x4}, 0x10000, 0x401, 0x400, 0x5, 0xe400000000, 0x2, 0x7, 0x0, 0x4, 0x0, 0xfffffffffffffce6}, r0, 0xfffffffffffffffb, r1, 0x8) r3 = perf_event_open$cgroup(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x5, 0x3f, 0x9, 0x0, 0x7, 0x20000, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xfff, 0x7000000000}, 0x40, 0xf6, 0xb, 0x9, 0x4e9, 0x10000, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xf, r2, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000200)=r0, 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r5, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r0, r2, 0x0, 0x12, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00'}, 0x30) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x1e, &(0x7f0000000340)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffdd08}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xc, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0x0, 0x5, 0x8, 0x4, 0xfffffffffffffff0}, @tail_call], &(0x7f0000000440)='syzkaller\x00', 0xfffffff6, 0xe9, &(0x7f0000000480)=""/233, 0x41100, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x5, 0x3, 0x140000}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0xffffffffffffffff], &(0x7f0000000640)=[{0x1, 0x5, 0xe, 0xb}, {0x5, 0x4, 0x1, 0x7}, {0x4, 0x3, 0x9, 0x4}, {0x4, 0x4, 0x7, 0x8}], 0x10, 0xfff}, 0x94) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x1, 0x5, 0x6, 0x7, 0xfffffffffffffffc, 0x4}]}, &(0x7f0000000780)='GPL\x00', 0x2476, 0x4a, &(0x7f00000007c0)=""/74, 0x40f00, 0x10, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x7, 0x7, 0x4}, 0x10, 0x1d998, 0xffffffffffffffff, 0x9, &(0x7f00000008c0)=[0x1, r4, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000900)=[{0x0, 0x4, 0x2, 0x2}, {0x0, 0x3, 0x6, 0xd}, {0x3, 0x2, 0xc, 0xa}, {0x1, 0x2, 0x2, 0x5}, {0x3, 0x3, 0xf, 0x1}, {0x2, 0x2, 0xa, 0x8}, {0x4, 0x2, 0x0, 0x9}, {0x3, 0x2, 0xd, 0x6}, {0x5, 0x3, 0x1, 0x6}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@ifindex, 0x13, 0x0, 0x6, &(0x7f0000000a80)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x0}, 0x40) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000c00)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@fallback=r5, r6, 0xd, 0x2010, r7, @value=r9, @void, @void, @void, r8}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c40)={0x0, r6}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000c80)='^P:}\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x20, &(0x7f0000000ec0)={&(0x7f0000000cc0)=""/207, 0xcf, 0x0, &(0x7f0000000dc0)=""/205, 0xcd}}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x601, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000f80)={'veth1_vlan\x00', 0x4000}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000fc0)={0x3, 0x80, 0x0, 0x1, 0x7, 0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe, 0x1, @perf_config_ext={0xe, 0x9d05}, 0x200, 0x0, 0x0, 0x5, 0x5, 0x6, 0x6, 0x0, 0xaee3, 0x0, 0x2}) ioctl$TUNGETSNDBUF(r10, 0x800454d3, &(0x7f0000001040)) syz_clone(0x8410800, &(0x7f0000001080)="f9c5aecf676b7f0cb59e565bf47330529871d0092462fad6922cb156499669f2e127cbe6e1b8e9e767b5e6eb550b7b85695aab06a6467c1d4ef01fcd97cfe143458b61e5975f1de8b225f75c89328ee025824aba54c8828f0ac92cde50e378bb9d872d744945f1005493bacd16ab75a544a11a1a97f2adc7b26aed42378a77e9046f3ba601a1e4d0d5b34a4f7759e4b617b2b80e2e3682fed11d9155e1c3b2dffb5d0b1d475ed34d3c14fbbd27d4ef29be535d", 0xb3, &(0x7f0000001140), &(0x7f0000001180), &(0x7f00000011c0)="0e1f8a3916a715f396b890a24648a2a85155f7a60fd3f68408a78b80228bb37cf96ae466b557075470cfda9299aadf72b351b56efa2b3190046ee8ea86b6319544de282f72ffda2773eae6c84559da1b5df5732f8fce6b00e6100f5829215d5678446b880732f0fa4634d5028eeb046dec06e160422eede11332b9cb8efbcc37183d9a8f48d35c81f7be8c454694e488c2a32729581b6eb5d83df7a281a0ee5a01cc85a09a8936ccbef3101ea3f0e221d137cbd5bf67046fc9b371dd55eeb831a06fc8bff9bc") ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f00000012c0)=0x1) r11 = openat$cgroup_ro(r5, &(0x7f0000001300)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendmsg$kcm(r11, &(0x7f0000001a00)={&(0x7f0000001340)=@l2tp={0x2, 0x0, @remote, 0x2}, 0x80, &(0x7f0000001840)=[{&(0x7f00000013c0)="a4b0c440f6dd3fc8c134223c65261d74d3a36f374e599d508e741bcd3b7001f13ca551af778642651f1c0a60c9e33f3203e0eafae725e5c5d53f38dd24aff87f124688e5fa9347c4f7abfba59b42b6dcc15dc99d0337311dd31f587b2e0cb2ff4bcba11d4df0efdda2f6f2e56b821fdcaa1fe10ed96ae3c9213c398305307980845882e477029cd4df49d6991ae5b96029e31100756d1d6601bc2b9acf677a860d5e0e01aca4f857287a13cadccf3d8ffd34819dc7744e828d156c28", 0xbc}, {&(0x7f0000001480)="959a53963ed520e6865a1dcb7541dfc216527c9ec7b7129969bb844bbdbb7c08553cf9b2d891450dae81a9f6fcca304f8f3ee6bfab25771add9be7d091484e5c672c972f38f032c66e408bef5103593af5d73ca27208a9472d0bf8be9a266a95591ad4455407230ce8a005cd00835223b9006adcd3ad49a3d4bb01dfbd3fc5414a504b3ebd48243ae183fd132806e30356bad5b1aeab", 0x96}, {&(0x7f0000001540)="fd0e53109931fb477e08a66c46558d28c3e2f34f0037b33d7f6e565499465ad443584df93adb52f96f43c9c0818dbb99371b676b13099f626a0b0fb479bbe0c5035248b0c18dcfa0286e3ceb1cd2639196918b969ab67889df36806b5725e864e02fac04c4220413918b20850ab47b2fe3cf435a0a6d185061284e6276ee5d8116a2f128f6389d4f5b9811834f79b5c193139fb97393bafff8bd99a0329311934e1b322dc888245fade1d7a1cdf7afe5b35a4fd4001202cd448285e86990a28e2d3a4865ba6ea6104d22d6671a529734a8e7", 0xd2}, {&(0x7f0000001640)="1ac0f6abd57ed73cbe482cac0eefd9ccc8d6b5b0290049", 0x17}, {&(0x7f0000001680)="3bc1d48e91", 0x5}, {&(0x7f00000016c0)="8f35963a1cf0fb98af255f5b28c0e2a0a7067f16a78bebd07306204ab937b7a5ceeaed3ff4c5e3a51b9ddfb02ebf0128f0e3d11ecddadcac7af14eb817dd790e55d9593db1e6665291d870f88c1b0c89b1a8f2f00948c080d871fff7e4f3776991fdf10b40234ef036b0ee0dbaa24cb5c4558054ce5b47028a5ad21518", 0x7d}, {&(0x7f0000001740)="ae327399faf0ee7d9c6c1d53488b84ed9ca9e40cc66513c23dcaec3b0b0db098c6326d9986f06de0b77dbeae6f21ee1ac85e06bf46442beb3a0d62e50efd061721942f7e9e151b7a3cfb1f83a9ba97a89c21dac15b084f17fcabf9af8a457c84f88cebe98e79b3bb52b8f3a52c721f6ffcef5eae101c496dc9d5a20bb90a1b57159b6fd526c13f3ca1239165d7e0ede0aa2665ce2a4fb66ad93b14b05e82fad777e4a9f11e50d318dc6cc5bb7023cc10c0a230414718d1cb46216bdf3481e3bb295abfa4cc167eb1687cd10bf8dd1ec45ea0181785d62047d58eec98ff6f1e6243865aa09b11fa937ee6c5109115eebfe799a35e5195b176b419a43d0df156", 0xff}], 0x7, &(0x7f00000018c0)=[{0x108, 0x107, 0x52, "d9dd6ef1fc331b87ac87b5b8d48867522ae657a7b898868246d9c68f139dfc98dd50c1346f59b65954fe7648085449259a78f9ffde71166b2d8fcb6aba66aa31011aa8adb4b58952914b5d0c3e7a8d17d2e809c5703d374a66d12e9f9d21a6c2e2cce0919e6e38072f744f6658ad18bf2d1f67ba89fee0a32edcbce508cfd3412e7a05f67210a31d7025effb736665eae2bb252cac4d38bbf1449713847a6acc280a259abb100b70e807c1c4ddbbd38ae4c3bc9520077d0560fe77541044abfc58986b525b09c92b1cb9723c0b629d715aadf9f4db3407816ed06c35e91559e10fc669c29d012b87e26e999e317e4748babdaa"}, {0x20, 0x113, 0xf52, "1a466e065178afcac2300d949bc0"}], 0x128}, 0x4) write$cgroup_type(r11, &(0x7f0000001a40), 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a80)) r12 = perf_event_open$cgroup(&(0x7f0000001ac0)={0x1, 0x80, 0x8, 0x3, 0x9, 0x5, 0x0, 0x2, 0x808, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x9, 0xa}, 0x100000, 0x3, 0x80, 0x4, 0x2, 0x64325472, 0x8000, 0x0, 0x5, 0x0, 0x7}, r11, 0x4, r11, 0x7) ioctl$PERF_EVENT_IOC_DISABLE(r12, 0x2401, 0x9) kernel console output (not intermixed with test programs): EtherType is required. [ 373.901122][T12636] sock: sock_timestamping_bind_phc: sock not bind to device [ 374.044135][T12639] netlink: 'syz.0.1925': attribute type 2 has an invalid length. [ 374.127221][T12641] netlink: 'syz.1.1926': attribute type 39 has an invalid length. [ 374.232630][T12643] netlink: 'syz.3.1927': attribute type 21 has an invalid length. [ 374.244034][T12643] netlink: 'syz.3.1927': attribute type 7 has an invalid length. [ 374.389263][T12644] cgroup: fork rejected by pids controller in /syz0 [ 375.101383][T12782] __nla_validate_parse: 2 callbacks suppressed [ 375.101397][T12782] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1937'. [ 375.284858][T12791] netlink: 'syz.3.1941': attribute type 46 has an invalid length. [ 375.304112][T12793] netlink: 'syz.1.1940': attribute type 9 has an invalid length. [ 375.312427][T12791] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1941'. [ 375.317796][T12793] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1940'. [ 376.862154][T12813] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1947'. [ 376.904589][T12813] netlink: 'syz.3.1947': attribute type 3 has an invalid length. [ 376.934128][T12813] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1947'. [ 376.992659][T12813] netlink: 192 bytes leftover after parsing attributes in process `syz.3.1947'. [ 377.005751][T12817] netlink: 'syz.1.1948': attribute type 46 has an invalid length. [ 377.015555][T12818] netlink: 'syz.3.1947': attribute type 10 has an invalid length. [ 377.153881][T12821] netlink: 'syz.2.1949': attribute type 1 has an invalid length. [ 377.161867][T12821] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1949'. [ 377.235687][T12828] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1949'. [ 377.314556][T12831] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1952'. [ 378.475582][T12850] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 378.759984][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.766483][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.870300][T12854] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1961'. [ 379.201997][T12876] validate_nla: 2 callbacks suppressed [ 379.202014][T12876] netlink: 'syz.1.1969': attribute type 3 has an invalid length. [ 379.792137][T12891] netlink: 'syz.1.1973': attribute type 20 has an invalid length. [ 379.815063][T12891] netlink: 'syz.1.1973': attribute type 10 has an invalid length. [ 379.823381][T12891] netlink: 'syz.1.1973': attribute type 4 has an invalid length. [ 380.133920][T12893] netlink: 'syz.2.1974': attribute type 46 has an invalid length. [ 380.152337][T12893] __nla_validate_parse: 6 callbacks suppressed [ 380.152371][T12893] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1974'. [ 380.962065][T12921] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.1980'. [ 382.191824][T12943] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.1988'. [ 382.829987][T12963] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1993'. [ 382.863164][T11914] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.905534][T12963] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 382.926215][T12963] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 382.974899][T12966] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 383.035389][T11914] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.089269][T12966] netlink: 'syz.2.1993': attribute type 29 has an invalid length. [ 383.164533][T11914] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.251822][T11914] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.582892][T12971] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1994'. [ 383.667110][T12974] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1994'. [ 383.869465][T11914] ip6gretap0 (unregistering): left allmulticast mode [ 383.898693][T11914] ip6gretap0 (unregistering): left promiscuous mode [ 383.906732][T11914] Ÿë: port 1(ip6gretap0) entered disabled state [ 384.158518][T12990] netlink: 'syz.3.1997': attribute type 20 has an invalid length. [ 384.520749][T12990] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 384.546166][T12990] netlink: 'syz.3.1997': attribute type 4 has an invalid length. [ 384.565729][T12990] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1997'. [ 384.737109][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.755150][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.764010][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.772136][T13004] netlink: 'syz.2.2000': attribute type 9 has an invalid length. [ 384.798301][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.806858][T13004] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2000'. [ 384.827902][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 384.845155][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.421464][T13021] netlink: 'syz.3.2004': attribute type 3 has an invalid length. [ 385.429166][T13011] netlink: 'syz.2.2000': attribute type 9 has an invalid length. [ 385.449710][T13011] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2000'. [ 385.456042][T13021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2004'. [ 385.749850][T13033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2008'. [ 385.778998][T13033] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2008'. [ 386.152843][T13003] chnl_net:caif_netlink_parms(): no params data found [ 386.353893][T13003] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.386738][T13003] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.425330][T13003] bridge_slave_0: entered allmulticast mode [ 386.439096][T13003] bridge_slave_0: entered promiscuous mode [ 386.476888][T13003] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.484082][T13003] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.507645][T13003] bridge_slave_1: entered allmulticast mode [ 386.537558][T13003] bridge_slave_1: entered promiscuous mode [ 386.571468][T11914] hsr_slave_0: left promiscuous mode [ 386.586082][T11914] hsr_slave_1: left promiscuous mode [ 386.595524][T11914] bridge_slave_1: left allmulticast mode [ 386.626279][T11914] bridge_slave_1: left promiscuous mode [ 386.645730][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.676025][T11914] veth0_macvtap: left promiscuous mode [ 386.685194][T11914] veth1_vlan: left promiscuous mode [ 386.692372][T11914] veth0_vlan: left promiscuous mode [ 386.930478][ T5774] Bluetooth: hci3: command tx timeout [ 387.253774][T11914] team0 (unregistering): Port device team_slave_1 removed [ 387.292052][T11914] team0 (unregistering): Port device team_slave_0 removed [ 387.634796][T13061] netlink: 'syz.2.2011': attribute type 10 has an invalid length. [ 387.643251][T13061] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2011'. [ 387.652619][T13064] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 387.676740][T13073] netlink: 'syz.1.2014': attribute type 21 has an invalid length. [ 387.702506][T13073] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2014'. [ 387.742960][T13076] netlink: 'syz.2.2015': attribute type 4 has an invalid length. [ 387.768620][T13076] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2015'. [ 387.792379][T13003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.837070][T13003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.875347][T13080] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 387.895921][T13080] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2017'. [ 387.961471][T13003] team0: Port device team_slave_0 added [ 387.994604][T13003] team0: Port device team_slave_1 added [ 388.102254][T13003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.129182][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.206665][T13003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.237676][T13003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.244657][T13003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.315688][T13003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.576982][T13003] hsr_slave_0: entered promiscuous mode [ 388.612204][T13003] hsr_slave_1: entered promiscuous mode [ 388.921739][T13114] can: request_module (can-proto-0) failed. [ 389.013028][ T5774] Bluetooth: hci3: command tx timeout [ 389.092436][T13122] netlink: 'syz.1.2025': attribute type 2 has an invalid length. [ 389.110613][T13122] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2025'. [ 391.076719][ T5774] Bluetooth: hci3: command tx timeout [ 391.353807][T13149] netlink: 'syz.3.2032': attribute type 58 has an invalid length. [ 391.397060][T13149] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2032'. [ 391.541505][T13003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 391.556656][T13003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 391.577944][T13003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 391.607461][T13003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 391.756092][T13162] vcan0: entered allmulticast mode [ 391.827243][T13166] netlink: 'syz.3.2035': attribute type 10 has an invalid length. [ 391.851803][T13166] veth0_macvtap: left promiscuous mode [ 392.151793][T13170] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2037'. [ 392.226054][T13003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.255010][T13172] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2037'. [ 392.322921][T13003] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.420561][T11934] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.427791][T11934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.510824][T11934] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.518100][T11934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.663696][T13175] netlink: 'syz.3.2038': attribute type 27 has an invalid length. [ 393.132757][T13181] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 393.148029][T13181] bridge0: port 1(netdevsim0) entered disabled state [ 393.166513][ T5774] Bluetooth: hci3: command tx timeout [ 393.229709][T13185] netlink: 'syz.3.2041': attribute type 2 has an invalid length. [ 393.237966][T13185] netlink: 160744 bytes leftover after parsing attributes in process `syz.3.2041'. [ 393.671138][T13197] netlink: 'syz.1.2044': attribute type 1 has an invalid length. [ 393.700803][T13197] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.2044'. [ 393.816005][T13003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.845802][T13206] netlink: 'syz.2.2045': attribute type 10 has an invalid length. [ 393.904397][T13202] netlink: 'syz.2.2045': attribute type 10 has an invalid length. [ 393.976912][T13003] veth0_vlan: entered promiscuous mode [ 394.008443][T13003] veth1_vlan: entered promiscuous mode [ 394.081277][T13003] veth0_macvtap: entered promiscuous mode [ 394.121225][T13003] veth1_macvtap: entered promiscuous mode [ 394.202089][T13003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.241045][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.288163][T13003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.336720][T13003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.376628][T13003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.417909][T13003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.439898][T13003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.467264][T13003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.476009][T13003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.495528][T13003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.354876][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.377107][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.469665][T11924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.506476][T11924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.635810][T13277] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2056'. [ 395.723399][T13293] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1996'. [ 395.749341][T13293] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 396.976212][T13324] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 396.994375][T13324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2063'. [ 397.016609][T13324] netlink: 'syz.0.2063': attribute type 10 has an invalid length. [ 397.024466][T13324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2063'. [ 397.185175][T13341] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2067'. [ 397.273101][T13341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.301034][T13341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.325390][T13341] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 397.347133][T13341] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 397.368670][T13341] bond0 (unregistering): Released all slaves [ 397.389833][T13348] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 397.398564][T13348] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 398.481087][ T5774] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 398.485254][T13400] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2079'. [ 398.746567][T13405] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2081'. [ 398.953545][T13418] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2086'. [ 399.042404][T13424] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2086'. [ 399.167217][T13422] netlink: 'syz.0.2084': attribute type 10 has an invalid length. [ 399.175236][T13422] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2084'. [ 399.289932][T13435] syzkaller0: entered promiscuous mode [ 399.295590][T13435] syzkaller0: entered allmulticast mode [ 401.534607][T13467] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.2097'. [ 401.545425][T13467] tc_dump_action: action bad kind [ 401.841050][T13484] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2103'. [ 401.917778][T13488] sctp: [Deprecated]: syz.2.2104 (pid 13488) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.917778][T13488] Use struct sctp_sack_info instead [ 401.994915][T13493] tap0: tun_chr_ioctl cmd 1074025677 [ 402.006901][T13493] tap0: linktype set to 778 [ 402.052478][T13495] __nla_validate_parse: 1 callbacks suppressed [ 402.052495][T13495] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2105'. [ 402.179105][T13490] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2105'. [ 402.413721][T13500] netlink: 'syz.2.2107': attribute type 3 has an invalid length. [ 402.436601][T13500] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 402.478098][T13500] netlink: 'syz.2.2107': attribute type 1 has an invalid length. [ 402.540568][T13500] netlink: 'syz.2.2107': attribute type 2 has an invalid length. [ 402.580991][T13500] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.2107'. [ 402.994137][T13513] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2114'. [ 403.009877][T13517] netlink: 'syz.2.2115': attribute type 27 has an invalid length. [ 403.077641][T13515] syzkaller0: entered promiscuous mode [ 403.087298][T13515] syzkaller0: entered allmulticast mode [ 403.113522][T13521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2116'. [ 403.273851][T13526] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2117'. [ 404.608444][T13531] netlink: 'syz.3.2119': attribute type 10 has an invalid length. [ 404.745496][T13534] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2120'. [ 404.819685][T13541] netlink: 'syz.1.2123': attribute type 10 has an invalid length. [ 404.846719][T13541] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2123'. [ 404.855851][T13541] bond0: entered promiscuous mode [ 404.861543][T13541] : entered promiscuous mode [ 404.901895][T13541] bond_slave_1: entered promiscuous mode [ 404.987398][T13541] bridge_slave_1: entered promiscuous mode [ 404.993715][T13541] bridge0: port 4(bond0) entered blocking state [ 405.072180][T13541] bridge0: port 4(bond0) entered disabled state [ 405.111328][T13541] bond0: entered allmulticast mode [ 405.144347][T13541] : entered allmulticast mode [ 405.163099][T13541] bond_slave_1: entered allmulticast mode [ 405.206532][T13541] bridge_slave_1: entered allmulticast mode [ 405.255958][T13541] bridge0: port 4(bond0) entered blocking state [ 405.262404][T13541] bridge0: port 4(bond0) entered forwarding state [ 405.349720][T13548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.357020][T13548] IPv6: NLM_F_CREATE should be set when creating new route [ 405.364334][T13548] IPv6: NLM_F_CREATE should be set when creating new route [ 405.371620][T13548] IPv6: NLM_F_CREATE should be set when creating new route [ 405.435074][T13545] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2122'. [ 405.466615][T13546] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2122'. [ 405.574110][T13548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.721539][T13554] netlink: 'syz.1.2125': attribute type 10 has an invalid length. [ 406.182539][T13561] netlink: 'syz.2.2127': attribute type 10 has an invalid length. [ 406.544348][T13575] pim6reg1: entered allmulticast mode [ 406.718714][T13588] delete_channel: no stack [ 406.731223][T13588] delete_channel: no stack [ 406.757745][T13588] netlink: 'syz.0.2136': attribute type 1 has an invalid length. [ 408.236534][T13638] __nla_validate_parse: 4 callbacks suppressed [ 408.236550][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2148'. [ 408.574517][T13650] netlink: 'syz.2.2151': attribute type 9 has an invalid length. [ 408.617714][T13650] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2151'. [ 408.780722][T13657] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2154'. [ 408.788234][T13655] netlink: 'syz.2.2151': attribute type 9 has an invalid length. [ 408.826662][T13655] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2151'. [ 408.993215][T13656] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.2154'. [ 409.754424][T13687] netlink: 'syz.2.2163': attribute type 21 has an invalid length. [ 409.781345][T13687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2163'. [ 409.795499][T13687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2163'. [ 409.806177][T13686] netlink: 'syz.0.2164': attribute type 39 has an invalid length. [ 410.301408][T13701] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2168'. [ 410.316627][T13701] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2168'. [ 410.335242][T13701] bond0: (slave bond_slave_0): Releasing backup interface [ 410.371314][T13701] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 410.373202][T13705] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 410.404472][T13705] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 410.415149][T13703] netlink: 'syz.1.2169': attribute type 13 has an invalid length. [ 410.424164][T13703] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2169'. [ 410.442842][T13703] syz_tun: refused to change device tx_queue_len [ 410.449574][T13703] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 410.465690][T13705] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 410.481986][T13705] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 410.490299][T13705] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 410.613820][T13709] delete_channel: no stack [ 410.881578][T13726] syz.3.2175[13726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 410.882302][T13726] syz.3.2175[13726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 413.354890][T13777] IPv6: Can't replace route, no match found [ 415.264652][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.275594][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.284178][T13831] __nla_validate_parse: 5 callbacks suppressed [ 415.284190][T13831] netlink: 7295 bytes leftover after parsing attributes in process `syz.1.2208'. [ 415.284249][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.338880][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.349300][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 415.358703][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 415.493826][T11920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.606054][T11920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.648071][T13843] validate_nla: 4 callbacks suppressed [ 415.648141][T13843] netlink: 'syz.3.2211': attribute type 21 has an invalid length. [ 415.669785][T13843] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2211'. [ 415.735430][T11920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.766075][T13844] sit0: left promiscuous mode [ 415.959699][T11920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.000139][T13845] sit0: entered promiscuous mode [ 416.518528][T13832] chnl_net:caif_netlink_parms(): no params data found [ 417.178633][T13832] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.186677][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.236184][T13832] bridge_slave_0: entered allmulticast mode [ 417.275136][T13832] bridge_slave_0: entered promiscuous mode [ 417.299437][T13832] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.320280][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.337018][T13832] bridge_slave_1: entered allmulticast mode [ 417.345054][T13832] bridge_slave_1: entered promiscuous mode [ 417.396664][ T5774] Bluetooth: hci4: command tx timeout [ 417.651905][T13832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.739077][T13832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.758719][T13897] netlink: 'syz.0.2221': attribute type 17 has an invalid length. [ 417.776978][T13897] netlink: 'syz.0.2221': attribute type 16 has an invalid length. [ 417.795285][T13897] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2221'. [ 418.026150][T13901] netlink: 'syz.3.2222': attribute type 5 has an invalid length. [ 418.036685][T13901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2222'. [ 418.139280][T13832] team0: Port device team_slave_0 added [ 418.166823][T13906] netlink: 'syz.3.2222': attribute type 39 has an invalid length. [ 418.239652][T13832] team0: Port device team_slave_1 added [ 418.264088][T13918] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2225'. [ 418.284474][T13918] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 418.303496][T13918] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 419.128036][T13832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.135043][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.166144][T13832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.282104][T13832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.290010][T13832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.321157][T13832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.448386][T13832] hsr_slave_0: entered promiscuous mode [ 419.466881][T13832] hsr_slave_1: entered promiscuous mode [ 419.476841][ T5774] Bluetooth: hci4: command tx timeout [ 419.489029][T13832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 419.512017][T13832] Cannot create hsr debugfs directory [ 419.622925][T13950] netlink: 'syz.3.2229': attribute type 13 has an invalid length. [ 419.635494][T13950] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2229'. [ 420.457186][T13981] sctp: [Deprecated]: syz.3.2233 (pid 13981) Use of int in maxseg socket option. [ 420.457186][T13981] Use struct sctp_assoc_value instead [ 421.439632][T13990] netlink: 'syz.3.2237': attribute type 29 has an invalid length. [ 421.458503][T13989] netlink: 822 bytes leftover after parsing attributes in process `syz.3.2237'. [ 421.556913][ T5774] Bluetooth: hci4: command tx timeout [ 421.710776][T13990] netlink: 'syz.3.2237': attribute type 29 has an invalid length. [ 423.217664][T11920] hsr_slave_0: left promiscuous mode [ 423.223991][T11920] hsr_slave_1: left promiscuous mode [ 423.241252][T11920] veth1_macvtap: left promiscuous mode [ 423.251111][T11920] veth0_macvtap: left promiscuous mode [ 423.636496][ T5774] Bluetooth: hci4: command tx timeout [ 423.953021][T14010] netlink: 'syz.3.2241': attribute type 21 has an invalid length. [ 424.074241][T13832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.139769][T13832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.155990][T14018] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2243'. [ 424.186884][T13832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.217961][T13832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.511445][T13832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.567447][T13832] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.583458][T14031] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2248'. [ 424.603260][T11924] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.610470][T11924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.639538][T14031] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 424.659155][T14031] CPU: 1 PID: 14031 Comm: syz.1.2248 Not tainted syzkaller #0 [ 424.666665][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.676726][T14031] Call Trace: [ 424.680008][T14031] [ 424.682944][T14031] dump_stack_lvl+0x18c/0x250 [ 424.687634][T14031] ? show_regs_print_info+0x20/0x20 [ 424.692839][T14031] ? load_image+0x420/0x420 [ 424.697366][T14031] sysfs_warn_dup+0x8e/0xa0 [ 424.701872][T14031] sysfs_do_create_link_sd+0xc0/0x110 [ 424.707256][T14031] device_add_class_symlinks+0x1cf/0x240 [ 424.712897][T14031] device_add+0x4f9/0xc40 [ 424.717234][T14031] wiphy_register+0x1d99/0x2ac0 [ 424.722120][T14031] ? cfg80211_event_work+0x40/0x40 [ 424.727233][T14031] ? minstrel_ht_alloc+0x88a/0x990 [ 424.732365][T14031] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 424.738440][T14031] ieee80211_register_hw+0x2dd8/0x3b30 [ 424.743917][T14031] ? ieee80211_register_hw+0xfb1/0x3b30 [ 424.749476][T14031] ? ieee80211_tasklet_handler+0x20/0x20 [ 424.755106][T14031] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 424.761014][T14031] ? __debug_object_init+0xec/0x450 [ 424.766220][T14031] ? __asan_memset+0x22/0x40 [ 424.770846][T14031] ? __hrtimer_init+0x189/0x270 [ 424.775714][T14031] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 424.781466][T14031] ? mac80211_hwsim_free+0x220/0x220 [ 424.786772][T14031] ? rcu_is_watching+0x15/0xb0 [ 424.791539][T14031] ? kstrndup+0xbd/0x140 [ 424.795800][T14031] hwsim_new_radio_nl+0xdad/0x1a70 [ 424.800918][T14031] ? __nla_validate+0x50/0x50 [ 424.805616][T14031] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 424.811964][T14031] ? __nla_parse+0x40/0x50 [ 424.816400][T14031] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 424.822748][T14031] genl_family_rcv_msg_doit+0x21a/0x310 [ 424.828303][T14031] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 424.834210][T14031] ? bpf_lsm_capable+0x9/0x10 [ 424.838897][T14031] ? security_capable+0x89/0xb0 [ 424.843766][T14031] genl_rcv_msg+0x611/0x7a0 [ 424.848282][T14031] ? genl_bind+0x360/0x360 [ 424.852700][T14031] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 424.859032][T14031] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 424.865616][T14031] ? ref_tracker_free+0x686/0x830 [ 424.870663][T14031] netlink_rcv_skb+0x235/0x4c0 [ 424.875431][T14031] ? genl_bind+0x360/0x360 [ 424.879851][T14031] ? netlink_ack+0x1160/0x1160 [ 424.884632][T14031] ? __lock_acquire+0x7d80/0x7d80 [ 424.889678][T14031] ? down_read+0x1ac/0x2e0 [ 424.894103][T14031] genl_rcv+0x28/0x40 [ 424.898083][T14031] netlink_unicast+0x7b1/0x930 [ 424.902871][T14031] netlink_sendmsg+0x8d0/0xbf0 [ 424.907652][T14031] ? netlink_getsockopt+0x590/0x590 [ 424.912854][T14031] ? apparmor_socket_sendmsg+0x8e/0x330 [ 424.918404][T14031] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.923692][T14031] ? security_socket_sendmsg+0x80/0xa0 [ 424.929151][T14031] ? netlink_getsockopt+0x590/0x590 [ 424.934354][T14031] ____sys_sendmsg+0x61b/0x980 [ 424.939130][T14031] ? __asan_memset+0x22/0x40 [ 424.943725][T14031] ? __sys_sendmsg_sock+0x30/0x30 [ 424.948745][T14031] ? __import_iovec+0x5f2/0x850 [ 424.953616][T14031] ? import_iovec+0x73/0xa0 [ 424.958135][T14031] ___sys_sendmsg+0x2a6/0x360 [ 424.962825][T14031] ? __sys_sendmsg+0x2b0/0x2b0 [ 424.967665][T14031] __se_sys_sendmsg+0x1d0/0x2c0 [ 424.972523][T14031] ? __x64_sys_sendmsg+0x80/0x80 [ 424.977485][T14031] ? lockdep_hardirqs_on+0x98/0x150 [ 424.982694][T14031] do_syscall_64+0x55/0xb0 [ 424.987109][T14031] ? clear_bhb_loop+0x40/0x90 [ 424.991784][T14031] ? clear_bhb_loop+0x40/0x90 [ 424.996471][T14031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.002369][T14031] RIP: 0033:0x7f0b58d9e0d9 [ 425.006786][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.026401][T14031] RSP: 002b:00007f0b59c69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.034829][T14031] RAX: ffffffffffffffda RBX: 00007f0b59025fa0 RCX: 00007f0b58d9e0d9 [ 425.042798][T14031] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 425.050767][T14031] RBP: 00007f0b58e35024 R08: 0000000000000000 R09: 0000000000000000 [ 425.058736][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.066707][T14031] R13: 00007f0b59026038 R14: 00007f0b59025fa0 R15: 00007ffc209a4d98 [ 425.074702][T14031] [ 425.136062][T11924] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.143286][T11924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.197740][T14035] netlink: 'syz.1.2248': attribute type 33 has an invalid length. [ 425.216540][T14035] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2248'. [ 425.660722][T13832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.751448][T14063] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2253'. [ 425.777772][T13832] veth0_vlan: entered promiscuous mode [ 425.783581][T14063] openvswitch: netlink: Duplicate key (type 0). [ 425.801558][T13832] veth1_vlan: entered promiscuous mode [ 425.881632][T13832] veth0_macvtap: entered promiscuous mode [ 425.914245][T13832] veth1_macvtap: entered promiscuous mode [ 425.961877][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.977528][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.017617][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 426.028266][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.041421][T13832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.059384][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.085408][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.096219][T13832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.110541][T13832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.130345][T13832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.145044][T13832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.164368][T13832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.190470][T13832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.213388][T13832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.430425][T11934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.440885][T11934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.480515][T14079] bond0: left allmulticast mode [ 426.485592][T14079] : left allmulticast mode [ 426.491460][T14079] bond_slave_1: left allmulticast mode [ 426.506724][T14079] bridge_slave_1: left allmulticast mode [ 426.520663][T14079] bridge0: port 4(bond0) entered disabled state [ 426.540379][T14079] bridge0: port 3(dummy0) entered disabled state [ 426.555588][T14079] bridge0: port 2(team0) entered disabled state [ 426.581681][T14079] bridge_slave_0: left allmulticast mode [ 426.618007][T14079] bridge_slave_0: left promiscuous mode [ 426.626207][T14079] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.832868][T11932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.853980][T11932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.109190][T14106] netlink: 'syz.2.2205': attribute type 2 has an invalid length. [ 427.128142][T14106] netlink: 'syz.2.2205': attribute type 10 has an invalid length. [ 427.167787][T14106] team0: Device nlmon0 is of different type [ 427.352815][T14113] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2260'. [ 427.915764][T14143] netlink: 'syz.0.2266': attribute type 21 has an invalid length. [ 427.956668][T14143] netlink: 'syz.0.2266': attribute type 4 has an invalid length. [ 429.200417][T14193] netlink: 'syz.0.2275': attribute type 10 has an invalid length. [ 430.662687][T14193] team0: Device wg1 is of different type [ 431.013033][T14224] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2280'. [ 431.041155][T14223] netlink: 'syz.2.2280': attribute type 2 has an invalid length. [ 431.041814][T14224] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 431.577138][T14256] netlink: 'syz.2.2289': attribute type 17 has an invalid length. [ 434.422444][T14303] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2301'. [ 434.448598][T14303] netlink: zone id is out of range [ 434.453935][T14303] netlink: zone id is out of range [ 434.479148][T14303] netlink: zone id is out of range [ 434.494888][T14303] netlink: zone id is out of range [ 434.506324][T14303] netlink: zone id is out of range [ 434.513815][T14303] netlink: zone id is out of range [ 434.526656][T14303] netlink: zone id is out of range [ 434.551354][T14309] netlink: 'syz.1.2303': attribute type 9 has an invalid length. [ 434.569409][T14303] netlink: zone id is out of range [ 434.575278][T14303] netlink: zone id is out of range [ 434.591306][T14309] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2303'. [ 434.821345][T14317] netlink: 'syz.0.2304': attribute type 21 has an invalid length. [ 434.938612][T14317] syzkaller0: entered promiscuous mode [ 434.944150][T14317] syzkaller0: entered allmulticast mode [ 436.013363][T14357] netlink: 'syz.2.2317': attribute type 10 has an invalid length. [ 436.025326][T14361] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2319'. [ 436.121353][T14368] netlink: 'syz.1.2320': attribute type 29 has an invalid length. [ 436.177733][T14357] team0: Port device wlan1 added [ 436.239015][T14368] netlink: 'syz.1.2320': attribute type 29 has an invalid length. [ 436.261775][T14356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.291258][T14369] netlink: 'syz.1.2320': attribute type 29 has an invalid length. [ 436.303092][T14368] netlink: 'syz.1.2320': attribute type 10 has an invalid length. [ 436.316267][T14365] netlink: 'syz.1.2320': attribute type 29 has an invalid length. [ 436.347077][T14368] netlink: 'syz.1.2320': attribute type 29 has an invalid length. [ 436.378717][T14365] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2320'. [ 436.504701][T14371] netlink: 'syz.0.2322': attribute type 6 has an invalid length. [ 436.543014][T14371] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2322'. [ 436.879117][T14387] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2326'. [ 436.902908][T14379] netlink: 212824 bytes leftover after parsing attributes in process `syz.1.2325'. [ 440.236888][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.243284][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.489707][T14418] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2334'. [ 442.812006][T14469] validate_nla: 2 callbacks suppressed [ 442.812042][T14469] netlink: 'syz.0.2346': attribute type 29 has an invalid length. [ 442.912066][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 445.443666][T14472] ªªªªª»: renamed from hsr0 (while UP) [ 445.450656][T14469] netlink: 'syz.0.2346': attribute type 29 has an invalid length. [ 445.458673][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2346'. [ 445.467887][T14474] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 445.484656][T14475] netlink: 'syz.1.2347': attribute type 3 has an invalid length. [ 445.506690][T14475] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2347'. [ 445.671424][T14492] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2350'. [ 446.020350][T14516] netlink: 'syz.2.2358': attribute type 21 has an invalid length. [ 446.028817][T14516] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2358'. [ 446.855667][T14540] netlink: 'syz.0.2362': attribute type 21 has an invalid length. [ 446.888189][T14540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2362'. [ 447.253592][T14546] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2365'. [ 447.650685][T14569] netlink: 'syz.2.2371': attribute type 9 has an invalid length. [ 447.664272][T14569] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2371'. [ 447.892841][T14581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2376'. [ 448.040530][T11924] wlan1: Trigger new scan to find an IBSS to join [ 448.353208][T14603] syzkaller0: entered promiscuous mode [ 448.382279][T14603] syzkaller0: entered allmulticast mode [ 448.410036][T14605] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2381'. [ 449.030490][T14613] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 449.054510][T14613] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2385'. [ 451.231157][T14640] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2392'. [ 451.260629][ T5774] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 451.271162][ T5774] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 451.279276][ T5774] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 451.289487][ T5774] CPU: 1 PID: 5774 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 451.297061][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.307133][ T5774] Workqueue: hci1 hci_rx_work [ 451.311934][ T5774] Call Trace: [ 451.315207][ T5774] [ 451.318135][ T5774] dump_stack_lvl+0x18c/0x250 [ 451.322816][ T5774] ? show_regs_print_info+0x20/0x20 [ 451.328026][ T5774] ? load_image+0x420/0x420 [ 451.332556][ T5774] sysfs_create_dir_ns+0x26e/0x2a0 [ 451.337672][ T5774] ? __lock_acquire+0x7d80/0x7d80 [ 451.342700][ T5774] ? sysfs_warn_dup+0xa0/0xa0 [ 451.347386][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 451.352594][ T5774] kobject_add_internal+0x617/0xc90 [ 451.357835][ T5774] kobject_add+0x164/0x240 [ 451.362264][ T5774] ? kobject_init+0x1d0/0x1d0 [ 451.366948][ T5774] ? get_device_parent+0x366/0x390 [ 451.372062][ T5774] device_add+0x3fa/0xc40 [ 451.376392][ T5774] hci_conn_add_sysfs+0xd5/0x1e0 [ 451.381450][ T5774] le_conn_complete_evt+0xe9f/0x1480 [ 451.386740][ T5774] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 451.392976][ T5774] ? bt_info+0x180/0x180 [ 451.397213][ T5774] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 451.402847][ T5774] ? mutex_unlock+0x10/0x10 [ 451.407352][ T5774] ? skb_pull_data+0xf0/0x1f0 [ 451.412059][ T5774] hci_le_conn_complete_evt+0x187/0x440 [ 451.417621][ T5774] ? hci_remote_host_features_evt+0x150/0x150 [ 451.423698][ T5774] hci_event_packet+0x7b4/0x1280 [ 451.428652][ T5774] ? __lock_acquire+0x7d80/0x7d80 [ 451.433688][ T5774] ? lock_chain_count+0x20/0x20 [ 451.438539][ T5774] ? bis_list+0x290/0x290 [ 451.442874][ T5774] ? lockdep_hardirqs_on+0x98/0x150 [ 451.448085][ T5774] ? hci_send_to_monitor+0xd7/0x4f0 [ 451.453287][ T5774] hci_rx_work+0x43a/0xd60 [ 451.457709][ T5774] ? process_scheduled_works+0x975/0x1600 [ 451.463472][ T5774] process_scheduled_works+0xa60/0x1600 [ 451.469047][ T5774] ? worker_attach_to_pool+0x370/0x370 [ 451.474511][ T5774] ? assign_work+0x3cc/0x5d0 [ 451.479106][ T5774] worker_thread+0xa5e/0xfe0 [ 451.483737][ T5774] ? _raw_spin_unlock+0x40/0x40 [ 451.488589][ T5774] ? __kthread_parkme+0x71/0x1c0 [ 451.493528][ T5774] kthread+0x2fa/0x390 [ 451.497592][ T5774] ? pr_cont_work+0x550/0x550 [ 451.502269][ T5774] ? kthread_blkcg+0xd0/0xd0 [ 451.506853][ T5774] ret_from_fork+0x48/0x80 [ 451.511301][ T5774] ? kthread_blkcg+0xd0/0xd0 [ 451.515883][ T5774] ret_from_fork_asm+0x11/0x20 [ 451.520673][ T5774] [ 451.525404][ T5774] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 451.540575][ T5774] Bluetooth: hci1: failed to register connection device [ 452.269392][T14609] netlink: 'syz.3.2384': attribute type 10 has an invalid length. [ 452.407760][T14659] netlink: 212940 bytes leftover after parsing attributes in process `syz.0.2397'. [ 452.999733][T11916] wlan1: Trigger new scan to find an IBSS to join [ 453.556603][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 453.762222][T14689] netlink: 'syz.2.2404': attribute type 1 has an invalid length. [ 453.791497][T14688] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2405'. [ 453.823959][T14689] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2404'. [ 453.993640][ T59] wlan1: Creating new IBSS network, BSSID ae:fb:a7:9d:c6:96 [ 454.253317][T14697] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2408'. [ 454.274186][T14704] syz.0.2409[14704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.274407][T14704] syz.0.2409[14704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 454.304061][T14697] net_ratelimit: 26 callbacks suppressed [ 454.304077][T14697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.560029][T14716] netlink: 'syz.2.2413': attribute type 1 has an invalid length. [ 455.191522][T14740] netlink: 'syz.0.2419': attribute type 10 has an invalid length. [ 455.250620][T14740] mac80211_hwsim hwsim26 wlan1: left promiscuous mode [ 455.270944][T14740] mac80211_hwsim hwsim26 wlan1: left allmulticast mode [ 455.501307][T14740] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 455.576511][T14742] netlink: 'syz.0.2419': attribute type 10 has an invalid length. [ 455.636599][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 455.768593][T14755] netlink: 'syz.1.2424': attribute type 10 has an invalid length. [ 455.787432][T14755] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2424'. [ 455.911766][T14748] netlink: 'syz.2.2420': attribute type 1 has an invalid length. [ 455.992212][T14748] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2420'. [ 456.255636][T14766] team_slave_0: left promiscuous mode [ 456.261721][T14766] team_slave_0: left allmulticast mode [ 456.290132][T14766] team0: Port device team_slave_0 removed [ 456.547379][T14773] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2430'. [ 456.584261][T14773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 457.331098][T14803] netlink: 'syz.1.2437': attribute type 153 has an invalid length. [ 457.351392][T14803] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2437'. [ 457.631955][T14793] syzkaller0: entered promiscuous mode [ 457.646157][T14793] syzkaller0: entered allmulticast mode [ 457.668822][T14795] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2438'. [ 457.697315][T14795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 458.317976][T14822] netlink: 'syz.0.2443': attribute type 3 has an invalid length. [ 458.385211][T14827] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2444'. [ 458.395563][T14822] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2443'. [ 458.507759][T14839] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2446'. [ 458.636507][T14839] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2446'. [ 459.329856][T14861] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2453'. [ 459.520848][T14846] syzkaller0: entered promiscuous mode [ 459.552781][T14846] syzkaller0: entered allmulticast mode [ 459.734992][T14866] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2455'. [ 459.751657][T14864] netlink: 'syz.0.2454': attribute type 39 has an invalid length. [ 460.910094][T14893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2464'. [ 461.517085][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.526480][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.534497][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.543201][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.553806][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 461.561654][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 462.246264][T14897] syzkaller0: entered promiscuous mode [ 462.270045][T14897] syzkaller0: entered allmulticast mode [ 463.649400][ T5778] Bluetooth: hci0: command tx timeout [ 465.717045][ T5778] Bluetooth: hci0: command tx timeout [ 467.797425][ T5778] Bluetooth: hci0: command tx timeout [ 469.386611][T14960] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2479'. [ 469.534635][T11930] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.571647][T14971] syz.1.2485: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 469.636754][T14971] CPU: 1 PID: 14971 Comm: syz.1.2485 Not tainted syzkaller #0 [ 469.644281][T14971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 469.654362][T14971] Call Trace: [ 469.657665][T14971] [ 469.660619][T14971] dump_stack_lvl+0x18c/0x250 [ 469.665334][T14971] ? show_regs_print_info+0x20/0x20 [ 469.670566][T14971] ? load_image+0x420/0x420 [ 469.675111][T14971] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 469.681600][T14971] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 469.688139][T14971] warn_alloc+0x246/0x340 [ 469.692490][T14971] ? stack_trace_save+0xaa/0x100 [ 469.697463][T14971] ? zone_watermark_ok_safe+0x230/0x230 [ 469.703052][T14971] ? kasan_set_track+0x5f/0x70 [ 469.707843][T14971] ? kasan_set_track+0x4e/0x70 [ 469.712627][T14971] ? __kasan_kmalloc+0x8f/0xa0 [ 469.717419][T14971] ? xsk_init_queue+0xad/0x100 [ 469.722321][T14971] ? xsk_setsockopt+0x4c9/0x750 [ 469.727205][T14971] ? do_sock_setsockopt+0x175/0x1a0 [ 469.732428][T14971] ? __x64_sys_setsockopt+0x182/0x200 [ 469.737840][T14971] __vmalloc_node_range+0x129/0x1320 [ 469.743189][T14971] ? free_vm_area+0x50/0x50 [ 469.747732][T14971] vmalloc_user+0x74/0x80 [ 469.752089][T14971] ? xskq_create+0xbf/0x170 [ 469.756607][T14971] xskq_create+0xbf/0x170 [ 469.760953][T14971] xsk_init_queue+0xad/0x100 [ 469.765567][T14971] xsk_setsockopt+0x4c9/0x750 [ 469.770272][T14971] ? xsk_poll+0x670/0x670 [ 469.774626][T14971] ? __fget_files+0x28/0x460 [ 469.779265][T14971] ? aa_sock_opt_perm+0x74/0x100 [ 469.784226][T14971] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 469.789792][T14971] ? security_socket_setsockopt+0x7e/0xa0 [ 469.795526][T14971] ? xsk_poll+0x670/0x670 [ 469.799878][T14971] do_sock_setsockopt+0x175/0x1a0 [ 469.804918][T14971] ? __fdget+0x180/0x210 [ 469.809184][T14971] __x64_sys_setsockopt+0x182/0x200 [ 469.814406][T14971] do_syscall_64+0x55/0xb0 [ 469.818839][T14971] ? clear_bhb_loop+0x40/0x90 [ 469.823529][T14971] ? clear_bhb_loop+0x40/0x90 [ 469.828224][T14971] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.834129][T14971] RIP: 0033:0x7f0b58d9e0d9 [ 469.838553][T14971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.858173][T14971] RSP: 002b:00007f0b59c69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 469.866606][T14971] RAX: ffffffffffffffda RBX: 00007f0b59025fa0 RCX: 00007f0b58d9e0d9 [ 469.874590][T14971] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 469.882575][T14971] RBP: 00007f0b58e35024 R08: 0000000000000004 R09: 0000000000000000 [ 469.890568][T14971] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 469.898555][T14971] R13: 00007f0b59026038 R14: 00007f0b59025fa0 R15: 00007ffc209a4d98 [ 469.906565][T14971] [ 469.916859][ T5778] Bluetooth: hci0: command tx timeout [ 469.928883][T14971] Mem-Info: [ 469.932161][T14971] active_anon:24865 inactive_anon:0 isolated_anon:0 [ 469.932161][T14971] active_file:18708 inactive_file:40109 isolated_file:0 [ 469.932161][T14971] unevictable:768 dirty:76 writeback:0 [ 469.932161][T14971] slab_reclaimable:10839 slab_unreclaimable:95891 [ 469.932161][T14971] mapped:24271 shmem:16374 pagetables:511 [ 469.932161][T14971] sec_pagetables:0 bounce:0 [ 469.932161][T14971] kernel_misc_reclaimable:0 [ 469.932161][T14971] free:1324509 free_pcp:8544 free_cma:0 [ 470.015994][T14971] Node 0 active_anon:95860kB inactive_anon:0kB active_file:74832kB inactive_file:160236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97084kB dirty:304kB writeback:0kB shmem:60260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11480kB pagetables:2044kB sec_pagetables:0kB all_unreclaimable? no [ 470.019914][T11930] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.076506][T14971] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 470.107457][T14971] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 470.143377][T14971] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 470.149640][T14971] Node 0 DMA32 free:1390900kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:93300kB inactive_anon:0kB active_file:74832kB inactive_file:159420kB unevictable:1536kB writepending:384kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:23996kB local_pcp:10092kB free_cma:0kB [ 470.186325][T14971] lowmem_reserve[]: 0 0 0 0 0 [ 470.235577][T14971] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 470.396472][T14971] lowmem_reserve[]: 0 0 0 0 0 [ 470.404574][T14971] Node 1 Normal free:3891536kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17056kB local_pcp:7168kB free_cma:0kB [ 470.482168][T14971] lowmem_reserve[]: 0 0 0 0 0 [ 470.502045][T11930] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.507836][T14971] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 470.583119][T14971] Node 0 DMA32: 1297*4kB (UME) 1014*8kB (UME) 1288*16kB (UM) 1577*32kB (UME) 546*64kB (UME) 378*128kB (UME) 100*256kB (UME) 63*512kB (UME) 44*1024kB (UM) 14*2048kB (UM) 267*4096kB (UM) = 1392916kB [ 470.638180][T11930] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.649148][T14971] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 470.706428][T14971] Node 1 Normal: 226*4kB (UME) 61*8kB (UME) 42*16kB (UME) 170*32kB (UME) 30*64kB (UE) 13*128kB (UME) 2*256kB (UE) 2*512kB (UM) 0*1024kB 2*2048kB (UE) 946*4096kB (M) = 3891536kB [ 470.803799][T14971] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.861479][T14971] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.915446][T14971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 470.925851][T14971] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 470.940274][T14971] 64266 total pagecache pages [ 470.945213][T14971] 0 pages in swap cache [ 470.961852][T14901] chnl_net:caif_netlink_parms(): no params data found [ 470.979904][T14971] Free swap = 124996kB [ 470.988899][T14971] Total swap = 124996kB [ 470.996775][T14971] 2097051 pages RAM [ 471.000861][T14971] 0 pages HighMem/MovableOnly [ 471.022232][T14971] 416958 pages reserved [ 471.028199][T14971] 0 pages cma reserved [ 471.314239][T14993] netlink: 'syz.1.2488': attribute type 21 has an invalid length. [ 471.327916][T14993] netlink: 'syz.1.2488': attribute type 6 has an invalid length. [ 471.336117][T14993] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2488'. [ 471.351663][T14901] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.374281][T14901] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.388785][T14901] bridge_slave_0: entered allmulticast mode [ 471.399233][T14901] bridge_slave_0: entered promiscuous mode [ 473.709157][T14901] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.716315][T14901] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.723954][T14901] bridge_slave_1: entered allmulticast mode [ 473.730762][T14901] bridge_slave_1: entered promiscuous mode [ 473.795580][T15000] netlink: 'syz.1.2489': attribute type 5 has an invalid length. [ 473.897782][T15011] netlink: 822 bytes leftover after parsing attributes in process `syz.0.2491'. [ 473.935033][T14901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.971101][T14901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.980665][T15014] netlink: 'syz.1.2492': attribute type 9 has an invalid length. [ 473.997089][T15014] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2492'. [ 474.088162][T15018] netlink: 'syz.2.2493': attribute type 10 has an invalid length. [ 474.099543][T15018] syz_tun: entered promiscuous mode [ 474.264830][T15018] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 474.293936][T14901] team0: Port device team_slave_0 added [ 474.308882][T14901] team0: Port device team_slave_1 added [ 474.515759][T14901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.542869][T14901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.606659][T14901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.662935][T14901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.676755][T14901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.712584][T14901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.884004][T14901] hsr_slave_0: entered promiscuous mode [ 474.900916][T14901] hsr_slave_1: entered promiscuous mode [ 475.151858][T15035] delete_channel: no stack [ 476.040741][T11930] hsr0: left allmulticast mode [ 476.061472][T11930] hsr_slave_0: left allmulticast mode [ 476.089291][T11930] hsr_slave_1: left allmulticast mode [ 476.106562][T11930] hsr0: left promiscuous mode [ 476.121712][T11930] nr0: port 1(hsr0) entered disabled state [ 476.157191][T11930] hsr_slave_0: left promiscuous mode [ 476.188010][T11930] hsr_slave_1: left promiscuous mode [ 476.218060][T11930] bridge_slave_1: left allmulticast mode [ 476.239881][T11930] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.338204][T11930] veth1_macvtap: left promiscuous mode [ 476.975954][T11930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.195429][T11930] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 477.220856][T11930] bond0 (unregistering): Released all slaves [ 477.323773][T15090] netlink: 'syz.2.2509': attribute type 2 has an invalid length. [ 477.335688][T15090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2509'. [ 477.552316][T15107] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2512'. [ 477.603812][T15107] netlink: get zone limit has 4 unknown bytes [ 477.862231][T14901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.911886][T15111] netlink: 'syz.2.2513': attribute type 9 has an invalid length. [ 477.936616][T15111] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2513'. [ 477.961920][T14901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 478.037990][T14901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 478.118246][T14901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 478.354229][T15126] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.2515'. [ 478.445040][T14901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.485676][T14901] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.530524][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.537732][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.592869][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.600082][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.997648][T15148] syzkaller0: entered promiscuous mode [ 479.010551][T15148] syzkaller0: entered allmulticast mode [ 481.419666][T14901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.518775][T14901] veth0_vlan: entered promiscuous mode [ 481.549198][T14901] veth1_vlan: entered promiscuous mode [ 481.584131][T15177] netlink: 'syz.2.2526': attribute type 2 has an invalid length. [ 481.594685][T15177] netlink: 'syz.2.2526': attribute type 8 has an invalid length. [ 481.607591][T15177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2526'. [ 481.689095][T15175] syzkaller0: entered promiscuous mode [ 481.694726][T15175] syzkaller0: entered allmulticast mode [ 481.728087][T14901] veth0_macvtap: entered promiscuous mode [ 481.744539][T14901] veth1_macvtap: entered promiscuous mode [ 481.774523][T14901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.790101][T14901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.811198][T14901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.824834][T14901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.841914][T14901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.853582][T14901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.871702][T14901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.912694][T14901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.929803][T14901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.947925][T14901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.963885][T14901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.975923][T14901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.992462][T14901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.004318][T14901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.026102][T14901] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.039887][T14901] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.054863][T14901] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.068337][T14901] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.545850][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.572430][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.616823][T11916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.629439][T11916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.004420][T15200] syzkaller0: entered promiscuous mode [ 483.016451][T15200] syzkaller0: entered allmulticast mode [ 483.264743][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.284372][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.293864][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.323019][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.332547][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 483.340052][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.806220][ T5773] syz_tun (unregistering): left allmulticast mode [ 483.813178][ T5773] syz_tun (unregistering): left promiscuous mode [ 483.820114][ T5773] Ÿë: port 2(syz_tun) entered disabled state [ 483.936721][T15202] chnl_net:caif_netlink_parms(): no params data found [ 484.009410][T11922] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.179501][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.270764][T15202] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.278676][T15202] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.285899][T15202] bridge_slave_0: entered allmulticast mode [ 484.293415][T15202] bridge_slave_0: entered promiscuous mode [ 484.303205][T15202] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.310468][T15202] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.318359][T15202] bridge_slave_1: entered allmulticast mode [ 484.325564][T15202] bridge_slave_1: entered promiscuous mode [ 484.465771][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.515088][T15202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.578534][T15202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.677293][T15234] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2539'. [ 484.749452][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.840240][T15202] team0: Port device team_slave_0 added [ 484.868895][T15202] team0: Port device team_slave_1 added [ 484.902459][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.984769][T15245] syzkaller0: entered promiscuous mode [ 485.016587][T15245] syzkaller0: entered allmulticast mode [ 485.073840][T15202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.086867][T15202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.125021][T15202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.274056][T15202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.293819][T15202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.365829][T15202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.397223][ T5778] Bluetooth: hci2: command tx timeout [ 485.401410][T15262] netlink: 'syz.2.2547': attribute type 21 has an invalid length. [ 485.451420][T15262] netlink: 'syz.2.2547': attribute type 1 has an invalid length. [ 485.638198][T15202] hsr_slave_0: entered promiscuous mode [ 485.663226][T15202] hsr_slave_1: entered promiscuous mode [ 485.684290][T15202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.695885][T15202] Cannot create hsr debugfs directory [ 486.277499][ T59] ip6gretap0 (unregistering): left allmulticast mode [ 486.291380][ T59] ip6gretap0 (unregistering): left promiscuous mode [ 486.315216][ T59] Ÿë: port 1(ip6gretap0) entered disabled state [ 486.808817][T15296] syzkaller0: entered promiscuous mode [ 486.814763][T15296] syzkaller0: entered allmulticast mode [ 487.484338][ T5778] Bluetooth: hci2: command tx timeout [ 487.500015][T15315] netlink: 'syz.0.2561': attribute type 3 has an invalid length. [ 487.508112][T15315] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2561'. [ 487.798662][T15332] netlink: 'syz.0.2563': attribute type 10 has an invalid length. [ 487.820240][T15332] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2563'. [ 488.357229][T15202] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.386498][T15202] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.426688][T15202] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.500491][T15359] sit0: entered allmulticast mode [ 488.551038][T15202] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 488.624781][T15359] sit0: entered promiscuous mode [ 488.644720][T15361] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2569'. [ 488.886081][T15364] netlink: 'syz.3.2570': attribute type 3 has an invalid length. [ 488.908946][T15364] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.2570'. [ 489.077049][ T59] hsr_slave_0: left promiscuous mode [ 489.122438][ T59] hsr_slave_1: left promiscuous mode [ 489.166883][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.174382][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.187666][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.197332][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.314472][ T59] veth1_macvtap: left allmulticast mode [ 489.345575][ T59] veth1_macvtap: left promiscuous mode [ 489.556517][ T5778] Bluetooth: hci2: command tx timeout [ 489.852380][ T59] geneve1 (unregistering): left promiscuous mode [ 489.869697][ T59] geneve1 (unregistering): left allmulticast mode [ 489.886078][ T59] team0 (unregistering): Port device geneve1 removed [ 490.255020][ T59] team_slave_1 (unregistering): left promiscuous mode [ 490.263115][ T59] team_slave_1 (unregistering): left allmulticast mode [ 490.272516][ T59] team0 (unregistering): Port device team_slave_1 removed [ 490.345808][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.357036][ T59] bond_slave_1 (unregistering): left promiscuous mode [ 490.394293][ T59] bond0 (unregistering): (slave 30): Releasing backup interface [ 490.402588][ T59]  (unregistering): left promiscuous mode [ 490.442480][ T59] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 490.451746][ T59] bridge_slave_1 (unregistering): left promiscuous mode [ 490.666047][ T59] bond0 (unregistering): Released all slaves [ 490.708405][T15376] netlink: 'syz.3.2574': attribute type 9 has an invalid length. [ 490.919440][T15202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.988095][T15202] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.058741][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.065930][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.105762][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.113001][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.637449][ T5778] Bluetooth: hci2: command tx timeout [ 491.999581][T15202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.088627][T15202] veth0_vlan: entered promiscuous mode [ 492.130405][T15202] veth1_vlan: entered promiscuous mode [ 492.212289][T15443] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2584'. [ 492.237214][T15436] netlink: 'syz.3.2582': attribute type 10 has an invalid length. [ 492.307735][T15436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.336132][T15436] team0: Port device bond0 added [ 492.381307][T15202] veth0_macvtap: entered promiscuous mode [ 492.426137][T15202] veth1_macvtap: entered promiscuous mode [ 492.582756][T15202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.596007][T15202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.611418][T15202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.630698][T15202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.650959][T15202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.680913][T15202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.703992][T15202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.804778][T15202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.846493][T15202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.872633][T15202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.896851][T15202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.933931][T15202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.954706][T15202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.983918][T15202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.025362][T15202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.045833][T15202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.055928][T15202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.075642][T15202] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.275181][T11914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.308084][T11914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.404199][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.433825][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.689622][T15497] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.2594'. [ 494.317221][T15511] syzkaller0: entered promiscuous mode [ 494.322879][T15511] syzkaller0: entered allmulticast mode [ 494.660172][T15527] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2603'. [ 494.722527][T15527] netlink: 'syz.2.2603': attribute type 9 has an invalid length. [ 494.734831][T15527] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2603'. [ 497.972795][T15553] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2610'. [ 497.983001][T15550] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2608'. [ 498.031521][T15550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.056201][T15550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.073991][T15550] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 498.097137][T15550] bond0 (unregistering): Released all slaves [ 498.544235][T15572] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2614'. [ 498.573100][T15572] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 498.904865][T15588] netlink: 'syz.0.2619': attribute type 1 has an invalid length. [ 498.946627][T15588] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2619'. [ 499.057417][T15593] : renamed from bond_slave_0 [ 499.359197][T15601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2623'. [ 499.379718][T15601] netlink: 'syz.2.2623': attribute type 1 has an invalid length. [ 499.396651][T15601] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2623'. [ 499.436141][T15604] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2623'. [ 499.603563][T15603] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2622'. [ 499.773734][T15603] team0: Port device bond0 removed [ 499.808406][T15603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.854266][T15603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.892670][T15603] bond0 (unregistering): Released all slaves [ 499.949942][T15615] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2627'. [ 500.275457][T15624] sctp: [Deprecated]: syz.1.2630 (pid 15624) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.275457][T15624] Use struct sctp_sack_info instead [ 500.342015][T15633] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2633'. [ 500.573504][T15637] netlink: 'syz.0.2634': attribute type 3 has an invalid length. [ 501.641109][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.657318][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.781950][T15685] veth1_to_bond: entered allmulticast mode [ 502.128145][T15706] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.302496][T15715] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 502.310819][T15714] netlink: 'syz.2.2660': attribute type 1 has an invalid length. [ 502.401311][T15717] netlink: 'syz.0.2661': attribute type 29 has an invalid length. [ 502.423530][T15717] netlink: 'syz.0.2661': attribute type 29 has an invalid length. [ 502.443113][T15717] netlink: 'syz.0.2661': attribute type 29 has an invalid length. [ 503.402816][T15741] netlink: 'syz.3.2670': attribute type 10 has an invalid length. [ 503.690992][T15741] team0: Device nlmon0 is of different type [ 503.889754][T15740] delete_channel: no stack [ 505.585063][T15764] netlink: 'syz.3.2676': attribute type 33 has an invalid length. [ 505.594162][T15764] __nla_validate_parse: 5 callbacks suppressed [ 505.594175][T15764] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2676'. [ 505.631263][T15764] `: renamed from ip6tnl0 (while UP) [ 505.691784][T15764] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 506.215387][T15811] netlink: 'syz.3.2687': attribute type 153 has an invalid length. [ 506.225081][T15811] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2687'. [ 506.236097][T15814] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2688'. [ 506.257094][T15814] netlink: 6260 bytes leftover after parsing attributes in process `syz.0.2688'. [ 506.266257][T15814] netlink: 65 bytes leftover after parsing attributes in process `syz.0.2688'. [ 506.790900][T15831] netlink: 'syz.1.2691': attribute type 39 has an invalid length. [ 507.471796][T15856] can: request_module (can-proto-0) failed. [ 507.673035][T15878] netlink: 'syz.2.2700': attribute type 1 has an invalid length. [ 507.685477][T15878] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.2700'. [ 508.842931][ T5778] Bluetooth: hci3: command 0x0406 tx timeout [ 509.242347][T15907] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2709'. [ 509.263347][T15906] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2708'. [ 509.274084][T15907] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.2709'. [ 509.292038][T15905] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2708'. [ 509.427112][T15911] syz.0.2711[15911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.427373][T15911] syz.0.2711[15911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 509.613544][T15917] netlink: 'syz.2.2710': attribute type 5 has an invalid length. [ 509.675666][T15911] can: request_module (can-proto-4) failed. [ 509.913915][T15930] netlink: 'syz.1.2714': attribute type 39 has an invalid length. [ 510.214461][T15942] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 510.227078][T15942] syzkaller1: linktype set to 6 [ 510.249978][T15939] netlink: 'syz.2.2717': attribute type 21 has an invalid length. [ 510.261801][T15942] netlink: 'syz.1.2718': attribute type 29 has an invalid length. [ 510.276693][T15939] netlink: 'syz.2.2717': attribute type 20 has an invalid length. [ 510.290006][T15942] netlink: 'syz.1.2718': attribute type 29 has an invalid length. [ 510.631055][T15955] : renamed from veth1 (while UP) [ 511.753493][T15991] validate_nla: 4 callbacks suppressed [ 511.753510][T15991] netlink: 'syz.0.2730': attribute type 46 has an invalid length. [ 512.101704][T15999] netlink: 'syz.1.2734': attribute type 11 has an invalid length. [ 512.130289][T15999] __nla_validate_parse: 3 callbacks suppressed [ 512.130304][T15999] netlink: 212788 bytes leftover after parsing attributes in process `syz.1.2734'. [ 512.212620][T16006] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2736'. [ 512.305544][T16007] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.2736'. [ 512.622998][T16021] netlink: 'syz.3.2740': attribute type 7 has an invalid length. [ 512.913987][T16024] netlink: 'syz.0.2741': attribute type 29 has an invalid length. [ 512.967393][T16028] netlink: 'syz.3.2742': attribute type 3 has an invalid length. [ 512.975455][T16028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2742'. [ 512.976818][T16024] netlink: 'syz.0.2741': attribute type 29 has an invalid length. [ 513.065787][T16030] netlink: 'syz.0.2741': attribute type 29 has an invalid length. [ 513.140651][T16036] netlink: 'syz.1.2744': attribute type 1 has an invalid length. [ 513.156633][T16036] netlink: 'syz.1.2744': attribute type 4 has an invalid length. [ 513.185276][T16036] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2744'. [ 513.227085][T16024] netlink: 'syz.0.2741': attribute type 29 has an invalid length. [ 513.311225][T16024] netlink: 'syz.0.2741': attribute type 29 has an invalid length. [ 513.666677][T16047] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2748'. [ 514.882645][T16052] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2749'. [ 514.908759][T16052] bridge_slave_1: default FDB implementation only supports local addresses [ 515.043519][T16067] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2753'. [ 515.070442][T16067] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2753'. [ 516.949874][T16093] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2759'. [ 516.977679][T16093] netlink: zone id is out of range [ 516.994402][T16093] netlink: zone id is out of range [ 517.027258][T16093] netlink: zone id is out of range [ 517.047746][T16093] netlink: zone id is out of range [ 517.053134][T16093] netlink: zone id is out of range [ 517.116828][T16093] netlink: zone id is out of range [ 517.137701][T16093] netlink: zone id is out of range [ 517.147203][T16093] netlink: zone id is out of range [ 517.160018][T16093] netlink: zone id is out of range [ 517.181230][T16093] netlink: zone id is out of range [ 519.939163][T16111] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2765'. [ 519.997690][T16111] netlink: 'syz.1.2765': attribute type 9 has an invalid length. [ 520.005616][T16111] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2765'. [ 520.191189][T16116] netlink: 'syz.3.2768': attribute type 8 has an invalid length. [ 520.233053][T16116] netlink: 'syz.3.2768': attribute type 3 has an invalid length. [ 520.282768][T16116] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2768'. [ 520.494267][ T5774] bt_warn_ratelimited: 23 callbacks suppressed [ 520.494282][ T5774] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 520.736263][T16144] sit0: left promiscuous mode [ 521.176833][T16149] netlink: 'syz.0.2779': attribute type 30 has an invalid length. [ 521.202012][T16150] netlink: 'syz.0.2779': attribute type 10 has an invalid length. [ 521.680104][T16170] netlink: 'syz.3.2783': attribute type 9 has an invalid length. [ 521.758542][T16170] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2783'. [ 522.505799][T16197] syzkaller0: entered promiscuous mode [ 526.342988][T16210] syzkaller0: entered promiscuous mode [ 526.348608][T16210] syzkaller0: entered allmulticast mode [ 526.748033][T16227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.757057][T16227] IPv6: NLM_F_CREATE should be set when creating new route [ 526.764741][T16227] IPv6: NLM_F_CREATE should be set when creating new route [ 526.772386][T16227] IPv6: NLM_F_CREATE should be set when creating new route [ 526.793060][T16231] netlink: 'syz.0.2798': attribute type 10 has an invalid length. [ 526.833590][T16231] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2798'. [ 527.184748][T16239] netlink: 'syz.1.2801': attribute type 33 has an invalid length. [ 527.192910][T16239] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2801'. [ 527.290267][T16239] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2801'. [ 527.473735][T16249] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2804'. [ 527.546772][T16249] netlink: 123072 bytes leftover after parsing attributes in process `syz.1.2804'. [ 529.245903][T16283] netlink: 'syz.0.2812': attribute type 3 has an invalid length. [ 529.265620][T16283] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2812'. [ 532.875358][T16323] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.2822'. [ 532.932057][T16319] netlink: 'syz.0.2821': attribute type 10 has an invalid length. [ 532.991112][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.115522][T16319] bridge_slave_1: left allmulticast mode [ 533.122998][T16319] bridge_slave_1: left promiscuous mode [ 533.135479][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.170319][T16319] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 533.599555][T16344] syzkaller0: entered promiscuous mode [ 533.605495][T16344] syzkaller0: entered allmulticast mode [ 533.668582][T16350] netlink: 'syz.3.2827': attribute type 39 has an invalid length. [ 533.692383][T16350] macvlan0: entered promiscuous mode [ 533.710397][T16350] macvlan0: entered allmulticast mode [ 534.102252][T16362] syzkaller0: entered promiscuous mode [ 534.114576][T16362] syzkaller0: entered allmulticast mode [ 535.891192][T16377] netlink: 'syz.2.2836': attribute type 6 has an invalid length. [ 535.902601][T16377] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2836'. [ 535.928147][T16385] dvmrp1: tun_chr_ioctl cmd 21731 [ 536.241067][T16403] can: request_module (can-proto-3) failed. [ 536.444947][T16411] netlink: 'syz.1.2844': attribute type 2 has an invalid length. [ 536.471525][T16411] netlink: 'syz.1.2844': attribute type 8 has an invalid length. [ 536.480206][T16411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2844'. [ 536.678632][T16410] delete_channel: no stack [ 536.778613][T16414] netlink: 'syz.3.2846': attribute type 10 has an invalid length. [ 536.861306][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.897018][T16414] bridge_slave_1: left allmulticast mode [ 536.905983][T16414] bridge_slave_1: left promiscuous mode [ 536.913248][T16414] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.946280][T16423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2847'. [ 537.128805][T16437] netlink: 'syz.0.2849': attribute type 2 has an invalid length. [ 537.319634][T16447] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2855'. [ 537.719201][T16461] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2858'. [ 538.420330][T16470] netlink: 'syz.1.2862': attribute type 41 has an invalid length. [ 538.700761][T16484] netlink: 'syz.0.2867': attribute type 3 has an invalid length. [ 538.721505][T16484] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2867'. [ 538.779732][T16489] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2869'. [ 539.581167][ T5778] Bluetooth: hci4: command 0x0406 tx timeout [ 540.804690][T16549] netlink: 'syz.0.2884': attribute type 10 has an invalid length. [ 540.843552][T16549] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2884'. [ 541.355139][T16576] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2892'. [ 541.750633][T16585] ªªªªªª: renamed from vlan0 (while UP) [ 542.035099][T16590] netlink: 'syz.2.2898': attribute type 3 has an invalid length. [ 542.053989][T16590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2898'. [ 542.094020][T16590] netlink: 'syz.2.2898': attribute type 4 has an invalid length. [ 542.116933][T16590] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2898'. [ 542.143220][T16590] net_ratelimit: 25 callbacks suppressed [ 542.143240][T16590] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 542.719702][T16604] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2902'. [ 543.012596][T16614] netlink: 'syz.3.2904': attribute type 13 has an invalid length. [ 543.031171][T16614] netlink: 'syz.3.2904': attribute type 58 has an invalid length. [ 543.057714][T16614] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2904'. [ 543.487070][T16621] netlink: 'syz.0.2907': attribute type 2 has an invalid length. [ 543.496673][T16621] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2907'. [ 543.626874][T16633] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2910'. [ 544.107209][T16635] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.2912'. [ 544.892262][T16664] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2919'. [ 544.926700][T16664] bridge_slave_1: default FDB implementation only supports local addresses [ 545.611325][T16695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2929'. [ 545.665259][T16695] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2929'. [ 545.706124][T16698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2929'. [ 545.823115][T16700] netlink: 'syz.1.2930': attribute type 7 has an invalid length. [ 545.844180][T16700] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2930'. [ 546.127009][T16708] netlink: 'syz.2.2932': attribute type 21 has an invalid length. [ 546.292281][T16702] netlink: 'syz.3.2931': attribute type 2 has an invalid length. [ 546.302815][T16702] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2931'. [ 546.419150][T16714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.547370][T16722] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2937'. [ 546.762842][T16728] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2940'. [ 547.133810][T16726] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2939'. [ 547.254756][T16739] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 547.286687][T16739] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 547.530034][T16745] hsr_slave_0: left promiscuous mode [ 547.583196][T16745] hsr_slave_1: left promiscuous mode [ 547.921074][T16759] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 548.264602][T16760] netlink: 'syz.0.2947': attribute type 33 has an invalid length. [ 550.781362][T16780] netlink: set zone limit has 8 unknown bytes [ 550.889716][T16769] __nla_validate_parse: 3 callbacks suppressed [ 550.889735][T16769] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2949'. [ 551.491750][T16783] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2952'. [ 556.346824][T16803] netlink: 'syz.1.2957': attribute type 10 has an invalid length. [ 556.354726][T16803] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2957'. [ 558.798405][T16817] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 558.818011][T16817] syzkaller1: linktype set to 805 [ 562.199869][T16848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2965'. [ 562.291125][T16853] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2965'. [ 562.387102][T16853] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2965'. [ 562.396296][T16853] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2965'. [ 562.556999][T16853] tc_dump_action: action bad kind [ 562.580559][T16848] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2965'. [ 562.761182][T16854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2965'. [ 563.090409][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.112428][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.341019][T16865] netlink: 'syz.2.2970': attribute type 153 has an invalid length. [ 564.363283][T16865] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2970'. [ 564.939749][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 564.954769][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 564.964211][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 564.976715][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 564.984474][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 564.993249][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 565.454410][T16874] chnl_net:caif_netlink_parms(): no params data found [ 565.693138][T16874] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.714217][T16874] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.752495][T16874] bridge_slave_0: entered allmulticast mode [ 565.782740][T16874] bridge_slave_0: entered promiscuous mode [ 565.817150][T16874] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.842527][T16874] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.861847][T16874] bridge_slave_1: entered allmulticast mode [ 565.879879][T16874] bridge_slave_1: entered promiscuous mode [ 565.945208][T16874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.988432][T16874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.058976][T16874] team0: Port device team_slave_0 added [ 566.094189][T16874] team0: Port device team_slave_1 added [ 566.153831][T16874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.160994][T16874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.176160][T16915] netlink: 'syz.1.2980': attribute type 153 has an invalid length. [ 566.207352][T16874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.223032][T16915] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2980'. [ 566.295827][T16874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.303282][T16874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.412101][T16874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.623568][T16919] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2983'. [ 566.730199][T16874] hsr_slave_0: entered promiscuous mode [ 566.757440][T16874] hsr_slave_1: entered promiscuous mode [ 566.776855][T16874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.803988][T16874] Cannot create hsr debugfs directory [ 567.077737][ T5774] Bluetooth: hci1: command tx timeout [ 567.421388][T16874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 567.453760][T16874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 567.492950][T16874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 567.551199][T16920] delete_channel: no stack [ 567.595122][T16874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 567.736489][T16935] netlink: 'syz.0.2988': attribute type 21 has an invalid length. [ 567.745442][T16935] IPv6: NLM_F_CREATE should be specified when creating new route [ 567.753877][T16935] IPv6: Can't replace route, no match found [ 567.909546][T16939] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2990'. [ 568.091150][T16874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.269047][T16874] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.296938][T11939] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.304155][T11939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.345149][T11939] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.352380][T11939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.454609][T16948] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.2994'. [ 568.480524][T16948] netlink: 'syz.0.2994': attribute type 2 has an invalid length. [ 568.505396][T16948] netlink: 'syz.0.2994': attribute type 1 has an invalid length. [ 568.691002][T16874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.827564][T16959] netlink: 'syz.0.2996': attribute type 21 has an invalid length. [ 568.860471][T16959] netlink: 'syz.0.2996': attribute type 1 has an invalid length. [ 568.878430][T16959] netlink: 'syz.0.2996': attribute type 21 has an invalid length. [ 568.970485][T16962] netlink: 'syz.2.2998': attribute type 3 has an invalid length. [ 568.981537][T16962] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2998'. [ 568.984407][T16965] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 569.002664][T16965] syzkaller1: linktype set to 769 [ 569.156712][ T5774] Bluetooth: hci1: command tx timeout [ 569.223549][T16972] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2999'. [ 569.395197][T16874] veth0_vlan: entered promiscuous mode [ 569.422149][T16874] veth1_vlan: entered promiscuous mode [ 569.433550][ T5774] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 569.521013][T16874] veth0_macvtap: entered promiscuous mode [ 569.579426][T16874] veth1_macvtap: entered promiscuous mode [ 569.634439][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.662531][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.683523][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.701389][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.712536][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.732407][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.749852][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.763804][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.778118][T16874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.822416][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.857545][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.883104][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.898796][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.912592][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.928266][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.938444][T16874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.949132][T16874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.960752][T16874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.988514][T16874] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.999420][T16874] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.008662][T16874] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.017731][T16874] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.101158][T17001] netlink: 'syz.2.3009': attribute type 3 has an invalid length. [ 570.114550][T17001] netlink: 'syz.2.3009': attribute type 1 has an invalid length. [ 570.124388][T17001] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3009'. [ 570.148271][T11939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.165996][T11939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.210222][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.223608][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.606790][T17026] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 570.614051][T17026] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 570.630584][T17025] netlink: 'syz.4.3014': attribute type 21 has an invalid length. [ 570.652518][T17025] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3014'. [ 570.679587][T17028] netlink: 'syz.0.3015': attribute type 10 has an invalid length. [ 570.909525][T17039] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3018'. [ 571.236554][ T5774] Bluetooth: hci1: command tx timeout [ 571.496734][ T5774] Bluetooth: hci2: command tx timeout [ 572.035997][T17052] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 572.060306][T17052] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 572.065522][T17068] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3025'. [ 572.106880][T17068] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.3025'. [ 572.131592][T17054] netlink: 'syz.1.3022': attribute type 8 has an invalid length. [ 572.157339][T17054] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3022'. [ 572.908521][T17083] syzkaller0: entered promiscuous mode [ 572.926441][T17083] syzkaller0: entered allmulticast mode [ 572.968857][T17078] netlink: 'syz.4.3028': attribute type 10 has an invalid length. [ 573.007679][T17078] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3028'. [ 573.039596][T17078] batman_adv: batadv0: Adding interface: virt_wifi0 [ 573.057423][T17078] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 573.097379][T17078] batman_adv: batadv0: Interface activated: virt_wifi0 [ 573.337272][ T5774] Bluetooth: hci1: command tx timeout [ 575.361976][T17102] tap0: tun_chr_ioctl cmd 1074025677 [ 575.367606][T17102] tap0: linktype set to 513 [ 575.535786][T17106] netlink: 'syz.1.3034': attribute type 2 has an invalid length. [ 575.579804][T17104] netlink: 'syz.2.3032': attribute type 10 has an invalid length. [ 575.638393][T17104] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.653860][T17104] bridge_slave_1: left allmulticast mode [ 575.664022][T17104] bridge_slave_1: left promiscuous mode [ 575.671880][T17104] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.700501][T17109] vcan0: entered allmulticast mode [ 575.727667][T17109] netlink: 'syz.0.3033': attribute type 10 has an invalid length. [ 575.757987][T17109] veth0_macvtap: left promiscuous mode [ 576.092476][T17121] netlink: 'syz.0.3038': attribute type 29 has an invalid length. [ 576.109848][T17121] netlink: 'syz.0.3038': attribute type 29 has an invalid length. [ 576.714760][T17121] syzkaller0: entered promiscuous mode [ 576.732385][T17121] syzkaller0: entered allmulticast mode [ 576.926684][T17131] netlink: 'syz.2.3040': attribute type 10 has an invalid length. [ 576.984163][T17141] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3043'. [ 577.006169][T17141] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 577.015240][T17131] geneve0: entered promiscuous mode [ 577.016755][T17141] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 577.039400][T17143] delete_channel: no stack [ 579.003273][T17158] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 579.643452][T17192] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3056'. [ 581.401096][T17210] netlink: 'syz.1.3062': attribute type 21 has an invalid length. [ 581.426773][T17210] netlink: 'syz.1.3062': attribute type 1 has an invalid length. [ 581.434553][T17210] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.3062'. [ 581.468335][T17212] netlink: 'syz.2.3061': attribute type 10 has an invalid length. [ 581.476195][T17212] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3061'. [ 581.519990][T17212] batman_adv: batadv0: Adding interface: vlan1 [ 581.526200][T17212] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.556620][T17212] batman_adv: batadv0: Interface activated: vlan1 [ 581.899356][T17223] mac80211_hwsim hwsim43 wlan0: left promiscuous mode [ 581.921667][T17223] mac80211_hwsim hwsim43 wlan0: left allmulticast mode [ 582.047689][T17226] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 582.084829][T17226] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 582.262171][T17225] syzkaller0: entered promiscuous mode [ 582.286531][T17225] syzkaller0: entered allmulticast mode [ 582.342330][T17229] netlink: 'syz.4.3067': attribute type 8 has an invalid length. [ 582.356458][T17229] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3067'. [ 584.041874][T17238] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3070'. [ 584.215945][T17252] lo: entered allmulticast mode [ 584.243672][T17252] lo: entered promiscuous mode [ 584.252004][T17252] lo: left allmulticast mode [ 584.301682][T17252] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3073'. [ 584.322920][T17252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 584.929089][T17270] netlink: 3890 bytes leftover after parsing attributes in process `syz.1.3079'. [ 585.097150][T17274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3081'. [ 586.071510][T17296] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3090'. [ 586.452770][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.489369][T17305] bridge0: entered allmulticast mode [ 586.586054][T17305] bridge_slave_0: left allmulticast mode [ 586.629443][T17313] netlink: 'syz.1.3094': attribute type 10 has an invalid length. [ 586.636491][T17305] bridge_slave_0: left promiscuous mode [ 586.671613][T17313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3094'. [ 586.673849][T17305] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.107734][T17324] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3097'. [ 587.167303][T17324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 587.284358][T17328] netlink: 'syz.1.3098': attribute type 29 has an invalid length. [ 587.302493][T17326] syzkaller0: entered promiscuous mode [ 587.308300][T17326] syzkaller0: entered allmulticast mode [ 587.317913][T17332] netlink: 'syz.0.3100': attribute type 2 has an invalid length. [ 587.332246][T17328] netlink: 'syz.1.3098': attribute type 29 has an invalid length. [ 587.365872][T17334] netlink: 'syz.1.3098': attribute type 29 has an invalid length. [ 587.447271][T17328] netlink: 'syz.1.3098': attribute type 29 has an invalid length. [ 588.501740][T17352] netlink: 'syz.4.3104': attribute type 9 has an invalid length. [ 588.509938][T17352] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3104'. [ 589.336988][T17334] netlink: 'syz.1.3098': attribute type 29 has an invalid length. [ 589.345130][T17347] netlink: 'syz.0.3103': attribute type 21 has an invalid length. [ 589.353324][T17347] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3103'. [ 589.386570][T17351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 589.393829][T17351] IPv6: NLM_F_CREATE should be set when creating new route [ 589.401180][T17351] IPv6: NLM_F_CREATE should be set when creating new route [ 589.408454][T17351] IPv6: NLM_F_CREATE should be set when creating new route [ 589.542545][T17353] netlink: 'syz.4.3104': attribute type 9 has an invalid length. [ 589.559805][T17353] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3104'. [ 589.615630][T17363] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3108'. [ 589.829541][T17363] team0: Port device team_slave_0 removed [ 591.436205][T17419] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3124'. [ 591.585667][ T5774] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 592.198601][T17450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 592.210666][T17450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 592.221397][T17450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 592.231383][T17450] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 592.501265][T17465] validate_nla: 3 callbacks suppressed [ 592.501280][T17465] netlink: 'syz.0.3136': attribute type 10 has an invalid length. [ 592.547323][T17465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3136'. [ 592.593488][T17465] netlink: 'syz.0.3136': attribute type 10 has an invalid length. [ 592.647610][T17465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3136'. [ 592.840092][T17476] syzkaller0: entered promiscuous mode [ 592.845627][T17476] syzkaller0: entered allmulticast mode [ 593.578621][T17502] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3145'. [ 595.825882][T17501] @0Ù: renamed from bridge_slave_0 (while UP) [ 595.835967][T17502] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3145'. [ 596.227878][T17519] syzkaller0: entered promiscuous mode [ 596.389968][T17531] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3154'. [ 596.403614][T17531] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 596.415392][T17531] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 596.772496][T17542] delete_channel: no stack [ 602.024940][T17533] netlink: 'syz.4.3153': attribute type 3 has an invalid length. [ 602.032801][T17533] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3153'. [ 602.042471][T17537] netlink: 'syz.4.3153': attribute type 10 has an invalid length. [ 602.050398][T17537] netlink: 'syz.4.3153': attribute type 4 has an invalid length. [ 602.066363][T17537] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3153'. [ 602.078665][T17537] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 602.101123][T17557] netlink: 'syz.1.3160': attribute type 2 has an invalid length. [ 602.117028][T17557] netlink: 'syz.1.3160': attribute type 8 has an invalid length. [ 602.124791][T17557] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3160'. [ 602.157597][T17560] netlink: 'syz.1.3160': attribute type 2 has an invalid length. [ 602.165369][T17560] netlink: 'syz.1.3160': attribute type 8 has an invalid length. [ 602.196725][T17560] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3160'. [ 602.345563][T17579] syz.1.3168[17579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 602.345801][T17579] syz.1.3168[17579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 606.118881][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 606.262446][T17623] C: renamed from team_slave_0 (while UP) [ 606.450184][T17624] netlink: 'syz.1.3182': attribute type 1 has an invalid length. [ 606.477118][T17624] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 606.725305][T17637] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3186'. [ 606.746599][T17637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3186'. [ 607.167176][T17651] netlink: 'syz.0.3191': attribute type 21 has an invalid length. [ 607.187411][T17651] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3191'. [ 608.266994][T17685] netlink: 'syz.4.3200': attribute type 21 has an invalid length. [ 608.294735][T17685] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3200'. [ 608.841965][T17702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 609.085543][T17703] netlink: 'syz.0.3206': attribute type 9 has an invalid length. [ 609.109141][T17703] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3206'. [ 611.182650][T17740] netlink: 'syz.0.3211': attribute type 16 has an invalid length. [ 611.276369][T17740] netlink: 'syz.0.3211': attribute type 3 has an invalid length. [ 611.316947][T17740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3211'. [ 615.758884][T17756] netlink: 'syz.2.3218': attribute type 12 has an invalid length. [ 615.766957][T17756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3218'. [ 615.776168][T17759] netlink: 'syz.2.3218': attribute type 10 has an invalid length. [ 615.785158][T17759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3218'. [ 615.798461][T17759] batman_adv: batadv0: Adding interface: virt_wifi0 [ 615.805167][T17759] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.834539][T17759] batman_adv: batadv0: Interface activated: virt_wifi0 [ 615.854877][T17762] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3219'. [ 615.907307][T17762] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 616.207855][T17774] netlink: 'syz.1.3223': attribute type 3 has an invalid length. [ 616.227952][T17774] netlink: 'syz.1.3223': attribute type 1 has an invalid length. [ 616.246000][T17774] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3223'. [ 616.286421][T17772] netlink: 'syz.4.3222': attribute type 2 has an invalid length. [ 616.355260][T17780] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3224'. [ 616.400490][T17780] netlink: 21056 bytes leftover after parsing attributes in process `syz.2.3224'. [ 616.462941][T17780] tipc: Started in network mode [ 616.477477][T17780] tipc: Node identity 1a, cluster identity 4711 [ 616.513129][T17780] tipc: Node number set to 26 [ 616.737775][T17786] netlink: 'syz.1.3226': attribute type 21 has an invalid length. [ 616.747703][T17787] netlink: 'syz.1.3226': attribute type 10 has an invalid length. [ 616.762155][T17787] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3226'. [ 616.784921][T17787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.295127][T17798] netlink: 'syz.2.3230': attribute type 4 has an invalid length. [ 617.324884][T17798] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3230'. [ 619.225367][T17847] netlink: 'syz.0.3243': attribute type 46 has an invalid length. [ 619.253994][T17847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3243'. [ 619.578258][T17856] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3247'. [ 619.620801][T17852] netlink: 'syz.2.3245': attribute type 21 has an invalid length. [ 621.558199][T17900] netlink: 'syz.1.3259': attribute type 3 has an invalid length. [ 621.631418][T17900] netlink: 'syz.1.3259': attribute type 1 has an invalid length. [ 621.699711][T17900] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.3259'. [ 622.774066][T17934] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3266'. [ 622.794912][T17928] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.3266'. [ 622.816502][T17932] netlink: 'syz.1.3267': attribute type 21 has an invalid length. [ 622.833145][T17932] IPv6: NLM_F_CREATE should be specified when creating new route [ 622.873494][T17932] IPv6: Can't replace route, no match found [ 623.107541][T17947] netlink: 'syz.0.3269': attribute type 64 has an invalid length. [ 623.138418][T17947] netlink: 'syz.0.3269': attribute type 2 has an invalid length. [ 623.146188][T17947] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.3269'. [ 624.148198][T17996] netlink: 'syz.0.3283': attribute type 29 has an invalid length. [ 624.189542][T17996] netlink: 'syz.0.3283': attribute type 29 has an invalid length. [ 624.244155][T17996] mac80211_hwsim hwsim26 .3ãc¤±: renamed from wlan1 [ 624.533481][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.540027][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.734618][T11939] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.938465][T11939] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.112736][T11939] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.306117][T11939] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.177957][T18067] netlink: 'syz.1.3298': attribute type 29 has an invalid length. [ 626.315689][T18069] IPv6: pim6reg1: Disabled Multicast RS [ 626.359773][T18067] netlink: 'syz.1.3298': attribute type 29 has an invalid length. [ 626.384041][T18071] netlink: 'syz.1.3298': attribute type 29 has an invalid length. [ 626.497543][T18068] delete_channel: no stack [ 627.532775][T18099] netlink: 'syz.4.3304': attribute type 21 has an invalid length. [ 627.586233][T18099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3304'. [ 628.047846][T18121] netlink: 'syz.0.3309': attribute type 10 has an invalid length. [ 628.133049][T18121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.189724][T18121] team0: Port device batadv0 added [ 628.473547][T18125] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3309'. [ 629.031357][T18144] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3314'. [ 629.181905][T11939] hsr_slave_0: left promiscuous mode [ 629.235237][T11939] hsr_slave_1: left promiscuous mode [ 629.254800][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 629.286386][T11939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 629.308154][T11939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.316260][T11939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.332263][T11939] bridge_slave_0: left allmulticast mode [ 629.347595][T11939] bridge_slave_0: left promiscuous mode [ 629.361411][T11939] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.552730][T11939] veth1_macvtap: left promiscuous mode [ 629.561319][T11939] veth0_macvtap: left promiscuous mode [ 629.574834][T11939] veth1_vlan: left promiscuous mode [ 629.586888][T11939] veth0_vlan: left promiscuous mode [ 630.411881][T11939] team0 (unregistering): Port device team_slave_1 removed [ 630.454890][T11939] team0 (unregistering): Port device team_slave_0 removed [ 630.851798][T18148] netlink: 'syz.1.3315': attribute type 12 has an invalid length. [ 630.859704][T18148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3315'. [ 631.183119][T18176] netlink: 'syz.0.3318': attribute type 39 has an invalid length. [ 631.450227][T18184] netlink: 'syz.2.3321': attribute type 21 has an invalid length. [ 631.476527][T18184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3321'. [ 631.984492][T18198] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 632.221429][T18197] delete_channel: no stack [ 633.396524][T18239] netlink: 'syz.4.3332': attribute type 10 has an invalid length. [ 633.430386][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.486830][T18239] bridge_slave_1: left allmulticast mode [ 633.500149][T18239] bridge_slave_1: left promiscuous mode [ 633.519876][T18239] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.778671][T18248] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3334'. [ 633.802536][T18239] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 634.290417][T18267] netlink: 'syz.1.3334': attribute type 39 has an invalid length. [ 635.636854][T18299] delete_channel: no stack [ 635.911214][T18310] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3347'. [ 635.946511][T18310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.087823][T18341] netlink: 'syz.2.3355': attribute type 10 has an invalid length. [ 637.652490][T18341] team0: Port device macvlan0 added [ 638.416960][T18368] netlink: 'syz.1.3360': attribute type 4 has an invalid length. [ 638.435646][T18368] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3360'. [ 638.597522][T18368] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 638.963957][T18371] netlink: 'syz.4.3359': attribute type 2 has an invalid length. [ 639.040535][T18371] netlink: 'syz.4.3359': attribute type 11 has an invalid length. [ 639.070557][T18371] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3359'. [ 639.173687][T18383] netlink: 'syz.2.3363': attribute type 29 has an invalid length. [ 643.100293][T18383] netlink: 'syz.2.3363': attribute type 29 has an invalid length. [ 643.246643][ T5778] Bluetooth: hci2: Malformed Event: 0x13 [ 643.700075][T18426] vcan0: entered allmulticast mode [ 643.771036][T18438] netlink: 'syz.2.3373': attribute type 10 has an invalid length. [ 643.808852][T18438] veth0_macvtap: left promiscuous mode [ 643.991115][T18443] netlink: 'syz.4.3377': attribute type 10 has an invalid length. [ 644.213004][T18443] team0 (unregistering): Port device team_slave_0 removed [ 644.283162][T18465] netlink: 'syz.0.3381': attribute type 1 has an invalid length. [ 644.293624][T18443] team0 (unregistering): Port device team_slave_1 removed [ 644.670738][T18479] netlink: 'syz.1.3384': attribute type 153 has an invalid length. [ 644.744637][T18479] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3384'. [ 646.039158][T18509] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3392'. [ 646.669569][T18527] netlink: 'syz.1.3394': attribute type 10 has an invalid length. [ 646.694498][T18527] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3394'. [ 647.014857][T18532] vcan0: left allmulticast mode [ 647.159912][T18533] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.3396'. [ 647.842363][T18558] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3401'. [ 650.078785][T18589] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 650.088624][T18589] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 650.167872][T18595] sock: sock_timestamping_bind_phc: sock not bind to device [ 650.210919][T18594] sock: sock_timestamping_bind_phc: sock not bind to device [ 650.330303][ C1] [ 650.330312][ C1] ================================ [ 650.330319][ C1] WARNING: inconsistent lock state [ 650.330336][ C1] syzkaller #0 Not tainted [ 650.330345][ C1] -------------------------------- [ 650.330349][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 650.330357][ C1] syz.2.3409/18601 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 650.330376][ C1] ffff888056738420 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 650.330429][ C1] {INITIAL USE} state was registered at: [ 650.330435][ C1] lock_acquire+0x19e/0x420 [ 650.330455][ C1] _raw_spin_lock+0x2e/0x40 [ 650.330484][ C1] htab_lock_bucket+0x17d/0x300 [ 650.330500][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 650.330517][ C1] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 650.330540][ C1] bpf_overflow_handler+0x1fc/0x510 [ 650.330562][ C1] __perf_event_overflow+0x461/0x660 [ 650.330579][ C1] perf_swevent_event+0x319/0x570 [ 650.330595][ C1] perf_bp_event+0x319/0x430 [ 650.330612][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 650.330632][ C1] notifier_call_chain+0x18f/0x380 [ 650.330652][ C1] atomic_notifier_call_chain+0xda/0x180 [ 650.330670][ C1] notify_die+0x145/0x1a0 [ 650.330688][ C1] notify_debug+0x2e/0x50 [ 650.330726][ C1] noist_exc_debug+0x77/0x120 [ 650.330744][ C1] asm_exc_debug+0x33/0x40 [ 650.330764][ C1] irq event stamp: 4222 [ 650.330770][ C1] hardirqs last enabled at (4221): [] perf_swevent_event+0x476/0x570 [ 650.330795][ C1] hardirqs last disabled at (4222): [] exc_debug+0x73/0x140 [ 650.330816][ C1] softirqs last enabled at (3872): [] netlink_insert+0x1094/0x1390 [ 650.330838][ C1] softirqs last disabled at (3868): [] release_sock+0x2f/0x1c0 [ 650.330863][ C1] [ 650.330863][ C1] other info that might help us debug this: [ 650.330868][ C1] Possible unsafe locking scenario: [ 650.330868][ C1] [ 650.330872][ C1] CPU0 [ 650.330875][ C1] ---- [ 650.330878][ C1] lock(&htab->lockdep_key); [ 650.330889][ C1] [ 650.330892][ C1] lock(&htab->lockdep_key); [ 650.330902][ C1] [ 650.330902][ C1] *** DEADLOCK *** [ 650.330902][ C1] [ 650.330905][ C1] no locks held by syz.2.3409/18601. [ 650.330912][ C1] [ 650.330912][ C1] stack backtrace: [ 650.330918][ C1] CPU: 1 PID: 18601 Comm: syz.2.3409 Not tainted syzkaller #0 [ 650.330934][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.330944][ C1] Call Trace: [ 650.330950][ C1] <#DB> [ 650.330961][ C1] dump_stack_lvl+0x18c/0x250 [ 650.330997][ C1] ? show_regs_print_info+0x20/0x20 [ 650.331049][ C1] ? print_usage_bug+0x43d/0x6a0 [ 650.331077][ C1] ? verify_lock_unused+0x15/0x140 [ 650.331115][ C1] lock_acquire+0x2c2/0x420 [ 650.331156][ C1] ? htab_lock_bucket+0x17d/0x300 [ 650.331188][ C1] ? read_lock_is_recursive+0x20/0x20 [ 650.331267][ C1] _raw_spin_lock+0x2e/0x40 [ 650.331289][ C1] ? htab_lock_bucket+0x17d/0x300 [ 650.331310][ C1] htab_lock_bucket+0x17d/0x300 [ 650.331345][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 650.331369][ C1] ? look_up_lock_class+0x75/0x140 [ 650.331404][ C1] ? verify_lock_unused+0x15/0x140 [ 650.331434][ C1] ? jhash+0x34e/0x740 [ 650.331468][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 650.331522][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 650.331548][ C1] ? perf_callchain+0x220/0x220 [ 650.331564][ C1] ? bpf_overflow_handler+0xde/0x510 [ 650.331591][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 650.331639][ C1] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 650.331670][ C1] bpf_overflow_handler+0x1fc/0x510 [ 650.331713][ C1] ? bpf_overflow_handler+0xde/0x510 [ 650.331741][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 650.331800][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 650.331835][ C1] __perf_event_overflow+0x461/0x660 [ 650.331886][ C1] perf_swevent_event+0x319/0x570 [ 650.331922][ C1] ? perf_tp_event+0x1550/0x1550 [ 650.331951][ C1] ? perf_trace_lock+0xfc/0x3b0 [ 650.332008][ C1] perf_bp_event+0x319/0x430 [ 650.332056][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 650.332202][ C1] ? lock_acquire+0x2c2/0x420 [ 650.332260][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 650.332306][ C1] notifier_call_chain+0x18f/0x380 [ 650.332343][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 650.332378][ C1] atomic_notifier_call_chain+0xda/0x180 [ 650.332413][ C1] notify_die+0x145/0x1a0 [ 650.332449][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 650.332513][ C1] ? rcu_is_watching+0x15/0xb0 [ 650.332552][ C1] notify_debug+0x2e/0x50 [ 650.332571][ C1] exc_debug+0xde/0x140 [ 650.332609][ C1] asm_exc_debug+0x1e/0x40 [ 650.332626][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 650.332648][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 650.332663][ C1] RSP: 0018:ffffc9000394f958 EFLAGS: 00050206 [ 650.332677][ C1] RAX: ffffffff84316f01 RBX: 000000000000fe33 RCX: 000000000000fb13 [ 650.332689][ C1] RDX: 0000000000000001 RSI: 0000200000000320 RDI: ffffc900042f9320 [ 650.332701][ C1] RBP: ffffc9000394fa90 R08: ffffc90004308e32 R09: 1ffff920008611c6 [ 650.332714][ C1] R10: dffffc0000000000 R11: fffff520008611c7 R12: ffffc900042f9000 [ 650.332726][ C1] R13: 0000200000000000 R14: ffffc9000394fc18 R15: 1ffff92000729f83 [ 650.332768][ C1] ? _copy_from_iter+0x191/0x1290 [ 650.332818][ C1] [ 650.332823][ C1] [ 650.332828][ C1] _copy_from_iter+0x242/0x1290 [ 650.332865][ C1] ? __rwlock_init+0x150/0x150 [ 650.332905][ C1] ? copyout_mc+0x70/0x70 [ 650.332927][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 650.332964][ C1] ? _raw_spin_unlock+0x28/0x40 [ 650.332988][ C1] ? find_vmap_area+0xfc/0x110 [ 650.333023][ C1] ? __check_object_size+0x4fc/0xa40 [ 650.333061][ C1] netlink_sendmsg+0x76b/0xbf0 [ 650.333117][ C1] ? netlink_getsockopt+0x590/0x590 [ 650.333151][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 650.333184][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 650.333204][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 650.333238][ C1] sock_write_iter+0x2dc/0x420 [ 650.333275][ C1] ? sock_read_iter+0x3f0/0x3f0 [ 650.333342][ C1] ? common_file_perm+0x198/0x1f0 [ 650.333399][ C1] vfs_write+0x474/0x9a0 [ 650.333449][ C1] ? file_end_write+0x250/0x250 [ 650.333501][ C1] ? __fget_files+0x3fc/0x460 [ 650.333561][ C1] ? __fdget_pos+0x1d8/0x330 [ 650.333581][ C1] ? ksys_write+0x74/0x260 [ 650.333619][ C1] ksys_write+0x151/0x260 [ 650.333657][ C1] ? __ia32_sys_read+0x90/0x90 [ 650.333700][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 650.333742][ C1] do_syscall_64+0x55/0xb0 [ 650.333758][ C1] ? clear_bhb_loop+0x40/0x90 [ 650.333775][ C1] ? clear_bhb_loop+0x40/0x90 [ 650.333804][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 650.333820][ C1] RIP: 0033:0x7f7aa5d9e0d9 [ 650.333840][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.333854][ C1] RSP: 002b:00007f7aa6c89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 650.333870][ C1] RAX: ffffffffffffffda RBX: 00007f7aa6025fa0 RCX: 00007f7aa5d9e0d9 [ 650.333882][ C1] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 000000000000000e [ 650.333893][ C1] RBP: 00007f7aa5e35024 R08: 0000000000000000 R09: 0000000000000000 [ 650.333903][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.333913][ C1] R13: 00007f7aa6026038 R14: 00007f7aa6025fa0 R15: 00007ffd924765a8 [ 650.333985][ C1] [ 651.099522][T18601] netlink: 3890 bytes leftover after parsing attributes in process `syz.2.3409'.