last executing test programs: 4.582390088s ago: executing program 3 (id=10108): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r2, &(0x7f00000001c0)='cpu.pressure\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x21b, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f0"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = openat$cgroup_ro(r2, &(0x7f0000000200)='cgroup.freeze\x00', 0x0, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000340)='io.pressure\x00', 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0xfffffffffffffdcb, 0x0, 0x0, 0x3, 0xfffffffd, 0x59}, 0xb3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4.530140791s ago: executing program 4 (id=10109): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 3.327779192s ago: executing program 4 (id=10113): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = syz_clone(0x40240000, &(0x7f00000001c0)="41a4f76f3b", 0x5, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0}, 0x806, 0x200000000000c8, 0x0, 0x6, 0x5, 0x0, 0xb6, 0x0, 0x3, 0x0, 0x2}, r0, 0x8, 0xffffffffffffffff, 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088644ce0050000000000003c77fbac141416e000000144079ffeb18000440f050f00845002f2075f0039010586038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0xc, 0x0, 0x0, 0x0, 0x3, 0x2180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="edff00000000fcb1b4a2f7ffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x40000000) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x1, 0x28}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r10, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r11, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002d40)={&(0x7f0000001c00)="014a2286308a3d05daf0f9327a16521adfa47a153a655780a075ddc3111414be3ef2cd9a428198323860e16a2806e74e4d8c412897ed3724e4f6e22e70f18b287892ca0f1e9500b461e53f3f0288a8f3ce3c649b31787b9e592a6087689ebea552d18de302fc180657fa7924d3276e2fd5914d270330d2720a8c3f26ffeea574b147b9e9b74f5a3b", &(0x7f0000000380)=""/53, &(0x7f0000001cc0)="4fdc1217840e56f1af9ee4f8a5c482ad6103f41daa34f0eb5c8df8d9667cc8e3c3cc375c3e6632b6494ef02c0e111704ac22ffbfa8af3172426ea2a842ebddeb32ea8ddd5a8d1bceef68edf0997dc65e488942bf04a4be980d72dd28730ddc716383352df7ceb8ad93664ba27acef15dd725c1edcd39", &(0x7f0000001d40)="79dce65fa00c81315ce06be113555dab7722b4a3ba5fc20e5c8d47e969e57195f0119aa33dd028bcb098fdfc4f29ad58a6f76fcf094bc41d235153ed42379eb20c42f752b600b00829bbce773291642d8a265fe0ca06d6739d974073d0ca348d5a039b9388415e81639bfafbf8544693caac797408c0ea3f0c2bbc7387e73c09990a96feeb39a0813b4f451a270f2d9b6a7bd07af23abde017192918988d32297f445f501fcce84a8336766b99084dd11f445d2bd596a200a50915c4ab3bc0abef95216ed899091300b7529dcb217cd93261eb1987a944eb876e98e3d8c22bfd9e9061426c6c82735be93d86a7017251b05ab8b75c383df28e7b3734d78ae2af29d0036cac19601ba9829d1f22c1fde0add79923c904470fafc3ce02f15dc9ce09218502cba3048db3625c7c01269d5c26dc0c43dee8203194a1ef12e9f5b9eaa87cf4da72f3f66bb1d241263cf1f209d24e6abb8de48c380974de54a8bdce6a077b20925ae058f153421256ad3621b52ecfe05fa49c551dbf5569943d79ed78cb2a8ee49c0fa8398d986ce40b751f60ee90ecc56edcc5c9f9ce195538bc10e1fd50ba107c7ae2b0af547dc54a1009d082a9a4e7b8be8a8d9c55c4596e9621542819be81fffd05d2d536563cc8db0e32b67cd4486dc73e7dc547703b541b7cb8493e96c03afef921fe9ef3a739ca72cae1963525c519cd866879947276925d004a8ac0348040fc0929eab99d668dd3319f56de1583b0c5821b682a4c5194046b8256198400b437319c8c1d5b1ec04c32bbfabb03c92aeb8dcf7267003a993410394f501920504ca467c199becb978820354af6c2cbd0ca1c2c9ea07af20c616ce5b9ae0bc70e15e8197555f1aa0668468cbb1fdbf11ceeb57f9a2b7c3c1fcc12c7c9731e2fcd5806b6bc52b9beead193703bfa982f602ccb8ae086af1ca9282ba3e6e2a2c61ee5ee84c7464ce69dea9b085d30841753ee8048efc74e8f7e9e63d31e3c2c28173fed299751bcaeb429eb01a28ec641e93c11fd91aade2304e5a83c4c7ac0820e487acd0a62984b82b7e6331ab989faf7de113b28b78b356bf4f20e40e655f1ad6351bddfe42e7ac4647d44a8b595ca2240a1133eaf64d92639c3c7c1c4b7ae8dc4c5396d05f66ecd6d36cc6d6fa12d45a0be9f3570f61e4abdeac31d3c276f4b9e46770df90e01adebe56af106ad525d42da1f9ef67048ae46b2f139b7a3dc2beb749fc9bec23cefec0f437fdc770f0e1dc4abe778474f73d4716812bdea7ef5a9a117db162ca2da7bf2efd30c520750feeda8a6cf3caf78d47a1064156d8b26ccdd9dcb07c3a00fb2fb7a0ea16f875257ee63621bef09b508f11728ef8a65704541c25a467585b133cd33b47de1c97e35fe43932c8e369b2df41690862ad5ea22caaa6a76b5544265d3382912e89c47d74249e7609b545c63b536ee2b3504dda88e65b9ed029c3e3c779bb3289f137b3b00a6813952c49b198c970229b492d0f416d8697b7740e759ef3f9c09327eed0b890daaa85a12ea85b775632da99f27679f5d92dca9c091149e81f84201413cd206bf0b7f70a15fad366f2b2686ed4f666cc5d83c5cfe1bdfe608cf4e3b54a1ae06dcca160f56405b6e655d03dc2c4740ba51c94396079ba6906b23158615698379147edb51c5d7eab54140ed2da254f465af41649ad337980ac50627e13d5643f87b3d46f9cf017b98b52819697e9c3b7063b854c6f572fc94ad3603e1a75325c4dbeed6829451c4fb96a6d2acae2285ebbb954ceb79082f9d301128b68b02b5adaa3119925e7d6e08b91bccd80781365c098f3347393ef76b1267734289f25ef07e2c077d803aa20f95d8df50b752696497f83ee706ed871b2e25c86b9ecfe1f1a882489f7c268f963cb95c8b40c668d8947042f4dccad1b9d12eec28a17e38a2c7151e1115b58323df684d34afa58e8fe5a43af93405dcf1de25c0f1a82df17aab743d168337dea6a7cd87fdc81967e873e2c084dcc47727dcd5ff3122cd06e0efc1bf62e0c48669ada84b85d2b3affa860d8dddfeb1bc55a748ed408ae52e1404a5b2ac491aea89437caa030c28cae2c23a0083e9bb10bf1891a029789c61e658dcffa339cae464a76b2181d651f53d9ff21a785c1043b3cea3f8d9fdac0f2d928bd2fb634e823f02467eb4dc57df5378b2f4b9a11179e8165b8b542b5f7099be257f3dfc41300e9402f1d8b2ce33204ac4a28c2fb407d5c312b9a9cfed51acf7c386748334e29eabb54f9e55c1998c5b1e389ce1e2f9c8c04fa2f8d21708b1bff40b9750407f07a7fc64f106490c9d5bb517ba4f512c1fd6070861b0eaa535101ff6fe954e9273f407da53c19c43c9e327ec7efedd271e42b0ff05ead3a275931c3dd36e627bed8a097f9e58896c6373cb6b80f3f5630862f0aa8dc2a4b96f06057d2f3cace72b80cecedb90f151f4ec4101b0c82801f25992b8fea5bb2fa7acd84957c4442a761c1b6ecc70b856b3b09b72063fe05a5088bcf236eb5aca09bc7b44e05047c685f4bcd09b2df111be6ef626a633fc5947462927bb0b20505b91bfabc4ba1ca92e1030c409f066cfd45113eb74aff9d6dd4597e3992bd7920f0e204736ddf3af9e7c95bf68cb54d90d4244aeff7cb2d112afd36bdba00b6e44be74b1961a50ebb3e38d27aa7a08731241f33c45d648ab926f1b3feee3643a8aca633398f5f260c1f7b658c0b3194e3d2d4e06fdec1d69c198bd737822a38eeb4c2cc669a48e7463d79e3c3fcb52ac37e5d610199d3f1b4c1b7732201d912b337991dc803576194370b025593250349f1340ffb235199dc55041bf7608816bfd692a5785e8a7cfa8c0e08f80170da3a28a6d5d261b3b6b064b1c4d909a7698457470fd53cbc64a08f8d342c4e99b555117495842910c9c6dcde1fd5a805c05166320a36fc11d869cc4f02d34e4d60313959142957fcbdcc2bfb1593ca5514d27b051b7253e935d7d496619b9ea211532022999a34721a77e41756fbc14da816b98153f124efff2d4592d884833805ee7f6b32e52a89338020e6ee15209eba13238c03039860657409461f3f1bd1785844f6cef624dfdc824d3b16027ad05c64601b3c38931cebb1476e85bc839bc30ea0a85c9a84b9d5635b27a970e57d4046c2cf16d615a1c47c3498068386a2a2e87e9914c2cd16195f04a7911d543d88544be093f9500c78d91cd2a9481134c4b4f2455a855630fc51159bfe57954ba8236bfc741cb889628f610cabba61906da0c10e0f0f0482eceacf9a3600569a30a5b57947995ee78371d3b9cbc8d4bd250f25765d16b98c210df2f7ceed2ef137db0ecdee806d9aa41f8dd2e7ec9f5fb04fdc32258f70699e4e53a3b9c0514b52bd1ad4609e9eb0da79b3b11119dae2699ef62bebb730ea74638fd80e9936883dbefa6a277e96f52c14932d278d2b9d8bff3462435e0325de49cd777fa1fc9502694a596a3cd56fd9c44ba93192b7b8612098aafb33f3c03e16ae8e2c4fcd3a800ee5fbb1ce3f836513ac3da241217cbe7465f683643a906aeb6de886e4c9ca4b5f9ea1c2a421f32238da7a339c5ef9215b393c5072cb26a89264e40a3b725a237987bebbe4de4d7739db095ffb1cc01f1680ccfe1de0ba4e3446d42ead837453a549eed60266762713e5d1efc93559d431e9c5747aeae8c3e885efb13c50eb7d0ba1daeebb912676bd0c0befd06df92b6081d4905044245b08c152bbf18408d41796dc07623bd51a1ddb97d0086a06906421b06899bf5887b757d396c91fab43cfd10052e7c9094440b292bb4ce696b977081e937f7b44b1481fa8b0e1d2406006f44fd4a73748fda2d02f131e540de8228bd3e3aeaeffd7cddba29502e06fcf2aa1ecac2023e2ed73b98702af77c328ff6a28d0ec47730385fa8a42d2dfdb8fd1f0790a1bd4900464217d27a2b6321290465da7f7740e756f73e07cae6cab6d91666564f38fb6e7f000eaa09dd73558c411d44930aeb3a0c251747a45686d16d1e597a303bfb52682dc4d67a550266cc23e5ea1a3288fd52bcb86ef4406cdbe20227dcec48763c1e0bb3f27d26115a06f50fc6044ec9d778c58fa63851c062c975cf5f158d9a6a3bc057d0d2d81e1b9a525a5eb1bf528bfe9b801a82692aaac55ed7949b77132da5b6113ac6b8644ba69462e170c63fa074738817fea3e2e71b834f6af011a1f544f2af795504192903c3929df4500c587515689ff6459a6cb0306ec72825f89699b7efcbc7fe549fec5469da3dd0a98566d5bb8104927a582236991a767e16387a6b322077e606bdac43433c70d31a2e9c1eb912f1447b8ab5cf9a09a7d574dc2c108a5832466ddcbf64c61a968b3cddd867e2d2a7dd857344ecfd39288b413c75cf003b5abb216d17cc8690bdda41aa0946b6332217f9b860b7400f2d3964ab8afa5ff134e4d3818e76c72f089fb2ff626d4c57aaa2c949f282e0ce13e8263c74295b8e580553b2cad645b03e20327eafa90342a80a1e596f383fbb851921c4ca5bba7daed8076dc961b51f424a0451b604b224ffd56f3405c4424e9b832eaa703532851ede3698ef39cc546e335652825a1d6f9196915aa3718408c1b1a1ae352f92692697aea1afcb36f8621dad730c17f05b5dc1b2919cfd599857ce65ed918f00704f6dfe12c9a320d0112bc92ab975f7413e9bec072df1418eafe463f45b9f0febf73222feb2730dd4f497d3f1bae63ada8639435f87de2f891cd5b9131870d80cc9240f156ae77a0bfe9fbc7a9c1e742d6958741f8d1e5c284d07da87ed2018305f863923bcc691bf876d20bba2c9012ad8fe9bad98f5cd1667030d31ff701855341df8568a0fc773d8fe2333628c71ffe5ded6c0d0245076eb3a729aac73807d97ab71eb7d54225aed0e16748082caafbe1ab3ea6ff03ea167b986225d69f62f4b112f7629148a479c645ba66fffdb6ad7de40000ebe98e1e2099e9212d92af048b0b12cacfdd036c7133da049b54914d2504273ff865fd16f764b532a1e51b714c20c5925ffdeca5f966eda6119a7fe1332541995190d11e1b3200e1d69ee4d4557c4f0cabf8e35debb3dd90ac43f0630919ed22e213a36faec2e6ca8a9b201d9dbd930b4f0b96c5ac65b20e8d3f2dc9f447c314c0301f18914d836e5ce3eec1370152063d15acdfc673677a5a7320a74da10eff256cf3995fc494ccb2d21347146db5b115f1063a2a3e1e699e143bf32ba903c428749effe1a3b980362c8cbba064cee8c57b40e502ce47be162a6a3959163d1a2bd64509452b9a06ee074fe93919c4260372046411ab8e890a9c1a1d1155a21f80ae39e2fc2a0d0cfca8e336f2a910bd7546fd70215874d3c151cd2fb66092064ecb8554fe9d708fb0333f7ecdabd0bd5b4a6a21c74c70157dc43518c84f7111d684e794e8d41de0f939fc6dc4aca4453626e7c443706a3693bd980e3d7b267614fc84fe7806a72089c2d659ddf334d9e64199c54a8603a83990510c28b6c762d0e89103bbfb4ecb0e94342499d5746d56cd4131c533f92acdc0f7d87ff774211a45f0ab2605c9116b5922a3c97d9c262002bc3d068ed04330607a86db4a6623a40e92d395bb7f95771ee0de442cffb24bd93478fba94d7b6778f31232f26d90de98002162bb4d29cfa920629ceb42097347cecbdb50d5c6a6f0a4cfc2f3f35382d4e874a4e4cb859a8fff5bec96be531bf7dbc9d53f6025c40ca731246ea622f27cb5a1174b033c1bc93b37e6c5186758747a563655d588bc5b2f111a0c42dfc13560d5ba297256b4e", 0x6, r8}, 0x38) (async) write$cgroup_subtree(r13, 0x0, 0x9a) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x0, &(0x7f0000000380), &(0x7f00000003c0)='GPL\x00', 0x2, 0x5f, &(0x7f0000001a40)=""/95, 0x40f00, 0x40, '\x00', r11, 0x25, r13, 0x8, &(0x7f00000005c0)={0x7, 0x40000002}, 0x8, 0x10, &(0x7f0000001ac0)={0x4, 0x2, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[r8, r8], 0x0, 0x10, 0x7f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.300830783s ago: executing program 3 (id=10114): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a10000000e8fe55a118001500060014b9c3600e1209000a0044000000a80016000a000140946a", 0x3a}], 0x1}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x45, &(0x7f0000000440)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/time_for_children\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x3}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x234, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000001240)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x1, 0x3, {0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x48}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000011c0)="043fec9a2499787e47585caa9fa5a0668b3f03d7f1241e8b3f96aea4e2b2984f006f1aba7549df9d25e12a8a1578675e867dcf749328921e86e337167e1ab03c5fa64055347c0b35601090d6aeaa96a374f26e5e", 0x54}], 0x1, &(0x7f00000012c0)=[{0x50, 0x10a, 0x9, "26b8edffe8041b4e032a5a96ec47fdf0946f5856944eef7c6c602c91abe499b481c3b2ca6815c0f265bed85266eb84c8a0d5426d310679e0d3"}, {0x40, 0x114, 0x6, "e6ed0d2b2a958aea04c673cee4f9a5df3e36fca68253cdf4d29a9009206d3b7b3214df93141c1e24959167c360"}, {0x80, 0x1, 0x5, "cedad1f891cbece2f563ce7506736bf5cbe71ac77e27299dc53a6b7c9859f56ab9ba92e54c92ee1de6f77b006518f5a3469e31cab4cff94a93d3daa0f1aadcd881d94a307e7621fedbb29635aa79a0dab7be4dcb7c35448adb08c61d24d9390bf3a35b8cdcf1b54b08"}, {0x40, 0x116, 0x9eb, "b599c78aa038d7551c75ee3926dd26b27cbb17e4cbb226b342670d61d358c4a8b908fb1a2db8ed30c981bcca8a34e0c2"}, {0x68, 0x11, 0x10, "0aacc8f2cbd38924feef778dfa1afc0d96f97eb98ba55c3f78252112e183aef33c99c61ebe85316b2ffbe652bb71a309f1aab57cc40fa08cf7dd764947157b307c7678f182a1a5cd51e2b5f8f63e26c889c13d2e93f61a"}, {0x40, 0x181, 0x2, "c68a000f8c0999b3b815ab7c981811e2dc24e14885ccf73905067a9cfff01317ba6b11919cd158d4e21db8b11b"}], 0x1f8}, 0x2004c080) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x18000000000002a0, 0xe80, 0x4000, &(0x7f0000001280)="b9ffddc1ddcccdde75537d5326a4dfff70bf2dfe443b1b5e2a9080f3", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 3.241727056s ago: executing program 1 (id=10116): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000003e000511d25a80698c6394090324fc602f6e354008", 0x19}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r0}) sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x81}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000300)="5f0c4eedc7325ed9ef951cf349eeb44b858d40fb5ae7709c729f8a1749f192ce18dd4b21bfff9bc2482b35b7c97e44b8b065fa131c4ed9d65474c8b9af48ee0872b5dfb0b2a9e915b224ed4042838f73ef55a8310a33f670e7e1532512af3c87da060dac6aad50ecc6b83ec459ffd3e37dca7d038c14d3b81d9ed13cdfbcfa1727d49a23d5c0dd15e58c5cbc0c121f2260d50de1a90057aa348fca708a6fb4123c5b405d2728f8ec589ff05a3549", 0xae}, {&(0x7f0000000240)='O\x00', 0x2}, {&(0x7f0000000500)="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", 0xfa}, {&(0x7f0000000600)="e62d70b77739188144907288d9e2189b9c430cd2adc8bb7c9a3df584f23e21031fd8ddc5cdd1517fb5b81a06498dca3df089bb3fb057faa686f8c78125681dd7d858c7f47723f69f97d2444c25ae85b16d9292df42a0e35561410f442ae3394ad1526f9891b1eb5ddec18c9420618d85772a4c9bdd7f4a9819a193a794475b6c139d5f6b1d9da863b288a0fa9a0ed8a8a31305c484510dbc08bf2cb5554d24893a7dd285", 0xa4}], 0x4, &(0x7f00000003c0)="855475ace97628aabf7574168095c37f8329e41a85f6056357abfad9c6fc8053697220c908903c82e540145abe072004e7c6046510eec2967974d96180e3cc94cd072ada2bd2de22f98575acadebce91b11b6f872f4211879e41e042783c7391ab9469ba31c045340f947d5d7d2f", 0x6e, 0x40000}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) 3.224472877s ago: executing program 2 (id=10117): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x20) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x7, 0x4, 0x4}, {0x9, 0x4, 0x5}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x1}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r9}, 0x8) 2.344766251s ago: executing program 1 (id=10118): r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x2a, 0x0, @broadcast}, 0x10, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r3, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r7, @ANYBLOB="965347a200000000b702ff0000000000850000000100000095000000dfff0000cb83ba3144f0f8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@float={0xc, 0x0, 0x0, 0x10, 0xc}, @enum64={0x8, 0x5, 0x0, 0x13, 0x1, 0x1, [{0xa, 0xfffffbc6, 0x8}, {0x2, 0x4, 0x62ec}, {0x1, 0x40, 0xb}, {0x2, 0xd9cb, 0x9}, {0xa, 0x7fff, 0x8fb}]}]}, {0x0, [0x71, 0x2e, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, &(0x7f0000000d00)=""/136, 0x75, 0x88, 0x0, 0x101, 0x10000, @value=r1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x1d, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @jmp={0x5, 0x1, 0xa, 0x8, 0x0, 0xfffffffffffffff0, 0xfffffffffffffffc}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0xfffffbff, 0x91, &(0x7f00000002c0)=""/136, 0x41000, 0x4, '\x00', r3, 0x25, r8, 0x8, &(0x7f0000000200)={0x8000a, 0x2}, 0x51, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x0, 0xfffffff6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r1, r6, r1, 0x1, r1, r1]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0x20, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0xb}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0x5c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xfffffffd}, @cb_func={0x18, 0x5, 0x4, 0x0, 0x1}, @exit]}, &(0x7f00000005c0)='GPL\x00', 0x9, 0xa7, &(0x7f0000000780)=""/167, 0x40f00, 0x6, '\x00', r3, @fallback=0x4, r1, 0x8, &(0x7f0000000600)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0xb, 0x9, 0x5}, 0x10, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1f, 0x4, 0x3, 0x0, 0xc00, 0x1, 0xb, '\x00', r3, r9, 0x2, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)="fbe34ad0bd5c9a6c88f29f90137940e5f25c5b0924e54523001234bbab7d9b2d62dba39895dabb082883e11eebea6e07bdaf42c43118708e5d610246b333d8c2f9fc29b61b1dff5d1ab744cf82705b80034bbafaae5c7782ec4fb4df3fd5834af20c669e9ee1de565a82947bd6296d9d7215bc62dcc4d0d234df0344b660f5d13edac408219032393603e3c763d2d0f5ad13dd2869b646a88be09f13fde2a5f4e05cf4bde23267e09cb182bb06", 0x0, 0xb, r11, 0x4}, 0x38) syz_clone(0x9040000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.222256217s ago: executing program 0 (id=10119): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b8703130000001f00000000000000080003002e2e0a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48008) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2150c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0xb623bc70a3c2813f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000020000400000"], &(0x7f00000000c0)=""/60, 0x1a, 0x3c, 0x0, 0x7fff, 0x10000}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000281652000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={r2, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x18, &(0x7f00000019c0)=@raw=[@jmp={0x5, 0x1, 0xd, 0x7, 0x9, 0x80, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x99}}, @map_fd={0x18, 0x5, 0x1, 0x0, r2}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x80}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000001940)='GPL\x00', 0x401, 0x2, &(0x7f0000001a80)=""/2, 0x41000, 0x0, '\x00', r3, 0x25, r1, 0x8, &(0x7f0000001b80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001bc0)={0x4, 0xe, 0x1c8000, 0xd23}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000001c00)=[{0x3, 0x5, 0xc, 0x9}, {0x0, 0x3, 0xc, 0x9}, {0x3, 0x2, 0x8, 0x1}, {0x3, 0x1, 0xf, 0x2}, {0x5, 0x4, 0x0, 0x6}, {0x2, 0x3, 0x7, 0x9}, {0x3, 0x1, 0x2, 0x9}], 0x10, 0x31cc}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) sendmsg$sock(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001800)="d48cc0f8af3a9b27f9a2298ee3c4a000d767a83866359ece06c36d5af87c9087a6326963e166e43cce977b8a56983c716ff090800d", 0x35}, {&(0x7f0000001840)="99ec800b5f0069170b0cc1a2f0868e04e22d76ee3c8afc0f5c45fb973513390099e91582836fbd9a996eaf877750c150bff88ea56a1d32ffbe8fc42deccae03b8dacb61053673ee37e63c13cd0c8a3b02427d8f1aa4abd9fe49110bdb0a6a2021fba6da59cb232afd688907617cdb32ef83aa52d71e566657173b08681d2ef08f893c37afae4294e26260729581d440580d6125cb8102b006bd5d153df2681570d87645f86d964467a0ca864739cee6e8520c43fea7e47cffa", 0xb9}], 0x2, &(0x7f0000001940)}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r4, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d40)={0x6, 0x1, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0xb}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000083cd000000000000fdfffdff850000002f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x14, 0x0, &(0x7f00000017c0)="e09f547ed3f02dfdeadf8a9ca9c1c5453ab667cf", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_ext={0x1c, 0x8, &(0x7f00000016c0)=ANY=[@ANYBLOB="180000000100000000000000d04d0000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000eb74a571da0d426bf8af585ed3e31937c53ceebf7cc01e9395a9defaadb579c3eb0db199fcc4a8390a4a343d70e16a860e4c3a94f5bf7f2a3e652349011ae514de011bdc4c93d9784dc97e657b6ffc5527fa9204e5842086d4360f977616b1abfc6cab7abd559a4cc629f9bbe47b8536ed63ff38f50e104fbe445a0c722b95f2fe56ba0d939d21204130f37326ddba4ffe000a10354174db255b7803e115b9da98b3851705fac0ddd8"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x1000, &(0x7f00000006c0)=""/4096, 0x40f00, 0x80, '\x00', r5, 0x0, r1, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0xe7, 0x3}, 0x10, 0x27552, r6, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=[{0x1, 0x2, 0xc, 0x2}, {0x2, 0x4, 0x6, 0x6}, {0x0, 0x3, 0x6, 0x5}, {0x2, 0x1, 0xe}, {0x1, 0x2, 0x1, 0xb}, {0x4, 0x3, 0xa, 0x9}, {0x0, 0x4, 0x0, 0x2}, {0x4, 0x4, 0xd, 0xc}], 0x10, 0xbc3}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) r7 = socket$kcm(0x10, 0x2, 0x4) r8 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2c, 0x3, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="5c00000014006b030231a6080c000af32c0cae88539602000f00e5aa000017d34460bc245111e4f2072b540b0000001356f475ce36c2d13b48dfecf46bb1c48fe13a5e66e672000000008037e78638c3f95ee1e61ad3edbd00000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x34}, 0x90) r9 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x11, 0x68, &(0x7f0000000640), 0x4) close(r9) 2.221055187s ago: executing program 3 (id=10120): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x4, 0x1, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x80000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xd, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000180081064e81f789db4cb904021d080006007c09e8ee55a10a0015000400142603600e1208000f0000000401a8001600200008800000000000000100a0e408e802ef52a98516277ce06bbace8017cbec4c2ee5a73536138f00001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb3adbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5d9001901df60e1b6649682e1cace81ed0bffece0b42a9ecbee5de6cc0000", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10, 0xffffffff, 0x80000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x18, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904", 0x10}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x33, &(0x7f0000000040), 0xcf) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000100)={r2, r3}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x1, 0x0, 0x0, 0x0, 0x80028, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x10c002, 0xac5d, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1fc, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0xfffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x10000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000000c0)="bf", 0x1}], 0x1}, 0x45) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x21) sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001100)="3d1fb6", 0x3}], 0x1}, 0x8011) recvmsg$unix(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x2e0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008e04000000e00001100630277", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) 2.219108957s ago: executing program 2 (id=10121): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd) mkdir(0x0, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x940, 0x0, 0x0, 0x3}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4}, 0x0, &(0x7f0000000340)}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x4000000000000000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) 2.119224653s ago: executing program 1 (id=10122): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 2.118909753s ago: executing program 4 (id=10123): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 1.887649654s ago: executing program 0 (id=10124): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x18, 0x1, 0x1, "ff"}], 0x18}, 0x20004004) socket$kcm(0x10, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x3c800, 0x0) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000240)=r4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x20}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 1.729726332s ago: executing program 2 (id=10125): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(0xffffffffffffffff) r1 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') 1.726637042s ago: executing program 4 (id=10126): socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x14, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x3, 0x66, &(0x7f00000002c0)=""/102, 0x41100, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1], &(0x7f0000000700)=[{0x5, 0x4, 0x10, 0x6}, {0x3, 0x1, 0x8}, {0x5, 0x1, 0x10, 0xb}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) r2 = perf_event_open$cgroup(&(0x7f0000000500)={0x6, 0x80, 0x5, 0x0, 0x8, 0x4, 0x0, 0x401, 0x88000, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffb}, 0xa000, 0x1000000020000001, 0x60400000, 0x2, 0xd872, 0x5, 0xf, 0x0, 0x400, 0x0, 0x9}, 0xffffffffffffffff, 0x6, r0, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$kcm(0xa, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000880)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff484f}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000002000000040000000100000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0000000000d3893699708f671a640400"/28], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0xc, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r9, &(0x7f0000000500), &(0x7f0000000400)=""/198}, 0x20) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) 1.621991208s ago: executing program 0 (id=10127): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="a2", 0x1}, {&(0x7f0000000000)="71fa7e91e2e76fa96220d626b9908ab80753c7472d16c6570189302077555c254f6521f15e97034bd69b5f7c", 0x2c}, {&(0x7f0000000980)="1509c73bb016579c0f014547ce68f1138651059f4db8523028f84e99f59c93361d6b1b124dce4a4ebd1d9afddc4bb4a82c524b1b31d65f14d58dc21e0d4be1998d53008f03b2daf1b019ae4d1ce0405b1087c6ead180e28875b5042ca58efcfb6b1125a5233e5db8ca764ab477618059ffb02b3f98d7394961b351f0af165de954f97cd455698fabc4e94fcf329cafd3c85869cf860822d3e6df0fa8db64d23124f3a95864", 0xa5}, {&(0x7f0000001040)="eaf0656e188e20dc650beb85d23cd0986ed012e87d3aafaef7f7aee778e912c31c99bd03efb0c81692ff09a4ee0e385f63a625aeb45361b524839cddf035e563c63b3a560c2e1bf4b725fb130473c83e7ae37af984e10fb8cba2da6dfd40a8b58079106251d0a901e62e534b708fefdaa36d49f272961e3b9aa38936ac61de07f44a93af48164c94f0ac13cb22d7b9f6957d85eb7a6d0e0b8021ac1a7a696a6a56275c5c8b5227175851000f8aad225e67b3e405a50aa360ebdeecdd48c211132b635b33e5b20fdd106c4d9db3299963ab1abd0bbc186a250e14f2bb63614aa32b05a5ea36a6e95f84c213a7ac683ac191ad26ae3cf5f91777d4ac9de0c6bbfa9d4c089f010bc4c64d1249415f8303a732a58bde5bcc8a796cefa4408e44751d728e9c0237541f68e4c3aaabbb62dc5db0aee12ea3038830202e388ce97ff112357013bbdd5f068fd2df160d7aa7cd8195f75ddd9230592fd9a78e629959f474bafa034be96b7caa5eb46cb8de1f86c6a841c22f6cb82ce94c84a798b4dd5dc775edd3717740264bad94221a1993d1876a1420b969d9a1049b44735af9399d10f71eada563cfc9335be6429d79116db641f287d98a6af83d211f8db125e14a315fadfbb26d971d2ab1f17d39959bf23a0b79fd50cf78e92c482c7f9b6bfd7756804517995770c19677592f2391c2751f30ed24b235173f77b28452165a865aebda3ffb428e7c500a9e3ebf7d1ec34e31afa279ad2efe0630d772b76d7fbc3bce1d7d59033fdc268929972f3d18c78dd7d0c37e4c19953d73616197ff144b0da146007d14cb52d6508889febe940b52d7f14418ef1fb0912b827c377a0ef761b871fa65766bb20dbe3bc42d609e6af16244cde28085981a73a20d9be4a1f1e2a3606644b1df35cebfe9562996a6ec3dc06e9a9c88c4d8f54bce49721250fef797c2a46b2de884cd582a975778cdc17718f472173287738895d6365340de21c7ee2f5254d8aa336cdf6c746bfd4014bcee9ea89f6d498cd2b8ce3b282a9a73a2e7859e2946671b0dd9d95cf8a17224f40cd405319107657c41b82474aa8cfc2dcb478d49b0055c2f97c8b393ddc47ce4c19ebf44a04c32dd3ce88a1b073f30d779940ad55e603ddb179c250f6b96191fe7e9db88151baa01349d1c53929e626ab8dd75adb4f203f4c136750944684f0d9e4e6caeba09c46a4d253427de855005f024fae41afae476de3eccbd96fe129f945dfdd9c042f52b7aaee005bba5148763f0e0d019d4a400ff364cb857467e4e93524194e8b46765eeed21e2121697ff7231815679e7cb68c82ae457ecba1d7f8c8e2081fd5d41b4a6ffb9f9f1d1c1353212f7bd009e031de74943ee325f65e86f2ff281c090d61db963130c1fdb9edc32db721a17ad6fd7804df05641bd6bfb0cfca558921f0820a91e4cb6f1da1035ec2b82ab9461d199d728fbc2edbbfab36ebdce66d41bfd9950b75665b9bf0fad436f9a71b2376a5d8e2d66c4b1a2326ae2f3925aa5d74a6a24431bc17b680d70a02d0074df86dc41798ecd3fe55414829ba60128e3cc327aa746888b63cac23ae8de4aaf3d365acf098ce4b245a2d381b5929da7121801144e50f5393c5339e0bd11b600199d687f5412de1d1e8332eb58266f2ceaae12186260ce4ccca354209593cf56603b8bb8ed77ebe0771e686ff1b74a70762978f7eb44615f66e31cd5f187f496ecaf6b00ef6b2c1a975bc3247900f5784398b876bff4e5289023420848d574a461f65e95060f8caab30c185e4acc78fadff0a2baa5c9bf03a63fb503bdb167d34117ec604b4076c584b252282a5e42b53208ea666f0d7c3ba00f82e8e2c112a6100887dd05c52353a5cd7bfd4cec0e07bb3e0a222bca55905e244519ef811cd8c2c1e52443803bbc33a05d1945a65e927c44031ef99d0277cce181e0c928f0b12e40fbca435ad9654fe0af83d9a723eafb6f1496b794a7ecf176794d16bf68fc084ff418b1746061cf567321c9989acc1bc39e9d1d706571bc80eeebc9ced4241feda2d44ed76912b41bb0f36f02428a6024a5d8dd229fca65c8235893eb9b646b5aa05735b701f85d7882b033ee60b5d9e2dae5aed070e8bface2261559d10e4de898b7ad0cac3d6f0f72d55b8a6a5d58c85b4d8228f29fc04a0b8a90cc23f2e2ab586be58a21abbdc3bf4291de33643182cb9360043a679746e7843b211c43533625d1b0b3fcae9b05f7f217d543d337e626404019d2422e44aaadd9bf0726b52a158a6f1c20964eca1f521695daaff8cae18f4290362c9744d54944c751f3f44dddda46f45ff033c695f09e988fc5cc2cda4c8299bf92245e8ef3f37319d52165cda3c41e58588f24e05c41a91a0dd352b9185bcc35dbcadcc6144eca0c7953f805182bebb04ac5d1038991caf6b8f051684a1ad663cddc765698d2b9b17fc0baf4af64c2d4e56c3949d8eb3193ae7d6c6feea72bf03e4c97593fc2e9ee7a5242622ff78ded8e6bf2983a4d8486bbbd5f00fb187b5879e0c32f08692ae0ca98e48149c56e086abd29bafc42da3d991b5ba244af46e9878fd999b0c9867520149c82bbfe8d1ed1c25a6a6085309a60dc0cace4c596db8cd2de0e40c88c79a4c9957c2c50cdc4854e47a3f57a51b9e61658e5ba542e20c6d604cddd047d681bc6e42b2cd0b855bbdee96cffa8877d84fbdfb34de8c23000ffb6af77b1b03e9fcd5409df11a5ed6560a05cdbe0017ad4132b88f96d1aafb67dd43ed0de5e82dcceb976fc989689687c27f60bbaad5d89be5616feb52e627d2c47b1cdb2817c24f8eb1caba4f43cb2ae8cfa2f3ff5a3adefd551ab430cafc65be6866098532e9cfd71842162088cbf95c0b923d75cb60a3ef1df80a05cfeaa0f59dd610822a8a5a960344ed2828d0c9591b79e0aacb540ef3ebd5e6c64386e32e1824ee8dd3fa8f4bcb2d7fbb13f4700118acd9f2a3b4e03ee82318b6f75de7ea5817fba563fe74875c35af172d34a9b45b469cb33e9d26c25e3ff55436c84d05ad233c19e439b916ec3ca4575dadd8a96465fbc37e2999e91788b300a20ec01c66da821c4cad0ba21b06300e471cc05f7a9c64cf4837586f39549f9e3e81caa0b4e359ae7272ffe29b5f7158db1fe819d275465b80d7aa7b048b98dcfc320ac51703bd30ca152d69c315df3151e9644c1384f6541464951d2379f45648661113c7feda259cac413bd7816ca9b653eea3c43c709b26101eeb789e0ed97e4569c5bd507eee4d6090243090b6b51a7c47b13e36f2cffda98f711aa4f2535506a82eb298957bc2b76fbe3ed22214049a5a77cb96d7f7b8cbc1564aa5a02ecef8cdf5a514db78ea48d90651e79be79fee1d016e0ce044111fc474970dcd549ecb40eca4d1d94abfd81b6ed6fa86d5dae2aad8a57140eff385ff734b372112ffd69b7244710e53157f636204d77184fdbe3476b27f2d9bb25a7dc670676fadc7143aa14377153c5994d0b0320e517bd6836634d00c98653cd3e88e3e40926355487024f7b2bd1ced4d35fd2dc1872e28ba209195118c250909c3189e9191f24151e4cf339ea00a4e0149e5ab2494433cae7026d175fee1d2ddef09bb6e5307952e313280c21258c8f2fbb65b322767700607d92678fb54b6d955f1942bf3aceced40b2de095f0a924d38414bd4f4361e8fef77c1a697efa691b4b4d8f302ed006a58b2edd52c1ad17892d9a850c628fac844d987d29aa6d98e37e70e5bed6bc230e3aad77e9f1ace6ba5c7b97425e63558145c56958ca49ecedc0734cdb0da5cbe00b2fd83ff24da82c1ba90bae235177fe7b42f1e63a217f5ae5b852d8e68e2d5a88c8ebe24918a36d1ca0c1f7e9cd270c895e7d02a53c970572ef027629834238913580c267caef5fac4bae297f0013df1e48ae3762b4687265d75d0d2292cf8c6877c273dd8d214abee2edeafe91f01b15f5ba86de8419670833a4ab2c2c4f74f250a3b147164d2c08a693cc73e177d3803a7c72da330636df031f40f23a98adb1edcd3b9c569d4431917635d459641395447c46d637f275a5bcb302b3cac3fa3a7769bdc249bf7cd8c36359cc940ef0e1cef6e70422af0640b77a73a446e548e022a06b0e81779b26887b500f7e819f211e1ca4e9cb45decb06cabd78afced86c6e4fc014f5bfe8d1ad956e1b564b735dc59d58bb7e0abd90c5030e9a13dd5658cc8fa874dfaf0fc004321151e56ffd706997ef235a14eab78c7d9740d58235d7d67c11aea3be4ef3e1976fd3d7aef0c3e84a8fc19f29e6935fbdbf587d69cb0365599468baab9e93b24e765dfe7516f7906a9b2e0234feb1c458e7c76fd59b2f4d670d4c77d1256a2919bb699563b3c1f31929051454d510ecb0b902c8697922fb654e40ae076509bc1c91237ddca2c60306908b2cf3cfcd1baa965aea77b006cf2e7deab74c91d05705f7367eb1c56851d658daf028b0178fa993d31e772118edf01b7394516b6cf4daf1eba4a663db48b255b67c16d7b56847b51ede528ccc02b30d4d0d9ecaf289550e1e60adc65587d8cebb7d110a3560dec43e21fcd7a13a175e06d208375716d2669d47982befd5f639160dc32e7fa5c208ce75f3aaabe852889c0a1571664ecfdcfa9656c7fb402f465b9b907ec140bca5159fb8b9209b283cdc69cb44909f0ee110cf7be40df54c93b6e7149056e58b35048a58fedfe372b3b4d270519f73bb41b5ee7c5ef9ad500c4ae47d43146c9f433faccef4e842b580f3f4740120be152fba16a787c2d133c702a9216c3d67c93e24f309451a8976e31ead77b1b1bb06a8274b068ca6c1550d01041e54c47403322485f3a4160b031d6f281d3156aa5b1c754af1f75c9560ca4f79ca316e8b35cc2b83515851a9834eab54c047682c9e1b0f83f1e8d149488a453f834486a58c09d8e25ae83dbe459b187bf9eace98baaa584d12dda597211b80b6d948efd28976ac838f794d8f4105ba8da9e9b6fbf6d2864f1515c8c88c3c54e2e8e177300b478bc96ec3364a01433c1a83612c56aed8fc6013157ebdf4e3bbe7275c0a94ada9f5ed26d3b19c9dc17365f7d59489f7dd1a7488c96876d3960ec8bc27dd1c0afb173723533575bfffaf08327125acdc731aed9c91dd33d277201ddb0761de7e6eac24e1abed1b669b81ad47b41f8bdd273d9a0a01d68424a5e653ab297509a2cd18fde636da0dcfa185d229887ede306dc78738b5972f350832c4fd2e1d06645de4dfc414f3c1e3a17856dfd3ed8b1d594a0825185c57390f7b9e238e6312c2f8068633f8b7ffc6324191d1539c8c9dc28889a7c3391417208c412b1179772c8dc8cf6f2bcb96b394afd221453dc9c3741a53e66bc100e4f781d1645f52fdb115b1d9dce1187cd6d949f3addb6acd3f2aa8388fc34b0e19bcc04d25b9c20a1bedfaf837b450951cfab5c31e7f73dcfa4bf08e1815a8a8d6b3ce3693777b5791c5520e1f34b1bbff70a0243a2276acf805926dfe1f9464bb1a9a3f87f3b2e251f113d3a6bc2d056fafe0ec626ba670c08e3e2809eea039af1c83963e9e9aaac0e2b19599e9e54838d97756a44a9c314b58bb945bdfe32a19198503163ef41d216f19957c21f84db029fda6c51eec33361f738c6687e52688e64a9ac21c3bb7c9424c544e3fa1d23b58bcf250d44969bbea430d13d9b90c0cc8375fe695c89fbec1477b2ebdce3d328648a97282bcd593a2d8bac7cbc02b60020e7a048fd17296eff86cab3814444e904c4219cd8bf019c098a2c1ad2a60061c19cd373481f6d7170d0220cc8290aa3138", 0xff10}, {&(0x7f0000000a40)="527db5733b0cd5dd4b72b19db08e0b0e51fc53a7ce800766a4e9ad914178204973712a18146824e7fd3df753528906b15382f383ce0031356a95a7f7351ea1b34a61ba4d5226e9257a21e82b9608496c005419b57c64fbba8b3efa23817b6bd3279187db573a5e0160b8de47a1347e8167a62c628fdfe89055a229c822b8743bead0903b5db6275a54cac4d046d8ae27fc6aa2e343553754a24bc20a93924ee2a818de07dd565624c4c67821ab671bc5deec36d4e72943ede789ae929b60e86473f80d86498030c5ed0345644b46d78f88213378819cceba8da4ccd958ee4ef21befcce0f71d84078f4d53ca2f70d07cdf4ee9", 0xf3}], 0x5}, 0x20040894) (async) close(0x3) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0xfffffffffffffffb, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000280), &(0x7f0000000140)=r1}, 0x22) (async) close(0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x4c, 0xed, &(0x7f00000002c0)="d1f9dce793a602579bb5ff8230d7286677d0e3270e126f404608a26cbbc1d19e623eeb2b0fbff0f05f344d85dd410305399a6dcea38671c48b9dd08fe0025254333cf6ebe4b83af7069569d5", &(0x7f0000000780)=""/237, 0xe6b7, 0x0, 0xfd, 0x55, &(0x7f0000000880)="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", &(0x7f0000000340)="0872384cda1fcbef4fd7e4b836ccb2fcd4eaf34aed9147709f13d8670a9b39824491e3d9d50d6d962eabb32e1dba93719cb7989b313121a23b232b14e4f06866865480ac7c7f1fd0f0e69a9aa5e9c9dd7121461df2", 0x0, 0x0, 0x8}, 0x50) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x2, @perf_bp={0x0}, 0x4440, 0x0, 0x0, 0x4, 0x8, 0x0, 0x3}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x88) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x5) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, 0x0) socket$kcm(0x1e, 0x1, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) (async) bpf$ITER_CREATE(0x21, &(0x7f0000000540)={r5}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$kcm(0x11, 0x3, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000500)={r8}) 1.57925539s ago: executing program 1 (id=10128): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x4, 0xd6e, 0x100, 0x1, 0x165a06f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x7}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYRES8=r4, @ANYBLOB="3ee901"], 0x9a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0x1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0xc1, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x7}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x4, 0x10}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000014c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000001480)='%ps \x00'}, 0x20) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r12) ioctl$SIOCSIFHWADDR(r12, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="edaf827280ee"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x2b, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1b29}, {}, {}, [@call={0x85, 0x0, 0x0, 0x55}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffddc2}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0xfffffff4, 0xdd, &(0x7f0000000640)=""/221, 0x41000, 0x2c, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000780)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000015c0)=[r6, r7, r8, r9, r10, r11, r12, r13], &(0x7f0000001600)=[{0x5, 0x0, 0xf, 0x6}, {0x4, 0x4, 0x1, 0x5}], 0x10, 0xa0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.477883945s ago: executing program 0 (id=10129): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="09000000080000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000), 0xfdef) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socket$kcm(0x2a, 0x2, 0x0) (async) r13 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r13, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) (async) recvmsg(r13, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x890b, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40000000000000071103900000000005ca00000000000009500000000000000e8cee8e67eb9b5f4af49e33e65370c736cc80e6252f36272bdc2c93d19d4deab1c8500c9af76150842a3ef270f3331413b2bd967664194cc12cd2cba871232e6a48eb61dbc5752bb53e7a29c3af266f88275fcd30baeea255af2f6cc9c174f49a80c421d30b6b3c5df79c5a8efcb335f35b40241f2f093b6b395cc626d1152ec7c8a0d96ce72fda3e77f03618615dc76c37fb699aba8dac2"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 1.291105584s ago: executing program 1 (id=10130): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) r1 = socket$kcm(0x10, 0x400000005, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000000500000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9557ed387dbe8abc89b6d5bec", 0x0, 0xa71f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={&(0x7f0000001800)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000c00000001000000007f000e0400000001000000c500000000c146c4d850ce72fb31e500000800000000030000000000000e010000000100004001000000000000070000000000305f6161000030305f0000"], &(0x7f0000000140)=""/28, 0x5c, 0x1c, 0x1, 0x2, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001540)={0xffffffffffffffff, 0x20, &(0x7f0000001500)={&(0x7f0000001440)=""/79, 0x4f, 0x0, &(0x7f00000014c0)=""/29, 0x1d}}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r10, &(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES8=r11], 0x12) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0xd, 0x0, 0x8, 0xffffff49, 0x40000, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r13, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000001880)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r15 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r15, 0x5411, &(0x7f0000001cc0)) setsockopt$sock_attach_bpf(r13, 0x1, 0x41, &(0x7f0000000040)=r14, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x8, 0x15, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000090000000000004a6e00010018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000003f607000500000095193000ffffffffbf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xef12, 0xcd, &(0x7f0000001340)=""/205, 0x41000, 0x12, '\x00', 0x0, @cgroup_skb=0x1, r5, 0x8, &(0x7f0000001280)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000012c0)={0x5, 0xe, 0x40, 0x7}, 0x10, r6, r3, 0x5, &(0x7f0000001680)=[r7, r10, 0xffffffffffffffff, r12, 0x1, r14], &(0x7f00000016c0)=[{0x0, 0x5, 0x6, 0x1}, {0x4, 0x4, 0x10, 0xb}, {0x3, 0x5, 0x10, 0x6}, {0x1, 0x5, 0xe}, {0x1, 0x3, 0x10, 0x5}]}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) 1.048087877s ago: executing program 2 (id=10131): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a020000000880821fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 939.723162ms ago: executing program 3 (id=10132): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xc, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x20) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a10ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x1, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x7, 0x4, 0x4}, {0x9, 0x4, 0x5}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x1}, 0x28) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r8, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r9}, 0x8) 849.764287ms ago: executing program 0 (id=10133): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c040, 0xac5d, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r1, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000380)=[0x0], 0x0, 0x9b, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x22, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0x7, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d", 0x0, 0x1fffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000007, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80005}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r3 = socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x94) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118002000fe05000000000e1208000f0100810401a80016ea1f00360000005f54c92011148ed087", 0x43}, {&(0x7f0000000500)}], 0x2, 0x0, 0x0, 0x7400}, 0x40) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0) 794.827719ms ago: executing program 4 (id=10134): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000030000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000040000"], 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000700)}], 0x2}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001d00)={r4, 0x58, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20004044) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r5, r4, 0x5, 0x0, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x17, &(0x7f00000000c0)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x9, 0x4, 0xc, 0x40, 0x55}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xbc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000180)='syzkaller\x00', 0xc, 0x11, &(0x7f00000001c0)=""/17, 0x41000, 0x11, '\x00', r5, 0x1b, r4, 0x8, &(0x7f00000002c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xe, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r4, r6, r4, r0, r4, r4], &(0x7f0000000500)=[{0x1, 0x3, 0x7, 0x3}, {0x5, 0x2, 0x5, 0x6}, {0x4, 0x5, 0xb, 0x9}, {0x0, 0x1, 0xf, 0xc}, {0x0, 0x2, 0xc}, {0x2, 0x2, 0xb, 0xb}, {0x4, 0x1, 0x6, 0x3}, {0x5, 0x9, 0x7e2, 0x2}], 0x10, 0xfffffff1}, 0x94) (async) getpid() (async) socket$kcm(0x2, 0x5, 0x84) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed5de7e91cd360a136ce6203c23c00fe82000000000400875a65969f7e750701810000000000000029"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a00000076000000000000efdb7b9c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 665.826016ms ago: executing program 4 (id=10135): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1b42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200000000000, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xc}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x19, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000070000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$kcm(0xa, 0x1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x890c, &(0x7f0000000000)={'xfrm0\x00', @random="0200"}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000600)={r7}) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000340)=0x7db) 656.327106ms ago: executing program 2 (id=10136): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) 651.807536ms ago: executing program 3 (id=10137): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0xffffffffffffff20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x27, 0xe, 0x0, &(0x7f0000000380)="5b88a800"/14, 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001140)={r3, 0xe0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000f40)=[{}], 0x8, 0x10, &(0x7f0000000f80), &(0x7f0000000fc0), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000001000)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x1e, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @ldst={0x0, 0x3, 0x3, 0x1, 0x9, 0x0, 0x8000000000000017}, @map_val={0x18, 0xb, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x10}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000009c0)='syzkaller\x00', 0x5, 0x3c, &(0x7f0000000d80)=""/60, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0x0, 0x3, 0x0, &(0x7f0000001180)=[{0x5, 0x2, 0xa, 0xc}, {0x5, 0x4, 0x9, 0x3}, {0x2, 0x3, 0xb, 0x6}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0x18, &(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000080)="81676f4599703845c4885f8bca10024b14ee5296ae1ca355bf698d4323afe54812b3dc522ae3ea1f3671395d8d7ba332d3d9a3d59ad0c4432b58f3fb83ce719b42c96feb8710ff25a30b3e33", &(0x7f0000000100)=""/216}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0xa, 0x300) 501.321764ms ago: executing program 0 (id=10138): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x5450, r1) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) 286.591945ms ago: executing program 3 (id=10139): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000008000000000000000700000069117e000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000080)=""/166, 0x1a, 0xa6, 0x1}, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8920, 0x0) r4 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x8a, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f00000001c0)={r2}) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="5c00000014006b03000000d86e6c1d000a117ea6e070d6060000000000000000250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9767b4fa51f62a64c9f4d49346d88037e786a6d0bdd700000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 175.150781ms ago: executing program 1 (id=10140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) unlink(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x11, &(0x7f0000000200)=@raw=[@func, @func, @func, @func, @snprintf], &(0x7f0000000780)='GPL\x00'}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xa}, 0x101) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 0s ago: executing program 2 (id=10141): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6c}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001", 0x27}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9) kernel console output (not intermixed with test programs): 1376.164694][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.248740][ T3526] netlink: 'syz.0.8362': attribute type 13 has an invalid length. [ 1376.260942][ T3526] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1376.274111][ T3526] syz_tun: refused to change device tx_queue_len [ 1376.281707][ T3526] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1376.300565][ T3524] device team0 left promiscuous mode [ 1376.305908][ T3524] device team_slave_0 left promiscuous mode [ 1376.322352][ T3524] device team_slave_1 left promiscuous mode [ 1376.329587][ T3524] bridge0: port 3(team0) entered disabled state [ 1376.349425][ T3524] device bridge_slave_1 left promiscuous mode [ 1376.356113][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.366291][ T3524] device bridge_slave_0 left promiscuous mode [ 1376.374338][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.481574][ T3527] netlink: 'syz.0.8362': attribute type 13 has an invalid length. [ 1376.489749][ T3527] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8362'. [ 1376.504137][ T3527] syz_tun: refused to change device tx_queue_len [ 1376.511113][ T3527] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1376.972879][ T3555] device sit0 left promiscuous mode [ 1378.829513][ T3636] netlink: 'syz.3.8385': attribute type 10 has an invalid length. [ 1378.854357][ T3636] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8385'. [ 1378.890086][ T3636] device batadv_slave_1 entered promiscuous mode [ 1378.899277][ T3636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1378.981108][ T3636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.277077][ T3652] netlink: 'syz.3.8390': attribute type 2 has an invalid length. [ 1379.325114][ T3652] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.8390'. [ 1379.376291][ T3657] delete_channel: no stack [ 1379.549442][ T3655] netlink: 65043 bytes leftover after parsing attributes in process `syz.4.8392'. [ 1380.022507][ T3680] netlink: 'syz.3.8401': attribute type 21 has an invalid length. [ 1380.041101][ T3680] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8401'. [ 1380.366675][ T3686] netlink: 'syz.4.8402': attribute type 10 has an invalid length. [ 1380.394874][ T3686] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8402'. [ 1380.433313][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.456182][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.618554][ T3697] netlink: 'syz.3.8405': attribute type 10 has an invalid length. [ 1380.636761][ T3697] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.8405'. [ 1380.660390][ T3695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1380.667636][ T3695] IPv6: NLM_F_CREATE should be set when creating new route [ 1381.253790][ T3714] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8409'. [ 1381.266728][ T3714] device hsr_slave_0 left promiscuous mode [ 1381.298599][ T3714] device hsr_slave_1 left promiscuous mode [ 1381.458394][ T3714] device hsr0 left promiscuous mode [ 1381.476620][ T3714] nr0: port 1(hsr0) entered disabled state [ 1381.618537][ T3727] netlink: 'syz.0.8412': attribute type 28 has an invalid length. [ 1381.654042][ T3727] netlink: 'syz.0.8412': attribute type 29 has an invalid length. [ 1381.683498][ T3727] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8412'. [ 1381.756947][ T3728] netlink: 'syz.0.8412': attribute type 10 has an invalid length. [ 1381.812184][ T3728] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8412'. [ 1382.579981][ T3748] netlink: 'syz.2.8418': attribute type 2 has an invalid length. [ 1382.797606][ T3748] device 1 entered promiscuous mode [ 1382.803786][ T3755] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8419'. [ 1382.982622][ T3756] sctp: [Deprecated]: syz.1.8419 (pid 3756) Use of int in maxseg socket option. [ 1382.982622][ T3756] Use struct sctp_assoc_value instead [ 1383.472844][ T3778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1383.491775][ T3778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1383.552059][ T3778] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1383.579668][ T3778] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1383.893923][ T3778] bond0: (slave batadv0): Releasing backup interface [ 1383.930593][ T3778] device batadv0 left promiscuous mode [ 1384.758729][ T3825] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8437'. [ 1385.587858][ T3852] device syzkaller0 entered promiscuous mode [ 1385.988615][ T3869] netlink: 'syz.3.8449': attribute type 27 has an invalid length. [ 1386.611781][ T3877] netlink: 'syz.0.8451': attribute type 2 has an invalid length. [ 1390.175337][ T3877] device 0 entered promiscuous mode [ 1390.454895][ T3906] bˆ¡cÊRݘOC‰ÿæ: renamed from lo [ 1390.663774][ T3920] netlink: 'syz.4.8460': attribute type 10 has an invalid length. [ 1390.808435][ T3923] netlink: 'syz.1.8463': attribute type 27 has an invalid length. [ 1390.990533][ T3929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8464'. [ 1391.216736][ T3923] bond0: (slave bond_slave_0): Releasing backup interface [ 1391.228681][ T3923] device bond_slave_0 left promiscuous mode [ 1391.325112][ T3929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8464'. [ 1391.335482][ T3928] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8464'. [ 1391.361659][ T3937] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8464'. [ 1391.825103][ T3955] netlink: 'syz.0.8479': attribute type 27 has an invalid length. [ 1391.847363][ T3962] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.8470'. [ 1391.892578][ T3961] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.8470'. [ 1391.920370][ T3956] can: request_module (can-proto-5) failed. [ 1392.170498][ T3977] netlink: 'syz.3.8476': attribute type 21 has an invalid length. [ 1392.194724][ T3977] netlink: 'syz.3.8476': attribute type 6 has an invalid length. [ 1392.210112][ T3977] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8476'. [ 1393.050647][ T3993] netlink: 'syz.1.8480': attribute type 4 has an invalid length. [ 1393.222965][ T4005] netlink: 'syz.2.8484': attribute type 3 has an invalid length. [ 1393.278451][ T4005] netlink: 163968 bytes leftover after parsing attributes in process `syz.2.8484'. [ 1393.317892][ T4009] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check. [ 1394.038709][ T4028] netlink: 172 bytes leftover after parsing attributes in process `syz.4.8489'. [ 1394.222023][ T4037] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1394.232173][ T4037] syzkaller1: linktype set to 780 [ 1394.615720][ T4052] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.8496'. [ 1397.549173][ T4066] netlink: 'syz.2.8499': attribute type 21 has an invalid length. [ 1397.583123][ T4066] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8499'. [ 1397.594229][ T4066] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8499'. [ 1398.228189][ T4081] netlink: 830 bytes leftover after parsing attributes in process `syz.2.8501'. [ 1398.231451][ T4091] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.8506'. [ 1398.267137][ T4081] device veth0_to_bond entered promiscuous mode [ 1399.481486][ T4135] netlink: 'syz.2.8521': attribute type 2 has an invalid length. [ 1399.510121][ T4135] netlink: 'syz.2.8521': attribute type 3 has an invalid length. [ 1399.563376][ T4135] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8521'. [ 1400.037281][ T4140] netlink: 'syz.3.8523': attribute type 10 has an invalid length. [ 1400.070309][ T4140] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8523'. [ 1401.353248][ T4185] netlink: 'syz.2.8537': attribute type 10 has an invalid length. [ 1401.512585][ T4195] netlink: 'syz.3.8539': attribute type 3 has an invalid length. [ 1401.550738][ T4195] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8539'. [ 1401.975804][ T4210] netlink: 'syz.3.8544': attribute type 10 has an invalid length. [ 1402.123449][ T4217] netlink: 'syz.3.8544': attribute type 21 has an invalid length. [ 1402.125732][ T4221] netlink: 'syz.1.8547': attribute type 28 has an invalid length. [ 1402.152244][ T4217] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8544'. [ 1402.161762][ T4221] netlink: 'syz.1.8547': attribute type 3 has an invalid length. [ 1402.179738][ T4221] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8547'. [ 1402.231078][ T4217] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8544'. [ 1402.466201][ T4226] bridge_slave_1: default FDB implementation only supports local addresses [ 1403.165859][ T4263] __nla_validate_parse: 4 callbacks suppressed [ 1403.165895][ T4263] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.8555'. [ 1403.264628][ T4272] validate_nla: 6 callbacks suppressed [ 1403.264662][ T4272] netlink: 'syz.3.8558': attribute type 39 has an invalid length. [ 1403.384794][ T4276] netlink: 52027 bytes leftover after parsing attributes in process `syz.4.8560'. [ 1403.436500][ T4281] delete_channel: no stack [ 1403.550642][ T4283] netlink: 'syz.2.8561': attribute type 9 has an invalid length. [ 1403.610675][ T4283] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.8561'. [ 1403.656154][ T4263] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1404.870630][ T4305] netlink: 'syz.0.8569': attribute type 27 has an invalid length. [ 1404.878814][ T4305] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8569'. [ 1404.904618][ T4310] netlink: 'syz.3.8571': attribute type 3 has an invalid length. [ 1404.939707][ T4310] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.8571'. [ 1405.173218][ T4323] netlink: 35083 bytes leftover after parsing attributes in process `syz.3.8573'. [ 1405.487029][ T4331] netlink: 'syz.2.8575': attribute type 5 has an invalid length. [ 1405.882053][ T4349] netlink: 'syz.0.8581': attribute type 30 has an invalid length. [ 1406.178301][ T4359] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8583'. [ 1406.494334][ T4365] device wlan1 entered promiscuous mode [ 1406.712475][ T4385] netlink: 'syz.4.8590': attribute type 46 has an invalid length. [ 1406.982756][ T4397] netlink: 'syz.2.8593': attribute type 10 has an invalid length. [ 1406.997796][ T4397] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8593'. [ 1407.469763][ T4417] netlink: 'syz.1.8600': attribute type 10 has an invalid length. [ 1407.527899][ T4417] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.8600'. [ 1407.547915][ T4422] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.8601'. [ 1407.584906][ T4422] netlink: zone id is out of range [ 1407.595173][ T4422] netlink: zone id is out of range [ 1407.606761][ T4422] netlink: zone id is out of range [ 1407.649128][ T4422] netlink: zone id is out of range [ 1407.664709][ T4422] netlink: zone id is out of range [ 1407.690392][ T4422] netlink: get zone limit has 8 unknown bytes [ 1408.582879][ T4448] netlink: 'syz.3.8607': attribute type 2 has an invalid length. [ 1408.595167][ T4448] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8607'. [ 1408.850863][ T4454] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.8611'. [ 1408.918488][ T4465] netlink: 'syz.0.8613': attribute type 1 has an invalid length. [ 1408.966740][ T4465] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.8613'. [ 1409.178791][ T4473] netlink: 144 bytes leftover after parsing attributes in process `syz.2.8614'. [ 1409.502350][ T4491] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8619'. [ 1409.718499][ T4493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8620'. [ 1409.817007][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8620'. [ 1410.260655][ T4500] IPv6: Can't replace route, no match found [ 1410.324055][ T4275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1410.332780][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1410.360397][ T4275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1410.369414][ T4275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1410.381379][ T4275] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1410.388703][ T4275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1410.442649][ T4500] sock: sock_timestamping_bind_phc: sock not bind to device [ 1410.632242][T20703] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.686443][ T4508] netlink: 'syz.2.8622': attribute type 10 has an invalid length. [ 1410.705262][ T4508] device wlan1 left promiscuous mode [ 1410.793459][T20703] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.929933][T20703] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.062138][T20703] device netdevsim0 left promiscuous mode [ 1411.196920][T20703] team0: Port device netdevsim0 removed [ 1411.213700][T20703] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.466351][T20703] device 0 left promiscuous mode [ 1411.494572][ T4503] chnl_net:caif_netlink_parms(): no params data found [ 1411.539564][T20703] device .*! left promiscuous mode [ 1411.603929][T20703] device 1 left promiscuous mode [ 1411.654961][ T4503] bridge0: port 1(bridge_slave_0) entered blocking state [ 1411.658457][ T4543] delete_channel: no stack [ 1411.662239][ T4503] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.676165][ T4503] device bridge_slave_0 entered promiscuous mode [ 1411.687312][ T4551] device wlan1 left promiscuous mode [ 1411.706877][ T4551] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8632'. [ 1411.764343][T20703] device 0 left promiscuous mode [ 1411.848055][ T4503] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.874447][ T4503] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.897716][ T4503] device bridge_slave_1 entered promiscuous mode [ 1412.001784][T20703] tipc: Left network mode [ 1412.026088][ T4503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.079874][ T4566] netlink: 'syz.0.8636': attribute type 2 has an invalid length. [ 1412.150428][ T4566] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8636'. [ 1412.226820][ T4503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.394239][ T4503] team0: Port device team_slave_0 added [ 1412.420582][T25646] Bluetooth: hci1: command 0x0409 tx timeout [ 1412.511390][ T4503] team0: Port device team_slave_1 added [ 1412.665507][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.692852][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.790859][ T4503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1413.001294][ T4503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1413.008386][ T4503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1413.098098][ T4503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1413.184701][ T4603] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.8643'. [ 1413.393767][ T4503] device hsr_slave_0 entered promiscuous mode [ 1413.421211][ T4503] device hsr_slave_1 entered promiscuous mode [ 1413.438136][ T4503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1413.460371][ T4503] Cannot create hsr debugfs directory [ 1414.477391][ T4637] netlink: 186044 bytes leftover after parsing attributes in process `syz.3.8650'. [ 1414.490410][T25646] Bluetooth: hci1: command 0x041b tx timeout [ 1414.580436][ T4637] netlink: zone id is out of range [ 1414.606046][ T4637] netlink: zone id is out of range [ 1414.646676][ T4637] netlink: zone id is out of range [ 1414.720535][ T4637] netlink: zone id is out of range [ 1414.725701][ T4637] netlink: zone id is out of range [ 1414.801243][ T4637] netlink: zone id is out of range [ 1414.806880][ T4641] netlink: 'syz.3.8650': attribute type 2 has an invalid length. [ 1414.836351][ T4637] netlink: zone id is out of range [ 1414.847545][ T4641] netlink: 119 bytes leftover after parsing attributes in process `syz.3.8650'. [ 1414.891084][ T4637] netlink: zone id is out of range [ 1414.914710][ T4646] netlink: 188 bytes leftover after parsing attributes in process `syz.4.8651'. [ 1414.935364][ T4637] netlink: zone id is out of range [ 1415.038966][ T4637] netlink: zone id is out of range [ 1415.329179][ T4656] netlink: 'syz.3.8653': attribute type 3 has an invalid length. [ 1415.355092][ T4656] netlink: 163968 bytes leftover after parsing attributes in process `syz.3.8653'. [ 1416.319340][ T4660] netlink: 'syz.3.8653': attribute type 10 has an invalid length. [ 1416.368277][ T4660] team0: Device wg1 is of different type [ 1416.576973][T25646] Bluetooth: hci1: command 0x040f tx timeout [ 1416.638765][ T4503] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1416.655339][ T4503] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1416.733475][ T4503] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1416.768635][T20703] bridge0: port 1(team0) entered disabled state [ 1416.798163][ T4688] netlink: 186044 bytes leftover after parsing attributes in process `syz.0.8663'. [ 1416.808356][T20703] device bridge_slave_1 left promiscuous mode [ 1416.818273][T20703] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.097437][T20703] device geneve1 left promiscuous mode [ 1417.105553][T20703] team0 (unregistering): Port device geneve1 removed [ 1417.231773][T20703] device hsr_slave_0 left promiscuous mode [ 1417.238362][T20703] team0 (unregistering): Port device hsr_slave_0 removed [ 1417.355435][T20703] device team_slave_1 left promiscuous mode [ 1417.364309][T20703] team0 (unregistering): Port device team_slave_1 removed [ 1417.410620][T20703] device team_slave_0 left promiscuous mode [ 1417.417304][T20703] team0 (unregistering): Port device team_slave_0 removed [ 1417.487456][T20703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.498974][T20703] device bond_slave_1 left promiscuous mode [ 1417.659520][T20703] device dummy0 left promiscuous mode [ 1417.665985][T20703] team0 (unregistering): Port device dummy0 removed [ 1417.720086][T20703] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1417.728760][T20703] device bridge0 left promiscuous mode [ 1417.734465][T20703] bond0 (unregistering): Released all slaves [ 1417.824333][ T4503] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1417.832792][ T4688] netlink: 'syz.0.8663': attribute type 2 has an invalid length. [ 1417.842137][ T4688] netlink: 119 bytes leftover after parsing attributes in process `syz.0.8663'. [ 1418.083348][ T4503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1418.137103][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1418.155663][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1418.173520][ T4503] 8021q: adding VLAN 0 to HW filter on device team0 [ 1418.196505][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1418.216067][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1418.236929][ T4952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.244095][ T4952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.264186][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1418.318417][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1418.328554][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1418.337423][T20707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.344638][T20707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.405343][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1418.422074][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1418.496847][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1418.527034][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1418.551484][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1418.561068][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1418.569723][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1418.582956][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1418.601514][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1418.653795][T25646] Bluetooth: hci1: command 0x0419 tx timeout [ 1418.721459][ T4503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1418.761952][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1418.777786][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1418.790902][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1419.161525][ T4733] device syzkaller0 entered promiscuous mode [ 1419.167800][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1419.211543][ T4733] netlink: 'syz.0.8671': attribute type 41 has an invalid length. [ 1419.358915][ T4740] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8672'. [ 1419.525415][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1419.538233][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1419.598900][ T4503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.729383][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1419.751203][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1419.845938][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1419.861566][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1419.912079][ T4503] device veth0_vlan entered promiscuous mode [ 1419.921441][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1419.942003][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1419.967004][ T4503] device veth1_vlan entered promiscuous mode [ 1420.138804][ T4770] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8678'. [ 1420.210856][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1420.250866][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1420.319746][ T4503] device veth0_macvtap entered promiscuous mode [ 1420.336326][ T4764] netlink: 'syz.2.8676': attribute type 3 has an invalid length. [ 1420.362219][ T4503] device veth1_macvtap entered promiscuous mode [ 1420.410777][ T4764] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.8676'. [ 1420.432755][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.473582][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.510412][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1420.543214][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.572108][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1420.581825][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1420.594724][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1420.621894][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1420.670805][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1420.709623][ T4503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1420.740428][ T4503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1420.776929][ T4503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.796166][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1420.811036][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1420.867861][ T4503] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.890351][ T4503] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.902937][ T4503] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.922897][ T4503] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1421.122114][ T4783] delete_channel: no stack [ 1421.161536][T20707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.171932][T20707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.214627][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1421.281279][T20703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1421.289181][T20703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1421.345753][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1421.472594][ T4812] device pim6reg1 entered promiscuous mode [ 1421.658022][ T4815] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8687'. [ 1421.732832][ T4815] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8687'. [ 1422.255221][ T4824] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8617'. [ 1422.979178][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.985557][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.314669][T25646] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1423.324075][T25646] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1423.332199][T25646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1423.387302][T25646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1423.395178][T25646] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1423.403269][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1423.654383][ T4842] chnl_net:caif_netlink_parms(): no params data found [ 1423.793448][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.801836][ T4842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.812393][ T4842] device bridge_slave_0 entered promiscuous mode [ 1423.898440][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1423.905908][ T4842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.915036][ T4842] device bridge_slave_1 entered promiscuous mode [ 1423.985469][ T4842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.018994][ T4842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.088833][ T4851] netlink: 'syz.1.8691': attribute type 10 has an invalid length. [ 1424.142828][ T4842] team0: Port device team_slave_0 added [ 1424.149056][ T4858] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8692'. [ 1424.181296][ T4858] device hsr_slave_0 left promiscuous mode [ 1424.229209][ T4858] device hsr_slave_1 left promiscuous mode [ 1424.337199][ T4842] team0: Port device team_slave_1 added [ 1424.344077][ T4861] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.8694'. [ 1424.385394][ T4869] netlink: 'syz.1.8696': attribute type 11 has an invalid length. [ 1424.400390][ T4869] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8696'. [ 1424.415300][ T4869] netlink: 'syz.1.8696': attribute type 3 has an invalid length. [ 1424.439922][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1424.448553][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.459241][ T4869] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8696'. [ 1424.475418][ T4842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1424.525203][ T4842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.526656][ T4869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1424.567296][ T4842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.604585][ T4842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.746769][ T4842] device hsr_slave_0 entered promiscuous mode [ 1424.757625][ T4842] device hsr_slave_1 entered promiscuous mode [ 1424.791214][ T4842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1424.798808][ T4842] Cannot create hsr debugfs directory [ 1424.934075][ T5191] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.072987][ T5191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.316962][ T5191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.450390][T25646] Bluetooth: hci2: command 0x0409 tx timeout [ 1425.463276][ T5191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.490762][ T4895] netlink: 'syz.2.8703': attribute type 41 has an invalid length. [ 1425.506013][ T4895] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8703'. [ 1425.521005][ T4895] net_ratelimit: 54 callbacks suppressed [ 1425.521057][ T4895] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1425.635527][ T4905] netlink: 'syz.4.8704': attribute type 10 has an invalid length. [ 1425.662909][ T4905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1425.698189][ T4905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.748606][ T4914] netlink: 'syz.3.8708': attribute type 12 has an invalid length. [ 1425.766663][ T4914] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8708'. [ 1425.774468][ T4913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1425.866390][ T4913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1425.890477][ T4918] netlink: 'syz.3.8708': attribute type 29 has an invalid length. [ 1425.907649][ T4918] netlink: 'syz.3.8708': attribute type 29 has an invalid length. [ 1425.918130][ T5191] device 0 left promiscuous mode [ 1425.939512][ T4913] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8707'. [ 1426.007725][ T5191] device 0 left promiscuous mode [ 1426.784133][ T4949] netlink: 'syz.4.8715': attribute type 3 has an invalid length. [ 1426.826900][ T4949] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.8715'. [ 1427.142945][ T4963] Ÿë: port 1(veth0_to_team) entered blocking state [ 1427.149646][ T4963] Ÿë: port 1(veth0_to_team) entered disabled state [ 1427.162082][ T4963] device veth0_to_team entered promiscuous mode [ 1427.530428][T25646] Bluetooth: hci2: command 0x041b tx timeout [ 1427.739787][ T4842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1427.776000][ T4842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1427.885827][ T5191] device erspan0 left promiscuous mode [ 1427.902979][ T5191] syzkaller: port 1(erspan0) entered disabled state [ 1427.940768][ T4842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1427.998547][ T4988] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.8722'. [ 1428.004213][ T4842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1428.160112][ T5191] device gretap0 left promiscuous mode [ 1428.210978][ T5191] Ÿë: port 1(gretap0) entered disabled state [ 1428.888824][ T4982] delete_channel: no stack [ 1429.026136][ T5003] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8725'. [ 1429.173463][ T4842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.225317][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1429.249681][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1429.448278][ T4842] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.473538][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1429.527182][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1429.549187][ T4995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.556343][ T4995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.610321][T25646] Bluetooth: hci2: command 0x040f tx timeout [ 1429.724794][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1429.744389][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1429.790974][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1429.815481][ T5018] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8728'. [ 1429.860635][ T4995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.867758][ T4995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.915401][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1430.621661][ T5018] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1430.688102][ T5035] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8732'. [ 1430.740486][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1430.754441][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1430.782585][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1430.801115][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1430.840763][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1430.860733][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1430.925569][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1430.956632][T20707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1430.992742][ T5046] netlink: 'syz.3.8734': attribute type 7 has an invalid length. [ 1431.051059][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1431.081834][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1431.128706][ T4842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1431.690638][T25646] Bluetooth: hci2: command 0x0419 tx timeout [ 1432.306456][ T5191] device hsr_slave_0 left promiscuous mode [ 1432.322593][ T5191] device hsr_slave_1 left promiscuous mode [ 1432.360019][ T5191] device bridge_slave_0 left promiscuous mode [ 1432.368697][ T5083] netlink: 'syz.2.8743': attribute type 2 has an invalid length. [ 1432.395209][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.488695][ T5191] device veth0_macvtap left promiscuous mode [ 1434.368676][ T5083] device 2 entered promiscuous mode [ 1434.401359][ T5102] À: port 1(vlan0) entered blocking state [ 1434.407191][ T5102] À: port 1(vlan0) entered disabled state [ 1434.435414][ T5102] device vlan0 entered promiscuous mode [ 1434.446369][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1434.464670][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1434.525835][ T4842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1434.568604][ T5129] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8755'. [ 1434.593191][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1434.646053][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1434.710044][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1434.725893][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1434.749692][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1434.775396][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1434.799832][ T4842] device veth0_vlan entered promiscuous mode [ 1434.835314][ T4842] device veth1_vlan entered promiscuous mode [ 1434.869527][ T5141] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1434.889980][ T5141] syzkaller0: linktype set to 825 [ 1434.908367][ T5141] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1434.949114][ T4842] device veth0_macvtap entered promiscuous mode [ 1434.981180][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1434.991435][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1435.019235][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1435.028527][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1435.070694][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1435.095919][ T5156] netlink: 'syz.3.8763': attribute type 153 has an invalid length. [ 1435.118011][ T4842] device veth1_macvtap entered promiscuous mode [ 1435.131117][ T5156] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.8763'. [ 1435.158050][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.168876][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.179603][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.190166][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.201958][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1435.246027][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1435.272037][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1435.285729][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1435.298502][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.309164][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.319051][ T4842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1435.329541][ T4842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.341578][ T4842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1435.354716][ T4842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.364302][ T4842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.373650][ T4842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.385204][ T4842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.407978][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1435.417165][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1435.707143][ T4952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.746939][ T4952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.873418][T20703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1435.920411][T20703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.928764][T20703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.956967][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1436.176126][ T5184] device syzkaller0 entered promiscuous mode [ 1436.309545][ T5199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8772'. [ 1438.348362][ T5196] €Â0: renamed from pim6reg1 [ 1438.354845][ T5199] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8772'. [ 1442.441086][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.449680][ T5260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.497482][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.533070][ T5260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.908274][ T5259] netlink: 'syz.0.8787': attribute type 21 has an invalid length. [ 1442.993583][ T5259] netlink: 'syz.0.8787': attribute type 6 has an invalid length. [ 1443.260735][ T5259] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8787'. [ 1443.506361][ T5282] netlink: 'syz.2.8793': attribute type 2 has an invalid length. [ 1443.561036][ T5282] netlink: 'syz.2.8793': attribute type 8 has an invalid length. [ 1443.642655][ T5282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8793'. [ 1443.664185][ T5281] netlink: 'syz.2.8793': attribute type 2 has an invalid length. [ 1443.683311][ T5281] netlink: 'syz.2.8793': attribute type 8 has an invalid length. [ 1443.692838][ T5281] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8793'. [ 1443.809663][ T5296] delete_channel: no stack [ 1443.844781][ T5296] delete_channel: no stack [ 1443.897528][ T5299] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.8797'. [ 1443.939964][ T5301] netlink: 'syz.0.8797': attribute type 20 has an invalid length. [ 1444.137341][ T5311] netlink: 'syz.3.8800': attribute type 3 has an invalid length. [ 1444.157408][ T5311] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8800'. [ 1444.755516][ T5332] device syzkaller0 entered promiscuous mode [ 1444.785072][ T5331] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8806'. [ 1446.952313][ T5331] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.8806'. [ 1446.989612][ T5347] netlink: 'syz.0.8811': attribute type 10 has an invalid length. [ 1447.021700][ T5347] team0: Port device geneve1 added [ 1447.027144][ T5348] netlink: 'syz.0.8811': attribute type 10 has an invalid length. [ 1447.147806][ T5352] netlink: 'syz.3.8813': attribute type 11 has an invalid length. [ 1447.174213][ T5352] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8813'. [ 1447.382857][ T5366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1447.559408][ T5371] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8817'. [ 1448.057430][ T5385] validate_nla: 1 callbacks suppressed [ 1448.057449][ T5385] netlink: 'syz.1.8821': attribute type 10 has an invalid length. [ 1448.107597][ T5385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.144095][ T5385] team0: Port device bond0 added [ 1450.319475][ T5450] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8839'. [ 1450.428724][ T5455] netlink: 'syz.3.8841': attribute type 29 has an invalid length. [ 1450.486918][ T5455] netlink: 'syz.3.8841': attribute type 29 has an invalid length. [ 1450.565459][ T5457] netlink: 'syz.3.8841': attribute type 29 has an invalid length. [ 1451.812844][ T5473] bridge0: port 3(erspan0) entered blocking state [ 1451.838565][ T5473] bridge0: port 3(erspan0) entered disabled state [ 1451.903810][ T5473] device erspan0 entered promiscuous mode [ 1451.995212][ T5473] bridge0: port 3(erspan0) entered blocking state [ 1452.002104][ T5473] bridge0: port 3(erspan0) entered forwarding state [ 1452.521743][ T5476] sock: sock_timestamping_bind_phc: sock not bind to device [ 1453.175154][ T5489] device lo entered promiscuous mode [ 1453.199342][ T5489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1453.464420][ T5495] netlink: 'syz.3.8850': attribute type 29 has an invalid length. [ 1453.542275][ T5495] netlink: 'syz.3.8850': attribute type 29 has an invalid length. [ 1453.896083][ T5509] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8853'. [ 1454.210113][ T5521] netlink: 763 bytes leftover after parsing attributes in process `syz.3.8858'. [ 1454.238900][T25646] Bluetooth: hci2: Unknown advertising packet type: 0x1000 [ 1454.238977][T25646] Bluetooth: hci2: Unknown advertising packet type: 0x18 [ 1454.510396][ T5532] netlink: 'syz.0.8861': attribute type 21 has an invalid length. [ 1454.558612][ T5534] netlink: 'syz.0.8861': attribute type 29 has an invalid length. [ 1454.602858][ T5532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8861'. [ 1454.626681][ T5534] netlink: 'syz.0.8861': attribute type 29 has an invalid length. [ 1454.683151][ T5535] netlink: 'syz.0.8861': attribute type 29 has an invalid length. [ 1455.228493][ T5547] netlink: 'syz.3.8866': attribute type 10 has an invalid length. [ 1455.468746][ T5555] netlink: 'syz.3.8869': attribute type 10 has an invalid length. [ 1455.495613][ T5555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8869'. [ 1458.470471][ T5559] netlink: 10 bytes leftover after parsing attributes in process `syz.3.8869'. [ 1458.862968][ T5578] netlink: 'syz.1.8874': attribute type 21 has an invalid length. [ 1458.907810][ T5584] A link change request failed with some changes committed already. Interface bˆ¡cÊRݘOC‰ÿæ may have been left with an inconsistent configuration, please check. [ 1458.941890][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1458.995942][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1459.005097][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1459.014218][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1459.023327][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1459.032468][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1459.041578][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1459.050692][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1459.059760][ T5578] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1460.747553][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1460.771833][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1460.863505][ T5607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.902119][ T5607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.454843][ T5621] device syzkaller0 entered promiscuous mode [ 1461.485542][ T4314] syzkaller0: tun_net_xmit 48 [ 1464.218994][ T5654] netlink: 112 bytes leftover after parsing attributes in process `syz.2.8893'. [ 1464.339215][ T5664] netlink: 'syz.1.8897': attribute type 17 has an invalid length. [ 1464.373904][ T5664] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8897'. [ 1464.394707][ T5665] netlink: 'syz.1.8897': attribute type 17 has an invalid length. [ 1464.444560][ T5665] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8897'. [ 1465.234291][ T5696] netlink: 'syz.0.8904': attribute type 3 has an invalid length. [ 1465.277032][ T5696] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.8904'. [ 1465.326169][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1465.335542][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1465.343757][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1465.351903][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1465.360000][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1465.367810][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1465.828433][ T5708] net_ratelimit: 3257 callbacks suppressed [ 1465.828467][ T5708] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 1466.111906][ T5695] chnl_net:caif_netlink_parms(): no params data found [ 1466.432507][ T5695] bridge0: port 1(bridge_slave_0) entered blocking state [ 1466.449877][ T5695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.474999][ T5695] device bridge_slave_0 entered promiscuous mode [ 1466.506357][ T5695] bridge0: port 2(bridge_slave_1) entered blocking state [ 1466.547594][ T5695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1466.576537][ T5695] device bridge_slave_1 entered promiscuous mode [ 1466.656009][ T5730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8911'. [ 1466.716983][ T5730] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8911'. [ 1466.822601][ T5695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1466.859526][ T5735] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8911'. [ 1466.932735][ T5695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1467.084036][ T5695] team0: Port device team_slave_0 added [ 1467.128673][ T5695] team0: Port device team_slave_1 added [ 1467.221445][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1467.246016][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.281083][ T5748] netlink: 'syz.0.8917': attribute type 2 has an invalid length. [ 1467.380547][ T5695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1467.450411][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 1467.523748][ T5748] device 0 entered promiscuous mode [ 1467.582730][ T5695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1467.589727][ T5695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1467.624437][ T5695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1467.646444][ T5759] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.8919'. [ 1468.566487][ T5766] netlink: 'syz.0.8920': attribute type 10 has an invalid length. [ 1468.605595][ T5766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8920'. [ 1468.625705][ T5766] device ipvlan1 entered promiscuous mode [ 1468.701884][ T5766] bridge0: port 3(ipvlan1) entered blocking state [ 1468.730623][ T5766] bridge0: port 3(ipvlan1) entered disabled state [ 1468.738691][ T5766] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1468.806129][ T5770] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8920'. [ 1468.911702][ T5777] netlink: 'syz.1.8923': attribute type 11 has an invalid length. [ 1469.016267][ T5695] device hsr_slave_0 entered promiscuous mode [ 1469.069235][ T5695] device hsr_slave_1 entered promiscuous mode [ 1469.084260][ T5779] netlink: 'syz.3.8924': attribute type 21 has an invalid length. [ 1469.118146][ T5780] netlink: 'syz.3.8924': attribute type 21 has an invalid length. [ 1469.290032][ T5785] __nla_validate_parse: 1 callbacks suppressed [ 1469.290051][ T5785] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1469.401195][ T5783] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.8925'. [ 1469.532053][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 1469.947183][ T5791] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1469.954547][ T5791] IPv6: NLM_F_CREATE should be set when creating new route [ 1469.961986][ T5791] IPv6: NLM_F_CREATE should be set when creating new route [ 1469.969247][ T5791] IPv6: NLM_F_CREATE should be set when creating new route [ 1470.292609][ T4985] device 0 left promiscuous mode [ 1470.444464][ T5695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.488884][ T4985] device 1 left promiscuous mode [ 1470.591987][ T5695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1470.646370][ T4985] device 2 left promiscuous mode [ 1470.681504][ T5797] netlink: 'syz.0.8929': attribute type 41 has an invalid length. [ 1470.797011][ T5695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.008887][ T4985] device 0 left promiscuous mode [ 1471.057119][ T5695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1471.611711][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 1471.633054][ T5825] C: renamed from team_slave_0 [ 1471.643028][ T5825] netlink: 'syz.3.8935': attribute type 1 has an invalid length. [ 1471.664480][ T5825] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1471.944731][ T5852] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.8940'. [ 1473.693873][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 1473.969055][ T5854] netlink: 'syz.3.8942': attribute type 6 has an invalid length. [ 1473.976889][ T5854] netlink: 'syz.3.8942': attribute type 30 has an invalid length. [ 1474.007296][ T5856] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8943'. [ 1474.037525][ T5695] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1474.069805][ T5695] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1474.168869][ T5695] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1474.180062][ T5695] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1474.195726][ T5867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1474.203165][ T5867] IPv6: NLM_F_CREATE should be set when creating new route [ 1474.259947][ T4985] device gretap0 left promiscuous mode [ 1474.271976][ T4985] Ÿë: port 1(gretap0) entered disabled state [ 1474.547657][ T5695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1474.634042][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1474.647434][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1474.660823][ T5695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1474.737587][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1474.751650][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1474.761019][ T4952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1474.768133][ T4952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1474.850917][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1474.867093][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1474.876195][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1474.890690][ T4952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1474.897801][ T4952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.919328][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1474.971981][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1474.988126][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1475.004316][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1475.018939][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1475.058506][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1475.078484][ T5695] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1475.115848][ T5695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1475.163408][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1475.191608][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1475.210929][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1475.229362][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1475.261567][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1475.272889][ T4952] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1475.666077][ T5916] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1475.728078][ T4985] device vlan0 left promiscuous mode [ 1475.745658][ T4985] À: port 1(vlan0) entered disabled state [ 1475.762614][ T4985] device veth0_to_team left promiscuous mode [ 1475.770578][ T4985] Ÿë: port 2(veth0_to_team) entered disabled state [ 1475.799223][ T4985] device hsr_slave_0 left promiscuous mode [ 1475.810466][ T4985] device hsr_slave_1 left promiscuous mode [ 1475.827576][ T4985] batman_adv: batadv0: Interface deactivated: vlan1 [ 1475.840526][ T4985] batman_adv: batadv0: Removing interface: vlan1 [ 1475.890910][ T4985] device veth1_macvtap left promiscuous mode [ 1475.905144][ T4985] device veth0_macvtap left promiscuous mode [ 1475.922767][ T4985] device veth1_vlan left promiscuous mode [ 1477.516745][ T5916] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.8957'. [ 1477.526279][ T5916] bridge_slave_1: default FDB implementation only supports local addresses [ 1477.749895][ T5929] netlink: 'syz.0.8959': attribute type 10 has an invalid length. [ 1477.760681][ T5929] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8959'. [ 1477.774653][ T5929] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1477.778654][ T5931] sctp: [Deprecated]: syz.3.8960 (pid 5931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1477.778654][ T5931] Use struct sctp_sack_info instead [ 1477.839206][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1477.855965][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1477.870901][ T5695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1477.879959][ T5929] netlink: 'syz.0.8959': attribute type 6 has an invalid length. [ 1478.205917][ T5935] wlan1: mtu greater than device maximum [ 1478.320657][ T5943] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1479.046404][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1479.063776][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1479.077454][ T5968] netlink: 5447 bytes leftover after parsing attributes in process `syz.3.8968'. [ 1479.127300][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1479.148835][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1479.187097][ T5695] device veth0_vlan entered promiscuous mode [ 1479.206553][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1479.227767][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1479.273094][ T5695] device veth1_vlan entered promiscuous mode [ 1479.383351][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1479.405420][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1479.433274][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1479.454209][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1479.481241][ T5695] device veth0_macvtap entered promiscuous mode [ 1479.507645][ T5695] device veth1_macvtap entered promiscuous mode [ 1479.552635][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1479.584114][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.615825][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1479.646605][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1479.655775][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1479.668557][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1479.678177][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1479.693660][ T5980] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.8970'. [ 1479.733511][ T5695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1479.740345][ T5980] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1479.760206][ T5695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1479.772167][ T5695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1479.780002][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1479.794640][ T4995] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1479.842899][ T5695] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.860500][ T5695] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.869230][ T5695] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1479.927965][ T5695] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1480.180584][T27876] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.229818][T27876] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.266732][ T5191] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1480.289442][ T6000] netlink: 'syz.1.8974': attribute type 10 has an invalid length. [ 1480.410033][ T6000] team0: Device wg1 is of different type [ 1480.543969][ T5191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1480.567797][ T5191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1480.591669][T27876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1481.384699][ T6049] netlink: 'syz.2.8986': attribute type 10 has an invalid length. [ 1481.400371][ T6049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8986'. [ 1481.464362][ T6049] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1481.498186][ T6054] netlink: 'syz.0.8989': attribute type 16 has an invalid length. [ 1481.511013][ T6049] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1481.582750][ T6049] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1481.603929][ T6053] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.8986'. [ 1482.285483][ T6077] netlink: 'syz.4.8995': attribute type 16 has an invalid length. [ 1482.310324][ T6077] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8995'. [ 1482.767376][ T6102] device virt_wifi0 entered promiscuous mode [ 1483.019324][ T6108] netlink: 'syz.1.9002': attribute type 2 has an invalid length. [ 1483.062437][ T6108] netlink: 'syz.1.9002': attribute type 8 has an invalid length. [ 1483.100297][ T6108] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9002'. [ 1483.146673][ T6117] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9004'. [ 1483.246692][ T6115] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9005'. [ 1484.327347][ T6145] device syzkaller0 entered promiscuous mode [ 1484.360130][ T6148] netlink: 'syz.1.9010': attribute type 13 has an invalid length. [ 1484.384969][ T6148] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.9010'. [ 1484.425111][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.431520][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.457203][ T6154] netlink: 'syz.0.9015': attribute type 10 has an invalid length. [ 1484.546483][ T6154] team0: Port device dummy0 added [ 1484.556603][ T6160] netlink: 'syz.0.9015': attribute type 10 has an invalid length. [ 1484.618925][ T6160] team0: Port device dummy0 removed [ 1484.641730][ T6160] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1486.590650][ T6169] delete_channel: no stack [ 1487.690684][ T6186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9023'. [ 1487.838499][ T6196] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.9026'. [ 1488.160663][ T6211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9029'. [ 1488.638891][ T6215] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1491.513981][ T6268] device wlan1 entered promiscuous mode [ 1491.855328][ T6288] netlink: 'syz.2.9051': attribute type 1 has an invalid length. [ 1491.932369][ T6296] netlink: 'syz.3.9052': attribute type 39 has an invalid length. [ 1492.105090][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.2.9053'. [ 1493.215160][ T6328] netlink: 'syz.2.9059': attribute type 21 has an invalid length. [ 1493.223455][ T6328] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9059'. [ 1493.536024][ T6348] netlink: 'syz.3.9067': attribute type 21 has an invalid length. [ 1493.554421][ T6349] netlink: 'syz.3.9067': attribute type 21 has an invalid length. [ 1493.594859][ T6352] netlink: 'syz.0.9068': attribute type 3 has an invalid length. [ 1493.614467][ T6352] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9068'. [ 1493.968482][ T6368] netlink: 'syz.4.9073': attribute type 21 has an invalid length. [ 1494.558038][ T6389] netlink: 'syz.4.9079': attribute type 21 has an invalid length. [ 1494.592188][ T6389] netlink: 'syz.4.9079': attribute type 1 has an invalid length. [ 1495.182051][ T6401] netlink: 'syz.0.9082': attribute type 10 has an invalid length. [ 1495.220384][ T6401] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9082'. [ 1495.239997][ T6401] device batadv_slave_1 entered promiscuous mode [ 1495.323872][ T6405] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9084'. [ 1496.251629][ T6441] netlink: 125060 bytes leftover after parsing attributes in process `syz.0.9096'. [ 1496.716636][ T6447] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.9097'. [ 1497.345570][ T6462] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9102'. [ 1497.487506][ T6463] Ÿë: port 1(gretap0) entered blocking state [ 1497.500467][ T6463] Ÿë: port 1(gretap0) entered disabled state [ 1497.507684][ T6463] device gretap0 entered promiscuous mode [ 1497.750092][ T6467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9104'. [ 1497.780762][ T6467] tipc: Started in network mode [ 1497.798241][ T6467] tipc: Node identity 9215a268, cluster identity 4711 [ 1497.829870][ T6467] tipc: Node number set to 2450891368 [ 1498.188288][ T6472] validate_nla: 4 callbacks suppressed [ 1498.188305][ T6472] netlink: 'syz.3.9105': attribute type 2 has an invalid length. [ 1498.225576][ T6472] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9105'. [ 1499.888429][ T6474] tap0: tun_chr_ioctl cmd 1074025677 [ 1499.901180][ T6474] tap0: linktype set to 773 [ 1499.947012][ T6476] netlink: 'syz.4.9107': attribute type 2 has an invalid length. [ 1499.984571][ T6476] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9107'. [ 1500.006778][ T6486] netlink: 'syz.1.9109': attribute type 10 has an invalid length. [ 1500.261096][ T6484] delete_channel: no stack [ 1500.742957][ T6502] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9114'. [ 1501.859503][ T6515] netlink: 'syz.2.9116': attribute type 4 has an invalid length. [ 1501.974726][ T6515] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.9116'. [ 1502.898496][ T6529] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9120'. [ 1502.964816][ T6530] delete_channel: no stack [ 1504.075616][ T6546] device syzkaller0 entered promiscuous mode [ 1504.209214][ T6562] netlink: 'syz.1.9128': attribute type 11 has an invalid length. [ 1504.284746][ T6562] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9128'. [ 1505.654373][ T6573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1505.738103][ T6579] netlink: 'syz.1.9130': attribute type 3 has an invalid length. [ 1505.758859][ T6579] netlink: 'syz.1.9130': attribute type 16 has an invalid length. [ 1505.780105][ T6579] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9130'. [ 1507.586807][ T6568] netlink: 'syz.2.9127': attribute type 21 has an invalid length. [ 1507.594860][ T6568] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9127'. [ 1507.604298][ T6568] netlink: 3 bytes leftover after parsing attributes in process `syz.2.9127'. [ 1507.614084][ T6563] netlink: 'syz.2.9127': attribute type 10 has an invalid length. [ 1507.626444][ T6563] team0: Port device wlan1 added [ 1508.078780][ T6615] netlink: 'syz.2.9138': attribute type 10 has an invalid length. [ 1508.088475][ T6615] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9138'. [ 1508.373243][ T6624] device syzkaller0 entered promiscuous mode [ 1508.431814][ T6627] netlink: 'syz.1.9143': attribute type 29 has an invalid length. [ 1508.720719][ T6633] netlink: 'syz.1.9145': attribute type 2 has an invalid length. [ 1508.782986][ T6633] netlink: 'syz.1.9145': attribute type 8 has an invalid length. [ 1508.872098][ T6633] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9145'. [ 1508.905181][ T6635] netlink: 'syz.1.9145': attribute type 2 has an invalid length. [ 1508.940730][ T6635] netlink: 'syz.1.9145': attribute type 8 has an invalid length. [ 1508.952280][ T6635] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9145'. [ 1512.195280][ T6677] netlink: 'syz.2.9154': attribute type 39 has an invalid length. [ 1514.374616][ T6706] netlink: 'syz.1.9166': attribute type 16 has an invalid length. [ 1514.530369][ T6706] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9166'. [ 1514.924485][ T6709] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9167'. [ 1516.315761][ T6736] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.9173'. [ 1517.915384][ T6793] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9188'. [ 1518.915194][ T6808] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9190'. [ 1519.681660][ T6823] delete_channel: no stack [ 1520.036956][ T6836] netlink: 'syz.2.9199': attribute type 21 has an invalid length. [ 1520.049444][ T6839] netlink: 'syz.3.9200': attribute type 17 has an invalid length. [ 1520.059297][ T6839] netlink: 'syz.3.9200': attribute type 41 has an invalid length. [ 1520.071418][ T6839] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9200'. [ 1520.248016][ T6850] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9203'. [ 1520.330016][ T6861] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.9203'. [ 1520.519192][ T6850] team0: Port device team_slave_0 removed [ 1520.544753][ T6850] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1520.627240][ T6869] netlink: 'syz.0.9208': attribute type 10 has an invalid length. [ 1520.681886][ T6869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1520.725485][ T6869] team0: Port device bond0 added [ 1520.933019][ T6889] sock: sock_set_timeout: `syz.0.9213' (pid 6889) tries to set negative timeout [ 1521.953875][ T6920] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9219'. [ 1522.094400][ T6920] netlink: 'syz.2.9219': attribute type 10 has an invalid length. [ 1524.834136][ T6920] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.906992][ T6920] bond0: (slave team0): Enslaving as an active interface with an up link [ 1524.982613][ T6932] netlink: 'syz.4.9220': attribute type 10 has an invalid length. [ 1525.031198][ T6932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.073580][ T6932] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1525.463779][ T6939] netlink: 'syz.3.9223': attribute type 2 has an invalid length. [ 1525.490580][ T6942] netlink: 'syz.3.9223': attribute type 2 has an invalid length. [ 1527.624545][ T6939] device 1 entered promiscuous mode [ 1527.630075][ T6951] netlink: 'syz.4.9225': attribute type 10 has an invalid length. [ 1527.638142][ T6951] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9225'. [ 1527.648086][ T6951] device team0 entered promiscuous mode [ 1527.653884][ T6951] device team_slave_0 entered promiscuous mode [ 1527.662045][ T6951] device team_slave_1 entered promiscuous mode [ 1527.668959][ T6951] bridge0: port 3(team0) entered blocking state [ 1527.675458][ T6951] bridge0: port 3(team0) entered disabled state [ 1527.683447][ T6951] bridge0: port 3(team0) entered blocking state [ 1527.689805][ T6951] bridge0: port 3(team0) entered forwarding state [ 1527.713386][ T6942] device 2 entered promiscuous mode [ 1527.889249][ T6967] netlink: 'syz.3.9230': attribute type 10 has an invalid length. [ 1527.914415][ T6968] netlink: 'syz.4.9229': attribute type 3 has an invalid length. [ 1527.936900][ T6966] netlink: 'syz.1.9228': attribute type 10 has an invalid length. [ 1527.959221][ T6968] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9229'. [ 1527.987467][ T6966] team0: Device wg1 is of different type [ 1529.452598][ T7136] netlink: 'syz.4.9252': attribute type 3 has an invalid length. [ 1529.470371][ T7136] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.9252'. [ 1529.481626][ T7075] tap0: tun_chr_ioctl cmd 1074025675 [ 1529.487766][ T7075] tap0: persist disabled [ 1529.677919][ T7141] device syzkaller0 entered promiscuous mode [ 1532.570806][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 1536.206903][ T7193] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.9266'. [ 1536.382023][ T4952] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.591458][ T7201] netlink: 'syz.1.9269': attribute type 10 has an invalid length. [ 1536.610356][ T7201] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1536.778052][ T4952] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1536.984781][ T4952] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.025196][ T7214] netlink: 'syz.0.9272': attribute type 10 has an invalid length. [ 1537.040745][ T7214] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9272'. [ 1537.269374][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1537.280003][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1537.301911][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1537.311620][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1537.319820][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1537.328682][ T4952] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1537.330007][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1537.685766][ T4952] device 0 left promiscuous mode [ 1537.826643][ T4952] device 1 left promiscuous mode [ 1537.894398][ T4952] device 2 left promiscuous mode [ 1537.969446][ T7232] syz.1.9276[7232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1537.969553][ T7232] syz.1.9276[7232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1538.243070][ T7217] chnl_net:caif_netlink_parms(): no params data found [ 1538.804402][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1538.841091][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.849287][ T7217] device bridge_slave_0 entered promiscuous mode [ 1538.947950][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1538.968792][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1539.009238][ T7217] device bridge_slave_1 entered promiscuous mode [ 1539.199304][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1539.225170][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1539.366666][ T7288] netlink: 'syz.0.9286': attribute type 10 has an invalid length. [ 1539.370529][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 1539.405986][ T7288] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9286'. [ 1539.459959][ T7289] netlink: 'syz.0.9286': attribute type 11 has an invalid length. [ 1539.510450][ T7289] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9286'. [ 1539.529749][ T7217] team0: Port device team_slave_0 added [ 1539.589884][ T7217] team0: Port device team_slave_1 added [ 1539.709400][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.741789][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.820292][ T7217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.863650][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.895631][ T7310] netlink: 'syz.1.9292': attribute type 9 has an invalid length. [ 1539.901492][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1539.923025][ T7310] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.9292'. [ 1540.241568][ T7217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1540.499784][ T7316] device syzkaller0 entered promiscuous mode [ 1540.591613][ T7329] netlink: 'syz.0.9294': attribute type 10 has an invalid length. [ 1540.679491][ T7329] team0: Device hsr_slave_0 failed to register rx_handler [ 1540.765080][ T7217] device hsr_slave_0 entered promiscuous mode [ 1540.800534][ T7217] device hsr_slave_1 entered promiscuous mode [ 1540.818939][ T7217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1540.857996][ T7217] Cannot create hsr debugfs directory [ 1540.988829][ T7345] netlink: 'syz.1.9297': attribute type 3 has an invalid length. [ 1541.005094][ T7345] netlink: 'syz.1.9297': attribute type 1 has an invalid length. [ 1541.025026][ T7345] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.9297'. [ 1541.451080][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 1543.530269][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1544.051723][ T7364] netlink: 'syz.4.9301': attribute type 3 has an invalid length. [ 1544.062239][ T7380] netlink: 'syz.1.9304': attribute type 10 has an invalid length. [ 1544.727366][ T7403] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9310'. [ 1544.849400][ T4952] device veth0_to_team left promiscuous mode [ 1544.944992][ T4952] Ÿë: port 1(veth0_to_team) entered disabled state [ 1545.296827][ T4952] device veth1_macvtap left promiscuous mode [ 1545.307287][ T4952] device veth0_macvtap left promiscuous mode [ 1545.610434][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1545.862897][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.869449][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.250933][ T4952] team0 (unregistering): Port device team_slave_1 removed [ 1546.737880][ T7454] sctp: [Deprecated]: syz.4.9319 (pid 7454) Use of int in max_burst socket option deprecated. [ 1546.737880][ T7454] Use struct sctp_assoc_value instead [ 1547.868234][ T7217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1547.930459][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 1547.938442][ T7217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1547.986743][ T7217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1548.036145][ T7217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1548.362295][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1548.416308][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1548.454296][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1548.468454][ T7217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.492538][ T7492] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1548.515590][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1548.530582][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1548.541098][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1548.575812][T27866] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.582975][T27866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1548.609739][ T7493] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1548.642928][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1548.672622][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1548.703142][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1548.731458][T27866] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.738598][T27866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.770768][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1548.791130][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1548.821551][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1548.844986][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1548.869452][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1548.902222][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1548.915083][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1548.946169][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1548.961896][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1548.981621][ T7525] netlink: 'syz.4.9332': attribute type 3 has an invalid length. [ 1548.989369][ T7525] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9332'. [ 1549.105438][ T7521] netlink: 'syz.4.9332': attribute type 6 has an invalid length. [ 1549.290602][ T7521] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9332'. [ 1549.376136][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1549.416811][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1549.561310][ T7217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1549.771397][ T7539] netlink: 'syz.0.9337': attribute type 2 has an invalid length. [ 1549.902181][ T7539] device 1 entered promiscuous mode [ 1550.341928][ T7554] device wlan1 entered promiscuous mode [ 1550.370077][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1550.392470][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1550.425617][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1550.457424][ T7561] netlink: 'syz.1.9342': attribute type 21 has an invalid length. [ 1550.533081][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1550.552423][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1550.640040][ T7217] device veth0_vlan entered promiscuous mode [ 1550.662434][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1550.681434][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1550.701997][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1550.726849][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1550.764317][ T7217] device veth1_vlan entered promiscuous mode [ 1550.836295][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1550.863174][T27866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1550.890830][ T7217] device veth0_macvtap entered promiscuous mode [ 1550.904529][ T7217] device veth1_macvtap entered promiscuous mode [ 1550.995178][ T7217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.051427][ T7217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.090234][ T7217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1551.130185][ T7217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.201807][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1551.216113][ T7594] netlink: 'syz.0.9351': attribute type 1 has an invalid length. [ 1551.220327][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1551.244049][ T7594] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.9351'. [ 1551.265290][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1551.304265][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1551.343845][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1551.372720][ T7217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.410492][ T7217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.456921][ T7217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1551.493350][ T7217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1551.543943][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1551.572131][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1551.593472][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1551.631467][ T7217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.661397][ T7217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.673209][ T7601] netlink: 'syz.1.9353': attribute type 27 has an invalid length. [ 1551.709894][ T7217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.728228][ T7601] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9353'. [ 1551.749179][ T7217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1551.981483][T20707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.015492][T20707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.072309][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1552.119146][T20707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.156167][T20707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.180550][T27874] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1552.313609][ T7614] netlink: 'syz.4.9356': attribute type 10 has an invalid length. [ 1552.383651][ T7614] device geneve0 entered promiscuous mode [ 1552.614749][ T7614] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1553.085166][ T7646] netlink: 'syz.3.9361': attribute type 2 has an invalid length. [ 1553.583643][ T7655] device syzkaller0 entered promiscuous mode [ 1553.718701][ T7657] netlink: 'syz.3.9363': attribute type 3 has an invalid length. [ 1553.756614][ T7657] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.9363'. [ 1554.071249][ T7672] syzkaller: port 1(erspan0) entered blocking state [ 1554.078101][ T7672] syzkaller: port 1(erspan0) entered disabled state [ 1554.107370][ T7672] device erspan0 entered promiscuous mode [ 1554.172980][ T7672] netlink: 'syz.0.9365': attribute type 2 has an invalid length. [ 1554.984024][T27874] tipc: Subscription rejected, illegal request [ 1555.460244][ T7714] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.9375'. [ 1555.473059][ T7714] netlink: 1903 bytes leftover after parsing attributes in process `syz.2.9375'. [ 1556.888653][ T7676] syzkaller: port 1(erspan0) entered blocking state [ 1556.895436][ T7676] syzkaller: port 1(erspan0) entered forwarding state [ 1556.916666][ T7672] device 0 entered promiscuous mode [ 1556.924758][ T7683] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.9368'. [ 1557.352666][ T7726] netlink: 'syz.3.9377': attribute type 21 has an invalid length. [ 1557.371809][ T7727] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.9379'. [ 1557.380438][ T7726] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9377'. [ 1557.939209][T27874] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller: link becomes ready [ 1558.400462][ T7767] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9385'. [ 1558.472875][ T4275] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 1558.590740][ T7780] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1558.617645][ T7780] syzkaller0: linktype set to 778 [ 1558.625142][ T7776] delete_channel: no stack [ 1559.299703][ T7812] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.9395'. [ 1559.476886][ T7817] netlink: 'syz.0.9395': attribute type 6 has an invalid length. [ 1559.521224][ T7814] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9396'. [ 1560.189901][ T7831] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9401'. [ 1560.304947][ T7839] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9402'. [ 1560.376870][ T7842] device veth1_macvtap left promiscuous mode [ 1560.389168][ T7842] device macsec0 entered promiscuous mode [ 1560.868211][ T7846] netlink: 'syz.0.9405': attribute type 39 has an invalid length. [ 1562.845385][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9413'. [ 1562.913894][ T7869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9413'. [ 1562.969200][ T7873] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9413'. [ 1563.028565][ T7877] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9413'. [ 1563.161155][ T7879] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.9415'. [ 1563.882343][ T7906] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9424'. [ 1564.986971][ T7928] netlink: 'syz.2.9429': attribute type 29 has an invalid length. [ 1565.390855][ T7928] netlink: 'syz.2.9429': attribute type 29 has an invalid length. [ 1565.471935][ T7930] netlink: 'syz.2.9429': attribute type 29 has an invalid length. [ 1565.585342][ T7935] netlink: 'syz.0.9432': attribute type 21 has an invalid length. [ 1565.620293][ T7935] netlink: 144 bytes leftover after parsing attributes in process `syz.0.9432'. [ 1565.726731][ T7939] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.9433'. [ 1566.037244][ T7957] netlink: 'syz.2.9439': attribute type 10 has an invalid length. [ 1566.081633][ T7957] team0: Port device wlan1 removed [ 1566.087589][ T7964] device macsec0 left promiscuous mode [ 1566.136008][ T7965] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1566.168567][ T7968] device veth1_macvtap entered promiscuous mode [ 1566.185587][ T7968] device macsec0 entered promiscuous mode [ 1566.220550][ T7969] netlink: 1903 bytes leftover after parsing attributes in process `syz.3.9441'. [ 1566.302764][ T7968] device syzkaller0 entered promiscuous mode [ 1570.929457][ T8013] netlink: 'syz.3.9448': attribute type 13 has an invalid length. [ 1570.957640][ T8013] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9448'. [ 1570.971023][ T8013] erspan0: refused to change device tx_queue_len [ 1570.977437][ T8017] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9452'. [ 1571.016889][ T8026] netlink: 'syz.0.9454': attribute type 4 has an invalid length. [ 1571.330069][ T8050] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9461'. [ 1571.696544][ T8059] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9463'. [ 1572.649872][ T8077] netlink: 'syz.0.9468': attribute type 3 has an invalid length. [ 1572.667475][ T8073] netlink: 'syz.4.9466': attribute type 10 has an invalid length. [ 1572.682711][ T8077] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.9468'. [ 1572.745153][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.775249][ T8073] device bridge_slave_1 left promiscuous mode [ 1572.798438][ T8073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.897421][ T8073] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1573.866391][ T8116] netlink: 168 bytes leftover after parsing attributes in process `syz.1.9479'. [ 1573.904178][ T8116] netlink: 'syz.1.9479': attribute type 10 has an invalid length. [ 1573.923686][ T8116] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9479'. [ 1573.940263][ T8116] device ipvlan1 entered promiscuous mode [ 1573.949554][ T8116] bridge0: port 4(ipvlan1) entered blocking state [ 1573.957625][ T8116] bridge0: port 4(ipvlan1) entered disabled state [ 1573.972283][ T8116] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1573.989260][ T8120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9480'. [ 1576.045856][ T8149] netlink: 'syz.4.9487': attribute type 3 has an invalid length. [ 1576.070485][ T8149] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.9487'. [ 1576.675354][ T8168] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9492'. [ 1577.002603][ T8182] netlink: 'syz.3.9500': attribute type 29 has an invalid length. [ 1577.089563][ T8182] netlink: 'syz.3.9500': attribute type 29 has an invalid length. [ 1578.215438][ T8203] netlink: 'syz.3.9501': attribute type 3 has an invalid length. [ 1578.230493][ T8203] netlink: 'syz.3.9501': attribute type 1 has an invalid length. [ 1578.238308][ T8203] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.9501'. [ 1578.878163][ T8219] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.9505'. [ 1579.203982][ T8225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9508'. [ 1579.217239][ T8225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9508'. [ 1579.234041][ T8225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9508'. [ 1579.245966][ T8230] netlink: 194236 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1579.249096][ T4990] tipc: Subscription rejected, illegal request [ 1579.266075][ T8230] netlink: zone id is out of range [ 1579.268359][ T8225] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9508'. [ 1579.285327][ T8230] netlink: get zone limit has 8 unknown bytes [ 1579.309021][ T8227] netlink: 'syz.0.9509': attribute type 2 has an invalid length. [ 1579.320315][ T8227] netlink: 119 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1580.623504][ T8256] netlink: 'syz.0.9518': attribute type 10 has an invalid length. [ 1580.668421][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.697154][ T8256] device bridge_slave_1 left promiscuous mode [ 1580.726217][ T8256] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.815825][ T8256] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1581.183224][ T8275] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1581.214124][ T8275] __nla_validate_parse: 1 callbacks suppressed [ 1581.214143][ T8275] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9522'. [ 1581.292317][ T8275] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 1581.296959][ T8279] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.9524'. [ 1581.301116][ T8275] CPU: 1 PID: 8275 Comm: syz.1.9522 Not tainted syzkaller #0 [ 1581.317243][ T8275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1581.327303][ T8275] Call Trace: [ 1581.330583][ T8275] [ 1581.333515][ T8275] dump_stack_lvl+0x188/0x24e [ 1581.338208][ T8275] ? show_regs_print_info+0x12/0x12 [ 1581.343415][ T8275] ? load_image+0x400/0x400 [ 1581.347946][ T8275] sysfs_warn_dup+0x8a/0xa0 [ 1581.352459][ T8275] sysfs_do_create_link_sd+0xc0/0x110 [ 1581.357853][ T8275] device_add+0x7ed/0xfb0 [ 1581.362212][ T8275] wiphy_register+0x1d9f/0x2ac0 [ 1581.367100][ T8275] ? cfg80211_event_work+0x40/0x40 [ 1581.372223][ T8275] ? _dev_printk+0x1/0x175 [ 1581.376651][ T8275] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1581.382725][ T8275] ieee80211_register_hw+0x2d00/0x39f0 [ 1581.388206][ T8275] ? ieee80211_register_hw+0xee1/0x39f0 [ 1581.393757][ T8275] ? ieee80211_register_hw+0xee1/0x39f0 [ 1581.399321][ T8275] ? ieee80211_tasklet_handler+0x20/0x20 [ 1581.404974][ T8275] ? memset+0x1e/0x40 [ 1581.408966][ T8275] ? __hrtimer_init+0x186/0x270 [ 1581.413821][ T8275] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1581.419573][ T8275] hwsim_new_radio_nl+0xafa/0xce0 [ 1581.424623][ T8275] genl_family_rcv_msg_doit+0x22a/0x330 [ 1581.430173][ T8275] ? end_current_label_crit_section+0x170/0x170 [ 1581.436422][ T8275] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1581.442327][ T8275] ? bpf_lsm_capable+0x5/0x10 [ 1581.447004][ T8275] ? security_capable+0x85/0xb0 [ 1581.451868][ T8275] genl_rcv_msg+0x604/0x790 [ 1581.456386][ T8275] ? genl_bind+0x360/0x360 [ 1581.460799][ T8275] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1581.467152][ T8275] netlink_rcv_skb+0x1fb/0x450 [ 1581.471919][ T8275] ? genl_bind+0x360/0x360 [ 1581.476336][ T8275] ? netlink_ack+0x1170/0x1170 [ 1581.481122][ T8275] ? down_read+0x1a8/0x2d0 [ 1581.485549][ T8275] genl_rcv+0x24/0x40 [ 1581.489527][ T8275] netlink_unicast+0x74d/0x8d0 [ 1581.494309][ T8275] netlink_sendmsg+0x8ad/0xbd0 [ 1581.499099][ T8275] ? netlink_getsockopt+0x550/0x550 [ 1581.504307][ T8275] ? aa_sock_msg_perm+0x94/0x150 [ 1581.509252][ T8275] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1581.514538][ T8275] ? security_socket_sendmsg+0x7c/0xa0 [ 1581.520006][ T8275] ? netlink_getsockopt+0x550/0x550 [ 1581.525206][ T8275] ____sys_sendmsg+0x5be/0x970 [ 1581.529989][ T8275] ? __sys_sendmsg_sock+0x30/0x30 [ 1581.535017][ T8275] ? __import_iovec+0x315/0x500 [ 1581.539877][ T8275] ? import_iovec+0x6f/0xa0 [ 1581.544385][ T8275] ___sys_sendmsg+0x2a2/0x360 [ 1581.549078][ T8275] ? __sys_sendmsg+0x290/0x290 [ 1581.553874][ T8275] ? ktime_get_real_ts64+0x440/0x440 [ 1581.559157][ T8275] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 1581.565432][ T8275] __se_sys_sendmsg+0x1bb/0x2a0 [ 1581.570292][ T8275] ? __x64_sys_sendmsg+0x80/0x80 [ 1581.575283][ T8275] ? lockdep_hardirqs_on+0x94/0x140 [ 1581.580509][ T8275] do_syscall_64+0x4c/0xa0 [ 1581.584941][ T8275] ? clear_bhb_loop+0x60/0xb0 [ 1581.589623][ T8275] ? clear_bhb_loop+0x60/0xb0 [ 1581.594322][ T8275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1581.600224][ T8275] RIP: 0033:0x7fc6b679c799 [ 1581.604647][ T8275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1581.624264][ T8275] RSP: 002b:00007fc6b76a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.632691][ T8275] RAX: ffffffffffffffda RBX: 00007fc6b6a15fa0 RCX: 00007fc6b679c799 [ 1581.640666][ T8275] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1581.648636][ T8275] RBP: 00007fc6b6832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1581.656603][ T8275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1581.664573][ T8275] R13: 00007fc6b6a16038 R14: 00007fc6b6a15fa0 R15: 00007ffe5e84ac38 [ 1581.672566][ T8275] [ 1582.372743][ T8297] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.9529'. [ 1582.824821][ T8303] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1582.885600][ T8305] netlink: 'syz.2.9530': attribute type 19 has an invalid length. [ 1582.896624][ T8305] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1583.041004][ T8312] netlink: 'syz.3.9534': attribute type 10 has an invalid length. [ 1583.125265][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.153806][ T8312] device bridge_slave_1 left promiscuous mode [ 1583.174104][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.266103][ T8312] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1583.297774][ T8313] device pim6reg1 entered promiscuous mode [ 1584.304683][ T8337] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.9540'. [ 1584.619040][ T4275] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 1584.674785][ T8353] netlink: 'syz.0.9546': attribute type 1 has an invalid length. [ 1584.715485][ T8353] netlink: 'syz.0.9546': attribute type 1 has an invalid length. [ 1584.724443][ T8353] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.9546'. [ 1584.737817][ T8358] device lo left promiscuous mode [ 1584.829673][ T4275] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 1584.829733][ T8364] netlink: 'syz.0.9548': attribute type 29 has an invalid length. [ 1584.859251][ T8364] netlink: 'syz.0.9548': attribute type 29 has an invalid length. [ 1584.886276][ T8365] netlink: 'syz.0.9548': attribute type 29 has an invalid length. [ 1584.914165][ T8364] netlink: 'syz.0.9548': attribute type 29 has an invalid length. [ 1584.926448][ T8367] netlink: 'syz.2.9549': attribute type 25 has an invalid length. [ 1584.938479][ T8367] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.9549'. [ 1585.592055][ T8392] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.9556'. [ 1585.842697][ T8399] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9558'. [ 1586.348588][ T8394] device syzkaller0 entered promiscuous mode [ 1586.384932][ T8412] device veth0_to_team entered promiscuous mode [ 1586.457194][ T8425] netlink: 'syz.4.9565': attribute type 15 has an invalid length. [ 1586.468435][ T8425] netlink: 144 bytes leftover after parsing attributes in process `syz.4.9565'. [ 1587.063346][ T8443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9571'. [ 1587.658515][ T8456] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9573'. [ 1587.741606][ T8459] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9575'. [ 1587.988625][ T8456] team0: Port device bond0 removed [ 1588.005373][ T8456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.063221][ T8456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.127265][ T8466] validate_nla: 3 callbacks suppressed [ 1588.127307][ T8466] netlink: 'syz.4.9576': attribute type 2 has an invalid length. [ 1588.148886][ T8456] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1588.199549][ T8456] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1588.213207][ T8467] netlink: 'syz.4.9576': attribute type 2 has an invalid length. [ 1588.221720][ T8467] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9576'. [ 1588.275490][ T8468] netlink: 4091 bytes leftover after parsing attributes in process `syz.4.9576'. [ 1588.297497][ T8456] bond0 (unregistering): Released all slaves [ 1588.443537][ T8466] device 0 entered promiscuous mode [ 1588.545756][ T8473] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1588.890306][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 1590.505461][ T8473] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9578'. [ 1590.514266][ T8485] netlink: 'syz.4.9583': attribute type 21 has an invalid length. [ 1590.523930][ T8485] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9583'. [ 1590.584487][ T8473] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 1591.687015][ T8532] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9597'. [ 1591.855393][ T8546] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.9597'. [ 1591.975141][ T8552] netlink: 'syz.1.9601': attribute type 2 has an invalid length. [ 1592.000547][ T8552] netlink: 'syz.1.9601': attribute type 8 has an invalid length. [ 1592.024380][ T8552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9601'. [ 1592.478934][ T8572] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9606'. [ 1592.519415][ T8572] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9606'. [ 1592.571212][ T8580] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.9606'. [ 1593.876308][ T8592] netlink: 'syz.4.9612': attribute type 5 has an invalid length. [ 1593.922249][ T8592] netlink: 'syz.4.9612': attribute type 15 has an invalid length. [ 1593.942665][ T8592] netlink: 'syz.4.9612': attribute type 7 has an invalid length. [ 1593.969817][ T8596] netlink: 'syz.1.9614': attribute type 10 has an invalid length. [ 1593.998430][ T8596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9614'. [ 1594.014478][ T8596] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1594.485085][ T8615] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.9621'. [ 1594.503249][ T8615] netlink: zone id is out of range [ 1594.511685][ T8615] netlink: zone id is out of range [ 1594.516978][ T8615] netlink: zone id is out of range [ 1594.527340][ T8615] netlink: zone id is out of range [ 1594.591268][ T8615] netlink: zone id is out of range [ 1594.596714][ T8615] netlink: zone id is out of range [ 1594.640408][ T8615] netlink: zone id is out of range [ 1594.733809][ T8615] netlink: del zone limit has 4 unknown bytes [ 1594.864289][ T8628] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.9625'. [ 1595.791595][ T8666] netlink: 'syz.4.9634': attribute type 10 has an invalid length. [ 1595.800345][ T8666] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9634'. [ 1596.376040][ T8683] netlink: 'syz.0.9638': attribute type 3 has an invalid length. [ 1596.934629][ T8680] netlink: 'syz.2.9637': attribute type 17 has an invalid length. [ 1596.946072][ T8680] __nla_validate_parse: 1 callbacks suppressed [ 1596.946088][ T8680] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9637'. [ 1597.081935][ T8700] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9642'. [ 1597.123200][ T8701] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.9642'. [ 1597.141029][ T8702] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.9642'. [ 1597.198750][ T8706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9645'. [ 1599.711981][ T8734] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9651'. [ 1599.751217][ T8722] device syzkaller0 entered promiscuous mode [ 1600.189528][ T8758] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.9657'. [ 1604.578058][ T8766] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1604.742944][ T8779] netlink: 'syz.4.9663': attribute type 9 has an invalid length. [ 1604.750870][ T8779] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.9663'. [ 1604.985215][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9664'. [ 1605.040112][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9664'. [ 1607.315887][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.323604][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.741287][ T8903] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.9695'. [ 1607.895565][ T8906] netlink: 4943 bytes leftover after parsing attributes in process `syz.1.9696'. [ 1608.194753][ T8915] netlink: 'syz.0.9699': attribute type 2 has an invalid length. [ 1608.209334][ T8920] delete_channel: no stack [ 1608.232326][ T8920] delete_channel: no stack [ 1608.353699][ T8915] device 2 entered promiscuous mode [ 1608.500295][ T8930] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.9703'. [ 1608.520152][ T8930] openvswitch: netlink: Key type 386 is out of range max 32 [ 1610.596173][ T8985] netlink: 130181 bytes leftover after parsing attributes in process `syz.0.9717'. [ 1611.278755][ T9016] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9729'. [ 1611.352807][ T9014] netlink: 'syz.4.9728': attribute type 2 has an invalid length. [ 1611.430873][ T9018] netlink: 'syz.4.9728': attribute type 4 has an invalid length. [ 1611.480572][ T9018] netlink: 152 bytes leftover after parsing attributes in process `syz.4.9728'. [ 1611.901174][ T9018] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1612.046489][ T9014] device 0 entered promiscuous mode [ 1612.095491][ T9020] netlink: 'syz.2.9729': attribute type 21 has an invalid length. [ 1612.149544][ T9020] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9729'. [ 1612.660910][ T9052] netlink: 'syz.0.9740': attribute type 153 has an invalid length. [ 1612.691766][ T9052] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.9740'. [ 1614.408102][ T9105] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.9755'. [ 1614.484734][ T9107] netlink: 'syz.0.9756': attribute type 10 has an invalid length. [ 1614.954549][ T9108] netlink: 188 bytes leftover after parsing attributes in process `syz.2.9754'. [ 1615.669132][ T9137] netlink: 'syz.1.9764': attribute type 10 has an invalid length. [ 1615.732211][ T9137] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9764'. [ 1615.831900][ T9137] bridge0: port 4(ipvlan1) entered blocking state [ 1615.850775][ T9137] bridge0: port 4(ipvlan1) entered disabled state [ 1615.859680][ T9137] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1616.105361][ T9151] netlink: 'syz.4.9768': attribute type 13 has an invalid length. [ 1616.171414][ T9151] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.9768'. [ 1616.285858][ T9156] netlink: 'syz.3.9769': attribute type 39 has an invalid length. [ 1616.957833][ T9177] netlink: 'syz.0.9775': attribute type 3 has an invalid length. [ 1616.980298][ T9177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9775'. [ 1617.045729][ T9182] netlink: 'syz.4.9779': attribute type 19 has an invalid length. [ 1618.200441][ T9219] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.9789'. [ 1618.256235][ T9226] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.9791'. [ 1618.343680][ T9229] delete_channel: no stack [ 1618.431335][ T9221] device syzkaller0 entered promiscuous mode [ 1621.044183][ T9261] device bond_slave_1 entered promiscuous mode [ 1621.052333][ T9268] netlink: 'syz.3.9801': attribute type 10 has an invalid length. [ 1621.069267][ T9268] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1621.293740][ T9282] netlink: 'syz.1.9807': attribute type 1 has an invalid length. [ 1621.816828][ T9298] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9811'. [ 1621.924048][ T9301] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.9812'. [ 1622.443951][ T9314] netlink: 'syz.3.9817': attribute type 10 has an invalid length. [ 1622.480588][ T9314] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9817'. [ 1622.563715][ T9313] netlink: 16083 bytes leftover after parsing attributes in process `syz.2.9815'. [ 1622.581426][ T9312] delete_channel: no stack [ 1624.634028][ T9327] netlink: 'syz.0.9821': attribute type 1 has an invalid length. [ 1624.656282][ T4275] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1624.663933][ T9327] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.9821'. [ 1624.969043][ T9352] netlink: 'syz.0.9828': attribute type 2 has an invalid length. [ 1624.981027][ T9352] netlink: 'syz.0.9828': attribute type 1 has an invalid length. [ 1625.025657][ T9351] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.9827'. [ 1625.839355][ T9385] netlink: 'syz.1.9837': attribute type 1 has an invalid length. [ 1625.853087][ T9385] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9837'. [ 1626.065948][ T9406] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.9842'. [ 1626.397928][ T9425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9847'. [ 1626.507311][ T9425] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9847'. [ 1626.696531][ T9422] ieee80211 phy119: Failed to add default virtual iface [ 1626.722921][ T9433] netlink: 'syz.1.9849': attribute type 10 has an invalid length. [ 1626.800049][ T9433] device bond0 entered promiscuous mode [ 1626.813571][ T9433] device bond_slave_0 entered promiscuous mode [ 1626.819943][ T9433] device bond_slave_1 entered promiscuous mode [ 1626.829346][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1626.883118][ T9433] team0: Port device bond0 removed [ 1628.550703][ T9475] __nla_validate_parse: 1 callbacks suppressed [ 1628.550722][ T9475] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9862'. [ 1628.599959][ T9477] netlink: 'syz.3.9861': attribute type 2 has an invalid length. [ 1628.610483][ T9477] netlink: 'syz.3.9861': attribute type 1 has an invalid length. [ 1628.631779][ T9477] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.9861'. [ 1628.864334][ T9491] netlink: 'syz.4.9865': attribute type 13 has an invalid length. [ 1628.880573][ T9491] netlink: 'syz.4.9865': attribute type 14 has an invalid length. [ 1628.913834][ T9491] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9865'. [ 1629.024275][ T9497] netlink: 'syz.3.9866': attribute type 1 has an invalid length. [ 1629.067315][ T9497] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.9866'. [ 1629.133554][ T9501] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.9867'. [ 1629.160779][ T9503] netlink: 'syz.0.9868': attribute type 21 has an invalid length. [ 1629.180446][ T9503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9868'. [ 1629.189680][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9868'. [ 1629.381820][ T9503] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.9868'. [ 1629.738593][ T9515] device syzkaller0 entered promiscuous mode [ 1629.836358][ T9522] netlink: 'syz.0.9875': attribute type 21 has an invalid length. [ 1629.855033][ T9522] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9875'. [ 1629.870039][ T9513] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9873'. [ 1632.630158][ T9538] netlink: 'syz.0.9877': attribute type 21 has an invalid length. [ 1632.638076][ T9538] netlink: 'syz.0.9877': attribute type 4 has an invalid length. [ 1632.646411][ T9538] netlink: 'syz.0.9877': attribute type 5 has an invalid length. [ 1633.874238][ T9607] __nla_validate_parse: 8 callbacks suppressed [ 1633.874255][ T9607] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9894'. [ 1634.055829][ T9615] sock: sock_set_timeout: `syz.4.9898' (pid 9615) tries to set negative timeout [ 1634.210394][ T9623] validate_nla: 3 callbacks suppressed [ 1634.210428][ T9623] netlink: 'syz.3.9901': attribute type 21 has an invalid length. [ 1634.259104][ T9623] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9901'. [ 1634.346418][ T9623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9901'. [ 1634.503892][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9911'. [ 1635.571823][ T9656] netlink: 'syz.2.9905': attribute type 29 has an invalid length. [ 1635.909711][ T9656] netlink: 'syz.2.9905': attribute type 29 has an invalid length. [ 1636.133979][ T9661] netlink: 'syz.2.9905': attribute type 29 has an invalid length. [ 1636.359825][ T9678] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.9912'. [ 1636.406338][ T9680] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.9912'. [ 1636.768438][ T9690] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9915'. [ 1636.822962][ T9693] netlink: 'syz.0.9917': attribute type 10 has an invalid length. [ 1636.831674][ T9686] delete_channel: no stack [ 1636.864614][ T9693] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.895287][ T9693] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.933409][ T9693] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.961701][ T9693] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.993976][ T9693] device geneve0 entered promiscuous mode [ 1637.417804][ T9718] netlink: 'syz.1.9923': attribute type 3 has an invalid length. [ 1637.468053][ T9718] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9923'. [ 1637.984897][ T9734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9928'. [ 1638.524293][ T9755] netlink: 'syz.2.9930': attribute type 21 has an invalid length. [ 1638.569693][ T9757] netlink: 'syz.4.9933': attribute type 11 has an invalid length. [ 1638.585941][ T9757] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.9933'. [ 1639.194881][ T9751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1640.904437][ T9776] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.9937'. [ 1640.928462][ T9776] netlink: zone id is out of range [ 1640.934411][ T9776] netlink: zone id is out of range [ 1640.939676][ T9776] netlink: zone id is out of range [ 1640.955938][ T9776] netlink: zone id is out of range [ 1640.964952][ T9776] netlink: zone id is out of range [ 1640.996970][ T9776] netlink: zone id is out of range [ 1641.007476][ T9776] netlink: zone id is out of range [ 1641.014471][ T9776] netlink: zone id is out of range [ 1641.020029][ T9776] netlink: zone id is out of range [ 1641.028021][ T9776] netlink: zone id is out of range [ 1642.736187][ T9800] tipc: Started in network mode [ 1642.764440][ T9800] tipc: Node identity 9215a268, cluster identity 4711 [ 1642.785598][ T9800] tipc: Node number set to 2450891368 [ 1643.639578][ T9835] can: request_module (can-proto-0) failed. [ 1643.683433][ T9842] delete_channel: no stack [ 1646.604259][ T9871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9962'. [ 1646.621292][ T9871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9962'. [ 1646.658313][ T9871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9962'. [ 1646.689411][ T9871] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9962'. [ 1646.985605][ T9897] netlink: 'syz.2.9970': attribute type 3 has an invalid length. [ 1647.016935][ T9897] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.9970'. [ 1647.097536][ T9897] netlink: 'syz.2.9970': attribute type 6 has an invalid length. [ 1647.184427][ T9900] Ÿë: port 2(veth0_to_team) entered blocking state [ 1647.222277][ T9900] Ÿë: port 2(veth0_to_team) entered disabled state [ 1647.305290][ T9900] device veth0_to_team entered promiscuous mode [ 1647.506011][ T9917] netlink: 'syz.1.9974': attribute type 3 has an invalid length. [ 1647.530232][ T9917] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.9974'. [ 1648.482148][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.553710][ T9958] device bridge_slave_0 left promiscuous mode [ 1648.560141][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.859873][ T9961] netlink: 'syz.2.9985': attribute type 39 has an invalid length. [ 1649.119523][ T9971] delete_channel: no stack [ 1650.023976][T10020] device syzkaller0 entered promiscuous mode [ 1650.155841][T10030] netlink: 'syz.1.10003': attribute type 21 has an invalid length. [ 1650.179608][T10030] IPv6: Can't replace route, no match found [ 1650.469600][T10032] device syzkaller0 entered promiscuous mode [ 1650.477580][T10040] netlink: 'syz.4.10004': attribute type 10 has an invalid length. [ 1650.496139][T10046] netlink: 68 bytes leftover after parsing attributes in process `syz.1.10006'. [ 1652.649959][T10055] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1655.015737][T10085] netlink: 'syz.4.10017': attribute type 21 has an invalid length. [ 1655.023799][T10085] netlink: 16154 bytes leftover after parsing attributes in process `syz.4.10017'. [ 1655.140482][T10099] netlink: 'syz.3.10020': attribute type 21 has an invalid length. [ 1655.161805][T10099] netlink: 'syz.3.10020': attribute type 1 has an invalid length. [ 1655.229165][T10099] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.10020'. [ 1655.500548][T10115] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1656.097553][T10135] device syzkaller0 entered promiscuous mode [ 1659.487030][T10145] netlink: 'syz.1.10032': attribute type 2 has an invalid length. [ 1659.496201][T10151] netlink: 'syz.3.10033': attribute type 2 has an invalid length. [ 1659.510893][T10154] netlink: 'syz.0.10034': attribute type 21 has an invalid length. [ 1659.686103][ T4275] Bluetooth: hci1: ISO packet for unknown connection handle 3079 [ 1659.787827][T10169] netlink: 'syz.0.10038': attribute type 3 has an invalid length. [ 1659.837371][T10169] netlink: 'syz.0.10038': attribute type 1 has an invalid length. [ 1660.609256][ T4275] Bluetooth: hci0: command 0x0406 tx timeout [ 1661.295809][T10171] netlink: 'syz.0.10038': attribute type 27 has an invalid length. [ 1661.581696][T10177] netlink: 'syz.3.10040': attribute type 21 has an invalid length. [ 1661.592866][T10177] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10040'. [ 1662.545273][T10211] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1662.589995][T10211] net_ratelimit: 25 callbacks suppressed [ 1662.590028][T10211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1662.614825][T10217] netlink: 'syz.1.10053': attribute type 29 has an invalid length. [ 1662.638931][ T4284] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 1662.651534][T10221] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.10054'. [ 1662.679777][T10217] netlink: 'syz.1.10053': attribute type 29 has an invalid length. [ 1662.696647][T10222] netlink: 'syz.1.10053': attribute type 29 has an invalid length. [ 1662.870928][T10228] netlink: 'syz.0.10056': attribute type 3 has an invalid length. [ 1662.879287][T10228] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.10056'. [ 1664.650309][ T4284] Bluetooth: hci2: command 0x201b tx timeout [ 1665.579718][T10259] netlink: 'syz.0.10075': attribute type 10 has an invalid length. [ 1665.617048][T10259] device wlan1 left promiscuous mode [ 1665.739771][T10259] team0: Port device wlan1 added [ 1667.195793][T10293] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10077'. [ 1667.361636][T10299] netlink: 'syz.1.10078': attribute type 10 has an invalid length. [ 1668.375848][T10323] device pim6reg1 entered promiscuous mode [ 1668.733770][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.741682][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.639458][T10336] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10092'. [ 1671.335483][T10353] device syzkaller0 entered promiscuous mode [ 1671.861192][T10388] netlink: 'syz.3.10105': attribute type 2 has an invalid length. [ 1671.926832][T10389] netlink: 'syz.3.10105': attribute type 2 has an invalid length. [ 1671.957463][T10389] netlink: 10 bytes leftover after parsing attributes in process `syz.3.10105'. [ 1672.013973][T10390] netlink: 4091 bytes leftover after parsing attributes in process `syz.3.10105'. [ 1674.979878][T10377] netlink: 'syz.0.10103': attribute type 10 has an invalid length. [ 1674.999221][T10388] device 0 entered promiscuous mode [ 1675.189301][T10394] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10106'. [ 1676.461907][T10419] netlink: 'syz.3.10114': attribute type 1 has an invalid length. [ 1676.480325][T10419] netlink: 152 bytes leftover after parsing attributes in process `syz.3.10114'. [ 1677.065889][T10430] netlink: 'syz.2.10117': attribute type 10 has an invalid length. [ 1677.077488][T10430] team0: Port device wlan1 added [ 1677.517238][T10440] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10119'. [ 1677.552977][T10437] netlink: 'syz.3.10120': attribute type 21 has an invalid length. [ 1677.582403][T10437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1677.604054][T10437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1677.624315][T10446] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.10120'. [ 1678.138058][T10454] bridge0: port 3(team0) entered disabled state [ 1678.184121][T10454] device bridge_slave_0 left promiscuous mode [ 1678.203139][T10454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1678.678172][T10473] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10131'. [ 1678.710141][T10465] netlink: 'syz.1.10130': attribute type 11 has an invalid length. [ 1678.718310][T10465] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10130'. [ 1678.775648][T10477] netlink: 'syz.3.10132': attribute type 10 has an invalid length. [ 1678.845126][T10477] team0: Port device wlan1 added [ 1678.852931][T10473] netlink: 164 bytes leftover after parsing attributes in process `syz.2.10131'. [ 1678.941861][T10480] netlink: 'syz.0.10133': attribute type 10 has an invalid length. [ 1678.981434][T10480] team0: Device hsr_slave_0 failed to register rx_handler [ 1679.269388][T10464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1784.740052][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1784.747052][ C0] rcu: 1-...!: (1 GPs behind) idle=91ec/1/0x4000000000000002 softirq=153679/153680 fqs=6 [ 1784.758039][ C0] (detected by 0, t=10502 jiffies, g=227529, q=57 ncpus=2) [ 1784.765344][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1784.770552][ C1] NMI backtrace for cpu 1 [ 1784.770563][ C1] CPU: 1 PID: 10498 Comm: syz.0.10138 Not tainted syzkaller #0 [ 1784.770579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1784.770588][ C1] RIP: 0010:ct_irq_enter_irqson+0xe1/0x170 [ 1784.770610][ C1] Code: d5 17 de ff e8 60 50 82 08 e8 cb 14 de ff 48 b8 08 00 00 00 00 fc ff df c6 04 03 00 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 <4c> 8b 64 24 40 c6 04 03 f8 4c 89 e6 48 81 e6 00 02 00 00 31 ff e8 [ 1784.770622][ C1] RSP: 0018:ffffc90003ec7100 EFLAGS: 00000002 [ 1784.770635][ C1] RAX: dffffc0000000008 RBX: 1ffff920007d8e20 RCX: 1c6710313862ec00 [ 1784.770647][ C1] RDX: 0000000000000000 RSI: ffffffff8a94df40 RDI: ffffffff8adf0f60 [ 1784.770662][ C1] RBP: ffffc90003ec71a8 R08: ffff8880b8f3580b R09: 1ffff110171e6b01 [ 1784.770673][ C1] R10: dffffc0000000000 R11: ffffed10171e6b02 R12: dffffc0000000000 [ 1784.770684][ C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 0000000000000000 [ 1784.770694][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1784.770707][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1784.770718][ C1] CR2: 00007f15c0186a90 CR3: 0000000017774000 CR4: 00000000003506e0 [ 1784.770732][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 1784.770742][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 1784.770751][ C1] Call Trace: [ 1784.770758][ C1] [ 1784.770768][ C1] ? __jump_label_update+0x390/0x390 [ 1784.770783][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1784.770804][ C1] ? lock_chain_count+0x20/0x20 [ 1784.770822][ C1] ? rcu_is_watching+0x11/0xa0 [ 1784.770841][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 1784.770858][ C1] trace_irq_enable_rcuidle+0x9f/0x140 [ 1784.770878][ C1] trace_hardirqs_on+0x24/0x40 [ 1784.770894][ C1] asm_sysvec_irq_work+0x16/0x20 [ 1784.770910][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1784.770925][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 33 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1784.770937][ C1] RSP: 0018:ffffc90003ec72a0 EFLAGS: 00000206 [ 1784.770949][ C1] RAX: 1c6710313862ec00 RBX: 1ffff920007d8e5c RCX: 1c6710313862ec00 [ 1784.770960][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 1784.770971][ C1] RBP: ffffc90003ec7398 R08: ffffffff90af6247 R09: 1ffffffff215ec48 [ 1784.770982][ C1] R10: dffffc0000000000 R11: fffffbfff215ec49 R12: 0000000000000246 [ 1784.770993][ C1] R13: dffffc0000000000 R14: ffff8880b8f3b900 R15: 0000000000000002 [ 1784.771020][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 1784.771036][ C1] ? folio_memcg_lock+0x1d1/0x320 [ 1784.771055][ C1] ? folio_memcg_lock+0x7d/0x320 [ 1784.771071][ C1] ? mem_cgroup_get_oom_group+0x350/0x350 [ 1784.771092][ C1] __rcu_read_unlock+0x78/0xd0 [ 1784.771108][ C1] __folio_memcg_unlock+0xea/0x110 [ 1784.771127][ C1] page_remove_rmap+0x7e3/0xea0 [ 1784.771148][ C1] unmap_page_range+0x114a/0x2500 [ 1784.771189][ C1] unmap_vmas+0x260/0x390 [ 1784.771208][ C1] ? unmap_vmas+0x1bd/0x390 [ 1784.771228][ C1] ? unmap_page_range+0x2500/0x2500 [ 1784.771250][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 1784.771267][ C1] ? mas_next_entry+0xe27/0xed0 [ 1784.771297][ C1] exit_mmap+0x20d/0x960 [ 1784.771316][ C1] ? vm_brk+0x20/0x20 [ 1784.771332][ C1] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1784.771359][ C1] ? exit_mm+0x1ee/0x2d0 [ 1784.771384][ C1] ? uprobe_clear_state+0x274/0x290 [ 1784.771402][ C1] ? mm_update_next_owner+0x525/0x650 [ 1784.771425][ C1] __mmput+0x118/0x3c0 [ 1784.771441][ C1] exit_mm+0x1fe/0x2d0 [ 1784.771461][ C1] ? do_exit+0x2480/0x2480 [ 1784.771479][ C1] ? taskstats_exit+0x35a/0x9d0 [ 1784.771504][ C1] do_exit+0x905/0x2480 [ 1784.771525][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1784.771549][ C1] ? put_task_struct+0x80/0x80 [ 1784.771567][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 1784.771584][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1784.771604][ C1] ? lock_chain_count+0x20/0x20 [ 1784.771625][ C1] do_group_exit+0x217/0x2d0 [ 1784.771644][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1784.771667][ C1] get_signal+0x1272/0x1350 [ 1784.771700][ C1] arch_do_signal_or_restart+0xc4/0x1350 [ 1784.771719][ C1] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 1784.771745][ C1] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 1784.771765][ C1] ? get_sigframe_size+0x10/0x10 [ 1784.771782][ C1] ? perf_trace_preemptirq_template+0x268/0x320 [ 1784.771811][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1784.771830][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 1784.771852][ C1] exit_to_user_mode_loop+0x70/0x110 [ 1784.771872][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 1784.771892][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 1784.771907][ C1] do_syscall_64+0x58/0xa0 [ 1784.771925][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1784.771940][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1784.771958][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1784.771974][ C1] RIP: 0033:0x7f74a859c799 [ 1784.771987][ C1] Code: Unable to access opcode bytes at 0x7f74a859c76f. [ 1784.771995][ C1] RSP: 002b:00007f74a67d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1784.772010][ C1] RAX: fffffffffffffe00 RBX: 00007f74a8816098 RCX: 00007f74a859c799 [ 1784.772022][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f74a8816098 [ 1784.772033][ C1] RBP: 00007f74a8816090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.772043][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1784.772053][ C1] R13: 00007f74a8816128 R14: 00007ffd841dc550 R15: 00007ffd841dc638 [ 1784.772075][ C1] [ 1784.772548][ C0] rcu: rcu_preempt kthread starved for 10490 jiffies! g227529 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1785.326963][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1785.337018][ C0] rcu: RCU grace-period kthread stack dump: [ 1785.342914][ C0] task:rcu_preempt state:R running task stack:27024 pid:16 ppid:2 flags:0x00004000 [ 1785.353699][ C0] Call Trace: [ 1785.356979][ C0] [ 1785.359914][ C0] __schedule+0x11d1/0x40e0 [ 1785.364435][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1785.370336][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1785.376240][ C0] ? __sched_text_start+0x8/0x8 [ 1785.381094][ C0] ? __mod_timer+0x91e/0xd00 [ 1785.385694][ C0] schedule+0xb9/0x180 [ 1785.389770][ C0] schedule_timeout+0x184/0x2d0 [ 1785.394622][ C0] ? console_conditional_schedule+0x40/0x40 [ 1785.400519][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1785.406415][ C0] ? update_process_times+0x1b0/0x1b0 [ 1785.411797][ C0] ? prepare_to_swait_event+0x335/0x350 [ 1785.417353][ C0] rcu_gp_fqs_loop+0x303/0x1340 [ 1785.422218][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1785.428374][ C0] ? rcu_gp_init+0x14e0/0x14e0 [ 1785.433139][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 1785.437993][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1785.443191][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1785.448388][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1785.453593][ C0] rcu_gp_kthread+0x99/0x3b0 [ 1785.458187][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1785.463304][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1785.469202][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1785.474238][ C0] kthread+0x29d/0x330 [ 1785.478305][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1785.483419][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1785.488012][ C0] ret_from_fork+0x1f/0x30 [ 1785.492447][ C0] [ 1785.495470][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1785.501787][ C0] CPU: 0 PID: 4990 Comm: kworker/u4:28 Not tainted syzkaller #0 [ 1785.509417][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1785.519470][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 1785.525466][ C0] RIP: 0010:kvm_wait+0x159/0x1b0 [ 1785.530412][ C0] Code: 89 df 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 4b 0f b6 1f e8 97 38 50 00 44 38 e3 75 10 66 90 0f 00 2d 59 ce 50 09 fb f4 16 ff ff ff fb e9 10 ff ff ff e8 37 62 f4 08 89 f9 80 e1 07 38 [ 1785.550016][ C0] RSP: 0018:ffffc9000deae440 EFLAGS: 00000246 [ 1785.556083][ C0] RAX: 85e48ae0b9da5b00 RBX: 0000000000000003 RCX: 85e48ae0b9da5b00 [ 1785.564056][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0f60 [ 1785.572028][ C0] RBP: ffffc9000deae4f0 R08: ffffffff90af6247 R09: 1ffffffff215ec48 [ 1785.580005][ C0] R10: dffffc0000000000 R11: fffffbfff215ec49 R12: 0000000000000003 [ 1785.587980][ C0] R13: ffff8880b8e3b954 R14: dffffc0000000000 R15: 1ffff92001bd5c88 [ 1785.595953][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1785.604884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1785.611469][ C0] CR2: 00007f15c028435d CR3: 00000000770ac000 CR4: 00000000003506f0 [ 1785.619441][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1785.627409][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1785.635379][ C0] Call Trace: [ 1785.638663][ C0] [ 1785.641594][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 1785.646728][ C0] __pv_queued_spin_lock_slowpath+0x616/0x9c0 [ 1785.652811][ C0] ? __pv_queued_spin_unlock_slowpath+0x290/0x290 [ 1785.659246][ C0] queued_spin_lock_slowpath+0x43/0x50 [ 1785.664706][ C0] do_raw_spin_lock+0x265/0x2f0 [ 1785.669563][ C0] ? __rwlock_init+0x140/0x140 [ 1785.674339][ C0] page_vma_mapped_walk+0x14db/0x1700 [ 1785.679732][ C0] ? page_vma_mkclean_one+0x2db/0x6a0 [ 1785.685108][ C0] page_vma_mkclean_one+0x368/0x6a0 [ 1785.690322][ C0] ? pfn_mkclean_range+0x2d0/0x2d0 [ 1785.695460][ C0] page_mkclean_one+0x1ec/0x3a0 [ 1785.700319][ C0] ? folio_mkclean+0x360/0x360 [ 1785.705091][ C0] ? PageHuge+0x94/0x1f0 [ 1785.709337][ C0] ? folio_mkclean+0x360/0x360 [ 1785.714101][ C0] ? page_to_pgoff+0x72/0x2b0 [ 1785.718782][ C0] ? vma_address+0x21b/0x410 [ 1785.723371][ C0] ? folio_mkclean+0x360/0x360 [ 1785.728138][ C0] rmap_walk_file+0x3e8/0x730 [ 1785.732826][ C0] folio_mkclean+0x1e1/0x360 [ 1785.737419][ C0] ? rmap_walk+0xb0/0xb0 [ 1785.741668][ C0] ? folio_mkclean+0x360/0x360 [ 1785.746431][ C0] ? page_mkclean_one+0x3a0/0x3a0 [ 1785.751459][ C0] ? folio_mapping+0x1ba/0x4d0 [ 1785.756227][ C0] ? folio_clear_dirty_for_io+0x7b/0xc50 [ 1785.761865][ C0] folio_clear_dirty_for_io+0x203/0xc50 [ 1785.767419][ C0] ? folio_wait_writeback+0x1f0/0x1f0 [ 1785.772810][ C0] ? filemap_get_folios_tag+0x7b0/0x7b0 [ 1785.778363][ C0] ? wb_workfn+0xb68/0xee0 [ 1785.782784][ C0] mpage_submit_page+0x8a/0x210 [ 1785.787652][ C0] mpage_process_page_bufs+0x6d8/0x8b0 [ 1785.793119][ C0] mpage_prepare_extent_to_map+0xb34/0x1630 [ 1785.799032][ C0] ? trace_ext4_writepages+0x240/0x240 [ 1785.804502][ C0] ? kmem_cache_alloc+0x151/0x2f0 [ 1785.809537][ C0] ext4_writepages+0xab3/0x2f40 [ 1785.814423][ C0] ? ext4_read_folio+0x370/0x370 [ 1785.819363][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 1785.825257][ C0] ? __lock_acquire+0x13cf/0x7d10 [ 1785.830285][ C0] ? verify_lock_unused+0x140/0x140 [ 1785.835509][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1785.840535][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 1785.845566][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 1785.850767][ C0] ? ext4_read_folio+0x370/0x370 [ 1785.855705][ C0] do_writepages+0x3ba/0x640 [ 1785.860309][ C0] ? __writepage+0x130/0x130 [ 1785.864899][ C0] ? writeback_sb_inodes+0x70f/0x1850 [ 1785.870278][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1785.875303][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 1785.880332][ C0] __writeback_single_inode+0x156/0x1160 [ 1785.885973][ C0] writeback_sb_inodes+0xb30/0x1850 [ 1785.891204][ C0] ? queue_io+0x5a0/0x5a0 [ 1785.895566][ C0] __writeback_inodes_wb+0x12a/0x3f0 [ 1785.900866][ C0] wb_writeback+0x494/0xd50 [ 1785.905386][ C0] ? percpu_ref_tryget+0x250/0x250 [ 1785.910502][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1785.916508][ C0] wb_workfn+0xb68/0xee0 [ 1785.920769][ C0] ? inode_wait_for_writeback+0x220/0x220 [ 1785.926506][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1785.932489][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1785.937872][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 1785.943253][ C0] ? process_one_work+0x7b0/0x1160 [ 1785.948366][ C0] process_one_work+0x8a2/0x1160 [ 1785.953320][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1785.958950][ C0] ? _raw_spin_lock_irq+0x86/0xf0 [ 1785.963981][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1785.969006][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1785.974549][ C0] ? kthread_data+0x4b/0xc0 [ 1785.979063][ C0] worker_thread+0xaa2/0x1270 [ 1785.983767][ C0] kthread+0x29d/0x330 [ 1785.987838][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 1785.992863][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1785.997457][ C0] ret_from_fork+0x1f/0x30 [ 1786.001889][ C0]