last executing test programs: 1m20.288895625s ago: executing program 1 (id=2744): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x40c8, 0x33, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYRESDEC=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000d2685186209175d400"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000200000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000223d3b38be22674e08a4a7522cb10000000041e9c2ab196b496973272b9ab6ba103b6d54bb4667109c7553da73f4d87b077e76f015a809a1e445a3aeb95cf846bd1add249956ee1cdef32f2fd578bedcd81066e24fa161e829be8fe5d914f564d0dd52ac4d37fb90a4f787e84c52208f42b4e721ca874e3d5aaf6e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r5}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) 1m19.788480269s ago: executing program 1 (id=2749): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d24460bc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad206000000f40800030006010000bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)}, 0x24004044) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x0, 0x5}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@func_proto]}, {0x0, [0x0, 0x5f, 0x5f, 0x61, 0x2e]}}, 0x0, 0x2b}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r7, r6}, 0xc) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4008, r8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001640)=@bpf_tracing={0x1a, 0x10, &(0x7f00000011c0)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000080e9030000000000bf91000000000000b7020000050000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000001e00)=""/4096, 0x40f00, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x8001, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x1a328, r8, 0x0, 0x0, &(0x7f0000001600), 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x1d, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x1, 0xc, 0x0, 0xa, 0x185460fcb78011b1}, @call={0x85, 0x0, 0x0, 0x24}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @exit, @call={0x85, 0x0, 0x0, 0x7c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x7, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[r6, r8], 0x0, 0x10, 0x7}, 0x94) 1m19.638841057s ago: executing program 1 (id=2751): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x1b, &(0x7f00000004c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {0x95, 0x0, 0xc00}}, &(0x7f0000000440)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7}, 0x10, r0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x72, &(0x7f0000000000)=r4, 0xc) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0xc7, 0x5, 0x85, 0x1, 0x0, 0x2, 0xab7471132e9ea2ab, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fff, 0x1, @perf_config_ext={0x0, 0x6}, 0x442, 0x2, 0x3, 0x4, 0xc29, 0x7c, 0x6, 0x0, 0x7fff, 0x0, 0xa}, 0xffffffffffffffff, 0x2, r4, 0x2) 1m19.351153831s ago: executing program 0 (id=2756): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000840)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x0, 0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d80a1d4802a6cdda08040000a1180002461a1a39738c1e541208010f0100814401a80016ea1f00"/53, 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x4050) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f9, &(0x7f0000000080)) sendmsg$sock(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="7a6eca88ca428c8d4f36c8b8fc2047659bdcb41a9ebe5ac0bed120663c7a3c234c937452515eae867806e58adc", 0x2d}, {&(0x7f0000000100)}], 0x2}, 0x4804) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x4, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='%'], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1m19.208844098s ago: executing program 3 (id=2757): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdedd79f2007915, @perf_bp={0x0, 0xa}, 0x11c92d, 0x2, 0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000000b40)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)="513b5a9c0c0000004d4241fc05", 0xd}, {&(0x7f0000000e80)="49157f", 0x3}], 0x2}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="16", 0x1}], 0x1}, 0x2004c802) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r0, 0x16, 0x0, 0xaa6e, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x5, &(0x7f0000000840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xa}]}, &(0x7f00000008c0)='GPL\x00', 0xfffffff0, 0x1000, &(0x7f0000001980)=""/4096, 0x40f00, 0x21, '\x00', 0x0, 0x25, r6, 0x8, &(0x7f0000000900)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r3, r0]}, 0x94) ioctl$TUNSETFILTEREBPF(r9, 0x800454e1, &(0x7f0000000a40)=r10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r5, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x52, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000540), &(0x7f00000005c0), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)={@map=r0, r7, 0x7, 0x22, 0xffffffffffffffff, @void, @void, @void, @value=r11, r8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 1m17.96060978s ago: executing program 2 (id=2758): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x40c8, 0x33, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f00000007c0)=ANY=[@ANYRESDEC=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000d2685186209175d400"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000240)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)='0', 0x1}], 0x1}, 0x45) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000802000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180200000200000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000223d3b38be22674e08a4a7522cb10000000041e9c2ab196b496973272b9ab6ba103b6d54bb4667109c7553da73f4d87b077e76f015a809a1e445a3aeb95cf846bd1add249956ee1cdef32f2fd578bedcd81066e24fa161e829be8fe5d914f564d0dd52ac4d37fb90a4f787e84c52208f42b4e721ca874e3d5aaf6e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r5}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r9) 1m17.95746434s ago: executing program 1 (id=2766): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x14, 0x1, 0x7, 0x1, 0x0, 0x8, 0x100, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10000, 0x2, @perf_config_ext={0x80000000, 0x5}, 0x8081, 0x50c, 0x4, 0x6, 0x8, 0x40000000, 0x5, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e272f750375ed08a56331dbf9ed7a15e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800020004000000bdad446b9bbc7ace5b0dd385dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff00"/137, 0x89}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40012100) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="2000000011006bcc9e3be35c6e17aa31e0cf876c1d0000007ea60864160af36514001ac00800050004000c00060000000364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$cgroup_subtree(r4, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000f9ffffff8500000028000000180100002020702500000000d04d9884be2f"], 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="10001d000000faff947b72fb9900000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f3, &(0x7f0000000080)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x5, [@func={0x8, 0x0, 0x0, 0xc, 0x1}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @struct={0x9, 0x1, 0x0, 0x4, 0x0, 0x5b, [{0xb, 0x4, 0x1}]}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x2}, @enum64={0x10, 0x2, 0x0, 0x13, 0x1, 0xc, [{0xd, 0xfc, 0x8001}, {0xa, 0x80000000, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x4}}, @enum64={0x10, 0x4, 0x0, 0x13, 0x0, 0x11, [{0x1, 0x14, 0x4}, {0x7, 0x2, 0x7}, {0xe, 0x8, 0x6}, {0x4, 0x7, 0xf16}]}]}, {0x0, [0x2e, 0x61, 0x0]}}, &(0x7f0000000580)=""/240, 0xd5, 0xf0, 0x1, 0x8}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000006000000080000000800000000800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r10, &(0x7f0000000400), &(0x7f0000000440)=""/203}, 0x20) 1m17.877015514s ago: executing program 3 (id=2759): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x5}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, &(0x7f0000000140), 0x41000, 0x11, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x7, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r0], &(0x7f0000000540)=[{0x4, 0x5, 0x3, 0x9}], 0x10, 0x9}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) close(r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4000, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) 1m17.822649927s ago: executing program 0 (id=2760): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000020006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bb14513f2c532236c141c7c5e6caf29e00212ba0d8105440a601800fe0f040b067c55a1bc000900b80006990600000015000500ff800000000000000300014002000c0901ac04000bd67f6f9400230f007b32beed5769c43616277ce06bbace8017cbec4c2ee5a7cebfeaf4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c90100e6730d7a5125ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb5000000", 0xd9}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 1m17.657824865s ago: executing program 3 (id=2761): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x89, 0x1, 0x0, 0x0, 0x0, 0x34, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0x8002, 0x2, 0xfffffffe, 0x0, 0x200, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x9a, 0x0, 0xfd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x408, 0xca, 0xfffffffc, 0x2, 0xfffffffffffffffc, 0x8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8404e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x80047441, 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x20000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x40, 0x4, 0xff, 0x2, 0x0, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, @perf_bp={0x0, 0x4}, 0x200, 0x80, 0xfffffff9, 0x6, 0x4, 0x2, 0xff, 0x0, 0x81, 0x0, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000240)={'b', ' *:* ', 'rwm\x00'}, 0xa) socketpair(0x26, 0x4, 0x2, &(0x7f0000000000)) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m17.568880509s ago: executing program 0 (id=2762): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, 0x0}, 0x4000081) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000a40)={&(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000380)="133a7f266306d6ed6cba6121687900a781f9c0c708f2a45f5561609fe81f42c20cbe00943c8c8acf4624fb3728e94a42788565a967b2d72194339d59d8434d", 0x3f}, {&(0x7f00000006c0)="87649a3d8c863dfd6560ddb64b6c8044c79906206dd4e43e19258976cb34f810303bba5c6433ecca57504c19131197e014693983895561d3d1bc9635e71b9807755427249a6b9b217d4058bddedb5e312b2c30af0edba9e7d877e037df844832183d213cf57ebdf0dfc3474608a50ecbfbda47a491416382a283dc6b410efda5166d8c07c97ae673923c2d3cd0d0b65354cf95a995fe49137aa100a4ac49902ae1d3be7c46213e9a634696911cb1ae8812925bc5ab0f86c8da814bc67c6156983a4364582c11d1024d4daa46bcaba1af2f97b9bcf5e02bfb0d0293ca73dba98fd8e1ea85f04360867352c6aa2918856b9e4772", 0xf3}, {&(0x7f00000007c0)="8491257b343c76aaed42519c62a21efcc6a415b724e14a67252937e63d4428e81301c0816ebd10621ad457de19ebe64ed80598db1a30911683bfd5454c9dd85bc5f16bbaa7df789787f6f0c7a2233b9e6af80740fe4f750479f26b5439916a3e4595a57701a1d9b0b988ceb34223f6b6464c63b9a6ac3afa63a72662603df482180d7392a15cce5f126662e8b3559e84f83514d99c36c0aff7f7ac5ae94d2ae6c8d6679c26cd36a39915f317eb", 0xad}, {&(0x7f0000000580)="4e0f385627830dd1713491e6f9ceef15bf2eac8ee60583a9750784cf3b18e7bff87ef3c2e321e4243700d44dd414676e354282cfeb9338c3b581cdccd522e46afc70a1b3c8a99e2e2b3c85eb557a12bb757aee159fd80df8e833ae1cc004a317ba17a15d58bc1b471e1d", 0x6a}, {&(0x7f00000003c0)="a9a47bcebb006a9f07205da1a54f9aed143294a2752229fb6f64915bda9c60d0be4b3cb038a481fa5cf29ed5845411d2d76d1e7fc12894a3f222f11c", 0x3c}, {&(0x7f0000000880)="797945cfd10851df834b5d08f701560691c617a83caaf5822d4d0d5af58022d4d3aff8daf46072ec2f71e1330a93e2e1bfc570e14c705dc0abb56e654027d09b6c3daaff58c9f2ab0e845159b76c4cd37f84b9c6074517c0", 0x58}, {&(0x7f0000000900)="95d5c44123c6facd6a512687198d070756038a71b222ee4dac069ef2f4d4efab927471e2cc73cd594a429a02d02e2430e1c94e6d61559d8e4ee1c87eb00cbc64ef17095163766a202e7d7711a25774f32f590c0f43679b9c5056d8c184a7bc89bb81fac609e26c142adf9498ed23d51e72df5960ca0868bb757d1c08aab05cb2c20dd13d0956e3f45e90b077b6f36f4a0d2034bc86e5c001abc2248b6b2c2375780973ccc7534384f1", 0xa9}, {&(0x7f0000000440)="5dd01a9d10336d8802fb98760b73e7bf75c1cdb283322fe7944bb9ae2aaafc2c643f3eaf282e4d5e3cc0bafed0df8c3b8c1cc18765f3e0d92f7e9720", 0x3c}], 0x8}, 0x20008895) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000080) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m17.56112621s ago: executing program 2 (id=2763): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x3ff78000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x18c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000012000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x28) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x14, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r3, 0x0, 0xe, 0x0, &(0x7f0000000480)="6ebca58c08000008beca252388f7", 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='/./\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003600", 0x6}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000d00)='GPL\x00', 0x52, 0x0, 0x0, 0x0, 0x27}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r5, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0xc3a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x12000) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'dvmrp0\x00', 0x8000}) 1m16.665075324s ago: executing program 1 (id=2764): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="76658e682a5f746f5f6261746164763231"], 0x12) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@generic={0x79, 0x0, 0x0, 0xe7}], {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xee, &(0x7f0000000340)=""/238}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) (async, rerun: 32) r2 = socket$kcm(0x11, 0x2, 0x300) (rerun: 32) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 64) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) (rerun: 64) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 1m16.560442839s ago: executing program 0 (id=2765): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18ad691c5808000000f1ffffffffffffff0000001800"/33], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x2, 0x80, 0x4, 0x4, 0x7, 0x3, 0x0, 0xcf3, 0x40297, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x104208, 0x7, 0x81, 0x8, 0x8, 0x10000, 0x357, 0x0, 0x6, 0x0, 0x7}) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538"], 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, &(0x7f0000000000)={'wlan0\x00', @random="f0206e07449c"}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=""/148, 0x94}, {0x0}, {0x0}, {&(0x7f0000000300)}], 0x4, &(0x7f0000000440)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x40002022) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0xb, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c1", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0056, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffffffd, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x2a, 0x0, 0x1, 0xfffffffa}, 0x28) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000140)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0xb}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m16.557602159s ago: executing program 3 (id=2767): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x9, 0x1f, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0x7, 0xb, 0x5, 0x10, 0x8}, @generic={0x2, 0x9, 0x0, 0xe94d, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @jmp={0x5, 0x0, 0x2, 0x9, 0xa, 0xfffffffffffffffe, 0x10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x71, &(0x7f0000000180)=""/113, 0x40f00, 0x29, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x3, 0x2, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x0, 0x5, 0x0, 0x5}], 0x10, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000070a00006a0a00fe0000000c850000005b000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1m16.557216179s ago: executing program 2 (id=2768): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x72, &(0x7f0000000000)=r3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000003e000511d25a80698c6394090124fc602f6e354016000180fffffffffffffff000002cd65c", 0x29}, {&(0x7f0000000180)="d5298969a8", 0x5}], 0x2, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0x5}, [@generic={0x91, 0x1, 0x1, 0x11}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1m16.383838347s ago: executing program 2 (id=2769): r0 = socket$kcm(0x10, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0xa8, 0xfa, 0x6, 0xd, 0x0, 0x7, 0x800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000300), 0xe}, 0x8800, 0x7, 0x9, 0x8, 0x6, 0x1, 0x2, 0x0, 0x800, 0x0, 0x6}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x8) r3 = perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd758, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x3084, 0x9, 0x2, 0x4, 0x3, 0x0, 0x0, 0x0, 0xfffffd97, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r5, 0x0, 0x4000010) r7 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x28, 0x5, 0x0, 0x0, 0x0, 0x9, 0xe42b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x53a1bd79, 0x7, 0x9, 0x86, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) recvmsg$unix(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="1c0000005e007f029e3b470ded9b72ab25399c3683e5caa9bb22d956", 0x1c}], 0x1}, 0x20001850) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab50a", @ANYRESDEC, @ANYRES8=r8], 0xfe33) recvmsg$kcm(r4, &(0x7f0000000500)={0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x0, 0x7}, 0x10122) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) close(r9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="1e0000000000000000005b2ddc62aa0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000200"/28], 0x50) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848030000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0xcc800) 1m15.493329001s ago: executing program 3 (id=2770): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000300)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="270502", 0x36}], 0x1}, 0x20008080) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210}, 0x94) (async) r2 = socket$kcm(0x10, 0x3, 0x10) (async) r3 = socket$kcm(0x10, 0x2, 0x0) syz_clone(0x60a0000, &(0x7f0000000180)="311942529a4535ad05345b3b92db625fd0795c5d52647bb716b07e7e5b86726f4eb33568a6d376223c271b38d5d6d1a357219f92084e26dbb0", 0x39, &(0x7f00000002c0), &(0x7f0000000400), &(0x7f0000000680)="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") (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r1, 0x0, 0x0, 0x95, &(0x7f0000000440), &(0x7f0000000580)=""/149, 0xe4, 0x0, 0x11, 0xcb, &(0x7f0000001680)="35295b5eb1420ab2a815a3da830ffc77b3", &(0x7f00000016c0)="6f09b7f1cb2d1448fc5cf9b1974cd53ae2d484b182f67afd90fe354d16279c3fb7df4364d054dfa45ad9efe08cb93d353221a5aaa04c933ee7c8f5af4f16e3108b13ffcc61e6e24c4a00aff510be609a035d95c7a802731c2ee2de37dca33a7c5e843c678a0e0bad97b8224fdeb74443dae331cd57946dc206064f38fe466a63e49e80ee248c6b62aa20523322f57f1872aa320beb1277e15dda4ddafac55e9f962983e3a639d26d0d626bf24689d3563cc4bec5d5f0ef0777e1109b2af9e78c00e2636112e88e3023c854", 0x4, 0x0, 0x5}, 0x50) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a118000600014002020a600e41b0000900ac00040211000000160012000a00ff020048035c4c61c1d67f6f94007133cf6efb8000a007a290457f01a7cee4090000001fb7d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de61fccd40dd6e4edef3d93452a9247c47870ae1d092665c07a81ead0f98a952c795c0e9703920723f9000000008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000440)={0x4}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90324fc60100005000a000200053582c137153e37000c0180fc0b1000f80b", 0x33fe0}], 0x1}, 0x0) 1m15.471913282s ago: executing program 0 (id=2771): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_pid(r3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) 1m15.421108584s ago: executing program 2 (id=2772): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000e000000400000004000000041000000", @ANYRES32, @ANYBLOB="0000090000ff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000002c0), 0x1003, r3}, 0x38) 1m15.355740708s ago: executing program 1 (id=2773): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = syz_clone(0x45004400, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x20000000000002ee, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x2, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x404, 0x10000, 0x9e4, 0x1, 0x400, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="bcc4000000050000000000000066b93201c4f587", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESHEX=r4, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2000000000000216, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRESOCT=0x0, @ANYRESDEC], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19338e4ad96548d4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x9, &(0x7f00000006c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x100, 0x44}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES64], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m15.32048977s ago: executing program 0 (id=2774): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1080}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000003000000000100"/28], 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x18, &(0x7f0000000600), 0x4) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe84, 0x41, 0x1, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x4000000000000000, 0x800, 0x2, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) 1m14.726622399s ago: executing program 2 (id=2775): r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xfe, 0x0, &(0x7f0000000040)="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", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xfffe, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, &(0x7f0000000000)) 42.597061313s ago: executing program 3 (id=2776): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x6, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0xffffffff}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0xfffffffffffffdad, 0x0, &(0x7f00000001c0)="259a53f271a76d2608fff74588a80a3888ca2f151630fe0449c0afbec07b167c63cb0cb996818f397b4fe1007e79c4bca310a5ada5b3575cf59fde10eee397f882b685c9d67e71820ade3eded32a973a7aab2a7230a1d010c773987a8f805d380b76f25f02", 0x0, 0xd11, 0x2a0, 0xfffffffffffffeef, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 15.184877276s ago: executing program 32 (id=2774): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x8, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1080}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="ff0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000003000000000100"/28], 0x50) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40086602, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x8000000000000000, 0x7ff}, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x18, &(0x7f0000000600), 0x4) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe84, 0x41, 0x1, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x4000000000000000, 0x800, 0x2, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4e, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x19}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x10) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) 14.921115589s ago: executing program 33 (id=2773): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r1 = syz_clone(0x45004400, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x20000000000002ee, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x2, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x404, 0x10000, 0x9e4, 0x1, 0x400, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="bcc4000000050000000000000066b93201c4f587", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESHEX=r4, @ANYRESHEX=r3], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x2000000000000216, &(0x7f0000000240)=ANY=[@ANYRES64=r2, @ANYRESOCT=0x0, @ANYRESDEC], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19338e4ad96548d4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x9, &(0x7f00000006c0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x100, 0x44}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="28010000000000000100000001", @ANYRES64], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 14.921017679s ago: executing program 34 (id=2775): r0 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xfe, 0x0, &(0x7f0000000040)="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", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xfffe, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, &(0x7f0000000000)) 0s ago: executing program 35 (id=2776): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0x6, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0xffffffff}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0xfffffffffffffdad, 0x0, &(0x7f00000001c0)="259a53f271a76d2608fff74588a80a3888ca2f151630fe0449c0afbec07b167c63cb0cb996818f397b4fe1007e79c4bca310a5ada5b3575cf59fde10eee397f882b685c9d67e71820ade3eded32a973a7aab2a7230a1d010c773987a8f805d380b76f25f02", 0x0, 0xd11, 0x2a0, 0xfffffffffffffeef, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) kernel console output (not intermixed with test programs): 78144][ T9206] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.924575][ T9225] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 198.944233][ T9225] __nla_validate_parse: 13 callbacks suppressed [ 198.944252][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.964'. [ 198.961234][ T9225] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 198.989433][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.964'. [ 199.007443][ T9223] netlink: 'syz.3.964': attribute type 10 has an invalid length. [ 199.060487][ T9223] netlink: 40 bytes leftover after parsing attributes in process `syz.3.964'. [ 199.413185][ T9238] netlink: 144 bytes leftover after parsing attributes in process `syz.1.968'. [ 199.595874][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.627204][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.660401][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.688856][ T9246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.873688][ T9246] bond0: (slave batadv0): Releasing backup interface [ 199.901860][ T9246] batadv0 (unregistering): left promiscuous mode [ 199.918453][ T9246] batadv0 (unregistering): left allmulticast mode [ 201.203666][ T9288] can: request_module (can-proto-4) failed. [ 202.003823][ T9297] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.983'. [ 203.033727][ T9332] netlink: 'syz.0.992': attribute type 7 has an invalid length. [ 203.142870][ T9333] tun0: tun_chr_ioctl cmd 1074025694 [ 204.457567][ T9373] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 204.477711][ T9372] netlink: 830 bytes leftover after parsing attributes in process `syz.3.998'. [ 206.100438][ T9411] netlink: 'syz.3.1010': attribute type 21 has an invalid length. [ 206.658161][ T9415] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1011'. [ 207.506343][ T9429] netlink: 'syz.2.1012': attribute type 10 has an invalid length. [ 207.516233][ T9429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1012'. [ 207.530764][ T9429] bridge0: port 3(ipvlan1) entered blocking state [ 207.537698][ T9429] bridge0: port 3(ipvlan1) entered disabled state [ 207.544724][ T9429] ipvlan1: entered allmulticast mode [ 207.557941][ T9429] ipvlan1: left allmulticast mode [ 207.567726][ T9429] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 207.862062][ T9441] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1016'. [ 208.386753][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1019'. [ 208.530146][ T9459] netlink: 'syz.2.1019': attribute type 10 has an invalid length. [ 208.538017][ T9459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1019'. [ 208.563798][ T9459] dummy0: entered promiscuous mode [ 208.569606][ T9459] dummy0: entered allmulticast mode [ 208.576561][ T9459] bridge0: port 3(dummy0) entered blocking state [ 208.596164][ T9463] netlink: 'syz.3.1022': attribute type 9 has an invalid length. [ 208.604861][ T9463] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1022'. [ 208.614188][ T9459] bridge0: port 3(dummy0) entered disabled state [ 208.632056][ T9459] bridge0: port 3(dummy0) entered blocking state [ 208.638802][ T9459] bridge0: port 3(dummy0) entered forwarding state [ 208.714561][ T9455] syzkaller0: entered promiscuous mode [ 208.721134][ T9455] syzkaller0: entered allmulticast mode [ 213.263259][ T9495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1033'. [ 213.295492][ T9495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1033'. [ 213.329268][ T9496] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1033'. [ 213.372171][ T9503] netlink: 'syz.3.1034': attribute type 21 has an invalid length. [ 213.381017][ T9503] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 213.391846][ T9496] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1033'. [ 213.401799][ T9495] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1033'. [ 213.491129][ T9508] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1036'. [ 215.353353][ T9495] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1033'. [ 215.647325][ T9540] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1043'. [ 215.686754][ T9540] netlink: 'syz.3.1043': attribute type 29 has an invalid length. [ 215.740706][ T9540] netlink: 'syz.3.1043': attribute type 29 has an invalid length. [ 216.048389][ T9552] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1047'. [ 216.193079][ T9561] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1051'. [ 216.516826][ T9567] netlink: 'syz.0.1052': attribute type 21 has an invalid length. [ 216.538678][ T9567] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 216.712758][ T9581] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 217.026824][ T9586] netlink: 'syz.1.1057': attribute type 10 has an invalid length. [ 217.447570][ T9601] netlink: 'syz.0.1062': attribute type 2 has an invalid length. [ 217.460939][ T9601] netlink: 'syz.0.1062': attribute type 3 has an invalid length. [ 217.478394][ T9601] netlink: 'syz.0.1062': attribute type 4 has an invalid length. [ 218.314464][ T9640] __nla_validate_parse: 10 callbacks suppressed [ 218.314483][ T9640] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1075'. [ 218.337170][ T9640] IPv6: Can't replace route, no match found [ 218.391766][ T9646] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1077'. [ 218.817322][ T9666] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1085'. [ 221.233817][ T9733] validate_nla: 9 callbacks suppressed [ 221.233833][ T9733] netlink: 'syz.2.1103': attribute type 1 has an invalid length. [ 221.899901][ T9738] delete_channel: no stack [ 223.031795][ T9763] netlink: 3403 bytes leftover after parsing attributes in process `syz.2.1111'. [ 223.189988][ T9767] netlink: 'syz.2.1113': attribute type 21 has an invalid length. [ 223.199642][ T9767] netlink: 'syz.2.1113': attribute type 12 has an invalid length. [ 223.207502][ T9767] netlink: 'syz.2.1113': attribute type 13 has an invalid length. [ 223.225750][ T9767] netlink: 'syz.2.1113': attribute type 14 has an invalid length. [ 223.258330][ T9767] netlink: 'syz.2.1113': attribute type 15 has an invalid length. [ 223.289766][ T9767] netlink: 'syz.2.1113': attribute type 16 has an invalid length. [ 223.297644][ T9767] netlink: 12914 bytes leftover after parsing attributes in process `syz.2.1113'. [ 223.439889][ T9772] netlink: 'syz.3.1114': attribute type 10 has an invalid length. [ 223.447770][ T9772] netlink: 209280 bytes leftover after parsing attributes in process `syz.3.1114'. [ 223.498506][ T9772] openvswitch: netlink: Flow key attr not present in new flow. [ 223.776141][ T9786] netlink: 'syz.0.1120': attribute type 2 has an invalid length. [ 223.794141][ T9786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1120'. [ 224.218608][ T9799] netlink: 'syz.2.1124': attribute type 33 has an invalid length. [ 224.240761][ T9799] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1124'. [ 224.664713][ T59] bridge0: port 3(dummy0) entered disabled state [ 224.749714][ T9817] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1129'. [ 224.905638][ T9821] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1130'. [ 225.037379][ T9826] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.1132'. [ 225.870917][ T9825] delete_channel: no stack [ 227.506175][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.514705][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.561003][ T9840] bridge0: entered allmulticast mode [ 227.603587][ T9850] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1138'. [ 227.606882][ T9843] bridge0: port 3(dummy0) entered disabled state [ 227.677300][ T9843] bridge_slave_1: left allmulticast mode [ 227.704022][ T9843] bridge_slave_1: left promiscuous mode [ 227.714263][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.737621][ T9843] bridge_slave_0: left allmulticast mode [ 227.749768][ T9843] bridge_slave_0: left promiscuous mode [ 227.755688][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.092062][ T9868] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1144'. [ 228.092102][ T9866] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1144'. [ 228.140586][ T9873] sctp: [Deprecated]: syz.0.1147 (pid 9873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.140586][ T9873] Use struct sctp_sack_info instead [ 228.169269][ T9874] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1147'. [ 229.379508][ T9904] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1155'. [ 229.401172][ T9902] validate_nla: 2 callbacks suppressed [ 229.401206][ T9902] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 229.416173][ T9902] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1154'. [ 229.434333][ T9903] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1154'. [ 229.446222][ T9902] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1154'. [ 229.869873][ T9921] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1162'. [ 229.937368][ T9921] netlink: 'syz.2.1162': attribute type 4 has an invalid length. [ 230.834934][ T9954] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1173'. [ 231.126773][ T9961] delete_channel: no stack [ 231.481114][ T9977] netlink: 'syz.1.1180': attribute type 21 has an invalid length. [ 231.598868][ T9979] netlink: 'syz.2.1183': attribute type 10 has an invalid length. [ 231.614072][ T9979] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1183'. [ 231.633873][ T9979] team0: entered promiscuous mode [ 231.643992][ T9979] team_slave_0: entered promiscuous mode [ 231.653156][ T9979] team_slave_1: entered promiscuous mode [ 231.664875][ T9981] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.1184'. [ 231.679600][ T9979] team0: entered allmulticast mode [ 231.694668][ T9979] team_slave_0: entered allmulticast mode [ 231.714849][ T9979] team_slave_1: entered allmulticast mode [ 231.725315][ T9979] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 232.133310][ T9996] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1187'. [ 232.190811][ T5772] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 232.262539][T10002] mac80211_hwsim hwsim3 .3c: renamed from wlan1 [ 232.401079][ T9996] netlink: 'syz.3.1187': attribute type 9 has an invalid length. [ 232.422128][ T9996] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1187'. [ 232.451233][T10016] netlink: 'syz.2.1193': attribute type 17 has an invalid length. [ 232.469259][T10016] netlink: 'syz.2.1193': attribute type 16 has an invalid length. [ 232.684294][T10029] can: request_module (can-proto-0) failed. [ 232.694920][T10027] netlink: 'syz.0.1197': attribute type 29 has an invalid length. [ 232.747063][T10027] netlink: 'syz.0.1197': attribute type 29 has an invalid length. [ 232.798056][T10031] netlink: 'syz.0.1197': attribute type 29 has an invalid length. [ 233.160348][T10045] macsec0: entered promiscuous mode [ 233.170848][T10045] macsec0: entered allmulticast mode [ 233.176289][T10045] veth1_macvtap: entered allmulticast mode [ 234.230395][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 234.404216][T10118] pim6reg1: entered promiscuous mode [ 234.411429][T10118] pim6reg1: entered allmulticast mode [ 234.890764][T10142] validate_nla: 1 callbacks suppressed [ 234.890783][T10142] netlink: 'syz.3.1228': attribute type 11 has an invalid length. [ 235.099473][T10154] __nla_validate_parse: 1 callbacks suppressed [ 235.099487][T10154] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1234'. [ 235.259919][T10153] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 235.276409][T10153] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1233'. [ 235.398898][T10164] netlink: 204416 bytes leftover after parsing attributes in process `syz.2.1237'. [ 235.418787][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1237'. [ 235.486699][T10170] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1240'. [ 236.494132][T10174] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1241'. [ 236.507944][T10180] syz.2.1243[10180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.508067][T10180] syz.2.1243[10180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.535824][T10185] netlink: 'syz.1.1244': attribute type 33 has an invalid length. [ 236.558333][T10185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1244'. [ 236.576388][T10186] netlink: 'syz.1.1244': attribute type 33 has an invalid length. [ 236.660291][T10186] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1244'. [ 236.911091][T10204] netlink: 'syz.0.1247': attribute type 4 has an invalid length. [ 236.926597][T10204] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1247'. [ 236.961820][T10204] .`: renamed from bond0 (while UP) [ 236.990023][T10213] netlink: 'syz.0.1247': attribute type 10 has an invalid length. [ 237.005179][T10213] team0: Device ipvlan1 failed to register rx_handler [ 237.084250][T10215] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1251'. [ 238.254860][T10249] netlink: 'syz.1.1256': attribute type 10 has an invalid length. [ 238.339000][T10249] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 239.064157][T10271] netlink: 'syz.2.1264': attribute type 11 has an invalid length. [ 240.197806][T10317] __nla_validate_parse: 3 callbacks suppressed [ 240.197823][T10317] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1280'. [ 240.320502][T10322] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1283'. [ 240.920148][T10347] netlink: 'syz.3.1289': attribute type 9 has an invalid length. [ 240.929496][T10347] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1289'. [ 241.151818][T10355] netlink: 'syz.0.1291': attribute type 1 has an invalid length. [ 241.178375][T10355] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1291'. [ 241.263595][T10361] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1293'. [ 241.375618][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 241.880407][T10395] netlink: 'syz.3.1303': attribute type 29 has an invalid length. [ 241.901693][T10395] netlink: 'syz.3.1303': attribute type 3 has an invalid length. [ 241.910577][T10395] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1303'. [ 242.301422][T10407] netlink: 'syz.3.1308': attribute type 3 has an invalid length. [ 242.315075][T10407] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1308'. [ 242.801874][T10416] netlink: 'syz.1.1311': attribute type 21 has an invalid length. [ 242.833484][T10416] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1311'. [ 242.859035][T10416] netlink: 'syz.1.1311': attribute type 5 has an invalid length. [ 242.874665][T10416] netlink: 'syz.1.1311': attribute type 6 has an invalid length. [ 242.889674][T10416] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1311'. [ 242.980267][T10424] pimreg: tun_chr_ioctl cmd 1074025677 [ 242.986062][T10424] pimreg: linktype set to 780 [ 243.031157][T10424] netlink: 'syz.3.1313': attribute type 10 has an invalid length. [ 243.114141][T10430] netlink: 'syz.3.1313': attribute type 9 has an invalid length. [ 244.730907][T10485] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 245.797351][T10494] team0: Device ipvlan1 failed to register rx_handler [ 245.942282][T10503] sit0: left promiscuous mode [ 245.980223][T10503] sit0: entered promiscuous mode [ 246.273934][T10513] validate_nla: 3 callbacks suppressed [ 246.273951][T10513] netlink: 'syz.2.1336': attribute type 10 has an invalid length. [ 246.319679][T10513] hsr0: entered promiscuous mode [ 246.405401][T10518] __nla_validate_parse: 3 callbacks suppressed [ 246.405419][T10518] netlink: 144300 bytes leftover after parsing attributes in process `syz.0.1340'. [ 246.438613][T10518] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1340'. [ 246.556437][T10520] netlink: 'syz.1.1341': attribute type 10 has an invalid length. [ 246.575197][T10518] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 246.576635][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1341'. [ 246.608156][T10520] lo: left promiscuous mode [ 246.647594][T10520] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 246.683628][T10520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.744728][T10518] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 246.771640][T10524] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 246.784618][T10528] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 246.794567][T10531] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 246.819072][T10532] netlink: 'syz.3.1343': attribute type 21 has an invalid length. [ 246.858524][T10532] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1343'. [ 247.134681][T10546] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 247.143090][T10546] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1348'. [ 247.155989][T10546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1348'. [ 247.168678][T10546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1348'. [ 247.179713][T10546] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1348'. [ 247.192018][T10548] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1349'. [ 247.216023][ T5772] Bluetooth: hci0: ISO packet too small [ 247.390982][T10563] netlink: 'syz.1.1351': attribute type 5 has an invalid length. [ 248.294750][T10583] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1359'. [ 248.331594][T10581] netpci0: tun_chr_ioctl cmd 2147767517 [ 249.418114][T10618] batman_adv: batadv0: Adding interface: virt_wifi0 [ 249.433863][T10618] batman_adv: batadv0: Interface activated: virt_wifi0 [ 250.266564][ T6658] tipc: Subscription rejected, illegal request [ 250.290267][T10628] tc_dump_action: action bad kind [ 251.031299][T10665] IPv6: Can't replace route, no match found [ 252.305638][T10706] validate_nla: 11 callbacks suppressed [ 252.305725][T10706] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 252.694243][T10706] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 252.966745][T10718] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 252.975474][T10719] netlink: 'syz.0.1397': attribute type 29 has an invalid length. [ 254.006887][T10741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.418010][T10749] __nla_validate_parse: 10 callbacks suppressed [ 254.418026][T10749] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1409'. [ 255.845893][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.852376][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.907736][T10774] netlink: 'syz.2.1414': attribute type 15 has an invalid length. [ 255.916201][T10774] netlink: 'syz.2.1414': attribute type 5 has an invalid length. [ 255.936916][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 255.983186][T10774] netlink: 'syz.2.1414': attribute type 15 has an invalid length. [ 256.024320][T10774] netlink: 'syz.2.1414': attribute type 5 has an invalid length. [ 256.072269][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 256.086097][T10774] netlink: 'syz.2.1414': attribute type 15 has an invalid length. [ 256.135906][T10774] netlink: 'syz.2.1414': attribute type 5 has an invalid length. [ 256.166371][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 256.217677][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 256.248063][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 256.296778][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 256.324050][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 256.369741][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 256.388710][T10774] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1414'. [ 256.414257][T10792] sock: sock_set_timeout: `syz.1.1420' (pid 10792) tries to set negative timeout [ 257.342870][T10810] validate_nla: 38 callbacks suppressed [ 257.342888][T10810] netlink: 'syz.3.1426': attribute type 33 has an invalid length. [ 257.370454][T10810] `: renamed from team0 (while UP) [ 257.689537][T10822] netlink: 'syz.1.1428': attribute type 10 has an invalid length. [ 257.778632][T10810] syz.3.1426 (10810) used greatest stack depth: 17896 bytes left [ 257.842114][T10822] bond0: (slave team0): Releasing backup interface [ 257.860422][T10822] team0 (unregistering): left promiscuous mode [ 257.866673][T10822] team_slave_0: left promiscuous mode [ 257.892855][T10822] team_slave_1: left promiscuous mode [ 257.903349][T10822] geneve1: left promiscuous mode [ 257.909972][T10822] team0 (unregistering): left allmulticast mode [ 257.916324][T10822] team_slave_0: left allmulticast mode [ 257.923716][T10822] team_slave_1: left allmulticast mode [ 257.930625][T10822] geneve1: left allmulticast mode [ 257.992892][T10822] team0 (unregistering): Port device team_slave_0 removed [ 258.026550][T10822] team0 (unregistering): Port device team_slave_1 removed [ 258.043571][T10822] team0 (unregistering): Port device geneve1 removed [ 258.684387][T10837] netlink: 'syz.2.1433': attribute type 3 has an invalid length. [ 258.949643][T10861] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 259.427189][T10879] netlink: 'syz.0.1446': attribute type 6 has an invalid length. [ 260.817448][T10906] netlink: 'syz.3.1453': attribute type 7 has an invalid length. [ 260.834538][T10906] __nla_validate_parse: 16 callbacks suppressed [ 260.834548][T10906] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1453'. [ 260.891499][T10910] netlink: 'syz.3.1453': attribute type 7 has an invalid length. [ 260.907310][T10910] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1453'. [ 261.079317][T10915] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1454'. [ 261.953097][T10924] netlink: 'syz.2.1458': attribute type 11 has an invalid length. [ 262.073871][T10922] tun0: tun_chr_ioctl cmd 1074025677 [ 262.088529][T10922] tun0: linktype set to 776 [ 262.336020][T10930] netlink: 'syz.2.1459': attribute type 9 has an invalid length. [ 262.344265][T10930] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1459'. [ 262.469080][T10930] netlink: 'syz.2.1459': attribute type 9 has an invalid length. [ 262.483252][T10930] netlink: 187864 bytes leftover after parsing attributes in process `syz.2.1459'. [ 262.797172][T10936] macvlan1: entered promiscuous mode [ 262.803942][T10936] macvlan1: entered allmulticast mode [ 262.809780][T10929] delete_channel: no stack [ 262.816504][T10936] veth1_vlan: entered allmulticast mode [ 263.085574][T10948] C: renamed from team_slave_0 [ 263.138787][T10948] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1465'. [ 263.558365][T10977] netlink: set zone limit has 8 unknown bytes [ 263.728073][T10975] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1475'. [ 263.811788][T10987] netlink: 'syz.3.1478': attribute type 21 has an invalid length. [ 263.819962][T10987] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1478'. [ 263.907757][T10992] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 263.986805][T10989] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1479'. [ 266.015509][T11006] netlink: 'syz.3.1484': attribute type 41 has an invalid length. [ 266.172881][T11007] delete_channel: no stack [ 266.522547][T11026] netlink: 'syz.1.1491': attribute type 21 has an invalid length. [ 266.831089][T11039] netlink: 'syz.0.1494': attribute type 2 has an invalid length. [ 267.505948][T11063] syzkaller0: entered allmulticast mode [ 267.527011][T11061] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1502'. [ 267.585453][T11061] netlink: 'syz.3.1502': attribute type 3 has an invalid length. [ 267.595489][T11061] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1502'. [ 267.726934][T11069] syzkaller0: entered promiscuous mode [ 267.734645][T11069] syzkaller0: entered allmulticast mode [ 267.750099][T11069] syzkaller0: create flow: hash 3324062290 index 1 [ 267.938954][T11068] syzkaller0: delete flow: hash 3324062290 index 1 [ 269.889624][T11093] netlink: 'syz.2.1511': attribute type 4 has an invalid length. [ 269.908402][T11093] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1511'. [ 269.989837][ T5772] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 270.089859][T11105] netlink: 'syz.2.1515': attribute type 21 has an invalid length. [ 270.186802][T11105] netlink: 'syz.2.1515': attribute type 10 has an invalid length. [ 270.203989][T11105] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1515'. [ 270.881603][T11140] netlink: 'syz.3.1523': attribute type 22 has an invalid length. [ 271.008974][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1523'. [ 272.255920][T11146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.320998][T11153] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1529'. [ 272.391702][T11153] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 272.450581][T11153] CPU: 1 PID: 11153 Comm: syz.3.1529 Not tainted syzkaller #0 [ 272.458123][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 272.468206][T11153] Call Trace: [ 272.471502][T11153] [ 272.474452][T11153] dump_stack_lvl+0x18c/0x250 [ 272.479168][T11153] ? show_regs_print_info+0x20/0x20 [ 272.484405][T11153] ? load_image+0x400/0x400 [ 272.488963][T11153] sysfs_warn_dup+0x8e/0xa0 [ 272.493509][T11153] sysfs_do_create_link_sd+0xc0/0x110 [ 272.498914][T11153] device_add_class_symlinks+0x1cf/0x240 [ 272.504591][T11153] device_add+0x507/0xc20 [ 272.508968][T11153] wiphy_register+0x1dad/0x2ae0 [ 272.513879][T11153] ? cfg80211_event_work+0x40/0x40 [ 272.519022][T11153] ? minstrel_ht_alloc+0x88a/0x990 [ 272.524183][T11153] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 272.530289][T11153] ieee80211_register_hw+0x3464/0x4250 [ 272.535813][T11153] ? ieee80211_tasklet_handler+0x20/0x20 [ 272.541490][T11153] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 272.547429][T11153] ? __debug_object_init+0xec/0x450 [ 272.552679][T11153] ? __asan_memset+0x22/0x40 [ 272.557317][T11153] ? __hrtimer_init+0x186/0x270 [ 272.562205][T11153] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 272.567967][T11153] ? mac80211_hwsim_free+0x220/0x220 [ 272.573262][T11153] ? rcu_is_watching+0x15/0xb0 [ 272.578038][T11153] ? kstrndup+0xbd/0x140 [ 272.582285][T11153] hwsim_new_radio_nl+0xdc9/0x1a90 [ 272.587410][T11153] ? __nla_validate+0x50/0x50 [ 272.592102][T11153] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 272.598441][T11153] ? __nla_parse+0x40/0x50 [ 272.602856][T11153] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 272.609188][T11153] genl_family_rcv_msg_doit+0x211/0x310 [ 272.614744][T11153] ? end_current_label_crit_section+0x170/0x170 [ 272.620993][T11153] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 272.626905][T11153] ? bpf_lsm_capable+0x9/0x10 [ 272.631587][T11153] ? security_capable+0x89/0xb0 [ 272.636445][T11153] genl_rcv_msg+0x619/0x7a0 [ 272.640954][T11153] ? genl_bind+0x360/0x360 [ 272.645373][T11153] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 272.651710][T11153] ? ref_tracker_free+0x690/0x840 [ 272.656751][T11153] netlink_rcv_skb+0x241/0x4d0 [ 272.661525][T11153] ? genl_bind+0x360/0x360 [ 272.665945][T11153] ? netlink_ack+0x1180/0x1180 [ 272.670730][T11153] ? __lock_acquire+0x7d40/0x7d40 [ 272.675766][T11153] ? down_read+0x1ac/0x2e0 [ 272.680184][T11153] genl_rcv+0x28/0x40 [ 272.684168][T11153] netlink_unicast+0x751/0x8d0 [ 272.688975][T11153] netlink_sendmsg+0x8d0/0xbf0 [ 272.693754][T11153] ? netlink_getsockopt+0x590/0x590 [ 272.698958][T11153] ? aa_sock_msg_perm+0x94/0x150 [ 272.703905][T11153] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.709195][T11153] ? security_socket_sendmsg+0x80/0xa0 [ 272.714656][T11153] ? netlink_getsockopt+0x590/0x590 [ 272.719857][T11153] ____sys_sendmsg+0x5ba/0x960 [ 272.724624][T11153] ? __asan_memset+0x22/0x40 [ 272.729212][T11153] ? __sys_sendmsg_sock+0x30/0x30 [ 272.734227][T11153] ? __import_iovec+0x5f2/0x850 [ 272.739089][T11153] ? import_iovec+0x73/0xa0 [ 272.743594][T11153] ___sys_sendmsg+0x2a6/0x360 [ 272.748274][T11153] ? __sys_sendmsg+0x2a0/0x2a0 [ 272.753074][T11153] __se_sys_sendmsg+0x1c2/0x2b0 [ 272.757923][T11153] ? __x64_sys_sendmsg+0x80/0x80 [ 272.762881][T11153] ? lockdep_hardirqs_on+0x98/0x150 [ 272.768083][T11153] do_syscall_64+0x55/0xa0 [ 272.772503][T11153] ? clear_bhb_loop+0x40/0x90 [ 272.777180][T11153] ? clear_bhb_loop+0x40/0x90 [ 272.781854][T11153] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.787745][T11153] RIP: 0033:0x7fb385f9c799 [ 272.792162][T11153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.811772][T11153] RSP: 002b:00007fb386d89028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.820186][T11153] RAX: ffffffffffffffda RBX: 00007fb386215fa0 RCX: 00007fb385f9c799 [ 272.828153][T11153] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 272.836121][T11153] RBP: 00007fb386032c99 R08: 0000000000000000 R09: 0000000000000000 [ 272.844091][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.852058][T11153] R13: 00007fb386216038 R14: 00007fb386215fa0 R15: 00007ffee8e42d78 [ 272.860041][T11153] [ 272.873293][T11159] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1530'. [ 273.347418][T11175] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 273.394000][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1536'. [ 273.484772][T11188] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1537'. [ 273.537960][T11189] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 273.558406][T11189] netlink: 'syz.3.1539': attribute type 4 has an invalid length. [ 273.584126][T11189] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1539'. [ 274.157264][T11220] netlink: 'syz.1.1546': attribute type 2 has an invalid length. [ 274.196393][T11220] netlink: 'syz.1.1546': attribute type 1 has an invalid length. [ 274.219203][T11220] netlink: 'syz.1.1546': attribute type 2 has an invalid length. [ 274.232871][T11220] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.1546'. [ 276.950675][ T9338] wlan1: Trigger new scan to find an IBSS to join [ 277.039966][ T5772] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 277.521491][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 277.697336][T11276] netlink: 'syz.1.1564': attribute type 10 has an invalid length. [ 277.789798][T11279] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1565'. [ 277.803522][T11279] Q6`Ҙ: renamed from lo (while UP) [ 278.736040][T11288] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1567'. [ 278.747982][T11290] netlink: 'syz.0.1568': attribute type 17 has an invalid length. [ 278.759232][T11290] netlink: 'syz.0.1568': attribute type 16 has an invalid length. [ 278.769612][T11290] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1568'. [ 278.856016][T11292] can: request_module (can-proto-0) failed. [ 279.071342][T11304] netlink: 'syz.0.1571': attribute type 21 has an invalid length. [ 279.080102][T11304] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1571'. [ 279.271834][T11311] netlink: 'syz.0.1574': attribute type 3 has an invalid length. [ 279.281402][T11311] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1574'. [ 279.449672][T11317] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1577'. [ 280.855848][ T6654] tipc: Subscription rejected, illegal request [ 280.870643][T11362] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 280.900949][T11362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1590'. [ 280.940304][T11362] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 280.950215][ T6654] wlan1: Trigger new scan to find an IBSS to join [ 280.979218][T11362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.129811][ T9344] wlan1: Creating new IBSS network, BSSID d2:01:19:a8:53:8d [ 282.688891][T11413] netlink: 'syz.3.1603': attribute type 10 has an invalid length. [ 282.696927][T11413] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1603'. [ 282.734907][T11413] ipvlan1: entered promiscuous mode [ 282.755006][T11413] ipvlan1: entered allmulticast mode [ 282.787862][T11413] veth0_vlan: entered allmulticast mode [ 282.840499][T11413] bridge0: port 4(ipvlan1) entered blocking state [ 282.873834][T11413] bridge0: port 4(ipvlan1) entered disabled state [ 282.945825][T11413] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 283.415662][T11422] 0: renamed from batadv_slave_1 (while UP) [ 283.594958][ T5772] Bluetooth: hci0: ISO packet for unknown connection handle 49 [ 285.128718][T11443] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1611'. [ 286.217004][T11482] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1622'. [ 287.077909][T11500] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 287.175838][T11501] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1627'. [ 287.186426][T11500] `: Device wg1 is of different type [ 287.679310][T11506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.686873][T11506] IPv6: NLM_F_CREATE should be set when creating new route [ 287.694529][T11506] IPv6: NLM_F_CREATE should be set when creating new route [ 287.702142][T11506] IPv6: NLM_F_CREATE should be set when creating new route [ 287.946731][ T5772] Bluetooth: hci0: ISO packet for unknown connection handle 3851 [ 288.561736][T11530] : renamed from bond_slave_0 (while UP) [ 288.740760][T11528] pim6reg: tun_chr_ioctl cmd 2147767521 [ 288.750984][T11530] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1636'. [ 288.826410][T11530] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 289.275420][T11550] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 289.320326][T11550] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 289.353542][T11551] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 289.387086][T11553] netlink: 202328 bytes leftover after parsing attributes in process `syz.0.1643'. [ 289.399492][T11550] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 289.452333][T11553] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 289.487286][T11550] netlink: 'syz.3.1642': attribute type 29 has an invalid length. [ 289.609294][T11561] netlink: 'syz.2.1644': attribute type 27 has an invalid length. [ 289.617178][T11561] netlink: 'syz.2.1644': attribute type 4 has an invalid length. [ 289.650427][T11561] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1644'. [ 289.711732][T11558] netlink: 'syz.2.1644': attribute type 27 has an invalid length. [ 289.738287][T11558] netlink: 'syz.2.1644': attribute type 4 has an invalid length. [ 289.767429][T11558] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1644'. [ 290.263469][T11581] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1651'. [ 290.295256][T11585] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1653'. [ 290.409685][T11581] erspan0: refused to change device tx_queue_len [ 290.417603][T11581] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 290.478461][T11580] hsr_slave_0: left promiscuous mode [ 290.518639][T11580] hsr_slave_1: left promiscuous mode [ 291.044843][T11612] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1660'. [ 291.320957][T11625] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.1663'. [ 291.360043][T11625] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 291.476545][T11634] netlink: 9087 bytes leftover after parsing attributes in process `syz.2.1664'. [ 291.528661][T11622] syzkaller0: entered promiscuous mode [ 293.622984][T11639] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1667'. [ 294.334537][T11672] validate_nla: 5 callbacks suppressed [ 294.334556][T11672] netlink: 'syz.3.1669': attribute type 17 has an invalid length. [ 294.348546][T11672] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1669'. [ 295.031526][T11685] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.371444][T11693] netlink: 'syz.0.1682': attribute type 10 has an invalid length. [ 295.401408][T11693] team0: Device vxcan1 is of different type [ 295.486181][T11700] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 295.494962][T11700] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 295.547974][T11703] pim6reg1: entered promiscuous mode [ 295.567833][T11703] pim6reg1: entered allmulticast mode [ 296.223153][T11729] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1692'. [ 298.520381][T11741] hsr0: entered allmulticast mode [ 298.525470][T11741] hsr_slave_0: entered allmulticast mode [ 298.549834][T11741] hsr_slave_1: entered allmulticast mode [ 298.785687][T11759] netlink: 'syz.3.1701': attribute type 29 has an invalid length. [ 298.802570][T11759] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 298.812900][T11759] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1701'. [ 299.171207][T11771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1703'. [ 299.263131][T11771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1703'. [ 299.274238][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1703'. [ 299.336005][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1703'. [ 299.466306][T11772] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1703'. [ 299.511851][T11776] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1703'. [ 299.531252][T11778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1703'. [ 299.639656][T11772] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1703'. [ 303.179469][T11806] netlink: 'syz.1.1711': attribute type 6 has an invalid length. [ 303.210945][T11806] __nla_validate_parse: 1 callbacks suppressed [ 303.210960][T11806] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1711'. [ 303.878760][T11829] netlink: 'syz.0.1718': attribute type 10 has an invalid length. [ 303.930218][T11831] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1719'. [ 303.971331][T11834] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1719'. [ 304.116234][T11841] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1722'. [ 304.515446][T11861] netlink: 'syz.3.1728': attribute type 28 has an invalid length. [ 304.524425][T11861] netlink: 'syz.3.1728': attribute type 29 has an invalid length. [ 304.533464][T11861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1728'. [ 304.620147][T11863] netlink: 'syz.2.1729': attribute type 3 has an invalid length. [ 304.628098][T11863] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1729'. [ 304.705770][T11867] netlink: 'syz.2.1731': attribute type 10 has an invalid length. [ 304.718859][T11867] netlink: 3819 bytes leftover after parsing attributes in process `syz.2.1731'. [ 304.923869][T11874] syzkaller0: refused to change device tx_queue_len [ 305.063382][T11880] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 305.071782][T11880] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1735'. [ 305.839510][T11905] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1741'. [ 305.866377][T11902] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1741'. [ 306.234864][T11936] netlink: 'syz.1.1749': attribute type 2 has an invalid length. [ 306.560961][T11962] netlink: 'syz.3.1756': attribute type 2 has an invalid length. [ 306.764934][T11969] netlink: 'syz.3.1757': attribute type 10 has an invalid length. [ 306.938776][T11969] vxcan1: entered promiscuous mode [ 306.946922][T11969] vxcan1: entered allmulticast mode [ 306.978557][T11969] `: Device vxcan1 is of different type [ 307.752240][T11979] syzkaller0: entered promiscuous mode [ 307.817632][T11979] syzkaller0: entered allmulticast mode [ 308.261301][T12010] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 311.783487][T12007] __nla_validate_parse: 4 callbacks suppressed [ 311.783497][T12007] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1763'. [ 311.800655][T12010] netlink: 'syz.3.1764': attribute type 29 has an invalid length. [ 312.084324][T12026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 312.093665][T12026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 312.109521][T12026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1766'. [ 312.273010][T12037] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1772'. [ 312.416812][T12044] netlink: 144300 bytes leftover after parsing attributes in process `syz.1.1773'. [ 312.426774][T12044] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1773'. [ 312.457649][T12044] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 312.466372][T12044] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 312.482254][T12044] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 312.495010][T12044] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 312.507198][T12044] netlink: 'syz.1.1773': attribute type 29 has an invalid length. [ 312.884564][T12019] delete_channel: no stack [ 312.929885][T12048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.952567][T12048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.976106][T12048] batman_adv: batadv0: Interface deactivated: 0 [ 312.998571][T12048] batman_adv: batadv0: Removing interface: 0 [ 313.013724][T12048] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 313.021599][T12048] batman_adv: batadv0: Removing interface: virt_wifi0 [ 313.052586][T12048] .`: (slave batadv0): Releasing backup interface [ 313.073254][T12056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.460741][T12059] netlink: 'syz.1.1778': attribute type 29 has an invalid length. [ 313.479904][T12059] netlink: 'syz.1.1778': attribute type 29 has an invalid length. [ 313.519439][T12059] netlink: 'syz.1.1778': attribute type 29 has an invalid length. [ 313.531256][T12059] netlink: 'syz.1.1778': attribute type 29 has an invalid length. [ 313.543973][T12074] netlink: 'syz.0.1790': attribute type 5 has an invalid length. [ 313.556389][T12078] netlink: 144300 bytes leftover after parsing attributes in process `syz.2.1782'. [ 313.570121][T12078] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1782'. [ 313.606416][T12078] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 313.619633][T12080] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1783'. [ 313.619657][T12080] netlink: 'syz.0.1783': attribute type 1 has an invalid length. [ 313.640108][T12078] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 313.680002][T12078] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 313.697425][T12078] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 315.789427][T12131] delete_channel: no stack [ 316.729854][T12172] mac80211_hwsim hwsim19 wlan0: entered promiscuous mode [ 316.737804][T12172] mac80211_hwsim hwsim19 wlan0: entered allmulticast mode [ 317.272539][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.280081][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.666660][T12204] __nla_validate_parse: 6 callbacks suppressed [ 317.666675][T12204] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1825'. [ 317.699067][T12204] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 317.842212][T12214] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1827'. [ 317.869586][T12214] veth0_vlan: left promiscuous mode [ 317.879742][T12214] veth0_vlan: left allmulticast mode [ 317.946359][T12214] veth0_vlan: entered promiscuous mode [ 317.993177][T12214] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 319.368266][T12252] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1835'. [ 319.453935][T12252] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1835'. [ 319.469732][T12258] validate_nla: 14 callbacks suppressed [ 319.469748][T12258] netlink: 'syz.2.1837': attribute type 46 has an invalid length. [ 319.502005][T12258] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 320.048407][T12282] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 320.365436][T12297] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.453351][T12301] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.1848'. [ 320.730989][T12307] netlink: 'syz.0.1850': attribute type 28 has an invalid length. [ 320.790856][T12307] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1850'. [ 320.808590][T12307] netlink: zone id is out of range [ 323.539161][T12357] netlink: 'syz.3.1864': attribute type 10 has an invalid length. [ 323.613945][T12357] bond0: (slave 73): Releasing backup interface [ 323.652709][T12357] : left promiscuous mode [ 323.657572][T12357] : left allmulticast mode [ 323.798051][T12363] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1866'. [ 324.255757][T12373] netlink: 'syz.2.1869': attribute type 3 has an invalid length. [ 324.285778][T12373] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 324.323556][T12373] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1869'. [ 324.754302][T12387] netlink: 'syz.0.1872': attribute type 6 has an invalid length. [ 324.929964][T12385] delete_channel: no stack [ 325.168938][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.176813][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.209580][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.217455][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.238393][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.251943][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.288663][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.308362][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.325446][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.338369][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.399453][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.419421][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.444827][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.476515][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.499956][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.507832][T12397] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1876'. [ 325.583852][T12397] netlink: 'syz.2.1876': attribute type 21 has an invalid length. [ 325.958705][T12446] `: Device lo is loopback device. Loopback devices can't be added as a team port [ 325.984708][T12446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 326.067007][T12450] team0: Device hsr_slave_0 failed to register rx_handler [ 326.473824][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.497120][T12489] netlink: zone id is out of range [ 327.516800][T12489] netlink: set zone limit has 8 unknown bytes [ 329.401969][T12571] __nla_validate_parse: 59 callbacks suppressed [ 329.401986][T12571] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1921'. [ 329.883086][T12579] validate_nla: 68 callbacks suppressed [ 329.883101][T12579] netlink: 'syz.0.1928': attribute type 29 has an invalid length. [ 329.907891][T12579] netlink: 'syz.0.1928': attribute type 29 has an invalid length. [ 330.211557][T12594] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1932'. [ 330.480037][T12606] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1936'. [ 331.096994][T12633] netlink: 'syz.1.1945': attribute type 4 has an invalid length. [ 331.112105][T12633] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1945'. [ 331.129979][T12633] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 331.403515][T12656] netlink: 'syz.0.1951': attribute type 1 has an invalid length. [ 331.428429][T12656] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1951'. [ 331.447076][T12651] netlink: 4820 bytes leftover after parsing attributes in process `syz.2.1950'. [ 331.633271][T12664] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1955'. [ 331.884243][T12673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 332.398102][T12686] netlink: 'syz.3.1962': attribute type 25 has an invalid length. [ 332.418394][T12686] netlink: 'syz.3.1962': attribute type 9 has an invalid length. [ 332.620522][T12692] netlink: 'syz.1.1963': attribute type 21 has an invalid length. [ 332.638445][T12692] netlink: 'syz.1.1963': attribute type 4 has an invalid length. [ 332.646356][T12692] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1963'. [ 332.724111][T12700] netlink: 'syz.3.1966': attribute type 46 has an invalid length. [ 332.737079][T12700] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1966'. [ 333.636690][T12744] netlink: 'syz.3.1977': attribute type 21 has an invalid length. [ 335.922891][T12797] syzkaller0: entered promiscuous mode [ 335.929147][T12797] syzkaller0: entered allmulticast mode [ 335.945189][T12801] __nla_validate_parse: 1 callbacks suppressed [ 335.945204][T12801] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1994'. [ 337.954256][T12831] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2002'. [ 338.141480][T12846] netlink: 'syz.0.2005': attribute type 21 has an invalid length. [ 338.149632][T12846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2005'. [ 338.159305][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2005'. [ 340.321825][T12894] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2020'. [ 340.381216][T12903] netlink: 'syz.0.2022': attribute type 11 has an invalid length. [ 340.398321][T12903] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2022'. [ 340.532513][T12913] netlink: 'syz.1.2025': attribute type 1 has an invalid length. [ 340.540787][T12913] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.2025'. [ 342.135179][T12946] netlink: 'syz.3.2033': attribute type 10 has an invalid length. [ 342.152457][T12946] `: Device ipvlan1 is up. Set it down before adding it as a team port [ 342.203341][T12952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2035'. [ 342.218361][T12952] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2035'. [ 342.227818][T12951] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2035'. [ 342.694986][T12976] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2043'. [ 344.108093][T13010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2050'. [ 344.168743][T13016] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2054'. [ 345.007415][T13010] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2050'. [ 345.020418][T13014] netlink: 'syz.2.2051': attribute type 16 has an invalid length. [ 345.038478][T13014] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2051'. [ 345.057917][T13014] bridge_slave_0: entered allmulticast mode [ 345.873823][T13053] netlink: 'syz.1.2063': attribute type 19 has an invalid length. [ 347.455202][T13089] netlink: 'syz.3.2076': attribute type 10 has an invalid length. [ 348.581247][T13089] bridge0: port 3(`) entered disabled state [ 348.590834][T13089] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.598260][T13089] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.697488][T13089] bridge0: port 3(`) entered blocking state [ 348.703708][T13089] bridge0: port 3(`) entered forwarding state [ 348.710262][T13089] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.717459][T13089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.724990][T13089] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.732213][T13089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.620286][T13089] bridge0: port 3(`) entered disabled state [ 349.626580][T13089] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.633963][T13089] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.685214][T13093] netlink: 'syz.0.2077': attribute type 19 has an invalid length. [ 352.220254][T13116] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2084'. [ 352.317460][T13116] bridge_slave_0 (unregistering): left allmulticast mode [ 352.325669][T13116] bridge_slave_0 (unregistering): left promiscuous mode [ 352.334282][T13116] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.602585][T13140] tun0: tun_chr_ioctl cmd 1074025675 [ 352.617662][T13140] tun0: persist enabled [ 352.628802][T13140] tun0: tun_chr_ioctl cmd 1074025675 [ 352.639108][T13140] tun0: persist disabled [ 352.669220][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2094'. [ 353.044687][T13166] netlink: 'syz.1.2100': attribute type 2 has an invalid length. [ 353.054415][T13166] netlink: 'syz.1.2100': attribute type 8 has an invalid length. [ 353.062854][T13166] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2100'. [ 353.072930][T13165] netlink: 'syz.1.2100': attribute type 2 has an invalid length. [ 353.088409][T13165] netlink: 'syz.1.2100': attribute type 8 has an invalid length. [ 353.097209][T13165] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2100'. [ 353.160001][T13173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2102'. [ 353.185018][T13173] netlink: 'syz.2.2102': attribute type 12 has an invalid length. [ 353.197954][T13173] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2102'. [ 353.352045][T13184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2105'. [ 353.927564][ T5772] Bluetooth: hci2: Malformed LE Event: 0x02 [ 354.176186][T13206] netlink: 'syz.1.2111': attribute type 10 has an invalid length. [ 354.341235][T13204] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2110'. [ 354.351490][T13204] netlink: 6116 bytes leftover after parsing attributes in process `syz.0.2110'. [ 354.361822][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2110'. [ 354.383768][T13204] bridge_slave_1: default FDB implementation only supports local addresses [ 355.578682][T13244] delete_channel: no stack [ 355.909807][T13268] netlink: 'syz.3.2128': attribute type 19 has an invalid length. [ 356.297549][T13291] netlink: 'syz.3.2133': attribute type 3 has an invalid length. [ 357.237513][T13321] netlink: 'syz.2.2141': attribute type 29 has an invalid length. [ 357.252377][T13321] netlink: 'syz.2.2141': attribute type 29 has an invalid length. [ 357.446836][T13331] __nla_validate_parse: 10 callbacks suppressed [ 357.446879][T13331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2144'. [ 358.022047][T13348] `: left allmulticast mode [ 358.027281][T13348] team_slave_0: left allmulticast mode [ 358.039757][T13348] team_slave_1: left allmulticast mode [ 358.045381][T13348] dummy0: left allmulticast mode [ 358.051570][T13348] macvlan0: left allmulticast mode [ 358.057406][T13348] veth1_vlan: left allmulticast mode [ 358.063123][T13348] bond0: left allmulticast mode [ 358.068452][T13348] bond_slave_1: left allmulticast mode [ 358.090191][T13348] `: left promiscuous mode [ 358.094891][T13348] team_slave_0: left promiscuous mode [ 358.101622][T13348] team_slave_1: left promiscuous mode [ 358.107778][T13348] dummy0: left promiscuous mode [ 358.116344][T13348] macvlan0: left promiscuous mode [ 358.123212][T13348] bond0: left promiscuous mode [ 358.128247][T13348] bond_slave_1: left promiscuous mode [ 358.135934][T13350] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2147'. [ 358.137254][T13348] bridge0: port 3(`) entered disabled state [ 358.157643][T13350] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 358.172448][T13348] bridge_slave_1: left allmulticast mode [ 358.188576][T13348] bridge_slave_1: left promiscuous mode [ 358.195556][T13348] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.241700][T13348] bridge_slave_0: left allmulticast mode [ 358.261237][T13348] bridge_slave_0: left promiscuous mode [ 358.280727][T13348] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.456226][T13344] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2147'. [ 358.477176][T13351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2148'. [ 358.623944][T13353] validate_nla: 3 callbacks suppressed [ 358.623960][T13353] netlink: 'syz.2.2149': attribute type 10 has an invalid length. [ 358.637800][T13353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2149'. [ 358.646859][T13353] ipvlan1: entered promiscuous mode [ 358.655437][T13353] ipvlan1: entered allmulticast mode [ 358.665121][T13353] veth0_vlan: entered allmulticast mode [ 358.679694][T13353] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 358.717585][T13357] netlink: 'syz.0.2150': attribute type 21 has an invalid length. [ 358.725736][T13357] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2150'. [ 358.745436][T13357] netlink: 'syz.0.2150': attribute type 5 has an invalid length. [ 358.762047][T13357] netlink: 'syz.0.2150': attribute type 6 has an invalid length. [ 358.790990][T13357] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2150'. [ 362.057775][T13388] tap0: tun_chr_ioctl cmd 1074025675 [ 362.063655][T13388] tap0: persist enabled [ 362.146866][T13388] tap1: tun_chr_ioctl cmd 1074025677 [ 362.161168][T13388] tap1: linktype set to 778 [ 362.171750][T13388] tap0: tun_chr_ioctl cmd 1074025675 [ 362.177413][T13388] tap0: persist enabled [ 362.401690][T13403] netlink: 'syz.0.2165': attribute type 9 has an invalid length. [ 362.410230][T13403] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2165'. [ 362.427094][T13403] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2165'. [ 363.226427][ T5772] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 363.434413][T13424] netlink: 'syz.2.2172': attribute type 10 has an invalid length. [ 363.445350][T13424] veth0_macvtap: left promiscuous mode [ 363.714600][T13429] netlink: 'syz.0.2174': attribute type 21 has an invalid length. [ 363.786116][T13435] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2175'. [ 363.807418][T13435] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2175'. [ 363.912290][T13439] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2176'. [ 363.931013][T13439] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2176'. [ 363.940621][T13439] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 364.262955][T13447] team_slave_0: left promiscuous mode [ 364.277508][T13447] team_slave_0: left allmulticast mode [ 364.315820][T13447] team0: Port device team_slave_0 removed [ 364.323797][T13447] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 364.342103][T13448] netlink: 703 bytes leftover after parsing attributes in process `syz.3.2177'. [ 364.580416][T13458] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.2182'. [ 364.856689][T13484] netlink: 'syz.2.2190': attribute type 39 has an invalid length. [ 364.912338][T13485] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2190'. [ 364.924334][T13485] netlink: 'syz.2.2190': attribute type 46 has an invalid length. [ 365.391605][T13494] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 365.562708][T13474] delete_channel: no stack [ 365.946761][T13516] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2198'. [ 365.977674][T13516] openvswitch: netlink: Duplicate key (type 0). [ 366.177076][T13523] netlink: 'syz.1.2201': attribute type 11 has an invalid length. [ 366.195609][T13523] netlink: 212788 bytes leftover after parsing attributes in process `syz.1.2201'. [ 366.408377][T13530] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 367.290492][ T5772] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 367.300313][ T5772] Bluetooth: hci3: Injecting HCI hardware error event [ 367.315225][ T5772] Bluetooth: hci3: hardware error 0x00 [ 367.321586][T13564] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2214'. [ 369.211336][T13590] netlink: 142528 bytes leftover after parsing attributes in process `syz.2.2221'. [ 369.247682][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.265181][T13590] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 369.267296][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.284080][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.297037][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.305109][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 369.312699][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.428530][ T5772] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 369.466691][ T9339] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.533541][T13603] tap0: tun_chr_ioctl cmd 1074025680 [ 369.572006][ T9339] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.601953][T13591] chnl_net:caif_netlink_parms(): no params data found [ 369.640437][ T9339] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.693130][T13591] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.700411][T13591] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.707614][T13591] bridge_slave_0: entered allmulticast mode [ 369.714684][T13591] bridge_slave_0: entered promiscuous mode [ 369.740107][ T9339] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.754488][T13591] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.761981][T13591] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.769556][T13591] bridge_slave_1: entered allmulticast mode [ 369.776367][T13591] bridge_slave_1: entered promiscuous mode [ 369.807397][T13591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.821373][T13591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.876453][T13591] team0: Port device team_slave_0 added [ 369.899013][T13591] team0: Port device team_slave_1 added [ 369.968904][T13591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.975895][T13591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.002559][T13591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.040778][T13591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.047874][T13591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.076638][T13591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.233629][T13591] hsr_slave_0: entered promiscuous mode [ 370.259768][T13591] hsr_slave_1: entered promiscuous mode [ 370.468095][T13621] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2227'. [ 370.483669][T13623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2227'. [ 370.525030][T13621] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2227'. [ 371.349156][ T5772] Bluetooth: hci1: command tx timeout [ 372.246127][T13591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 372.311830][T13591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 372.441946][T13591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 372.488845][T13591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 373.086010][ T9339] hsr_slave_0: left promiscuous mode [ 373.120031][ T9339] hsr_slave_1: left promiscuous mode [ 373.139406][ T9339] bridge_slave_1: left allmulticast mode [ 373.158404][ T9339] bridge_slave_1: left promiscuous mode [ 373.176313][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.212410][ T9339] veth1_macvtap: left promiscuous mode [ 373.218530][ T9339] veth0_macvtap: left promiscuous mode [ 373.224103][ T9339] veth1_vlan: left allmulticast mode [ 373.231208][ T9339] veth1_vlan: left promiscuous mode [ 373.236717][ T9339] veth0_vlan: left promiscuous mode [ 373.431590][ T5772] Bluetooth: hci1: command tx timeout [ 373.456151][ T9339] team0 (unregistering): Port device geneve1 removed [ 373.647184][T13705] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2247'. [ 374.011297][ T9339] team0 (unregistering): Port device team_slave_1 removed [ 374.066564][ T9339] team0 (unregistering): Port device C removed [ 374.134743][ T9339] .` (unregistering): (slave 0.&nrgߖ>): Releasing backup interface [ 374.185552][ T9339] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.456240][ T9339] .` (unregistering): Released all slaves [ 374.541524][T13703] netlink: 'syz.1.2246': attribute type 10 has an invalid length. [ 374.641334][T13713] syzkaller0: entered promiscuous mode [ 374.646857][T13713] syzkaller0: entered allmulticast mode [ 374.655657][T13705] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 374.666617][T13705] CPU: 1 PID: 13705 Comm: syz.2.2247 Not tainted syzkaller #0 [ 374.674107][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.684188][T13705] Call Trace: [ 374.687479][T13705] [ 374.690417][T13705] dump_stack_lvl+0x18c/0x250 [ 374.695171][T13705] ? show_regs_print_info+0x20/0x20 [ 374.700408][T13705] ? load_image+0x400/0x400 [ 374.704946][T13705] sysfs_warn_dup+0x8e/0xa0 [ 374.709473][T13705] sysfs_do_create_link_sd+0xc0/0x110 [ 374.714857][T13705] device_add_class_symlinks+0x1cf/0x240 [ 374.720501][T13705] device_add+0x507/0xc20 [ 374.724845][T13705] wiphy_register+0x1dad/0x2ae0 [ 374.729717][T13705] ? cfg80211_event_work+0x40/0x40 [ 374.734838][T13705] ? minstrel_ht_alloc+0x88a/0x990 [ 374.739981][T13705] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 374.746062][T13705] ieee80211_register_hw+0x3464/0x4250 [ 374.751557][T13705] ? ieee80211_tasklet_handler+0x20/0x20 [ 374.757202][T13705] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 374.763107][T13705] ? __debug_object_init+0xec/0x450 [ 374.768320][T13705] ? __asan_memset+0x22/0x40 [ 374.772920][T13705] ? __hrtimer_init+0x186/0x270 [ 374.777776][T13705] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 374.783527][T13705] ? mac80211_hwsim_free+0x220/0x220 [ 374.788829][T13705] ? rcu_is_watching+0x15/0xb0 [ 374.793608][T13705] ? kstrndup+0xbd/0x140 [ 374.797878][T13705] hwsim_new_radio_nl+0xdc9/0x1a90 [ 374.803018][T13705] ? __nla_validate+0x50/0x50 [ 374.807715][T13705] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 374.814070][T13705] ? __nla_parse+0x40/0x50 [ 374.818505][T13705] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 374.824843][T13705] genl_family_rcv_msg_doit+0x211/0x310 [ 374.830393][T13705] ? end_current_label_crit_section+0x170/0x170 [ 374.836642][T13705] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 374.842546][T13705] ? bpf_lsm_capable+0x9/0x10 [ 374.847232][T13705] ? security_capable+0x89/0xb0 [ 374.852098][T13705] genl_rcv_msg+0x619/0x7a0 [ 374.856621][T13705] ? genl_bind+0x360/0x360 [ 374.861038][T13705] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 374.867377][T13705] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 374.873117][T13705] netlink_rcv_skb+0x241/0x4d0 [ 374.877906][T13705] ? genl_bind+0x360/0x360 [ 374.882346][T13705] ? netlink_ack+0x1180/0x1180 [ 374.887156][T13705] ? __lock_acquire+0x7d40/0x7d40 [ 374.892192][T13705] ? net_generic+0x1e/0x240 [ 374.896711][T13705] ? down_read+0x1ac/0x2e0 [ 374.901147][T13705] genl_rcv+0x28/0x40 [ 374.905148][T13705] netlink_unicast+0x751/0x8d0 [ 374.909935][T13705] netlink_sendmsg+0x8d0/0xbf0 [ 374.914723][T13705] ? netlink_getsockopt+0x590/0x590 [ 374.919944][T13705] ? aa_sock_msg_perm+0x94/0x150 [ 374.924893][T13705] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 374.930191][T13705] ? security_socket_sendmsg+0x80/0xa0 [ 374.935654][T13705] ? netlink_getsockopt+0x590/0x590 [ 374.940867][T13705] ____sys_sendmsg+0x5ba/0x960 [ 374.945641][T13705] ? __asan_memset+0x22/0x40 [ 374.950238][T13705] ? __sys_sendmsg_sock+0x30/0x30 [ 374.955272][T13705] ? __import_iovec+0x5f2/0x850 [ 374.960145][T13705] ? import_iovec+0x73/0xa0 [ 374.964668][T13705] ___sys_sendmsg+0x2a6/0x360 [ 374.969369][T13705] ? __sys_sendmsg+0x2a0/0x2a0 [ 374.974195][T13705] __se_sys_sendmsg+0x1c2/0x2b0 [ 374.979059][T13705] ? __x64_sys_sendmsg+0x80/0x80 [ 374.984022][T13705] ? syscall_enter_from_user_mode+0x2e/0x80 [ 374.989933][T13705] do_syscall_64+0x55/0xa0 [ 374.994372][T13705] ? clear_bhb_loop+0x40/0x90 [ 374.999062][T13705] ? clear_bhb_loop+0x40/0x90 [ 375.003782][T13705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.009698][T13705] RIP: 0033:0x7f0be239c799 [ 375.014132][T13705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.033752][T13705] RSP: 002b:00007f0be31a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.042179][T13705] RAX: ffffffffffffffda RBX: 00007f0be2615fa0 RCX: 00007f0be239c799 [ 375.050159][T13705] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 375.058139][T13705] RBP: 00007f0be2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 375.066121][T13705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.074107][T13705] R13: 00007f0be2616038 R14: 00007f0be2615fa0 R15: 00007ffdcacbc638 [ 375.082098][T13705] [ 375.515818][ T5772] Bluetooth: hci1: command tx timeout [ 376.853860][T13737] netpci0: tun_chr_ioctl cmd 2147767517 [ 376.915678][T13591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.939030][T13591] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.979777][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.987828][ T6654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.016400][T13741] netlink: 'syz.3.2253': attribute type 1 has an invalid length. [ 377.025195][T13741] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2253'. [ 377.072250][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.079473][T10731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.201441][T13591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.275228][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2257'. [ 377.284742][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2257'. [ 377.295326][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2257'. [ 377.317408][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2257'. [ 377.367167][T13760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2257'. [ 377.422309][T13755] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2257'. [ 377.471962][T13761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2257'. [ 377.522820][T13768] netlink: 'syz.3.2259': attribute type 10 has an invalid length. [ 377.592347][ T5772] Bluetooth: hci1: command tx timeout [ 377.835551][T13768] ` (unregistering): Port device team_slave_0 removed [ 377.869267][T13768] ` (unregistering): Port device team_slave_1 removed [ 377.896284][T13768] ` (unregistering): Port device dummy0 removed [ 377.913130][T13768] ` (unregistering): Port device macvlan0 removed [ 377.940993][T13768] ` (unregistering): Port device bond0 removed [ 378.036430][T13591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.208478][T13797] netlink: 22 bytes leftover after parsing attributes in process `syz.3.2261'. [ 378.255206][T13591] veth0_vlan: entered promiscuous mode [ 378.301068][T13591] veth1_vlan: entered promiscuous mode [ 378.460140][T13591] veth0_macvtap: entered promiscuous mode [ 378.471117][T13591] veth1_macvtap: entered promiscuous mode [ 378.522266][T13591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.567504][T13591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.604006][T13591] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.639363][T13591] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.648123][T13591] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.681821][T13591] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.722530][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.729076][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.667046][T13830] netlink: 'syz.2.2267': attribute type 39 has an invalid length. [ 379.920918][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.959233][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.099526][ T6656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.113247][ T6656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.255874][T13853] netlink: 'syz.3.2272': attribute type 3 has an invalid length. [ 380.281595][T13853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2272'. [ 380.333454][T13856] netlink: 'syz.2.2273': attribute type 10 has an invalid length. [ 380.362803][T13856] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 380.435917][T13859] syzkaller0: entered promiscuous mode [ 380.443945][T13859] syzkaller0: entered allmulticast mode [ 380.455481][T13863] netlink: 'syz.0.2217': attribute type 15 has an invalid length. [ 380.477894][T13856] netlink: 'syz.2.2273': attribute type 10 has an invalid length. [ 380.509074][T13856] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 380.760533][T13876] netlink: 'syz.3.2275': attribute type 1 has an invalid length. [ 382.796781][T13889] __nla_validate_parse: 3 callbacks suppressed [ 382.796795][T13889] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2279'. [ 382.855598][T13901] netlink: 'syz.0.2283': attribute type 21 has an invalid length. [ 382.947039][T13907] netlink: 'syz.1.2286': attribute type 10 has an invalid length. [ 382.957773][T13907] mac80211_hwsim hwsim3 .3c: left allmulticast mode [ 382.982724][T13907] mac80211_hwsim hwsim3 .3c: entered promiscuous mode [ 382.991328][T13907] mac80211_hwsim hwsim3 .3c: entered allmulticast mode [ 383.002081][T13907] bond0: (slave .3c): Enslaving as an active interface with an up link [ 383.057805][T13910] netlink: 'syz.3.2287': attribute type 3 has an invalid length. [ 383.072352][T13910] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2287'. [ 383.156653][T13915] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2288'. [ 383.237681][T13918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.612024][T13941] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2295'. [ 383.804966][T13947] netlink: set zone limit has 8 unknown bytes [ 383.960564][T13945] netlink: 'syz.0.2296': attribute type 39 has an invalid length. [ 384.961242][T13959] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2302'. [ 384.984545][T13959] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 385.236316][T13973] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2306'. [ 385.566184][T13980] netlink: 'syz.2.2309': attribute type 4 has an invalid length. [ 385.605275][T13980] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2309'. [ 386.358759][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2316'. [ 386.678652][T14008] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2318'. [ 386.881745][T14012] netlink: 'syz.1.2320': attribute type 21 has an invalid length. [ 386.893001][T14012] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2320'. [ 387.091488][T14021] netlink: 'syz.1.2325': attribute type 13 has an invalid length. [ 387.104485][T14021] erspan0: refused to change device tx_queue_len [ 387.111136][T14021] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 388.292029][T14037] netlink: 'syz.0.2329': attribute type 10 has an invalid length. [ 388.311724][T14037] __nla_validate_parse: 3 callbacks suppressed [ 388.311738][T14037] netlink: 3819 bytes leftover after parsing attributes in process `syz.0.2329'. [ 388.950066][T14059] netlink: 'syz.3.2335': attribute type 10 has an invalid length. [ 388.982211][T14061] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2334'. [ 389.174618][T14069] syzkaller0: entered promiscuous mode [ 389.186505][T14069] syzkaller0: entered allmulticast mode [ 390.016921][T14096] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 390.040568][T14096] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2346'. [ 390.663195][T14125] netlink: 'syz.1.2352': attribute type 1 has an invalid length. [ 390.677825][T14125] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2352'. [ 390.891898][T14133] syzkaller0: entered promiscuous mode [ 390.899357][T14133] syzkaller0: entered allmulticast mode [ 390.919722][T14137] netlink: 'syz.0.2356': attribute type 10 has an invalid length. [ 391.438825][T14158] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2360'. [ 393.614467][T14166] netlink: 'syz.0.2362': attribute type 12 has an invalid length. [ 393.628538][T14166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2362'. [ 393.893422][T14174] netlink: 'syz.1.2364': attribute type 21 has an invalid length. [ 393.929754][T14174] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2364'. [ 393.949725][T14174] netlink: 'syz.1.2364': attribute type 5 has an invalid length. [ 393.959892][T14174] netlink: 'syz.1.2364': attribute type 6 has an invalid length. [ 393.968132][T14174] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2364'. [ 394.057141][T14176] netlink: 'syz.2.2366': attribute type 39 has an invalid length. [ 394.545001][T14197] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2372'. [ 394.660854][T14203] netlink: 'syz.1.2375': attribute type 17 has an invalid length. [ 394.669594][T14203] netlink: 'syz.1.2375': attribute type 16 has an invalid length. [ 394.677449][T14203] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2375'. [ 394.818514][T14211] netlink: 'syz.2.2376': attribute type 10 has an invalid length. [ 394.979898][T14216] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2376'. [ 395.087395][T14215] pim6reg1: entered promiscuous mode [ 395.116528][T14216] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2376'. [ 395.128353][T14215] pim6reg1: entered allmulticast mode [ 395.372733][T14213] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2379'. [ 395.789999][T14236] validate_nla: 1 callbacks suppressed [ 395.790020][T14236] netlink: 'syz.3.2384': attribute type 10 has an invalid length. [ 395.818644][T14236] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2384'. [ 395.857022][T14231] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2383'. [ 396.018482][T14244] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.286127][T14256] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.294399][T14256] IPv6: NLM_F_CREATE should be set when creating new route [ 396.302095][T14256] IPv6: NLM_F_CREATE should be set when creating new route [ 396.309600][T14256] IPv6: NLM_F_CREATE should be set when creating new route [ 396.597000][T14266] netlink: 'syz.2.2396': attribute type 10 has an invalid length. [ 397.056944][T14274] netlink: 'syz.3.2400': attribute type 10 has an invalid length. [ 397.087395][T14274] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 397.121099][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 397.131921][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 397.140836][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 397.156576][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 397.196486][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 397.204869][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 397.943971][T14291] netlink: 'syz.0.2403': attribute type 39 has an invalid length. [ 398.504424][T14278] chnl_net:caif_netlink_parms(): no params data found [ 398.743250][T14309] __nla_validate_parse: 5 callbacks suppressed [ 398.743266][T14309] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2409'. [ 398.935279][T14278] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.947757][T14278] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.980290][T14278] bridge_slave_0: entered allmulticast mode [ 398.987650][T14278] bridge_slave_0: entered promiscuous mode [ 399.004370][T14313] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 399.015107][T14313] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 399.027940][T14278] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.037426][T14278] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.045089][T14278] bridge_slave_1: entered allmulticast mode [ 399.055572][T14278] bridge_slave_1: entered promiscuous mode [ 399.132102][T14278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.176352][T14278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.227122][T14278] team0: Port device team_slave_0 added [ 399.246909][T14278] team0: Port device team_slave_1 added [ 399.272130][ T51] Bluetooth: hci4: command tx timeout [ 399.318130][T14278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.325489][T14278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.352115][T14278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.365282][T14278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.372350][T14278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.398724][T14278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.667295][T14278] hsr_slave_0: entered promiscuous mode [ 399.679695][T14278] hsr_slave_1: entered promiscuous mode [ 399.692526][T14278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.705711][T14278] Cannot create hsr debugfs directory [ 399.881273][T14357] : port 1(veth0_to_team) entered blocking state [ 399.888088][T14357] : port 1(veth0_to_team) entered disabled state [ 399.895165][T14357] veth0_to_team: entered allmulticast mode [ 399.942450][T14357] veth0_to_team: entered promiscuous mode [ 400.175407][T14372] netlink: 'syz.0.2422': attribute type 21 has an invalid length. [ 400.186678][T14372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2422'. [ 400.257585][T14375] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2424'. [ 400.282179][T14375] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2424'. [ 400.923479][T14397] netlink: 'syz.2.2427': attribute type 21 has an invalid length. [ 400.934031][T14397] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2427'. [ 400.947306][T14397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'. [ 401.349722][ T51] Bluetooth: hci4: command tx timeout [ 401.396978][T14410] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2432'. [ 401.422327][T14410] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2432'. [ 401.493567][T14407] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2431'. [ 401.639480][T14417] netlink: 'syz.0.2434': attribute type 21 has an invalid length. [ 401.647519][T14417] netlink: 'syz.0.2434': attribute type 1 has an invalid length. [ 401.680315][T14417] netlink: 16050 bytes leftover after parsing attributes in process `syz.0.2434'. [ 401.702949][T14278] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 401.720220][T14278] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 401.743842][T14278] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 401.757213][T14278] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.873873][ T6654] bond0: (slave .3c): Releasing backup interface [ 401.893182][ T6654] mac80211_hwsim hwsim3 .3c (unregistering): left promiscuous mode [ 401.901785][ T6654] mac80211_hwsim hwsim3 .3c (unregistering): left allmulticast mode [ 402.019950][ T6654] bond0: left allmulticast mode [ 402.035974][ T6654] bond_slave_0: left allmulticast mode [ 402.050879][ T6654] bond_slave_1: left allmulticast mode [ 402.063004][ T6654] bridge0: port 3(bond0) entered disabled state [ 402.085672][ T6654] bridge_slave_1: left allmulticast mode [ 402.096343][ T6654] bridge_slave_1: left promiscuous mode [ 402.104356][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.134688][ T6654] bridge_slave_0: left promiscuous mode [ 402.144603][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.219253][ T6654] veth1_macvtap: left promiscuous mode [ 402.230910][ T6654] veth0_macvtap: left promiscuous mode [ 402.240351][ T6654] veth1_vlan: left promiscuous mode [ 403.423572][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.432590][ T6654] bond_slave_1 (unregistering): left promiscuous mode [ 403.438681][ T51] Bluetooth: hci4: command tx timeout [ 403.484063][ T6654] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.495778][ T6654] bond_slave_0 (unregistering): left promiscuous mode [ 403.787073][ T6654] bond0 (unregistering): Released all slaves [ 403.878377][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 404.022395][T14278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.108856][T14278] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.117931][T14482] TCP: TCP_TX_DELAY enabled [ 404.147142][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.154397][ T9344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.232256][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.239466][T10731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.521347][ T51] Bluetooth: hci4: command tx timeout [ 405.651686][T14491] macvlan1: entered promiscuous mode [ 405.889229][T14278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.966963][T14278] veth0_vlan: entered promiscuous mode [ 405.987486][T14278] veth1_vlan: entered promiscuous mode [ 406.082477][T14278] veth0_macvtap: entered promiscuous mode [ 406.090095][T14524] netlink: 'syz.2.2459': attribute type 1 has an invalid length. [ 406.111258][T14278] veth1_macvtap: entered promiscuous mode [ 406.131031][T14524] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2459'. [ 406.146026][T14524] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2459'. [ 406.160601][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 406.190853][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.203008][T14278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.216489][T14278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.230255][T14278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.263443][T14278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.275841][T14529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2461'. [ 406.286855][T14278] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.296226][T14278] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.318712][T14278] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.328718][T14278] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.346849][T14529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2461'. [ 406.360982][T14530] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2461'. [ 406.404785][T14529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2461'. [ 406.559357][T10731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.567195][T10731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.676059][ T4796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.686931][ T4796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.702691][T14538] tap0: tun_chr_ioctl cmd 1074025680 [ 407.040643][T14556] netlink: 'syz.1.2468': attribute type 10 has an invalid length. [ 407.069889][T14556] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2468'. [ 407.767165][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.782996][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.795821][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.808535][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.818967][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 407.826432][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 407.901708][ T6654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.052480][ T6654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.091917][T14580] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2474'. [ 408.196642][ T6654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.279405][ T6654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.447915][T14569] chnl_net:caif_netlink_parms(): no params data found [ 408.775836][T14603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2479'. [ 409.089476][T14569] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.096664][T14569] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.134110][T14569] bridge_slave_0: entered allmulticast mode [ 409.168846][T14569] bridge_slave_0: entered promiscuous mode [ 409.190381][T14614] netlink: 'syz.0.2483': attribute type 9 has an invalid length. [ 409.199314][T14614] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2483'. [ 409.308370][T14569] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.315932][T14569] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.328591][T14569] bridge_slave_1: entered allmulticast mode [ 409.340735][T14569] bridge_slave_1: entered promiscuous mode [ 409.347586][T14614] netlink: 'syz.0.2483': attribute type 10 has an invalid length. [ 409.399514][T14614] team0: Port device veth0_to_bond added [ 409.613259][T14621] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2484'. [ 409.639222][T14569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.811797][T14569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.844948][T14626] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2485'. [ 409.887755][T14626] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 409.908506][ T51] Bluetooth: hci0: command tx timeout [ 410.443253][T14646] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2487'. [ 410.736176][T14569] team0: Port device team_slave_0 added [ 410.765392][T14569] team0: Port device team_slave_1 added [ 411.005923][T14569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.013921][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.041529][T14569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.074273][T14569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.081468][T14569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.126266][T14569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.258795][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.276764][T14664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.300015][T14664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.307766][T14664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.612332][T14569] hsr_slave_0: entered promiscuous mode [ 411.623572][T14569] hsr_slave_1: entered promiscuous mode [ 411.639883][T14569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.647947][T14569] Cannot create hsr debugfs directory [ 411.740013][T14681] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2498'. [ 411.853552][T14681] netlink: 'syz.0.2498': attribute type 5 has an invalid length. [ 411.988614][ T51] Bluetooth: hci0: command tx timeout [ 412.022665][T14692] netlink: 'syz.3.2499': attribute type 2 has an invalid length. [ 412.052140][T14692] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2499'. [ 412.122864][T14695] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2500'. [ 412.158336][T14695] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2500'. [ 412.167502][T14695] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2500'. [ 412.348740][T14708] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2502'. [ 412.371795][T14712] netlink: 'syz.3.2503': attribute type 1 has an invalid length. [ 412.383099][T14712] netlink: 'syz.3.2503': attribute type 3 has an invalid length. [ 412.643702][ T6654] veth0_to_team: left allmulticast mode [ 412.650931][ T6654] veth0_to_team: left promiscuous mode [ 412.662874][ T6654] : port 1(veth0_to_team) entered disabled state [ 412.687684][ T6654] hsr_slave_0: left promiscuous mode [ 412.695774][ T6654] hsr_slave_1: left promiscuous mode [ 412.760633][ T6654] veth1_vlan: left promiscuous mode [ 412.766011][ T6654] veth0_vlan: left promiscuous mode [ 412.821363][T14728] netlink: 'syz.1.2507': attribute type 29 has an invalid length. [ 413.923232][T14745] netlink: 'syz.3.2511': attribute type 7 has an invalid length. [ 413.949768][T14745] netlink: 'syz.3.2511': attribute type 1 has an invalid length. [ 414.072626][ T51] Bluetooth: hci0: command tx timeout [ 415.716875][ T6654] team_slave_1 (unregistering): left promiscuous mode [ 415.724056][ T6654] team_slave_1 (unregistering): left allmulticast mode [ 415.737289][ T6654] team0 (unregistering): Port device team_slave_1 removed [ 416.130500][T14728] netlink: 'syz.1.2507': attribute type 29 has an invalid length. [ 416.148451][ T51] Bluetooth: hci0: command tx timeout [ 416.343479][T14753] netlink: 'syz.3.2514': attribute type 21 has an invalid length. [ 416.356472][T14753] __nla_validate_parse: 2 callbacks suppressed [ 416.356488][T14753] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2514'. [ 416.373226][T14753] netlink: 'syz.3.2514': attribute type 4 has an invalid length. [ 416.528410][T14569] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 416.546300][T14569] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 416.560655][T14569] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 416.575772][T14569] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 416.829078][T14569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.869533][T14569] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.886145][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.893344][ T9344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.949875][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.957033][ T6654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.098078][T14569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.440208][T14778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 417.669228][T14793] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2520'. [ 417.714112][T14793] team_slave_0: entered allmulticast mode [ 417.756162][T14793] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 417.861706][T14569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.029069][T14569] veth0_vlan: entered promiscuous mode [ 418.118713][T14569] veth1_vlan: entered promiscuous mode [ 418.362640][T14569] veth0_macvtap: entered promiscuous mode [ 418.454676][T14569] veth1_macvtap: entered promiscuous mode [ 418.507907][T14569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.535205][T14569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.571618][T14569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.696003][T14569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.729863][T14569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.761931][T14569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.912685][T14569] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.941141][T14569] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.964076][T14569] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.985145][T14569] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.023561][T14830] pim6reg1: entered promiscuous mode [ 419.047884][T14830] pim6reg1: entered allmulticast mode [ 419.263402][ T4796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.284953][ T4796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.347537][ T6652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.366014][ T6652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.923594][T14869] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2534'. [ 419.981185][T14867] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2534'. [ 420.604560][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.615234][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.626687][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.642792][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.653285][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 420.660834][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 420.824053][T14870] delete_channel: no stack [ 421.125349][T14889] chnl_net:caif_netlink_parms(): no params data found [ 422.208623][T14919] netlink: 'syz.0.2544': attribute type 5 has an invalid length. [ 422.245485][T14923] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2544'. [ 422.279623][T14923] tc_dump_action: action bad kind [ 422.300861][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.309829][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.319451][T14889] bridge_slave_0: entered allmulticast mode [ 422.326928][T14889] bridge_slave_0: entered promiscuous mode [ 422.341158][T14889] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.349339][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.365955][T14889] bridge_slave_1: entered allmulticast mode [ 422.382046][T14889] bridge_slave_1: entered promiscuous mode [ 422.437256][T14927] mac80211_hwsim hwsim39 .3c: renamed from wlan1 (while UP) [ 422.475902][T14889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.493783][T14889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.575413][T14889] team0: Port device team_slave_0 added [ 422.606653][T14889] team0: Port device team_slave_1 added [ 422.635149][T14889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.643736][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.678655][T14889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.696051][T14889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.704234][T14889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.731032][T14889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.743102][T14932] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2548'. [ 422.790230][ T5772] Bluetooth: hci3: command tx timeout [ 422.822234][ T6654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.865225][T14934] delete_channel: no stack [ 422.963466][T14889] hsr_slave_0: entered promiscuous mode [ 422.995549][T14889] hsr_slave_1: entered promiscuous mode [ 423.008297][T14889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.017403][T14889] Cannot create hsr debugfs directory [ 423.059005][ T6654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.151775][ T6654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.166993][T14943] .&nr: renamed from bond_slave_1 (while UP) [ 423.249224][ T6654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.322440][T14941] netlink: 'syz.0.2550': attribute type 2 has an invalid length. [ 423.359398][T14941] netlink: 'syz.0.2550': attribute type 1 has an invalid length. [ 423.377944][T14941] netlink: 'syz.0.2550': attribute type 8 has an invalid length. [ 423.408433][T14941] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2550'. [ 423.486331][T14953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.325248][T14981] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2559'. [ 424.689881][T14998] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 424.721243][T14998] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.2561'. [ 424.740289][T15013] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2563'. [ 424.868438][ T5772] Bluetooth: hci3: command tx timeout [ 425.691090][T15032] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 425.786835][T14889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 425.813046][T14889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 425.947578][T14889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 426.012662][T15045] macsec0: entered promiscuous mode [ 426.025633][T15045] macsec0: entered allmulticast mode [ 426.039686][T15045] veth1_macvtap: entered allmulticast mode [ 426.238590][T14889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 426.285609][T15048] bridge_slave_1: left allmulticast mode [ 426.294761][T15048] bridge_slave_1: left promiscuous mode [ 426.315747][T15053] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2572'. [ 426.325771][T15048] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.348894][T15053] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 426.363829][T15048] bridge_slave_0: left allmulticast mode [ 426.369972][T15048] bridge_slave_0: left promiscuous mode [ 426.375791][T15048] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.958368][ T5772] Bluetooth: hci3: command tx timeout [ 427.393137][T14889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.502170][T14889] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.549173][T10731] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.556492][T10731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.614205][T10731] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.621385][T10731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.792595][T14889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.171795][T15079] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2578'. [ 428.449463][ T6654] bond0: (slave wlan1): Releasing backup interface [ 428.571281][T15091] netlink: 'syz.2.2580': attribute type 41 has an invalid length. [ 428.966344][T14889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.038316][ T5772] Bluetooth: hci3: command tx timeout [ 429.088561][ T6654] hsr_slave_0: left promiscuous mode [ 429.108894][ T6654] hsr_slave_1: left promiscuous mode [ 429.202517][ T6654] veth1_macvtap: left allmulticast mode [ 429.227128][T15105] delete_channel: no stack [ 429.228822][ T6654] veth1_macvtap: left promiscuous mode [ 429.232074][T15105] delete_channel: no stack [ 429.237287][ T6654] veth1_vlan: left promiscuous mode [ 429.257390][ T6654] veth0_vlan: left promiscuous mode [ 430.254426][ T6654] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.540455][ T6654] bond0 (unregistering): Released all slaves [ 432.365685][T14889] veth0_vlan: entered promiscuous mode [ 432.411344][T14889] veth1_vlan: entered promiscuous mode [ 432.661934][T14889] veth0_macvtap: entered promiscuous mode [ 432.707631][T14889] veth1_macvtap: entered promiscuous mode [ 432.766402][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.833462][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.878176][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.938541][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.953097][T14889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.981704][T15127] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2590'. [ 433.065831][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.087260][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.120176][T14889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.151877][T14889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.179955][T14889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.929265][T14889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.938022][T14889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.967094][T14889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.976263][T14889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.001712][T15138] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2592'. [ 434.320242][T10731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.351706][T10731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.475392][ T6656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.488057][T15157] netlink: 144300 bytes leftover after parsing attributes in process `syz.0.2597'. [ 434.505348][T15157] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2597'. [ 434.542466][ T6656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.553868][T15157] netlink: 'syz.0.2597': attribute type 10 has an invalid length. [ 434.564031][T15164] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2598'. [ 434.585827][T15157] team0: Device ipvlan1 failed to register rx_handler [ 434.777546][T15174] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2602'. [ 434.797120][T15174] netlink: 'syz.0.2602': attribute type 3 has an invalid length. [ 434.799987][T15175] netlink: 'syz.1.2603': attribute type 46 has an invalid length. [ 434.813325][T15174] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2602'. [ 435.207976][T15184] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2606'. [ 436.070525][T15218] netlink: 'syz.3.2615': attribute type 3 has an invalid length. [ 436.083472][T15218] netlink: 130976 bytes leftover after parsing attributes in process `syz.3.2615'. [ 436.118707][T15218] netlink: 'syz.3.2615': attribute type 10 has an invalid length. [ 436.134569][T15218] team0: Device hsr_slave_0 failed to register rx_handler [ 436.460150][T15239] : renamed from veth0_to_bond (while UP) [ 436.523843][T15241] netlink: 'syz.3.2619': attribute type 10 has an invalid length. [ 436.535453][T15241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2619'. [ 436.556664][T15241] batman_adv: batadv0: Adding interface: veth0_vlan [ 436.569709][T15241] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.603098][T15241] batman_adv: batadv0: Interface activated: veth0_vlan [ 437.122877][T15263] Q6`Ҙ: renamed from lo (while UP) [ 437.206466][T15266] netlink: 'syz.1.2629': attribute type 1 has an invalid length. [ 437.216042][T15266] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2629'. [ 437.585421][T15285] netlink: 'syz.2.2634': attribute type 4 has an invalid length. [ 437.608486][T15285] netlink: 'syz.2.2634': attribute type 3 has an invalid length. [ 437.810529][T15294] netlink: 'syz.0.2637': attribute type 6 has an invalid length. [ 438.463996][T15313] delete_channel: no stack [ 439.086216][T15325] mac80211_hwsim hwsim40 wlan0: entered promiscuous mode [ 439.098405][T15325] mac80211_hwsim hwsim40 wlan0: entered allmulticast mode [ 439.182138][T15334] __nla_validate_parse: 4 callbacks suppressed [ 439.182155][T15334] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.226152][T15334] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2647'. [ 439.798042][T15350] validate_nla: 6 callbacks suppressed [ 439.798085][T15350] netlink: 'syz.2.2653': attribute type 29 has an invalid length. [ 439.854370][T15350] netlink: 'syz.2.2653': attribute type 29 has an invalid length. [ 439.876745][T15357] netlink: 'syz.2.2653': attribute type 29 has an invalid length. [ 440.154888][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.161305][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.981439][T15378] netlink: 'syz.0.2660': attribute type 10 has an invalid length. [ 441.030885][T15378] team0: Device hsr_slave_0 failed to register rx_handler [ 441.133046][T15387] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2662'. [ 442.450038][T15410] netlink: 'syz.1.2668': attribute type 20 has an invalid length. [ 442.568476][T15415] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 442.650488][T15418] netlink: 'syz.0.2671': attribute type 3 has an invalid length. [ 442.659025][T15418] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2671'. [ 442.791763][T15426] netlink: 'syz.1.2673': attribute type 40 has an invalid length. [ 442.926105][T15434] netlink: 'syz.2.2675': attribute type 10 has an invalid length. [ 442.935685][T15434] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2675'. [ 442.973966][T15431] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2674'. [ 442.987086][T15431] tc_dump_action: action bad kind [ 443.113788][T15438] bridge_slave_1: left allmulticast mode [ 443.123440][T15438] bridge_slave_1: left promiscuous mode [ 443.130566][T15438] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.146574][T15438] bridge_slave_0: left allmulticast mode [ 443.153462][T15438] bridge_slave_0: left promiscuous mode [ 443.161725][T15438] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.640179][T15460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2683'. [ 444.265685][T15485] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2690'. [ 446.266261][T15502] netlink: 2759 bytes leftover after parsing attributes in process `syz.2.2695'. [ 446.858701][T15524] netlink: 'syz.2.2703': attribute type 10 has an invalid length. [ 446.872440][T15524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2703'. [ 446.888000][T15524] dummy0: entered promiscuous mode [ 446.922261][T15524] dummy0: entered allmulticast mode [ 446.958959][T15524] bridge0: port 3(dummy0) entered blocking state [ 446.989933][T15524] bridge0: port 3(dummy0) entered disabled state [ 447.050385][T15524] bridge0: port 3(dummy0) entered blocking state [ 447.057590][T15524] bridge0: port 3(dummy0) entered forwarding state [ 447.070877][T15526] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2704'. [ 447.486991][T15533] delete_channel: no stack [ 447.641628][T15547] netlink: 'syz.1.2709': attribute type 28 has an invalid length. [ 447.678697][T15547] netlink: 'syz.1.2709': attribute type 29 has an invalid length. [ 447.699457][T15547] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2709'. [ 447.823367][T15553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2711'. [ 447.873121][T15553] netlink: 'syz.2.2711': attribute type 17 has an invalid length. [ 447.881922][T15553] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2711'. [ 447.899826][T15553] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 447.985634][T15553] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2711'. [ 450.113859][T15623] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2730'. [ 450.126224][T15623] openvswitch: netlink: Flow actions attr not present in new flow. [ 451.456523][ T5772] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 451.671560][T15649] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2737'. [ 452.517327][T15687] netlink: 'syz.2.2747': attribute type 1 has an invalid length. [ 452.540499][T15687] netlink: 'syz.2.2747': attribute type 3 has an invalid length. [ 452.558447][T15687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2747'. [ 454.513834][T15723] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2760'. [ 454.531625][T15723] bridge_slave_1: default FDB implementation only supports local addresses [ 455.804468][T15742] netlink: set zone limit has 8 unknown bytes [ 455.971543][T15748] 0: renamed from batadv_slave_1 (while UP) [ 455.972099][T15750] netlink: 3403 bytes leftover after parsing attributes in process `syz.2.2769'. [ 457.100576][T15760] netlink: 'syz.3.2770': attribute type 6 has an invalid length. [ 457.150957][T15760] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2770'. [ 499.512290][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 518.729340][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.751399][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.763168][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.778013][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.785982][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 518.794717][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 519.132861][ T5778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 519.142675][ T5773] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 519.151967][ T5778] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 519.164613][ T5778] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 519.172517][ T5773] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 519.181523][ T5773] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 519.189444][ T5773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 519.199452][ T5773] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 519.206891][ T5773] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 519.215122][ T5773] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 519.222729][ T5773] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 519.230240][ T5773] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 519.239373][ T5773] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 519.246979][ T5778] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 519.258952][ T5778] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 519.270186][ T5778] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 519.287452][ T5773] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 519.296315][ T5773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 519.823731][T15793] chnl_net:caif_netlink_parms(): no params data found [ 519.976848][T15792] chnl_net:caif_netlink_parms(): no params data found [ 520.176106][T15790] chnl_net:caif_netlink_parms(): no params data found [ 520.337808][T15793] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.355434][T15793] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.365644][T15793] bridge_slave_0: entered allmulticast mode [ 520.380721][T15793] bridge_slave_0: entered promiscuous mode [ 520.426484][T15793] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.441985][T15793] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.452027][T15793] bridge_slave_1: entered allmulticast mode [ 520.460046][T15793] bridge_slave_1: entered promiscuous mode [ 520.479586][T15791] chnl_net:caif_netlink_parms(): no params data found [ 520.499467][T15792] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.506643][T15792] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.521753][T15792] bridge_slave_0: entered allmulticast mode [ 520.529634][T15792] bridge_slave_0: entered promiscuous mode [ 520.616484][T15792] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.625109][T15792] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.638730][T15792] bridge_slave_1: entered allmulticast mode [ 520.646132][T15792] bridge_slave_1: entered promiscuous mode [ 520.710266][T15793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.797618][T15793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.846270][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.862389][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.875295][T15790] bridge_slave_0: entered allmulticast mode [ 520.886490][T15790] bridge_slave_0: entered promiscuous mode [ 520.930279][T15792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.966467][T15792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.977556][T15790] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.993892][T15790] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.003903][T15790] bridge_slave_1: entered allmulticast mode [ 521.017153][T15790] bridge_slave_1: entered promiscuous mode [ 521.114085][T15793] team0: Port device team_slave_0 added [ 524.152784][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 529.492955][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.506408][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 544.708485][T15825] Bluetooth: hci3: command 0x0406 tx timeout [ 563.718089][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 563.724863][ C1] rcu: 1-....: (4245 ticks this GP) idle=17f4/1/0x4000000000000000 softirq=52377/52377 fqs=2737 [ 563.736593][ C1] rcu: hardirqs softirqs csw/system [ 563.742993][ C1] rcu: number: 1098053 3 0 [ 563.749387][ C1] rcu: cputime: 15559 26879 26 ==> 42450(ms) [ 563.757178][ C1] rcu: (t=10502 jiffies g=63669 q=2577 ncpus=2) [ 563.763520][ C1] CPU: 1 PID: 15768 Comm: syz.1.2773 Not tainted syzkaller #0 [ 563.770989][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 563.781059][ C1] RIP: 0010:kcov_remote_stop+0x28/0x6e0 [ 563.786643][ C1] Code: eb 8c f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 65 4c 8b 35 66 88 7c 7e 65 8b 05 67 88 7c 7e a9 00 00 ff 00 74 0f <48> 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 [ 563.806280][ C1] RSP: 0018:ffffc900001f0970 EFLAGS: 00000206 [ 563.812363][ C1] RAX: 828c621ddbf90800 RBX: dffffc0000000000 RCX: 828c621ddbf90800 [ 563.820358][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 563.828325][ C1] RBP: ffffc900001f0c30 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 563.836294][ C1] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 0000000000000246 [ 563.844264][ C1] R13: ffffffff81872db3 R14: ffff888036080000 R15: ffff8880b8f2c2f8 [ 563.852231][ C1] FS: 00007ff293d976c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 563.861154][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 563.867733][ C1] CR2: 0000000100000001 CR3: 0000000068481000 CR4: 00000000003506e0 [ 563.875715][ C1] DR0: 0000000000000000 DR1: 0000200000000080 DR2: 0000000000000000 [ 563.883688][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 563.891666][ C1] Call Trace: [ 563.894939][ C1] [ 563.897788][ C1] ? ieee80211_rx_data_set_sta+0x20f/0x410 [ 563.903605][ C1] ieee80211_rx_list+0x29ac/0x32d0 [ 563.908844][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 563.914993][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 563.920980][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.927140][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.933293][ C1] ? read_lock_is_recursive+0x20/0x20 [ 563.938674][ C1] ? ieee80211_rx_napi+0xd4/0x3d0 [ 563.943701][ C1] ieee80211_rx_napi+0x1b2/0x3d0 [ 563.948642][ C1] ? ieee80211_rx_list+0x32d0/0x32d0 [ 563.953927][ C1] ? skb_dequeue+0x124/0x160 [ 563.958519][ C1] ieee80211_handle_queued_frames+0x106/0x1a0 [ 563.964593][ C1] tasklet_action_common+0x302/0x4d0 [ 563.969877][ C1] ? scsi_end_request+0x651/0x800 [ 563.974907][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 563.980511][ C1] ? scsi_io_completion+0x13f/0x390 [ 563.985714][ C1] handle_softirqs+0x280/0x820 [ 563.990478][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 563.995240][ C1] ? do_softirq+0x1a0/0x1a0 [ 563.999742][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 564.004941][ C1] __irq_exit_rcu+0xd3/0x190 [ 564.009527][ C1] ? irq_exit_rcu+0x20/0x20 [ 564.014030][ C1] irq_exit_rcu+0x9/0x20 [ 564.018268][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 564.023900][ C1] [ 564.026824][ C1] [ 564.029748][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.035726][ C1] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 564.041628][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 51 2b cf f6 e8 7c 32 00 f7 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 564.061239][ C1] RSP: 0018:ffffc9000c92fbe0 EFLAGS: 00000282 [ 564.067306][ C1] RAX: 828c621ddbf90800 RBX: 0000000000000000 RCX: 828c621ddbf90800 [ 564.075275][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: 0000000000000001 [ 564.083245][ C1] RBP: ffffc9000c92fc80 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 564.091217][ C1] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 0000000000000000 [ 564.099184][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92001925f7c [ 564.107192][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 564.112939][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 564.118752][ C1] irqentry_exit+0x67/0x70 [ 564.123164][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.129143][ C1] RIP: 0010:do_futex+0x3b5/0x3e0 [ 564.134077][ C1] Code: 00 00 00 fc ff df 48 c7 44 24 40 0e 36 e0 45 4a c7 04 3b 00 00 00 00 65 48 8b 0c 25 28 00 00 00 48 3b 8c 24 80 00 00 00 75 1d <48> 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 b7 ca 0b 00 48 c7 [ 564.153688][ C1] RSP: 0018:ffffc9000c92fd40 EFLAGS: 00000246 [ 564.159756][ C1] RAX: 0000000000000000 RBX: 1ffff92001925fb0 RCX: 828c621ddbf90800 [ 564.167725][ C1] RDX: ffffc9000dc1d000 RSI: 0000000000000003 RDI: 0000000000000004 [ 564.175695][ C1] RBP: ffffc9000c92fe08 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 564.183667][ C1] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 0000000000000000 [ 564.191635][ C1] R13: ffffc9000c92fda0 R14: 0000000000000000 R15: dffffc0000000000 [ 564.199625][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 564.205519][ C1] ? lock_chain_count+0x20/0x20 [ 564.210382][ C1] __se_sys_futex+0x3a9/0x440 [ 564.215089][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.221265][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 564.226036][ C1] ? __x64_sys_futex+0x21/0xf0 [ 564.230801][ C1] do_syscall_64+0x55/0xa0 [ 564.235220][ C1] ? clear_bhb_loop+0x40/0x90 [ 564.239896][ C1] ? clear_bhb_loop+0x40/0x90 [ 564.244577][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 564.250482][ C1] RIP: 0033:0x7ff292f9c799 [ 564.254908][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.274522][ C1] RSP: 002b:00007ff293d970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 564.282955][ C1] RAX: ffffffffffffffda RBX: 00007ff293216098 RCX: 00007ff292f9c799 [ 564.290927][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff293216098 [ 564.298894][ C1] RBP: 00007ff293216090 R08: 0000000000000000 R09: 0000000000000000 [ 564.306857][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.314827][ C1] R13: 00007ff293216128 R14: 00007ffcdf03f7e0 R15: 00007ffcdf03f8c8 [ 564.322810][ C1]