last executing test programs: 6.051416036s ago: executing program 0 (id=3395): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000004000000000000000"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r1, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x6, &(0x7f0000000900), 0x4) sendmsg$kcm(r4, &(0x7f0000000940)={&(0x7f0000000980)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000a00)) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="d8000000180081044e81f782db4cb9041c1d0800fe007c05e8fe55b204000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f01ea23b77edf704bc2ce8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350d3798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f00000012c0)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYRES64=r2], &(0x7f0000001200)='GPL\x00'}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001280)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140), 0xcf) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, 0x0, 0x4040040) 4.416625822s ago: executing program 2 (id=3410): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000a000a000f00000002800000121f", 0x2e}], 0x1}, 0x20000090) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x440000, 0x0) socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0x4, 0xa, 0xc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r2}, 0xc) 3.888272215s ago: executing program 3 (id=3414): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x270, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000021000b12d25a805bb98222f90724fc60", 0x14}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000005001000050000000500000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x681a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x204, 0x2000000001, 0x0, 0x4, 0x9, 0x40002, 0xfffd, 0x0, 0x20000, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) gettid() write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000980)={'batadv0', 0x32, 0x37}, 0xa) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0xe2, 0x3, 0x70, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb06, 0x4, @perf_config_ext={0x5, 0x8000000000000001}, 0x100308, 0xc, 0x3, 0x7, 0x10000, 0x6c844e1c, 0xff83, 0x0, 0x2, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x4, r1, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000c00)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20000000800}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r6, 0x5, 0xb68, 0x8d, &(0x7f0000000e40)='%', 0x0, 0xd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x3b, 0x0}, 0x200040c4) 3.880215596s ago: executing program 2 (id=3415): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) perf_event_open(&(0x7f0000003d00)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000061000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba4580047a9dc88de358ce795731891a2031de4e09740c64e5506f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfadfe6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400ef0bd697d135324ce480c2960344de346bd511dea4ff7a07400b2d12dd1a8c4c300aee5f948777085ca142b79dfc3aca5fadaa0532ab0572169f68584ff2ee063bc7e75ecd5cc8973464629ba236e3ff97f6033d0800000000000000cef54a60aff12590a50ef147e3e640193d00263003a4ef412420a070dd0327e47c8c7abb77b4b53874788d7e2e5d554de4713db957afb56d4673f1b9"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) perf_event_open(&(0x7f0000003d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c36, 0x480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x6}, 0x100c, 0x7, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000003e00)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0/../file0/../file0/file0\x00', 0x8c) 3.628400251s ago: executing program 2 (id=3416): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x400000002, 0x0) r1 = perf_event_open(&(0x7f0000002780)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300)}, 0x10c008, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000002800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0xc, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d070000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916f9bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42522b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b110569690b9cdfed0c7a25b205a8608a3b3cb1f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5896a3dc021c5715ca89dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5c0668d430db5653a2b3c5b87e17ca100000000000000000000002db148aeb5eea7c375d23a3c8f073d3f7e85e402fb0232ad2b62d49068a08d4bdfefd86b1fbcfaaea30f064ef1c8e974d4df20d6f711a7"], &(0x7f0000002b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000002c00), 0x10}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080eeff00", @ANYRES16=r0, @ANYBLOB="00000000000000000000000000000000000000002fde734b9d9b7e13394a8d774a0eccfd6a4a4f6ec31923ae314f1d624af2b1b64a6a49939f2fd2ae742c670c37a3d625bacba6ce72c8a87d6c092961686f8724007b09a0b1225480af7fd2cd4fd2d2f6a239414db50ccdf273a7cba1ed9bfe1afec09f2694c3e1cb1906b52c6a54802e6c9ea3317a02b8599ab03327395e990a58ebcac905e36a68697857bea293827bb40d694a071ea5823b2fbdf3c25af7b71117c6de133f569f8c001169adbe3628", @ANYRES64=r1, @ANYRES32=r3, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000002cc0)={0x1f, 0x11, &(0x7f0000002d80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b300000085220000070000009500000000000000"], &(0x7f0000002e40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002e80)={r3, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000002f00)="b90103606989068c3c27004065582f9e0ff008001fffffe1ffff4305632f0806080600017f020001be", 0x0, 0x104, 0x6000000000000000, 0x10c, 0x0, &(0x7f0000002f40)="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", &(0x7f0000003080)}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000030c0)={@cgroup=0xffffffffffffffff, 0x1f, 0x1, 0x0, &(0x7f0000003100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000003140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003180)=[0x0, 0x0], &(0x7f00000031c0)=[0x0], 0x0}, 0x40) r8 = socket$kcm(0x11, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xe, 0x0, 0x4) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000003200)={0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003280)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500), 0x3, 0x0, 0xfdbf}, 0x10160) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000033c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r11 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r11, 0x29, 0x21, &(0x7f0000003400), 0x4) sendmsg$kcm(r11, &(0x7f0000003440)={&(0x7f0000003480)=@nl=@unspec={0x0, 0x0, 0xa00}, 0x80, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r8, @ANYBLOB="726352fafe76a296aa2a157972c2df480aaab291644f3fa1f570accf6d089a92840cdc091a892ee2143ce2ca4cf66055b58ff91911019dd4f5b3cd8e6bd3ed8b551ce091e47be9f1d6dffd30b2c4029390752ca875b008edf79f9a263b75a5676f5314", @ANYBLOB="7ad5afc72b36f7f5bd56a615c0", @ANYRESHEX=r11, @ANYRES16=r8, @ANYRESHEX, @ANYRES64=r2, @ANYRES64, @ANYRES64], 0x28}, 0x44800) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003540)={{r10, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000035c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003600)={r13}, 0x4) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000400"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000036c0)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000003800)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40000000000000c2, &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000003880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb2, &(0x7f00000038c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003900), &(0x7f0000003940), 0x8, 0x8, 0x8, 0x8, &(0x7f0000003980)}}, 0x10) r16 = openat$cgroup_ro(r6, &(0x7f00000039c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000003a40), &(0x7f0000003a80)='%pB \x00'}, 0x20) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003ac0)=@bpf_lsm={0x1d, 0x11, &(0x7f0000003b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003c40)='GPL\x00', 0x80000000, 0xa, &(0x7f0000003c80)=""/10, 0x40f00, 0x50, '\x00', 0x0, 0x1b, r16, 0x8, &(0x7f0000003cc0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000003d00)={0x0, 0x10, 0x1}, 0x10, r15, 0x0, 0x7, &(0x7f0000003d40)=[r16, 0xffffffffffffffff, r13, r14, r16, r13, r17], &(0x7f0000000480)=[{0x1, 0x3, 0x20e, 0x9}, {0x2, 0x4, 0x1, 0xa}, {0x3, 0x1, 0xa, 0x5}, {0x5, 0x4, 0x6, 0x7}, {0x0, 0x5, 0xb, 0x7}, {0x4, 0x3, 0xf, 0x5}, {0x5, 0x1, 0x1, 0x2}], 0x10, 0x8}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003e00)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r12, @ANYBLOB="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", @ANYRES8=r7, @ANYRES8, @ANYRES64=r0, @ANYRESHEX=r18], 0x20) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001) 3.415752933s ago: executing program 3 (id=3418): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70204800800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000b00)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473d3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.378706777s ago: executing program 2 (id=3419): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x5, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="180000000000120000"], &(0x7f0000002080)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000002140)="5c00000012006b9c9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6682949a36c2151fef08d8cdbf9367b4fa7f3f87d413c0184b0300060100000400000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48884) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="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"/2762], &(0x7f0000001f40)='GPL\x00'}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x1c, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x8, 0xa, 0x8, 0xffffffffffffffe0, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001080)='GPL\x00', 0x5, 0x252, &(0x7f00000010c0)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1f, 0x11, &(0x7f00000012c0)=ANY=[@ANYBLOB="18000000ffffffff00000000000000008500000050000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.294979496s ago: executing program 3 (id=3420): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="44065deacb9157e6b0f26965647db25f07aec0", 0x13}, {&(0x7f0000000640)="d7be3be8a91896413489814b0039740b5de115b552c06e39b25d5414074fd6763f184d18e0203e0460790c607af2dc311a579ec669810b9a3b7e6de4979d0259536c353a1a976b3bae1e5d9c9ef9fc9378e1f144e0ede4387fa4b9f570ce6f8ca77ddef16881d4ef41a918d5fb74a3cb81ebf2f4a67ae8618e32fe1641b410f4ea38d6b957a3878f206741ccd7695a6b21af334978d46c7bc0cd536e403d1c7350f3974c7f0ebe880e47e2f39eb7cd2ca613ae5fea7dcbafa933763b30782303b2a3ae583ce0bdb4da4d9f", 0xffffffffffffff07}, {&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e003d00100000000280000012", 0x2d}, {&(0x7f0000000840)="887af70b8423", 0x6}], 0x4}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000d40), 0x40) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000f00)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001840)="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", 0x9e8}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002340), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x18, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000100010018110000", @ANYRES32, @ANYBLOB="0000000041940000b702000014000000b7030000000000308500000005000000bca9000000000000350901000048920000009500500000000006b702000000000000739af0ff00000000b509020020000000dbaaf0fff10000002ff024059445d9829c185c8824b5b4b38900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000002540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000002580)={&(0x7f00000025c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) close(r3) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0x1}, &(0x7f0000000ac0), &(0x7f0000000080)}, 0xc34eae053a1ee0f8) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x14060, 0x3, 0x3, 0x4, 0x4000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000340)=0x6, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 3.293755516s ago: executing program 1 (id=3430): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x9, 0x6, 0x773d, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc008041) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.221276483s ago: executing program 4 (id=3421): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60700000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value=0xf00}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 3.100462575s ago: executing program 4 (id=3422): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000a80)=ANY=[], &(0x7f0000000ac0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000b00)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r3, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000d00)=[0x0], 0x0, 0x0, 0xe6, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x43, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000a80)={0x0, 0xffffffffffffffcc, &(0x7f0000001080)=[{&(0x7f00000010c0)="d8000000180081054e81f786db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) sendmsg$inet(r4, 0x0, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1830001801"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r2, 0x5, 0xb68, 0x4, &(0x7f0000001040)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000600)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f00000007c0)={0x0, 0xc027, &(0x7f0000000800)=[{&(0x7f0000000840)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(r6, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40003c22) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) 3.04712115s ago: executing program 2 (id=3423): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001140), 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ec0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x10c002, 0x3, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000d80)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x16, 0x3, 0x0, &(0x7f0000000f00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000045f970000009b57891886b4deb26649e57ca135cc6543f8bce0a9d373708984a23296c2b75abb1993442e09f161ee6eb4156e093572e8a6aa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x11, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000001280)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000001000e1208000f0100910401a8001600200001400300000203600c00b94dcf5c0461c1d67f6f94007134cf6ee080000000000000000091643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68765730d16a4683f5aeb4edb49905025ccca9e00360db70100000000008008", 0x92}, {&(0x7f0000001340)="fa50b01a81228e0726cf56459007fcb60ba6d75d1e30d4284b219e41cfc97a61568ba88139c2d52bf489c59c3327928bb1354b510db26fbeafd86711065eb109ac3678726462", 0x46}], 0x2, 0x0, 0x0, 0x7400}, 0x404a880) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r7) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[], 0xffdd) 3.044745751s ago: executing program 0 (id=3424): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={0xffffffffffffffff, 0x2800000002000000, 0x6, 0x55, &(0x7f0000000e40)="a06ad876d56a", &(0x7f0000000e80)=""/85, 0x500, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000280)='GPL\x00', 0x2, 0xfd90, &(0x7f00000006c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)=r0}, 0x20) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) close(r4) r5 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f0000000b80)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x2, &(0x7f0000000bc0)=r0, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x4400, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000c40)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xc, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f00000019c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r7, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000001a80)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001b80), &(0x7f0000001bc0), 0x0, 0x0, 0x800006}, 0x50) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000001c00)={&(0x7f0000001c40)=@caif=@dbg={0x25, 0x1}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="68e7b919e972c84d1d1aaddd44ea2f81f1dc7a90ea0a36b6b2cdea520ddd69889685293353fa0c1db45f9ef49e76056c1e11ca3bd2d07d84fa9a006ef55452d2fb7406a3139b4fea24ffb0822c434331c705bd9f89559a0d1e8307", 0x5b}, {&(0x7f0000001d80)="e2b151dafe81c1e7e5366c7d9bb0a596cae8c6c9d3ce272ad099243db0c45ce0e1f9d40985d4ad3de76a6d587becdd976e5b77d8972d0c68e14da92ebdc98afacea7e92fb3aebcf1a473ce5a31e2cccbab80d4df8d5abae5ecff13d79daf245b58861c31444f7bf874944de84b6b4eb6bbd19311eb461a9b2b8c2484482168b30cef76b09d711660fd267d608d6e83dae7d982eb53e204c413990709ee974a8c981507faa18cb8868ce020d774e7aac78479ba88842f1a5730c0", 0xba}], 0x2, &(0x7f0000001e40)}, 0x20000000) 3.037564042s ago: executing program 1 (id=3425): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1c, 0x7f, 0x6ddf, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', r0, r2, 0x2, 0x0, 0x3}, 0x50) r4 = perf_event_open$cgroup(&(0x7f0000000400)={0x3, 0x80, 0xd, 0x7, 0x1, 0x0, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f00000003c0), 0x2}, 0x12, 0x7fffffffffffffff, 0xc9, 0x8, 0x7ff, 0x8000, 0x40, 0x0, 0xffffffff, 0x0, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000480)='\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000500)=@raw=[@generic={0x4, 0x2, 0x0, 0x7}, @generic={0xa, 0xf, 0x2, 0xf36, 0x4}, @jmp={0x5, 0x0, 0xd, 0xb, 0x8, 0x0, 0x10}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000600)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x3, 0x4, 0xecf}, 0x10, r1, 0x0, 0x0, &(0x7f0000000680)=[r3], 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000780)=@generic={&(0x7f00000004c0)='./file0\x00', r5}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000009c0)={&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000880)="6d4794c654cf0397daff77434298c46c642799d9b40dbdb9121646678dfbdd32f3a8a2c55553dfb3307ad308f27403faf36b8fb15f17455581526ad7660d651e8535bd7f94998d0461c01c66", 0x4c}, {&(0x7f0000000900)="87ff6539794b9028535d7eb3b40b92d41907727fe6491054e7177af9367e0c8b7a1e27a44c8bbd13ce6b699223d65297dd445f5e6de1c68e9999cc", 0x3b}], 0x2, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [r3, r2, r3]}}, @rights={{0x18, 0x1, 0x1, [r3, r5]}}], 0x38, 0x100000c1}, 0x4c010) r7 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000a00)='devices.allow\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000a40)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b00)='syz1\x00', 0x200002, 0x0) r9 = perf_event_open$cgroup(&(0x7f0000000a80)={0x1, 0x80, 0x9, 0x10, 0xff, 0x6, 0x0, 0x4985, 0x40100, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x101, 0x4, @perf_config_ext={0x678600000000, 0x5be55a50}, 0x40, 0x7f, 0x9, 0x2, 0x31a, 0x101, 0x5, 0x0, 0x2, 0x0, 0xa}, r8, 0x0, r4, 0xc) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r9) r10 = perf_event_open$cgroup(&(0x7f0000000b40)={0x2, 0x80, 0x80, 0x8, 0x9, 0xf6, 0x0, 0xfff, 0x0, 0x6, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3ff, 0x0, @perf_config_ext={0x6, 0x7}, 0x4509, 0x8, 0xffff3a6d, 0x1, 0x1000, 0x800, 0xbd, 0x0, 0xe, 0x0, 0x3254}, r8, 0xa, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r10, 0x2405, r9) openat$cgroup_type(r8, &(0x7f0000000bc0), 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@cgroup=r8, 0x8, 0x0, 0x0, &(0x7f0000000c00)=[0x0], 0x1, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000d40)={0x0, r9}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x80000001, 0x0, r3, 0x39, '\x00', 0x0, r7, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r5, 0x0, 0x14, 0x43, &(0x7f0000000e00)="5856ab32bbd912f9c7ed7ec4ecd7e97174a06271", &(0x7f0000000e40)=""/67, 0x8, 0x0, 0x70, 0x8d, &(0x7f0000000ec0)="3c02f49875f7712fe1a334ce91160966922eda3f1274d64834d711364d772d035cdc33ea8fdaa357ab3dadc904b3bf32ed12099fdc7cb44f0d17c57824aaab6c4cadbecbfb0a74c02ffb3c31c816c18ec067d418e534a513c2dff1be3a91dd9d8b7ec4d1083c3b8d16d177bab4e22ff8", &(0x7f0000000f40)="d940f406ac7c0dea724ccca8a52e9ffcc0f8b001aad4527fa578e73944f107fffc469b670283bfc92c3bd0a6c795bebd8188305c814c55f640380d893f89a9f5430d7cf9df44fb47ba3348e048720a86bb111d4030696b6bf319b17643d0b47ff74783f99040cbdc4b107fc3de34cc17b4b7f223fb9ede9d141531074775cea68f3674edba18ba0c2791087257", 0x4, 0x0, 0x8}, 0x50) r12 = openat$cgroup_ro(r11, &(0x7f0000001080)='blkio.bfq.io_queued\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000010c0)={r12, r5, 0x0, r5}, 0x10) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r12, 0x4008240b, &(0x7f0000001140)={0x4, 0x80, 0x38, 0xa, 0x6, 0x6, 0x0, 0x2, 0x68000, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000001100), 0x8}, 0x108110, 0x6, 0x10, 0x7, 0x0, 0x101, 0x22c, 0x0, 0x62a3, 0x0, 0x3}) openat$cgroup_devices(r12, &(0x7f00000011c0)='devices.deny\x00', 0x2, 0x0) openat$cgroup_pressure(r11, &(0x7f0000001200)='io.pressure\x00', 0x2, 0x0) r13 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r13, &(0x7f0000001840)={&(0x7f0000001240)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000001740)=[{&(0x7f00000012c0)="1e38084e9a6aff6a61d1ecdf84020233ce05e59990e9a22a68b4a5e2fcaafd2ca0921aa6fa0ccf0334eb47a9ead115a6c5c2629aa80f3d9658bb82b8b2f10dec78fd19d2c92d8199fa15917e3aa7dd2ef82647a8bd2b27bce56f20a2cb070e55ac15a5018898fddc4cf5fb23020c926382c6fca652370065f99fe39e6a9defdf32dd438072302010d5f408bc30c1c0f014eb9aa78d1dd7b68108a3c8f89ad796fa7a4f86e8a38100bd613faea4d60256a4b2d6ce4e78cb57de5f5e3c6c17070e024f1c6f0d27fffb76109da7682e4a17db8d24669f19e9f9412a114df66ba6c85e11864008462f7f2050cf16188d1692377aa63c079b411bba1eecaf16501e", 0xff}, {&(0x7f00000013c0)="1354409bde666a834aed469c1e6328d6a29cdd05d8f6330101fc39922b8b0723669423736f06246f0fbbc6e12492e32eab63a6359cffda2a219ce0f240d321a4d7c64eeb0e7dc12f082d27b06572a248f20be9fa49617eda9d4ce505735f54c88bf57b40cc46a30bea426f9a2653195bcf79c3018e5f7a009cbfbbaef110cad6b4d89c074749dd2b96c38e16e4838d99b3", 0x91}, {&(0x7f0000001480)="e765ecd43768166529a66be05db54f8524110a0c1ff4e4294b4d5d5feed253bda9022d3ad315cb1a9eb1973edd7bc6401ab5e4a7be367aac942351a2883ee7eb0f7f12317aa0982d26a7935712a13962a0dce08533aa7dec669f37e1f7f71a419b773f5cb099453f9165af8c9a6af6bb22b7421cbc2f622546f7fb74ce6544605a789a971ff20ac49f5ad84dca3ff98332d5ae6476", 0x95}, {&(0x7f0000001540)="4668d8bc6a857f3e3392f69c3b3ad9e5012c3e6b357f61899f2648b2ae31320d005a0eaa6e5f77cfd7b4ea8c0315cf45b083aaaa978d76e864aa336bba214fe739416539621cde1d6a34fa48eee7ed6dc6c7e53401ca859205c24bc1a98691d055b6d22d705de7da9d9f0460e448b49c035c81a76b7c85d12fe17b7d527110f49421cdb2881ae176410a812aafeafcf27ef7620361766b509af5f7285dd5215e7d207794e42fb3c6a51354c84628d3698bc7009523fa6e07fbe4731bedaa62581d3a932eff9fbf11", 0xc8}, {&(0x7f0000001640)="844d2b455582611a8667df9b9b4259d97e0b547048963518855be8e3c2130117a15928466a33494718e4dc8c435cd189383e882155dc7be8fdb36a58e27d74ffbfb16db49791a5795ffc73cbafbe54e2c6b354c7ef7839a6e4a73c1ba2a559443462c481511a36ec22feaefa5535413734794ab1eda8d95a4d4674924fdf97ac3468f3b47a734164cbce858f4d248ea40903b4c812ffa9f59198a8ff2292dfed6c5e8a78d1a4765baaf4bf48f6575ecf0d8d0bf8190ea5a474b35576cf33aebc19ca38778353e8e958a7035aaebde5166b6d1e8523469853327c2478f9b015f694e7198413", 0xe5}], 0x5, &(0x7f00000017c0)=[@txtime={{0x18, 0x1, 0x3d, 0x36a0}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x60}, 0x10040000) 2.752519861s ago: executing program 1 (id=3426): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c006, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x5d31, 0x6001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x8010) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)}, 0x48000) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0100000004000000080000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff000000850000000200000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r5, 0x0, 0xe, 0x0, &(0x7f0000000e00)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1, 0xc, &(0x7f0000000700)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x14, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x14, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000ac0), &(0x7f0000000b00)=r9}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000b40)={r9}, 0xc) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1b, 0x0, 0x0, &(0x7f0000000a00)='GPL\x00'}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r10) 2.735072632s ago: executing program 3 (id=3427): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x2, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18ffb00007000000000000000000000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000500)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) perf_event_open(&(0x7f0000000f40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x10c002, 0xac5d}, 0x0, 0xe, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x4a}, 0x28) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a000000160000000c0000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000f8ffffff72141ccad935"], 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x201}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001540)={&(0x7f0000000000)="8ea13cb4f34fa7a43bd3f03e516677c25a620b2c244fdb7067f0598d370b96f59f32597dfb1c0f14f73623383f2d175cca0070f73dd2c4381b6ba7970ac2f5f765057864aed920d8ed0200543cde95b9811491f9f38cae570fb0fb2944c95c289971952abfc169c6918d22bb428e9e47590e", &(0x7f00000005c0)=""/96, &(0x7f0000000640)="f06204acd837d017af000e61b7650c3f88a55acf5b7aee87a2ac5eb6400430f021b9078c2bfc9bad331dadd3976602aeb8a3d3ed9dbd3376724942b19e607ee7fb4a94edee86e722a77909cd8ffbd13c99e44aa1ef48320e5aad8194c1d42335d536ec5db871208cedfcace0a93fabd54f41a934ec30a0c396423a0818a1084aea2975ac4b2043f41176501c0cbe23757f80b75a343f8a89f65c94e663f24b74025c8535354347fe839e9670bb44fdd8", &(0x7f0000001180)="7e908fcd081d590e4923b52bde8ced2a4994a2febb6c7c8fdfe152f83517e052102adf66deba567c6dd36a388b11df115d655d9e3c6d985275ea71c9ba71e0b133cb368eb0f7a9080d38118d341b1a3a23be6f4b8797a2523bed15d51b893e955a6ebcd532dd8a5dc6dc8c186b1ca93acf042d13bdf85dc91c6c1725424579396d530155d346a4b8ba923d659e018eff11b94fb202ebd85aa5d0a05bfc6f5d05df3cd2397b954d98a4a6e95cb73b24be400b991269b56566e0a5e2e61574d871e74b572976fcbd82262ae9", 0x7}, 0x38) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x5, 0x3, &(0x7f0000001100)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000001140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000001280)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000001300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000032d2d3d9e1d41325ec9826f73fb817a0464a1252f47fec0b70bd7a0f735e011e62c4dd20f89f79c577c5c6e130abca"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700", 0x2c}], 0x1}, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x5, &(0x7f0000000900)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000940)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000980)=""/199}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d80)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e80)) 2.681656838s ago: executing program 4 (id=3428): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x270, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x6}, 0x4000, 0x400, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000021000b12d25a805bb98222f90724fc60", 0x14}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000005001000050000000500000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r3, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x681a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x204, 0x2000000001, 0x0, 0x4, 0x9, 0x40002, 0xfffd, 0x0, 0x20000, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x4, &(0x7f0000000800)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) gettid() write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000980)={'batadv0', 0x32, 0x37}, 0xa) perf_event_open(&(0x7f0000000900)={0x1, 0x80, 0xe2, 0x3, 0x70, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb06, 0x4, @perf_config_ext={0x5, 0x8000000000000001}, 0x100308, 0xc, 0x3, 0x7, 0x10000, 0x6c844e1c, 0xff83, 0x0, 0x2, 0x0, 0xfffffffffffffff8}, 0xffffffffffffffff, 0x4, r1, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000c00)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c80)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) perf_event_open(&(0x7f0000000cc0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x20000000800}, 0x10022, 0xac5f, 0x0, 0x0, 0x0, 0x67af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r6, 0x5, 0xb68, 0x8d, &(0x7f0000000e40)='%', 0x0, 0xd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r7, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x3b, 0x0}, 0x200040c4) 2.536837122s ago: executing program 0 (id=3429): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x4, &(0x7f0000000640)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, 0x0, 0x5, 0xc3, &(0x7f0000000680)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000780), 0xcf) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000800)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x800, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfb, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000300), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) sendmsg$sock(r1, &(0x7f0000002600)={&(0x7f00000009c0)=@xdp={0x2c, 0xc, r2, 0x3}, 0x80, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000002500)="ff56d4194cc9bc5fb2bf5b309d", 0xd}, {&(0x7f0000002540)="1b2147e43c383d6193447e652faff2bdd14052d6", 0x14}], 0x3, &(0x7f00000025c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}, 0x4844) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x0, 0x5}, 0x14802, 0x1000000, 0x2, 0x1, 0x1, 0x1, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x200000000, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001480)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703290000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040000) 2.380629798s ago: executing program 1 (id=3431): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000004c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702ff850800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000b00)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473d3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.216693885s ago: executing program 3 (id=3432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000200)=[{0x30, 0xff, 0x86, 0xfffff014}, {0x6, 0xfd, 0x0, 0xfffffdff}]}) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x15b, 0x15b, 0x4, [@float={0x6, 0x0, 0x0, 0x10, 0x2}, @float={0xc, 0x0, 0x0, 0x10, 0xffcb88915e8c6699}, @restrict={0x0, 0x0, 0x0, 0xb, 0x4}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x4, 0x7}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x5}, @union={0xb, 0x2, 0x0, 0x5, 0x1, 0x4, [{0x2, 0x2, 0x5}, {0x5, 0x4, 0x8}]}, @enum64={0x8, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x10, 0xfffffff9, 0x1}]}, @struct={0xd, 0x6, 0x0, 0x4, 0x1, 0xffffffff, [{0x7, 0x3, 0x101}, {0x6, 0x4, 0x7}, {0xf, 0x2, 0xc6}, {0xa, 0x5, 0x800}, {0x8, 0x3, 0x8}, {0x10, 0x2, 0x4}]}, @struct={0x4, 0x4, 0x0, 0x4, 0x0, 0x0, [{0x5, 0x3, 0x7f}, {0x6, 0x2, 0x2}, {0x2, 0x5, 0x5}, {0xe, 0x2, 0xfff}]}, @datasec={0x10, 0x5, 0x0, 0xf, 0x3, [{0x2, 0x8, 0x40}, {0x2, 0x5, 0x8000}, {0x5, 0x0, 0xffff}, {0x4, 0xff, 0x3}, {0x3, 0x4}], ': >'}]}, {0x0, [0x61, 0x30]}}, &(0x7f0000000c40)=""/240, 0x178, 0xf0, 0x0, 0x1}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000500)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1, 0x61, 0x10, 0xb0, 0xfffffffd}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}], {0x95, 0x0, 0x9}}, &(0x7f0000000780)='GPL\x00', 0x5, 0xc3, &(0x7f0000000680)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, r2, 0x8, &(0x7f0000000a80), 0x8, 0x10, &(0x7f00000007c0)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="180000003a000b12d25a80648c2594f90324fc60100c0340", 0x18}], 0x1}, 0x4800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000100)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x5b, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe4, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a40)={r4}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x20000235, &(0x7f00000000c0)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x76, 0x7a, &(0x7f0000000580)=""/122, 0x41000, 0x0, '\x00', r6}, 0x94) 2.16066092s ago: executing program 4 (id=3433): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x16, &(0x7f0000000840)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe1, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1400}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) 2.105989576s ago: executing program 1 (id=3434): socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x5, 0x9c, &(0x7f0000000340)=""/156, 0x0, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getpid() perf_event_open(&(0x7f0000000bc0)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x10, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000d40)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000d80)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0xe, 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000001100)='GPL\x00', 0x4, 0xfd90, &(0x7f0000001140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0x366, 0x10, &(0x7f0000001280), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001340)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001380)={{r5, 0xffffffffffffffff}, &(0x7f00000013c0), &(0x7f0000001400)=r1}, 0x20) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001680)='>', 0x33fe0}], 0x1}, 0x0) close(r6) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x9, [@fwd={0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x4f]}}, &(0x7f0000000a40)=""/252, 0x18, 0xfc, 0x1}, 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000b80)='syz0\x00', 0x1ff) 1.976673539s ago: executing program 4 (id=3435): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95224fc60040011", 0x17}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x4040000) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f00000001c0)=@phonet={0x23, 0x1, 0xa, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)="a87d309e9f2eb66551cbf5eec99c3c6ea23a3961c2c9f663629a85fce63a3e12f91db92ecb8292404cc60d09312f483ed00340fc7dc076286118b451607e1ca57435fac6a4cc7c8a88a82af690b3c2a5c522b96d9f0b05f26321323120add69128b66d43a819bbd69624fbb19aefca329b53ba6649061d349afb0ebe2a27bbca11a1", 0x82}, {&(0x7f0000000400)="2b97cd3c9108fb3adccd48fa087e20b04d0e30f2c9672feed1010cfbe995e627d7b9942c4f015394f2402cfc9ae03cdfa1e959b6e0b6918c31c33c985b38a0519a56b4c94b79d053ecabedd6730fb8d472aa42298d7a70185dd149f16d05e4935ddcb21c7a7c", 0x66}], 0x2, &(0x7f00000004c0)=[{0x90, 0x117, 0x962, "7bb346c3123ae9ac7e8447d63cf448b8b38afc085a5541ed8c99b0a71056a4aaea3d7999aa4dfd25ba809f1d88f1f1baa5eac03aea806310213e45e7c1e1ed337875c61da597c2aaa3ee35cb7ed48e72c740eeb9da17eb6dea0a522ea49cf04dced69bd0bc6fd3396deebbbf7840a8fd52cc55e5dd4dc84c9e92"}, {0xa0, 0x113, 0xfffffff7, "19064e76453d96ac0cfd6f5bbcca440606e59ccdd38ecc333847b27862c11be8588a3e5a10341feb7faa438ff42d59cd2a40b1faa856769dd5e6f9a1579529efdf10e7e386675ab91e1d0e72288d8909816dda4a5cb4fc1bff189267def0bd7bee21b8e9d12c4ab9ee9db765616f5f07d8516fbcdb7706b31da86abc59e0bf44d07d2d088ddfe0281298fdfa6e"}], 0x130}, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x13, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x35, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 1.915139006s ago: executing program 0 (id=3436): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x9, 0x6, 0x773d, &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc008041) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000240)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.635881114s ago: executing program 0 (id=3437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="5afd8ebd010016ac6419a7000004000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1, r0}, 0xc) r2 = gettid() perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x400000000000008, 0x7f}, 0x107412, 0x0, 0x0, 0x1, 0x22c000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000dc0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ec0)={r3, 0x20, &(0x7f0000000f00)={&(0x7f0000000f40)=""/52, 0x34, 0x0, &(0x7f0000000f80)=""/203, 0xcb}}, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000001080)={0x0, 0xffffff2d, &(0x7f00000010c0)=[{&(0x7f0000001100)="c00e020022003507d25a806f8c6394f90524fc600d001141090005000500000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000001140), 0x8) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000001180)={0x4, &(0x7f00000011c0)=[{0x8001, 0x3, 0x6a, 0xf5}, {0x2a8, 0x2, 0x9, 0x7}, {0x7, 0xe, 0x8, 0x4}, {0x6, 0x3, 0xc, 0xfffeffff}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001280)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x10, 0x0, 0x0, &(0x7f00000013c0)='GPL\x00', 0x6, 0xc3, &(0x7f0000001400)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001580)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a0001802e2a2100d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x10102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x104810, 0x0, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4cf6dd15, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x8, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)='GPL\x00', 0x5, 0xc3, &(0x7f0000000b40)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) 88.578661ms ago: executing program 4 (id=3438): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r2}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 82.076362ms ago: executing program 1 (id=3448): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180004"], 0x10}, 0x40890) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a", 0x35}], 0x1}, 0x20010) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xfd90, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000780)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x366, 0x10, &(0x7f00000008c0), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r5, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) perf_event_open(&(0x7f0000000b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000c00)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)='>', 0x33fe0}], 0x1}, 0x0) close(r6) close(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe14, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 56.531754ms ago: executing program 0 (id=3439): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)="44065deacb9157e6b0f26965647db25f07aec0", 0x13}, {&(0x7f0000000640)="d7be3be8a91896413489814b0039740b5de115b552c06e39b25d5414074fd6763f184d18e0203e0460790c607af2dc311a579ec669810b9a3b7e6de4979d0259536c353a1a976b3bae1e5d9c9ef9fc9378e1f144e0ede4387fa4b9f570ce6f8ca77ddef16881d4ef41a918d5fb74a3cb81ebf2f4a67ae8618e32fe1641b410f4ea38d6b957a3878f206741ccd7695a6b21af334978d46c7bc0cd536e403d1c7350f3974c7f0ebe880e47e2f39eb7cd2ca613ae5fea7dcbafa933763b30782303b2a3ae583ce0bdb4da4d9f", 0xffffffffffffff07}, {&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e003d00100000000280000012", 0x2d}, {&(0x7f0000000840)="887af70b8423", 0x6}], 0x4}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='memory.events.local\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000d40), 0x40) sendmsg$kcm(r2, &(0x7f0000000d80)={&(0x7f0000000dc0)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000e80)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000f00)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001840)="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", 0x9e8}], 0x3}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002300)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002340), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x18, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000100010018110000", @ANYRES32, @ANYBLOB="0000000041940000b702000014000000b7030000000000308500000005000000bca9000000000000350901000048920000009500500000000006b702000000000000739af0ff00000000b509020020000000dbaaf0fff10000002ff024059445d9829c185c8824b5b4b38900000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000036080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000002540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000002580)={&(0x7f00000025c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000002640)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0x4044454) close(r3) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0x1}, &(0x7f0000000ac0), &(0x7f0000000080)}, 0xc34eae053a1ee0f8) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x14060, 0x3, 0x3, 0x4, 0x4000000, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000340)=0x6, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 692.49µs ago: executing program 2 (id=3440): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x4, 0xc272}, 0x10c002, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x248000, 0x0) ioctl$TUNGETVNETBE(r2, 0x800454df, &(0x7f0000000500)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x5, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/1810], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001040), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001080)=r3, 0x4) sendmsg$unix(r1, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x880) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8983, &(0x7f0000000380)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\x16\x8dK6\xdd\xdb\xa0G\x99\xa8y\x8d\x87\xde\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLQ\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\b\xcb\x01\xb2B@B\xed\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xdd$\xe9\xb0\x83\xcb\x93\x84\x7f\\x\xa9Eo\x14\n\xc8e\b\xa3\xe5\xd1\x83\xaaO\xdf\x9a.^\x9e\xb4\b\xfaVf\x92\xf7\x17\x06:\x89Ln\x00\xc3\x88P\xa7h\xc9\x8f1\xff\xdd\x81\xf1\xbbSPD\x95{k\xb8\xce\x8a2\x98\xee\x19') perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x1, 0x3f3, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 0s ago: executing program 3 (id=3441): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x7, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x35a, 0xe59}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r1, 0x0) mkdir(0x0, 0x15d) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0xc, 0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300000000000a8500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 368.755662][T11144] ? minstrel_ht_alloc+0x894/0xa20 [ 368.760815][T11144] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 368.766921][T11144] ieee80211_register_hw+0x2e33/0x3b00 [ 368.772426][T11144] ? ieee80211_register_hw+0xec1/0x3b00 [ 368.778056][T11144] ? ieee80211_register_hw+0xec1/0x3b00 [ 368.783644][T11144] ? ieee80211_tasklet_handler+0x20/0x20 [ 368.789308][T11144] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 368.795234][T11144] ? __debug_object_init+0xed/0x440 [ 368.800474][T11144] ? memset+0x1e/0x40 [ 368.804481][T11144] ? __hrtimer_init+0x189/0x270 [ 368.809369][T11144] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 368.815130][T11144] ? memcpy+0x3c/0x60 [ 368.819138][T11144] hwsim_new_radio_nl+0xab7/0xc90 [ 368.824218][T11144] genl_family_rcv_msg_doit+0x22f/0x350 [ 368.829804][T11144] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 368.835736][T11144] ? bpf_lsm_capable+0x5/0x10 [ 368.840441][T11144] ? security_capable+0x85/0xb0 [ 368.845333][T11144] genl_rcv_msg+0x601/0x790 [ 368.849878][T11144] ? __kasan_check_read+0x10/0x10 [ 368.854937][T11144] ? genl_bind+0x360/0x360 [ 368.859379][T11144] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 368.865751][T11144] netlink_rcv_skb+0x1ef/0x440 [ 368.870545][T11144] ? genl_bind+0x360/0x360 [ 368.874993][T11144] ? netlink_ack+0x1160/0x1160 [ 368.879779][T11144] ? down_read+0x1a8/0x2d0 [ 368.884205][T11144] genl_rcv+0x24/0x40 [ 368.888205][T11144] netlink_unicast+0x7ad/0x920 [ 368.892989][T11144] netlink_sendmsg+0x8ad/0xbd0 [ 368.897764][T11144] ? netlink_getsockopt+0x550/0x550 [ 368.902988][T11144] ? apparmor_socket_sendmsg+0x8a/0x330 [ 368.908559][T11144] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 368.913862][T11144] ? security_socket_sendmsg+0x7c/0xa0 [ 368.919346][T11144] ? netlink_getsockopt+0x550/0x550 [ 368.924563][T11144] ____sys_sendmsg+0x5ed/0x9a0 [ 368.929356][T11144] ? __sys_sendmsg_sock+0x30/0x30 [ 368.934403][T11144] ? __import_iovec+0x306/0x510 [ 368.939279][T11144] ? import_iovec+0x6f/0xa0 [ 368.943799][T11144] ___sys_sendmsg+0x2a2/0x360 [ 368.948499][T11144] ? __sys_sendmsg+0x2a0/0x2a0 [ 368.953324][T11144] __se_sys_sendmsg+0x1c3/0x2b0 [ 368.958203][T11144] ? __x64_sys_sendmsg+0x80/0x80 [ 368.963170][T11144] ? lockdep_hardirqs_on+0x94/0x140 [ 368.968383][T11144] do_syscall_64+0x4c/0xa0 [ 368.972813][T11144] ? clear_bhb_loop+0x60/0xb0 [ 368.977497][T11144] ? clear_bhb_loop+0x60/0xb0 [ 368.982187][T11144] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.988086][T11144] RIP: 0033:0x7fd3247a8f19 [ 368.992508][T11144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.012120][T11144] RSP: 002b:00007fd3255d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.020542][T11144] RAX: ffffffffffffffda RBX: 00007fd324a25fa0 RCX: 00007fd3247a8f19 [ 369.028518][T11144] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 369.036493][T11144] RBP: 00007fd324837f6d R08: 0000000000000000 R09: 0000000000000000 [ 369.044465][T11144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.052523][T11144] R13: 00007fd324a26038 R14: 00007fd324a25fa0 R15: 00007fff81269b58 [ 369.060601][T11144] [ 369.320649][T11173] netlink: 'syz.3.2025': attribute type 6 has an invalid length. [ 369.368105][T11173] netlink: 1034 bytes leftover after parsing attributes in process `syz.3.2025'. [ 369.389573][T11175] netlink: 'syz.2.2026': attribute type 21 has an invalid length. [ 369.399558][T11175] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2026'. [ 369.785561][T11197] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.2032'. [ 370.100493][T11206] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2035'. [ 371.742254][T11274] netlink: 'syz.1.2053': attribute type 2 has an invalid length. [ 371.818639][T11274] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2053'. [ 372.025521][T11288] netlink: 'syz.2.2056': attribute type 1 has an invalid length. [ 372.143320][T11290] netlink: 'syz.0.2057': attribute type 4 has an invalid length. [ 372.831947][T11312] netlink: 'syz.3.2064': attribute type 29 has an invalid length. [ 373.033585][T11312] netlink: 'syz.3.2064': attribute type 29 has an invalid length. [ 373.067268][T11314] netlink: 'syz.3.2064': attribute type 29 has an invalid length. [ 373.117993][T11308] netlink: 'syz.3.2064': attribute type 29 has an invalid length. [ 373.349486][T11312] netlink: 'syz.3.2064': attribute type 29 has an invalid length. [ 373.487042][T11304] rxe_eth0 speed is unknown, defaulting to 1000 [ 373.510044][T11319] __nla_validate_parse: 4 callbacks suppressed [ 373.510078][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2066'. [ 374.077867][T11332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2071'. [ 374.455544][T11350] validate_nla: 2 callbacks suppressed [ 374.455581][T11350] netlink: 'syz.3.2079': attribute type 16 has an invalid length. [ 374.497773][T11350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2079'. [ 374.499169][T11353] netlink: 'syz.1.2077': attribute type 4 has an invalid length. [ 374.531043][T11350] netlink: 'syz.3.2079': attribute type 16 has an invalid length. [ 374.540369][T11350] netlink: 'syz.3.2079': attribute type 3 has an invalid length. [ 374.550565][T11353] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2077'. [ 374.575308][T11350] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2079'. [ 374.606929][T11349] delete_channel: no stack [ 374.952239][T11362] netlink: 'syz.0.2081': attribute type 10 has an invalid length. [ 375.330479][T11362] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 378.356372][T11399] rxe_eth0 speed is unknown, defaulting to 1000 [ 378.461476][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.468011][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.469782][T11416] netlink: 'syz.1.2105': attribute type 1 has an invalid length. [ 378.623041][T11421] netlink: 'syz.3.2095': attribute type 4 has an invalid length. [ 378.655704][T11421] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2095'. [ 379.561024][T11445] netlink: 'syz.4.2106': attribute type 11 has an invalid length. [ 379.577570][T11445] netlink: 130876 bytes leftover after parsing attributes in process `syz.4.2106'. [ 379.785680][T11456] netlink: 'syz.2.2110': attribute type 5 has an invalid length. [ 383.061284][T11480] netlink: 131088 bytes leftover after parsing attributes in process `syz.0.2119'. [ 383.084796][T11480] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 383.095689][T11480] CPU: 1 PID: 11480 Comm: syz.0.2119 Not tainted syzkaller #0 [ 383.103239][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 383.113310][T11480] Call Trace: [ 383.116597][T11480] [ 383.119550][T11480] dump_stack_lvl+0x188/0x24e [ 383.124269][T11480] ? show_regs_print_info+0x12/0x12 [ 383.129496][T11480] ? load_image+0x410/0x410 [ 383.133997][T11480] sysfs_warn_dup+0x8a/0xa0 [ 383.138491][T11480] sysfs_do_create_link_sd+0xc0/0x110 [ 383.143855][T11480] device_add+0x83b/0x1050 [ 383.148285][T11480] wiphy_register+0x1f16/0x2c50 [ 383.153187][T11480] ? cfg80211_event_work+0x40/0x40 [ 383.158321][T11480] ? minstrel_ht_alloc+0x894/0xa20 [ 383.163464][T11480] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 383.169549][T11480] ieee80211_register_hw+0x2e33/0x3b00 [ 383.175043][T11480] ? ieee80211_register_hw+0xec1/0x3b00 [ 383.180608][T11480] ? ieee80211_register_hw+0xec1/0x3b00 [ 383.186189][T11480] ? ieee80211_tasklet_handler+0x20/0x20 [ 383.191841][T11480] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 383.197748][T11480] ? __debug_object_init+0xed/0x440 [ 383.202958][T11480] ? memset+0x1e/0x40 [ 383.206938][T11480] ? __hrtimer_init+0x189/0x270 [ 383.211795][T11480] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 383.217529][T11480] ? memcpy+0x3c/0x60 [ 383.221511][T11480] hwsim_new_radio_nl+0xab7/0xc90 [ 383.226545][T11480] genl_family_rcv_msg_doit+0x22f/0x350 [ 383.232091][T11480] ? end_current_label_crit_section+0x170/0x170 [ 383.238332][T11480] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 383.244235][T11480] ? bpf_lsm_capable+0x5/0x10 [ 383.248911][T11480] ? security_capable+0x85/0xb0 [ 383.253768][T11480] genl_rcv_msg+0x601/0x790 [ 383.258279][T11480] ? genl_bind+0x360/0x360 [ 383.262694][T11480] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 383.269039][T11480] netlink_rcv_skb+0x1ef/0x440 [ 383.273807][T11480] ? genl_bind+0x360/0x360 [ 383.278223][T11480] ? netlink_ack+0x1160/0x1160 [ 383.283000][T11480] ? down_read+0x1a8/0x2d0 [ 383.287415][T11480] genl_rcv+0x24/0x40 [ 383.291399][T11480] netlink_unicast+0x7ad/0x920 [ 383.296198][T11480] netlink_sendmsg+0x8ad/0xbd0 [ 383.300987][T11480] ? netlink_getsockopt+0x550/0x550 [ 383.306196][T11480] ? apparmor_socket_sendmsg+0x8a/0x330 [ 383.311766][T11480] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 383.317061][T11480] ? security_socket_sendmsg+0x7c/0xa0 [ 383.322526][T11480] ? netlink_getsockopt+0x550/0x550 [ 383.327739][T11480] ____sys_sendmsg+0x5ed/0x9a0 [ 383.332513][T11480] ? __sys_sendmsg_sock+0x30/0x30 [ 383.337534][T11480] ? __import_iovec+0x306/0x510 [ 383.342388][T11480] ? import_iovec+0x6f/0xa0 [ 383.346887][T11480] ___sys_sendmsg+0x2a2/0x360 [ 383.351566][T11480] ? __sys_sendmsg+0x2a0/0x2a0 [ 383.356343][T11480] ? ktime_get+0x7b/0x270 [ 383.360689][T11480] __se_sys_sendmsg+0x1c3/0x2b0 [ 383.365540][T11480] ? __x64_sys_sendmsg+0x80/0x80 [ 383.370491][T11480] ? lockdep_hardirqs_on+0x94/0x140 [ 383.375736][T11480] do_syscall_64+0x4c/0xa0 [ 383.380149][T11480] ? clear_bhb_loop+0x60/0xb0 [ 383.384827][T11480] ? clear_bhb_loop+0x60/0xb0 [ 383.389501][T11480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.395389][T11480] RIP: 0033:0x7fd3247a8f19 [ 383.399799][T11480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.419401][T11480] RSP: 002b:00007fd3255d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.427809][T11480] RAX: ffffffffffffffda RBX: 00007fd324a25fa0 RCX: 00007fd3247a8f19 [ 383.435770][T11480] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 383.443733][T11480] RBP: 00007fd324837f6d R08: 0000000000000000 R09: 0000000000000000 [ 383.451697][T11480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.459664][T11480] R13: 00007fd324a26038 R14: 00007fd324a25fa0 R15: 00007fff81269b58 [ 383.467646][T11480] [ 383.760608][T11491] netlink: 'syz.1.2120': attribute type 10 has an invalid length. [ 383.839864][T11491] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 383.949692][T11501] netlink: 'syz.3.2124': attribute type 9 has an invalid length. [ 383.966357][T11513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2126'. [ 383.975662][T11513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2126'. [ 383.980933][T11501] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.2124'. [ 384.008261][T11512] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2126'. [ 384.030754][T11514] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2126'. [ 384.522150][T11538] netlink: 'syz.1.2133': attribute type 10 has an invalid length. [ 384.831814][T11546] netlink: 'syz.4.2137': attribute type 29 has an invalid length. [ 384.878723][T11538] team0 (unregistering): Port device team_slave_0 removed [ 384.897056][T11538] team0 (unregistering): Port device team_slave_1 removed [ 384.924469][T11538] team0 (unregistering): Port device geneve0 removed [ 384.987770][T11538] team0 (unregistering): Port device bond0 removed [ 385.031746][T11546] netlink: 'syz.4.2137': attribute type 29 has an invalid length. [ 385.057962][T11544] netlink: 'syz.2.2136': attribute type 6 has an invalid length. [ 385.071736][T11549] netlink: 'syz.3.2138': attribute type 10 has an invalid length. [ 385.166697][T11549] bond0: (slave wlan0): Enslaving as an active interface with an up link [ 385.327120][T11561] netlink: 'syz.1.2141': attribute type 19 has an invalid length. [ 385.346879][T11561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2141'. [ 385.363913][T11563] netlink: 'syz.1.2141': attribute type 10 has an invalid length. [ 385.366576][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2142'. [ 385.840922][T11598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2151'. [ 386.075216][T11610] netlink: 'syz.3.2153': attribute type 21 has an invalid length. [ 386.091302][T11610] netlink: 'syz.3.2153': attribute type 5 has an invalid length. [ 386.128740][ T6604] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 386.252754][T11616] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2157'. [ 386.266736][T11616] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 386.419543][T11627] netlink: 'syz.2.2160': attribute type 10 has an invalid length. [ 386.444800][T11627] bond0: (slave geneve1): Releasing backup interface [ 386.477834][T11627] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2160'. [ 386.556108][T11627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.592999][T11633] openvswitch: netlink: Message has 48126 unknown bytes. [ 386.604483][T11627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.641759][T11627] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 386.676975][T11627] bond0 (unregistering): Released all slaves [ 386.780774][T11629] netlink: 'syz.2.2160': attribute type 10 has an invalid length. [ 387.313642][T11665] device .*! entered promiscuous mode [ 387.808655][T11678] device sit0 entered promiscuous mode [ 388.770990][ T6604] wlan1: Trigger new scan to find an IBSS to join [ 389.214041][T11680] rxe_eth0 speed is unknown, defaulting to 1000 [ 390.010120][T11718] validate_nla: 3 callbacks suppressed [ 390.010231][T11718] netlink: 'syz.0.2194': attribute type 21 has an invalid length. [ 390.045722][T11718] __nla_validate_parse: 3 callbacks suppressed [ 390.045776][T11718] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2194'. [ 390.294587][T11731] sctp: [Deprecated]: syz.1.2195 (pid 11731) Use of int in max_burst socket option deprecated. [ 390.294587][T11731] Use struct sctp_assoc_value instead [ 390.683538][T11739] netlink: 'syz.4.2198': attribute type 21 has an invalid length. [ 390.701089][T11739] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2198'. [ 390.763515][T11739] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 390.804016][T11746] netlink: 'syz.0.2200': attribute type 5 has an invalid length. [ 391.389899][T11760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2205'. [ 391.647107][T11764] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2207'. [ 391.878389][T11783] netlink: 'syz.0.2214': attribute type 5 has an invalid length. [ 392.657831][T11822] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2225'. [ 392.702147][T11826] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2227'. [ 392.805540][T11830] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2226'. [ 392.912805][T11834] netlink: 192 bytes leftover after parsing attributes in process `syz.0.2227'. [ 393.201268][T11847] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2230'. [ 393.226634][T11847] netlink: zone id is out of range [ 393.276489][T11847] netlink: zone id is out of range [ 393.298065][T11855] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2230'. [ 393.380530][T11855] netlink: zone id is out of range [ 393.385806][T11855] netlink: zone id is out of range [ 393.494693][T11858] rxe_eth0 speed is unknown, defaulting to 1000 [ 393.728284][ T6601] wlan1: Trigger new scan to find an IBSS to join [ 393.814885][T11880] openvswitch: netlink: Flow actions attr not present in new flow. [ 394.574921][T11898] netlink: 'syz.0.2243': attribute type 21 has an invalid length. [ 394.619518][T11898] netlink: 'syz.0.2243': attribute type 4 has an invalid length. [ 394.640262][ T6604] wlan1: Creating new IBSS network, BSSID 0a:51:62:4a:b0:c8 [ 395.472790][T11926] tun0: tun_chr_ioctl cmd 1074812118 [ 395.823716][T11945] netlink: 'syz.4.2261': attribute type 39 has an invalid length. [ 395.889977][T11940] __nla_validate_parse: 8 callbacks suppressed [ 395.890050][T11940] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2261'. [ 396.403085][T11963] netlink: 'syz.4.2266': attribute type 10 has an invalid length. [ 396.931515][T11980] rxe_eth0 speed is unknown, defaulting to 1000 [ 397.159413][T11991] netlink: 'syz.2.2272': attribute type 10 has an invalid length. [ 397.347550][T11991] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.367192][T11991] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.392603][T11991] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.430661][T11991] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.738434][ T6615] wlan1: Trigger new scan to find an IBSS to join [ 397.806276][T12013] device sit0 left promiscuous mode [ 398.212522][T12018] device sit0 entered promiscuous mode [ 398.466858][T12030] ref_ctr_offset mismatch. inode: 0x953 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 398.643546][T12049] netlink: 'syz.4.2287': attribute type 12 has an invalid length. [ 398.661390][T12049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2287'. [ 399.066520][T12059] netlink: 'syz.1.2300': attribute type 39 has an invalid length. [ 399.129867][T12062] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2300'. [ 399.371455][T12066] tun0: tun_chr_ioctl cmd 1074812118 [ 399.593248][T12079] netlink: 'syz.2.2294': attribute type 21 has an invalid length. [ 399.610165][T12079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2294'. [ 399.630372][T12079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2294'. [ 399.692093][T12078] device sit0 entered promiscuous mode [ 400.768122][ T4477] wlan1: Trigger new scan to find an IBSS to join [ 402.794255][ T6601] wlan1: Creating new IBSS network, BSSID 62:ed:c6:b9:4b:3d [ 403.126070][T12116] netlink: 'syz.2.2309': attribute type 39 has an invalid length. [ 403.196484][T12113] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2307'. [ 403.226480][T12121] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2309'. [ 403.441163][T12125] tun0: tun_chr_ioctl cmd 1074812118 [ 403.576814][T12137] netlink: 'syz.4.2315': attribute type 153 has an invalid length. [ 403.600934][T12137] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.2315'. [ 405.007841][T12213] netlink: 'syz.4.2337': attribute type 9 has an invalid length. [ 405.028770][T12213] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2337'. [ 405.368098][T12228] netlink: 'syz.4.2339': attribute type 21 has an invalid length. [ 405.436767][T12228] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2339'. [ 405.468251][T12228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2339'. [ 405.640555][T12234] can: request_module (can-proto-0) failed. [ 406.098789][T12260] netlink: 'syz.0.2354': attribute type 10 has an invalid length. [ 406.131702][T12260] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'. [ 406.208904][T12261] netlink: 'syz.4.2353': attribute type 19 has an invalid length. [ 406.216800][T12261] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2353'. [ 406.238366][T12264] netlink: 'syz.0.2354': attribute type 10 has an invalid length. [ 406.246701][T12264] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2354'. [ 406.327480][T12272] netlink: 15846 bytes leftover after parsing attributes in process `syz.4.2353'. [ 406.459698][T12275] netlink: 'syz.2.2356': attribute type 3 has an invalid length. [ 408.572632][T12316] netlink: 'syz.2.2370': attribute type 21 has an invalid length. [ 408.592257][T12316] netlink: 'syz.2.2370': attribute type 1 has an invalid length. [ 409.422569][T12348] netlink: 'syz.2.2381': attribute type 3 has an invalid length. [ 409.659598][T12348] __nla_validate_parse: 1 callbacks suppressed [ 409.659617][T12348] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2381'. [ 411.039736][T12394] delete_channel: no stack [ 411.205423][T12407] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2398'. [ 411.336825][T12415] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2399'. [ 411.355114][T12416] netlink: 'syz.1.2400': attribute type 3 has an invalid length. [ 411.372106][T12416] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2400'. [ 411.429620][T12418] netlink: 'syz.3.2399': attribute type 1 has an invalid length. [ 411.437436][T12418] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2399'. [ 411.631645][T12411] netlink: 'syz.1.2400': attribute type 21 has an invalid length. [ 411.653744][T12415] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2399'. [ 412.441309][T12450] netlink: 'syz.2.2412': attribute type 12 has an invalid length. [ 412.590050][T12452] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2413'. [ 412.611308][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2413'. [ 412.797657][T12457] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2416'. [ 415.205899][T12485] netlink: 'syz.3.2423': attribute type 40 has an invalid length. [ 415.613861][T12501] netlink: 'syz.4.2429': attribute type 46 has an invalid length. [ 415.658076][T12501] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2429'. [ 416.171378][T12515] netlink: 'syz.3.2433': attribute type 10 has an invalid length. [ 416.639196][T12515] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 416.857506][T12535] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2438'. [ 416.906035][T12541] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2437'. [ 417.874022][T12560] sctp: [Deprecated]: syz.4.2443 (pid 12560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 417.874022][T12560] Use struct sctp_sack_info instead [ 418.713576][T12577] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.2453'. [ 418.865694][T12589] netlink: 'syz.3.2456': attribute type 2 has an invalid length. [ 418.872327][T12586] netlink: 'syz.3.2456': attribute type 3 has an invalid length. [ 418.882960][T12586] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2456'. [ 418.895182][T12589] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.2456'. [ 419.445147][T12619] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2465'. [ 420.127368][T12637] FAULT_INJECTION: forcing a failure. [ 420.127368][T12637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.183581][T12637] CPU: 0 PID: 12637 Comm: syz.3.2471 Not tainted syzkaller #0 [ 420.191113][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 420.201167][T12637] Call Trace: [ 420.204437][T12637] [ 420.207361][T12637] dump_stack_lvl+0x188/0x24e [ 420.212046][T12637] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 420.218204][T12637] ? show_regs_print_info+0x12/0x12 [ 420.223404][T12637] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 420.229599][T12637] should_fail_ex+0x390/0x4c0 [ 420.234295][T12637] _copy_from_user+0x2c/0x170 [ 420.238975][T12637] __sys_bpf+0x2ea/0x780 [ 420.243216][T12637] ? bpf_link_show_fdinfo+0x550/0x550 [ 420.248609][T12637] ? lock_chain_count+0x20/0x20 [ 420.253468][T12637] __x64_sys_bpf+0x78/0x90 [ 420.257894][T12637] do_syscall_64+0x4c/0xa0 [ 420.262314][T12637] ? clear_bhb_loop+0x60/0xb0 [ 420.267010][T12637] ? clear_bhb_loop+0x60/0xb0 [ 420.271704][T12637] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.277616][T12637] RIP: 0033:0x7f3db1da8f19 [ 420.282029][T12637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.301644][T12637] RSP: 002b:00007f3db2c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.310079][T12637] RAX: ffffffffffffffda RBX: 00007f3db2026090 RCX: 00007f3db1da8f19 [ 420.318070][T12637] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 420.326042][T12637] RBP: 00007f3db2c87090 R08: 0000000000000000 R09: 0000000000000000 [ 420.334008][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.341970][T12637] R13: 00007f3db2026128 R14: 00007f3db2026090 R15: 00007ffcb5cb5958 [ 420.349956][T12637] [ 422.080375][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2480'. [ 422.495837][T12673] FAULT_INJECTION: forcing a failure. [ 422.495837][T12673] name failslab, interval 1, probability 0, space 0, times 0 [ 422.509159][T12673] CPU: 0 PID: 12673 Comm: syz.4.2484 Not tainted syzkaller #0 [ 422.516654][T12673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 422.525292][T12678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2487'. [ 422.526708][T12673] Call Trace: [ 422.526716][T12673] [ 422.541944][T12673] dump_stack_lvl+0x188/0x24e [ 422.546653][T12673] ? show_regs_print_info+0x12/0x12 [ 422.551880][T12673] ? load_image+0x410/0x410 [ 422.556409][T12673] ? __lock_acquire+0x7ea0/0x7ea0 [ 422.561460][T12673] ? trace_event_raw_event_lock+0x230/0x230 [ 422.567382][T12673] should_fail_ex+0x390/0x4c0 [ 422.572093][T12673] should_failslab+0x5/0x20 [ 422.576613][T12673] slab_pre_alloc_hook+0x59/0x300 [ 422.581662][T12673] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 422.587230][T12673] __kmem_cache_alloc_node+0x4f/0x270 [ 422.592630][T12673] ? bpf_prog_test_run_skb+0x23e/0x18e0 [ 422.598196][T12673] __kmalloc+0xa3/0x240 [ 422.602381][T12673] bpf_prog_test_run_skb+0x23e/0x18e0 [ 422.607778][T12673] ? __fget_files+0x28/0x460 [ 422.612398][T12673] ? __fget_files+0x3fc/0x460 [ 422.617120][T12673] ? cpu_online+0xa0/0xa0 [ 422.621475][T12673] bpf_prog_test_run+0x31c/0x390 [ 422.626446][T12673] __sys_bpf+0x62b/0x780 [ 422.630718][T12673] ? bpf_link_show_fdinfo+0x550/0x550 [ 422.636130][T12673] ? lock_chain_count+0x20/0x20 [ 422.641014][T12673] __x64_sys_bpf+0x78/0x90 [ 422.645458][T12673] do_syscall_64+0x4c/0xa0 [ 422.649896][T12673] ? clear_bhb_loop+0x60/0xb0 [ 422.654599][T12673] ? clear_bhb_loop+0x60/0xb0 [ 422.659312][T12673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.665080][T12680] syz.0.2487[12680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.665211][T12673] RIP: 0033:0x7fd7663a8f19 [ 422.680998][T12673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.700626][T12673] RSP: 002b:00007fd767205028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.709071][T12673] RAX: ffffffffffffffda RBX: 00007fd766625fa0 RCX: 00007fd7663a8f19 [ 422.717068][T12673] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 422.725067][T12673] RBP: 00007fd767205090 R08: 0000000000000000 R09: 0000000000000000 [ 422.733061][T12673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.740823][T12680] syz.0.2487[12680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.741029][T12673] R13: 00007fd766626038 R14: 00007fd766625fa0 R15: 00007ffe16cd7fc8 [ 422.741060][T12673] [ 423.241398][T12701] netlink: 'syz.1.2491': attribute type 29 has an invalid length. [ 423.268950][T12701] netlink: 'syz.1.2491': attribute type 29 has an invalid length. [ 423.337260][T12705] netlink: 'syz.1.2491': attribute type 29 has an invalid length. [ 423.438387][T12709] netlink: 'syz.1.2491': attribute type 29 has an invalid length. [ 423.498441][T12708] netlink: 'syz.1.2491': attribute type 29 has an invalid length. [ 424.024806][T12736] FAULT_INJECTION: forcing a failure. [ 424.024806][T12736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.069627][T12736] CPU: 0 PID: 12736 Comm: syz.2.2499 Not tainted syzkaller #0 [ 424.077155][T12736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 424.087246][T12736] Call Trace: [ 424.090544][T12736] [ 424.093486][T12736] dump_stack_lvl+0x188/0x24e [ 424.098191][T12736] ? show_regs_print_info+0x12/0x12 [ 424.103422][T12736] ? load_image+0x410/0x410 [ 424.107948][T12736] ? __lock_acquire+0x7ea0/0x7ea0 [ 424.113005][T12736] should_fail_ex+0x390/0x4c0 [ 424.117726][T12736] _copy_from_user+0x2c/0x170 [ 424.122432][T12736] bpf_prog_test_run_skb+0x263/0x18e0 [ 424.127827][T12736] ? __fget_files+0x28/0x460 [ 424.132449][T12736] ? __fget_files+0x3fc/0x460 [ 424.137170][T12736] ? cpu_online+0xa0/0xa0 [ 424.141522][T12736] bpf_prog_test_run+0x31c/0x390 [ 424.146485][T12736] __sys_bpf+0x62b/0x780 [ 424.150756][T12736] ? bpf_link_show_fdinfo+0x550/0x550 [ 424.156142][T12736] ? lock_chain_count+0x20/0x20 [ 424.161003][T12736] __x64_sys_bpf+0x78/0x90 [ 424.165425][T12736] do_syscall_64+0x4c/0xa0 [ 424.169843][T12736] ? clear_bhb_loop+0x60/0xb0 [ 424.174512][T12736] ? clear_bhb_loop+0x60/0xb0 [ 424.179184][T12736] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.185075][T12736] RIP: 0033:0x7f746aba8f19 [ 424.189479][T12736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.209079][T12736] RSP: 002b:00007f7468df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 424.217489][T12736] RAX: ffffffffffffffda RBX: 00007f746ae25fa0 RCX: 00007f746aba8f19 [ 424.225457][T12736] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 424.233418][T12736] RBP: 00007f7468df6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.241379][T12736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.249340][T12736] R13: 00007f746ae26038 R14: 00007f746ae25fa0 R15: 00007ffda0149428 [ 424.257317][T12736] [ 424.686947][T12748] netlink: 'syz.4.2500': attribute type 10 has an invalid length. [ 424.788859][T12748] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2500'. [ 424.900465][T12758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2506'. [ 425.538956][T12787] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2511'. [ 425.575701][T12787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2511'. [ 425.940199][T12807] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2518'. [ 426.030168][T12810] netlink: 'syz.2.2518': attribute type 21 has an invalid length. [ 426.108849][T12806] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2518'. [ 426.936016][T12834] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2524'. [ 427.144713][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2529'. [ 428.211749][T12866] netlink: 'syz.2.2536': attribute type 5 has an invalid length. [ 428.581256][T12874] netlink: 'syz.2.2539': attribute type 7 has an invalid length. [ 428.598338][T12874] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.2539'. [ 428.935111][T12881] netlink: 'syz.4.2541': attribute type 10 has an invalid length. [ 429.073859][T12889] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2545'. [ 429.379077][T12900] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2550'. [ 429.425903][T12900] device bond0 entered promiscuous mode [ 429.451784][T12900] device bond_slave_0 entered promiscuous mode [ 429.478946][T12900] device bond_slave_1 entered promiscuous mode [ 429.489047][T12900] device batadv_slave_0 entered promiscuous mode [ 429.500842][T12900] device wlan0 entered promiscuous mode [ 429.566887][T12900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.949671][T12919] netlink: 'syz.0.2551': attribute type 10 has an invalid length. [ 429.985046][T12919] team0: Device nlmon0 is of different type [ 431.214486][T12960] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2563'. [ 431.400817][T12969] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 431.427007][T12969] netlink: 'syz.3.2567': attribute type 8 has an invalid length. [ 431.445426][T12969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2567'. [ 431.498342][T12969] netlink: 'syz.3.2567': attribute type 2 has an invalid length. [ 431.525227][T12969] netlink: 'syz.3.2567': attribute type 8 has an invalid length. [ 431.556507][T12969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2567'. [ 432.218124][T12998] netlink: 'syz.0.2575': attribute type 21 has an invalid length. [ 432.276493][T13007] netlink: 'syz.0.2575': attribute type 21 has an invalid length. [ 432.690997][T13027] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2582'. [ 432.708612][T13027] device bond0 entered promiscuous mode [ 432.725141][T13027] device bond_slave_1 entered promiscuous mode [ 432.744246][T13027] device wlan0 entered promiscuous mode [ 432.802649][T13027] device geneve1 entered promiscuous mode [ 433.484406][T13061] delete_channel: no stack [ 434.435986][T13080] netlink: 'syz.0.2597': attribute type 15 has an invalid length. [ 434.448151][T13080] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2597'. [ 434.550030][T13086] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2598'. [ 434.650777][T13092] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2600'. [ 434.770521][ T6615] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.340728][T13111] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2604'. [ 435.556194][T13129] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2609'. [ 435.764850][T13136] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2611'. [ 437.130378][T13187] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2619'. [ 437.149863][T13187] device bond0 entered promiscuous mode [ 437.167016][T13187] device bond_slave_0 entered promiscuous mode [ 437.199385][T13187] device bond_slave_1 entered promiscuous mode [ 437.219844][T13187] device bridge_slave_1 entered promiscuous mode [ 437.318168][T13187] device wlan0 entered promiscuous mode [ 438.465005][T13218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 438.473951][T13218] IPv6: NLM_F_CREATE should be set when creating new route [ 438.486385][T13218] IPv6: NLM_F_CREATE should be set when creating new route [ 438.496143][T13218] IPv6: NLM_F_CREATE should be set when creating new route [ 438.544638][T13221] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2633'. [ 438.707755][T13231] device sit0 left promiscuous mode [ 438.907105][T13235] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2636'. [ 439.581039][T13261] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2646'. [ 439.890256][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.896683][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.057379][T13273] IPv6: …: Disabled Multicast RS [ 441.636298][T13319] rxe_eth0 speed is unknown, defaulting to 1000 [ 442.674643][T13374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2680'. [ 444.064944][T13412] rxe_eth0 speed is unknown, defaulting to 1000 [ 444.290894][T13427] netlink: 'syz.4.2697': attribute type 21 has an invalid length. [ 444.309145][T13427] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2697'. [ 444.336686][T13427] netlink: 'syz.4.2697': attribute type 4 has an invalid length. [ 444.358075][T13427] netlink: 'syz.4.2697': attribute type 3 has an invalid length. [ 444.376136][T13427] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2697'. [ 444.814843][T13448] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2702'. [ 445.087742][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 445.158508][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 445.167845][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 445.228312][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 445.237639][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 445.298464][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 445.599474][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2708'. [ 446.164689][T13498] netlink: 'syz.1.2717': attribute type 2 has an invalid length. [ 446.660948][T13536] netlink: 'syz.4.2722': attribute type 3 has an invalid length. [ 446.678010][T13536] netlink: 'syz.4.2722': attribute type 1 has an invalid length. [ 447.395610][T13565] netlink: 'syz.1.2726': attribute type 27 has an invalid length. [ 447.907355][T13586] netlink: 'syz.3.2733': attribute type 3 has an invalid length. [ 448.283438][T13600] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.290816][T13600] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.558961][T13608] netlink: 'syz.0.2740': attribute type 29 has an invalid length. [ 448.586630][T13608] netlink: 'syz.0.2740': attribute type 29 has an invalid length. [ 449.320846][T13641] __nla_validate_parse: 133 callbacks suppressed [ 449.320883][T13641] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2752'. [ 449.693576][T13653] validate_nla: 1 callbacks suppressed [ 449.693615][T13653] netlink: 'syz.1.2756': attribute type 3 has an invalid length. [ 449.744334][T13653] netlink: 195484 bytes leftover after parsing attributes in process `syz.1.2756'. [ 449.821039][T13641] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.2752'. [ 451.531323][T13714] netlink: 'syz.4.2777': attribute type 3 has an invalid length. [ 451.540397][T13714] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.2777'. [ 451.695624][T13723] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2782'. [ 451.894709][T13728] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2784'. [ 452.519103][T13737] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2787'. [ 452.678881][T13746] netlink: 'syz.0.2790': attribute type 15 has an invalid length. [ 452.696940][T13746] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2790'. [ 454.382407][T13763] netlink: 'syz.4.2794': attribute type 10 has an invalid length. [ 454.556477][T13770] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2797'. [ 454.574161][T13770] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 454.640127][T13770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.220103][T13806] netlink: 'syz.1.2808': attribute type 2 has an invalid length. [ 455.246647][T13806] netlink: 'syz.1.2808': attribute type 8 has an invalid length. [ 455.301014][T13801] netlink: 'syz.4.2807': attribute type 9 has an invalid length. [ 455.301063][T13801] netlink: 134652 bytes leftover after parsing attributes in process `syz.4.2807'. [ 455.357226][T13806] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2808'. [ 455.375954][T13801] netlink: 'syz.4.2807': attribute type 2 has an invalid length. [ 455.426148][T13801] netlink: 'syz.4.2807': attribute type 4 has an invalid length. [ 455.458311][T13801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2807'. [ 456.282149][T13847] netlink: 'syz.1.2819': attribute type 39 has an invalid length. [ 456.332530][T13847] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2819'. [ 456.395033][T13847] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 457.364070][T13858] netlink: 'syz.3.2823': attribute type 10 has an invalid length. [ 457.751842][T13877] netlink: 'syz.3.2823': attribute type 10 has an invalid length. [ 457.782775][T13892] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2831'. [ 457.811910][T13892] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2831'. [ 457.901179][T13892] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 458.617096][T13924] delete_channel: no stack [ 458.656365][T13924] delete_channel: no stack [ 459.381973][T13930] netlink: 'syz.1.2841': attribute type 19 has an invalid length. [ 461.047503][T13952] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2849'. [ 461.941040][T13941] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2846'. [ 462.242516][T13942] netlink: 'syz.0.2845': attribute type 10 has an invalid length. [ 462.268569][T13942] team0: Device wg1 is of different type [ 462.285997][T13952] debugfs: Directory '.! 5‚Á7>7H€' with parent 'ieee80211' already present! [ 462.495455][T13965] delete_channel: no stack [ 462.572938][T13965] delete_channel: no stack [ 463.173734][T13998] netlink: 'syz.4.2861': attribute type 3 has an invalid length. [ 463.297469][T13992] netlink: 'syz.4.2861': attribute type 10 has an invalid length. [ 463.304022][T13998] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2861'. [ 463.426639][T13992] device geneve0 entered promiscuous mode [ 463.451379][T13992] team0: Port device geneve0 added [ 463.482934][T14002] netlink: 'syz.0.2867': attribute type 2 has an invalid length. [ 463.983542][T14016] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2871'. [ 464.421824][T14034] netlink: 'syz.3.2873': attribute type 2 has an invalid length. [ 464.451361][T14034] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2873'. [ 464.692339][T14045] netlink: 'syz.1.2878': attribute type 10 has an invalid length. [ 465.165562][T14055] device syzkaller0 entered promiscuous mode [ 465.239192][T14061] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2880'. [ 466.182268][T14095] netlink: 'syz.1.2890': attribute type 2 has an invalid length. [ 466.406795][T14095] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2890'. [ 466.616474][T14096] netlink: 'syz.0.2891': attribute type 39 has an invalid length. [ 467.142882][T14113] netlink: 'syz.2.2896': attribute type 10 has an invalid length. [ 467.356920][T14114] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2895'. [ 468.157918][T14133] netlink: 'syz.0.2903': attribute type 12 has an invalid length. [ 468.424423][T14152] netlink: 'syz.4.2906': attribute type 2 has an invalid length. [ 468.437127][T14159] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2908'. [ 468.464871][T14152] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2906'. [ 468.519853][T14159] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2908'. [ 468.546772][T14159] : renamed from caif0 [ 469.186684][T14159] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 469.910491][T14189] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2917'. [ 470.314871][T14222] netlink: 'syz.2.2925': attribute type 2 has an invalid length. [ 470.332657][T14222] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2925'. [ 470.433711][T14221] netlink: 'syz.0.2926': attribute type 21 has an invalid length. [ 470.483272][T14221] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2926'. [ 470.614136][T14231] netlink: 'syz.2.2930': attribute type 21 has an invalid length. [ 470.622565][T14231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2930'. [ 470.732393][T14237] netlink: 'syz.1.2931': attribute type 2 has an invalid length. [ 470.750759][T14237] netlink: 'syz.1.2931': attribute type 8 has an invalid length. [ 470.768397][T14237] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2931'. [ 470.795384][T14237] netlink: 'syz.1.2931': attribute type 10 has an invalid length. [ 471.197532][T14259] netlink: 'syz.3.2938': attribute type 10 has an invalid length. [ 471.469219][T14252] rxe_eth0 speed is unknown, defaulting to 1000 [ 472.382595][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.391738][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.414214][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.423594][ T4289] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.433393][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 472.440717][ T4289] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.495482][T14284] device vcan0 entered promiscuous mode [ 472.517651][T14284] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 472.593117][T14281] rxe_eth0 speed is unknown, defaulting to 1000 [ 472.631566][T14288] netlink: 'syz.4.2945': attribute type 10 has an invalid length. [ 473.584819][T14321] netlink: 'syz.1.2956': attribute type 2 has an invalid length. [ 473.842528][T14321] device 0 entered promiscuous mode [ 474.107342][T14331] netlink: 'syz.3.2955': attribute type 19 has an invalid length. [ 474.133987][T14281] chnl_net:caif_netlink_parms(): no params data found [ 474.155292][T14334] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 474.170231][T14336] device veth1_macvtap left promiscuous mode [ 474.538440][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 475.844648][T14353] netlink: 'syz.1.2963': attribute type 41 has an invalid length. [ 475.877108][T14281] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.884800][T14281] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.893525][T14281] device bridge_slave_0 entered promiscuous mode [ 475.903352][T14281] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.910754][T14281] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.919140][T14281] device bridge_slave_1 entered promiscuous mode [ 475.950119][T14281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.962664][T14281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.992145][T14281] team0: Port device team_slave_0 added [ 476.002383][T14358] __nla_validate_parse: 1 callbacks suppressed [ 476.002437][T14358] netlink: 17023 bytes leftover after parsing attributes in process `syz.1.2964'. [ 476.045274][T14281] team0: Port device team_slave_1 added [ 476.065325][T14359] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.2964'. [ 476.187159][T14281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.204597][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.263540][T14281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.316884][T14281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.359692][T14281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.478666][T14281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.608098][ T4289] Bluetooth: hci1: command 0x041b tx timeout [ 476.617047][T14281] device hsr_slave_0 entered promiscuous mode [ 476.625826][T14281] device hsr_slave_1 entered promiscuous mode [ 476.633106][T14281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.641972][T14281] Cannot create hsr debugfs directory [ 476.950264][T14380] netlink: 'syz.4.2969': attribute type 39 has an invalid length. [ 477.057489][T14386] netlink: 'syz.0.2971': attribute type 11 has an invalid length. [ 477.073420][T14386] netlink: 130876 bytes leftover after parsing attributes in process `syz.0.2971'. [ 477.085567][T14384] netlink: 'syz.4.2969': attribute type 39 has an invalid length. [ 477.148115][T14386] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 477.156126][T14386] CPU: 0 PID: 14386 Comm: syz.0.2971 Not tainted syzkaller #0 [ 477.163606][T14386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 477.173673][T14386] Call Trace: [ 477.176966][T14386] [ 477.179914][T14386] dump_stack_lvl+0x188/0x24e [ 477.184775][T14386] ? show_regs_print_info+0x12/0x12 [ 477.190082][T14386] ? load_image+0x410/0x410 [ 477.194651][T14386] sysfs_warn_dup+0x8a/0xa0 [ 477.199282][T14386] sysfs_do_create_link_sd+0xc0/0x110 [ 477.204685][T14386] device_add+0x83b/0x1050 [ 477.209177][T14386] wiphy_register+0x1f16/0x2c50 [ 477.214080][T14386] ? cfg80211_event_work+0x40/0x40 [ 477.219180][T14386] ? minstrel_ht_alloc+0x894/0xa20 [ 477.224380][T14386] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 477.230524][T14386] ieee80211_register_hw+0x2e33/0x3b00 [ 477.236095][T14386] ? ieee80211_register_hw+0xec1/0x3b00 [ 477.241661][T14386] ? ieee80211_register_hw+0xec1/0x3b00 [ 477.247225][T14386] ? ieee80211_tasklet_handler+0x20/0x20 [ 477.252866][T14386] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 477.258868][T14386] ? __debug_object_init+0xed/0x440 [ 477.264140][T14386] ? memset+0x1e/0x40 [ 477.268159][T14386] ? __hrtimer_init+0x189/0x270 [ 477.273050][T14386] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 477.278834][T14386] ? memcpy+0x3c/0x60 [ 477.282828][T14386] hwsim_new_radio_nl+0xab7/0xc90 [ 477.287877][T14386] genl_family_rcv_msg_doit+0x22f/0x350 [ 477.293488][T14386] ? end_current_label_crit_section+0x170/0x170 [ 477.299778][T14386] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 477.305675][T14386] ? bpf_lsm_capable+0x5/0x10 [ 477.310393][T14386] ? security_capable+0x85/0xb0 [ 477.315303][T14386] genl_rcv_msg+0x601/0x790 [ 477.319817][T14386] ? lock_chain_count+0x20/0x20 [ 477.324746][T14386] ? genl_bind+0x360/0x360 [ 477.329190][T14386] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 477.335524][T14386] netlink_rcv_skb+0x1ef/0x440 [ 477.340281][T14386] ? genl_bind+0x360/0x360 [ 477.344688][T14386] ? netlink_ack+0x1160/0x1160 [ 477.349447][T14386] ? down_read+0x1a8/0x2d0 [ 477.353860][T14386] genl_rcv+0x24/0x40 [ 477.357832][T14386] netlink_unicast+0x7ad/0x920 [ 477.362602][T14386] netlink_sendmsg+0x8ad/0xbd0 [ 477.367367][T14386] ? netlink_getsockopt+0x550/0x550 [ 477.372581][T14386] ? apparmor_socket_sendmsg+0x8a/0x330 [ 477.378119][T14386] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 477.383482][T14386] ? security_socket_sendmsg+0x7c/0xa0 [ 477.388928][T14386] ? netlink_getsockopt+0x550/0x550 [ 477.394119][T14386] ____sys_sendmsg+0x5ed/0x9a0 [ 477.398966][T14386] ? __sys_sendmsg_sock+0x30/0x30 [ 477.403980][T14386] ? __import_iovec+0x306/0x510 [ 477.408863][T14386] ? import_iovec+0x6f/0xa0 [ 477.413363][T14386] ___sys_sendmsg+0x2a2/0x360 [ 477.418035][T14386] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.422821][T14386] __se_sys_sendmsg+0x1c3/0x2b0 [ 477.427665][T14386] ? perf_trace_preemptirq_template+0x268/0x320 [ 477.433996][T14386] ? __x64_sys_sendmsg+0x80/0x80 [ 477.438966][T14386] ? lockdep_hardirqs_on+0x94/0x140 [ 477.444159][T14386] do_syscall_64+0x4c/0xa0 [ 477.448568][T14386] ? clear_bhb_loop+0x60/0xb0 [ 477.453346][T14386] ? clear_bhb_loop+0x60/0xb0 [ 477.458017][T14386] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.463904][T14386] RIP: 0033:0x7fd3247a8f19 [ 477.468310][T14386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.487917][T14386] RSP: 002b:00007fd3255b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.496341][T14386] RAX: ffffffffffffffda RBX: 00007fd324a26090 RCX: 00007fd3247a8f19 [ 477.504303][T14386] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 477.512266][T14386] RBP: 00007fd324837f6d R08: 0000000000000000 R09: 0000000000000000 [ 477.520271][T14386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.528232][T14386] R13: 00007fd324a26128 R14: 00007fd324a26090 R15: 00007fff81269b58 [ 477.536209][T14386] [ 478.689915][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 479.724930][T14281] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 479.778061][T14281] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 479.814581][T14281] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 479.842331][T14281] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.902261][T14440] netlink: 'syz.4.2983': attribute type 21 has an invalid length. [ 479.916557][T14440] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2983'. [ 479.943656][T14439] netlink: 'syz.4.2983': attribute type 21 has an invalid length. [ 479.969280][T14439] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2983'. [ 480.308114][T14281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.341795][T14449] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2984'. [ 480.428440][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 480.449043][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.490890][T14281] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.537451][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 480.570303][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.608173][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.616368][ T6606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.676466][ T6606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 480.707626][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 480.734232][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.749189][T13519] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.756399][T13519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.768277][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 481.404905][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 481.427572][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 481.470546][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 481.484324][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 481.494090][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 481.524867][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 481.578076][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 481.597487][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.635717][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.656252][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.669353][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.679930][T14281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.769338][T14475] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2989'. [ 481.788389][T14475] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2989'. [ 482.217003][T14496] netlink: 'syz.3.2994': attribute type 11 has an invalid length. [ 482.226756][T14496] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2994'. [ 482.429508][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 482.437101][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 482.500747][T14501] netlink: 'syz.1.2996': attribute type 7 has an invalid length. [ 482.503619][T14281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.595183][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 482.599588][T14501] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2996'. [ 482.627739][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 482.710396][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 482.742598][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 482.777784][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 482.801049][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 482.815985][T14281] device veth0_vlan entered promiscuous mode [ 482.851510][T14281] device veth1_vlan entered promiscuous mode [ 482.906050][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 482.931702][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 482.962792][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 482.985031][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 483.005400][T14281] device veth0_macvtap entered promiscuous mode [ 483.036174][T14281] device veth1_macvtap entered promiscuous mode [ 483.093997][T14281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.120425][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 483.134498][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 483.153233][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 483.177015][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 483.221206][T14281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.239740][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 483.251555][T13519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 483.276457][T14281] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.298622][T14281] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.307380][T14281] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.325039][T14281] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.505176][T13519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.519286][T13519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.555710][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 483.572664][ T6613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 483.605509][T13516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.617172][T13516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.627665][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.692949][T14532] delete_channel: no stack [ 483.714255][T14537] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3004'. [ 485.199664][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.209753][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.222256][ T4291] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.231670][ T4291] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.240579][ T4291] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 485.248936][ T4291] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.546150][T14567] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.603010][T14571] netlink: 'syz.3.3014': attribute type 11 has an invalid length. [ 485.648413][T14571] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3014'. [ 486.174689][ T48] device .*! left promiscuous mode [ 486.302279][T14585] netlink: 'syz.0.3018': attribute type 10 has an invalid length. [ 486.426600][ T48] tipc: Left network mode [ 486.686065][T14567] chnl_net:caif_netlink_parms(): no params data found [ 487.063825][T14567] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.073230][T14567] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.090179][T14567] device bridge_slave_0 entered promiscuous mode [ 487.110486][T14567] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.119198][T14567] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.127457][T14567] device bridge_slave_1 entered promiscuous mode [ 487.291189][T14567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.328045][ T4291] Bluetooth: hci5: command 0x0409 tx timeout [ 487.474815][T14567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.512508][T14567] team0: Port device team_slave_0 added [ 487.564134][T14567] team0: Port device team_slave_1 added [ 487.594479][T14567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.601613][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.631426][T14567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.731194][T14567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.750272][T14567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.795776][T14567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.893721][T14567] device hsr_slave_0 entered promiscuous mode [ 487.903763][T14567] device hsr_slave_1 entered promiscuous mode [ 487.913158][T14567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 487.931473][T14567] Cannot create hsr debugfs directory [ 487.937410][T14636] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3028'. [ 488.023555][T14647] device macsec0 entered promiscuous mode [ 488.398220][T14661] rxe_eth0 speed is unknown, defaulting to 1000 [ 488.515791][T14567] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.555161][T14673] netlink: 'syz.2.3039': attribute type 10 has an invalid length. [ 488.707788][T14673] team0: Device gre0 is of different type [ 488.846956][T14567] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.003610][T14567] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.052652][ T48] device veth1_vlan left promiscuous mode [ 489.067763][ T48] device veth0_vlan left promiscuous mode [ 489.408026][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 490.159915][T14670] rxe_eth0 speed is unknown, defaulting to 1000 [ 490.203379][T14567] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.236241][T14687] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3043'. [ 490.615654][T14567] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 490.625773][T14567] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 490.641288][T14567] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 490.670771][T14567] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 490.724601][T14704] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3047'. [ 490.854298][T14709] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 490.866497][T14567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.880410][T14709] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3050'. [ 490.898403][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 490.916001][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 490.951207][T14567] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.986097][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.003746][T14709] netlink: 'syz.1.3050': attribute type 1 has an invalid length. [ 491.009168][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.028814][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.035998][T13516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.059446][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 491.068654][T14709] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3050'. [ 491.075710][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.099379][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.110958][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.118140][T13516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.125878][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.197828][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.214557][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.259616][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.266712][T14725] netlink: 'syz.2.3053': attribute type 29 has an invalid length. [ 491.285413][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 491.299408][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 491.337157][T14725] netlink: 'syz.2.3053': attribute type 29 has an invalid length. [ 491.379141][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 491.488066][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 492.399988][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.444574][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.468156][T14730] netlink: 'syz.1.3055': attribute type 1 has an invalid length. [ 492.488228][T14729] netlink: 'syz.2.3053': attribute type 29 has an invalid length. [ 492.500750][T14744] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3056'. [ 492.525504][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.538741][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.563573][T14567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 493.102506][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 493.116134][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 493.148874][T14567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.570587][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 493.885159][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 493.898847][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 493.929954][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 493.942302][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 493.954551][T14567] device veth0_vlan entered promiscuous mode [ 493.964957][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 493.983626][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 494.000540][T14567] device veth1_vlan entered promiscuous mode [ 494.032808][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 494.045888][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 494.056630][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 494.068012][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 494.076352][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 494.093156][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.109810][T14567] device veth0_macvtap entered promiscuous mode [ 494.121427][T14567] device veth1_macvtap entered promiscuous mode [ 494.145377][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.159095][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.172472][T14567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.181883][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.194836][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 494.209517][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 494.219796][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 494.235059][T14567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.246627][T14567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.261902][T14567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.272522][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 494.284524][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 494.299097][T14567] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.320485][T14567] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.347933][T14567] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.356735][T14567] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.820735][ T7717] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.823004][T14775] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3061'. [ 494.831665][ T7717] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.914478][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): ipvtap0: link becomes ready [ 494.931850][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 495.139105][ T4467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.148695][ T4467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.171560][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 495.301893][T14796] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3068'. [ 495.334566][T14797] netlink: 'syz.3.3069': attribute type 10 has an invalid length. [ 496.175377][T14817] netlink: 'syz.0.3075': attribute type 10 has an invalid length. [ 496.778520][ T4291] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 496.813176][ T4291] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 496.824562][ T4291] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 496.834525][ T4291] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 496.842454][ T4291] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 496.855798][ T4291] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 497.257154][T14837] rxe_eth0 speed is unknown, defaulting to 1000 [ 497.546769][T14843] rxe_eth0 speed is unknown, defaulting to 1000 [ 497.563429][T14856] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3086'. [ 497.744141][T14856] netlink: 'syz.0.3086': attribute type 21 has an invalid length. [ 497.755315][T14856] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3086'. [ 497.823890][T14860] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3088'. [ 497.926096][T14846] rxe_eth0 speed is unknown, defaulting to 1000 [ 497.937522][T14867] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3089'. [ 498.081798][T14837] chnl_net:caif_netlink_parms(): no params data found [ 498.265835][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.294245][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.307217][T14837] device bridge_slave_0 entered promiscuous mode [ 498.370398][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.384003][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.402585][T14837] device bridge_slave_1 entered promiscuous mode [ 498.549877][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.585751][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.660829][T14837] team0: Port device team_slave_0 added [ 498.694546][T14837] team0: Port device team_slave_1 added [ 498.750997][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.770872][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.824762][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.852996][T14908] netlink: 'syz.0.3100': attribute type 16 has an invalid length. [ 498.863002][T14903] netlink: 'syz.4.3098': attribute type 10 has an invalid length. [ 498.878186][T14908] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3100'. [ 498.938126][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 499.002776][T14913] netlink: 'syz.0.3100': attribute type 16 has an invalid length. [ 499.027414][T14913] netlink: 'syz.0.3100': attribute type 3 has an invalid length. [ 499.069672][T14913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3100'. [ 499.194120][T14916] netlink: 'syz.2.3101': attribute type 29 has an invalid length. [ 499.357413][T14903] team0: Device gre0 is of different type [ 499.469393][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.482730][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.538073][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.564530][ T48] bridge0: port 4(dummy0) entered disabled state [ 499.574693][ T48] bridge0: port 3(team0) entered disabled state [ 499.583789][ T48] device bridge_slave_1 left promiscuous mode [ 499.590706][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.602268][ T48] device bridge_slave_0 left promiscuous mode [ 499.608584][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.631513][ T48] device veth0_macvtap left promiscuous mode [ 499.638766][T14907] delete_channel: no stack [ 499.746731][ T48] device geneve0 left promiscuous mode [ 499.755976][ T48] team0 (unregistering): Port device geneve0 removed [ 499.986029][ T48] device team_slave_1 left promiscuous mode [ 499.993820][ T48] team0 (unregistering): Port device team_slave_1 removed [ 500.031692][ T48] device team_slave_0 left promiscuous mode [ 500.040564][ T48] team0 (unregistering): Port device team_slave_0 removed [ 500.319565][T14908] netlink: 'syz.0.3100': attribute type 10 has an invalid length. [ 500.327474][T14909] netlink: 'syz.0.3100': attribute type 10 has an invalid length. [ 500.338438][T14910] netlink: 'syz.0.3100': attribute type 10 has an invalid length. [ 500.356683][T14915] rxe_eth0 speed is unknown, defaulting to 1000 [ 500.446757][T14837] device hsr_slave_0 entered promiscuous mode [ 500.459394][T14837] device hsr_slave_1 entered promiscuous mode [ 500.471774][T14837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.480370][T14837] Cannot create hsr debugfs directory [ 500.892651][T14837] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.992107][T14837] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.008151][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 501.073614][T14837] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.121319][ T48] device 0 left promiscuous mode [ 501.190888][T14837] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.240364][ T48] device 1 left promiscuous mode [ 501.330974][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.337328][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.370986][ T48] tipc: Left network mode [ 501.577163][T14837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 501.604560][T14837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.656465][T14837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 501.671374][T14944] rxe_eth0 speed is unknown, defaulting to 1000 [ 501.694065][T14837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.832999][T14837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.842680][T14949] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.864626][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.874793][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.890705][T14837] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.906487][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.917484][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.933911][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.941131][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.970608][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.998283][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.032639][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.060671][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.067838][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.094053][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.413469][T14957] validate_nla: 1 callbacks suppressed [ 502.413518][T14957] netlink: 'syz.1.3115': attribute type 27 has an invalid length. [ 502.434321][T14957] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3115'. [ 502.996238][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 503.015717][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.027806][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.039653][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 503.098375][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 503.117166][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 503.130470][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 503.161679][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.195284][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.215000][T14964] netlink: 'syz.2.3117': attribute type 9 has an invalid length. [ 503.228473][T14964] netlink: 134780 bytes leftover after parsing attributes in process `syz.2.3117'. [ 503.264157][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.276436][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.287660][T14837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 504.040911][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.068758][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.108998][T14837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.253512][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 504.275292][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 504.351584][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 504.373908][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 504.398511][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 504.423546][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 504.461179][T14837] device veth0_vlan entered promiscuous mode [ 504.674711][T15011] rxe_eth0 speed is unknown, defaulting to 1000 [ 504.766185][T14837] device veth1_vlan entered promiscuous mode [ 505.025167][ T48] bond0: (slave wlan0): Releasing backup interface [ 505.042855][ T48] device wlan0 left promiscuous mode [ 505.114937][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 505.133391][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 505.151962][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 505.168581][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 505.179328][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 505.256650][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.280510][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 505.322030][T14837] device veth0_macvtap entered promiscuous mode [ 505.377752][T14837] device veth1_macvtap entered promiscuous mode [ 505.423711][ T48] device hsr_slave_0 left promiscuous mode [ 505.472556][ T48] device hsr_slave_1 left promiscuous mode [ 505.532200][ T48] device veth0_macvtap left promiscuous mode [ 506.258485][ T48] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 506.278729][ T48] device geneve1 left promiscuous mode [ 507.215852][ T48] team0 (unregistering): Port device team_slave_1 removed [ 507.342877][ T48] team0 (unregistering): Port device team_slave_0 removed [ 507.489603][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.508973][ T48] device bond_slave_1 left promiscuous mode [ 507.926715][T15059] can: request_module (can-proto-4) failed. [ 507.971614][ T48] bond0 (unregistering): Released all slaves [ 508.110448][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 508.119962][ T6601] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 508.272775][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.294184][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.327985][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.342489][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.372430][T14837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.402630][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 508.412020][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 508.449424][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.477927][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.505673][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.540232][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.590362][T14837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.598111][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 508.619933][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 508.658425][T14837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.667361][T14837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.689947][T14837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.717495][T14837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.049943][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.069456][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.089570][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 509.204551][T13516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.231553][T13516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.269685][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 510.028507][T15101] netlink: 'syz.4.3150': attribute type 11 has an invalid length. [ 510.087988][T15101] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3150'. [ 510.475580][ T4291] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.489627][ T4291] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.501146][ T4291] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.512372][ T4291] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.520886][ T4291] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 510.530808][ T4291] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.712549][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.728827][T15117] rxe_eth0 speed is unknown, defaulting to 1000 [ 511.150063][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.278410][T15141] can: request_module (can-proto-4) failed. [ 511.305362][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.052353][T15117] chnl_net:caif_netlink_parms(): no params data found [ 512.608524][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 512.629252][T15117] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.674092][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.686097][T15117] device bridge_slave_0 entered promiscuous mode [ 512.722948][T15117] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.730718][T15117] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.749015][T15117] device bridge_slave_1 entered promiscuous mode [ 512.809893][T15117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.128785][T15117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.285756][T15183] netlink: 'syz.3.3167': attribute type 10 has an invalid length. [ 513.421011][T15117] team0: Port device team_slave_0 added [ 513.530299][T15117] team0: Port device team_slave_1 added [ 513.655175][T15117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.666997][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.756895][T15117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.796544][T15202] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3172'. [ 513.815183][T15202] netlink: zone id is out of range [ 513.834626][T15117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.852103][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.042054][T15202] netlink: del zone limit has 4 unknown bytes [ 514.066921][T15117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.378514][T15117] device hsr_slave_0 entered promiscuous mode [ 514.423658][T15117] device hsr_slave_1 entered promiscuous mode [ 514.630606][T15215] can: request_module (can-proto-4) failed. [ 514.698330][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 515.173764][T15230] netlink: 'syz.4.3177': attribute type 10 has an invalid length. [ 515.192100][T15230] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3177'. [ 515.211753][T15230] device hsr0 entered promiscuous mode [ 515.231846][T15230] bridge0: port 3(hsr0) entered blocking state [ 515.254389][T15230] bridge0: port 3(hsr0) entered disabled state [ 515.293794][T15230] bridge0: port 3(hsr0) entered blocking state [ 515.300141][T15230] bridge0: port 3(hsr0) entered forwarding state [ 515.672281][T15246] rxe_eth0 speed is unknown, defaulting to 1000 [ 516.490763][ T48] bond0: (slave wlan0): Releasing backup interface [ 516.507831][ T48] device wlan0 left promiscuous mode [ 516.767966][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 516.872162][ T48] bridge0: port 3(dummy0) entered disabled state [ 516.884092][ T48] device bridge_slave_0 left promiscuous mode [ 516.890741][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.933553][ T48] device veth1_macvtap left promiscuous mode [ 516.948387][ T48] device veth0_macvtap left promiscuous mode [ 517.202086][ T48] team0 (unregistering): Port device geneve1 removed [ 517.437335][ T48] team0 (unregistering): Port device team_slave_1 removed [ 517.479333][ T48] team0 (unregistering): Port device team_slave_0 removed [ 517.513644][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.522612][ T48] device bond_slave_1 left promiscuous mode [ 517.559651][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.568680][ T48] device bond_slave_0 left promiscuous mode [ 517.605129][ T48] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 517.614546][ T48] device bridge_slave_1 left promiscuous mode [ 517.784727][ T48] bond0 (unregistering): Released all slaves [ 517.843904][T15294] netlink: 'syz.1.3190': attribute type 10 has an invalid length. [ 518.137747][T15117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.174889][T15117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.300241][T15117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.353651][T15117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.820626][T15117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.848205][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 518.866587][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 518.880771][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 518.906097][T15117] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.931527][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 518.967132][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 518.998826][ T7717] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.006042][ T7717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.049288][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 519.067209][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 519.090539][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 519.106122][ T7717] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.113353][ T7717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.133504][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 519.179145][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 519.200923][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 519.243824][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 519.278712][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 519.319856][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 519.357635][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 519.408767][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 519.448676][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 519.466806][T15339] netlink: 'syz.3.3198': attribute type 29 has an invalid length. [ 519.493409][T15117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 519.528061][T15117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 519.554345][T15334] netlink: 'syz.3.3198': attribute type 13 has an invalid length. [ 519.624261][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 519.647076][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 519.709297][T15339] netlink: 'syz.3.3198': attribute type 29 has an invalid length. [ 519.819030][T15334] netlink: 'syz.3.3198': attribute type 29 has an invalid length. [ 520.226927][T15360] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3203'. [ 520.302314][T15360] netlink: zone id is out of range [ 520.377278][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 520.394027][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 520.435435][T15360] netlink: del zone limit has 4 unknown bytes [ 521.300746][T15373] netlink: 'syz.1.3208': attribute type 21 has an invalid length. [ 521.355128][T15378] netlink: 'syz.1.3208': attribute type 21 has an invalid length. [ 521.382693][T15117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.472457][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 521.518721][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.563831][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 521.589272][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.608273][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.629773][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.670034][T15404] netlink: 'syz.4.3211': attribute type 29 has an invalid length. [ 521.745617][T15117] device veth0_vlan entered promiscuous mode [ 521.762949][T15404] netlink: 'syz.4.3211': attribute type 29 has an invalid length. [ 521.797261][T15117] device veth1_vlan entered promiscuous mode [ 521.834451][T15407] netlink: 'syz.4.3211': attribute type 29 has an invalid length. [ 521.878653][T15404] netlink: 'syz.4.3211': attribute type 29 has an invalid length. [ 521.903734][T15398] netlink: 'syz.4.3211': attribute type 29 has an invalid length. [ 521.977315][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 521.996616][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 522.028390][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 522.057189][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 522.088725][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 522.108516][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 522.140364][T15117] device veth0_macvtap entered promiscuous mode [ 522.181312][T15117] device veth1_macvtap entered promiscuous mode [ 522.240237][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.271565][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.296043][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.315825][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.326004][T15430] netlink: 'syz.1.3218': attribute type 2 has an invalid length. [ 522.343860][T15430] netlink: 'syz.1.3218': attribute type 1 has an invalid length. [ 522.355086][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.375829][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.395486][T15117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.415224][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 522.440680][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 522.484499][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 522.516259][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 522.543379][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.616612][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.652343][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.704644][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.754519][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.800968][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.861191][T15117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.895086][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 522.919542][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 522.955519][T15117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.979384][T15117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.999603][T15117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.042628][T15117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.306516][T13516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.329129][T13516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.349097][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 523.423099][ T7717] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.436004][ T7717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.457101][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 523.561777][T15468] netlink: 'syz.3.3222': attribute type 1 has an invalid length. [ 523.599970][T15468] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.3222'. [ 523.809494][T15474] delete_channel: no stack [ 524.157324][T15485] team0: Device hsr_slave_0 failed to register rx_handler [ 524.215734][T15492] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3227'. [ 524.341117][T15492] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3227'. [ 524.506728][T15492] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3227'. [ 524.588969][T15492] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3227'. [ 524.683733][T15485] team0: Device hsr_slave_0 failed to register rx_handler [ 524.750735][T15492] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3227'. [ 524.803327][T15485] team0: Device hsr_slave_0 failed to register rx_handler [ 524.864013][T15492] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3227'. [ 524.915452][T15485] team0: Device hsr_slave_0 failed to register rx_handler [ 524.942942][T15492] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3227'. [ 524.955451][ T4291] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.972767][ T4291] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.982227][ T4291] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.990758][ T4291] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 525.001170][ T4291] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 525.009443][ T4291] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 525.201240][ T6601] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.362784][ T6601] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.429709][T15514] rxe_eth0 speed is unknown, defaulting to 1000 [ 525.800587][ T6601] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.876594][T15525] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 526.014004][ T6601] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.473994][ T6601] device 0 left promiscuous mode [ 526.879270][T15557] validate_nla: 4 callbacks suppressed [ 526.879289][T15557] netlink: 'syz.2.3239': attribute type 39 has an invalid length. [ 527.057380][T15514] chnl_net:caif_netlink_parms(): no params data found [ 527.089044][ T4291] Bluetooth: hci2: command 0x0409 tx timeout [ 528.464857][T15514] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.508226][T15514] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.516405][T15514] device bridge_slave_0 entered promiscuous mode [ 528.641518][T15514] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.663145][T15514] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.679754][T15514] device bridge_slave_1 entered promiscuous mode [ 528.838910][T15514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.937758][T15514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.077327][T15608] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3250'. [ 529.151308][T15514] team0: Port device team_slave_0 added [ 529.157381][T15609] netlink: 'syz.2.3249': attribute type 16 has an invalid length. [ 529.170867][ T4291] Bluetooth: hci2: command 0x041b tx timeout [ 529.199674][T15608] openvswitch: netlink: Flow key attr not present in new flow. [ 529.207062][T15609] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3249'. [ 529.344878][T15514] team0: Port device team_slave_1 added [ 529.408223][T15610] netlink: 'syz.0.3250': attribute type 21 has an invalid length. [ 529.458072][T15610] netlink: 'syz.0.3250': attribute type 6 has an invalid length. [ 529.515693][T15610] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3250'. [ 529.616629][T15514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.625166][T15514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.700811][T15514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.732744][T15514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.753466][T15514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.837359][T15625] netlink: 'syz.4.3253': attribute type 2 has an invalid length. [ 529.858163][T15514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.934551][T15625] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3253'. [ 530.120004][T15514] device hsr_slave_0 entered promiscuous mode [ 530.154362][T15514] device hsr_slave_1 entered promiscuous mode [ 530.178492][T15514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.186112][T15514] Cannot create hsr debugfs directory [ 530.235061][T15633] netlink: 'syz.2.3257': attribute type 25 has an invalid length. [ 530.282386][T15633] netlink: 'syz.2.3257': attribute type 6 has an invalid length. [ 530.312708][T15633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3257'. [ 530.367794][T15638] FAULT_INJECTION: forcing a failure. [ 530.367794][T15638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.422138][T15638] CPU: 0 PID: 15638 Comm: syz.3.3256 Not tainted syzkaller #0 [ 530.429664][T15638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 530.439744][T15638] Call Trace: [ 530.443039][T15638] [ 530.445987][T15638] dump_stack_lvl+0x188/0x24e [ 530.450701][T15638] ? show_regs_print_info+0x12/0x12 [ 530.455939][T15638] ? load_image+0x410/0x410 [ 530.460471][T15638] ? __lock_acquire+0x7ea0/0x7ea0 [ 530.465517][T15638] ? snprintf+0xe5/0x140 [ 530.469776][T15638] should_fail_ex+0x390/0x4c0 [ 530.474645][T15638] _copy_to_user+0x2c/0x130 [ 530.479150][T15638] simple_read_from_buffer+0xe3/0x150 [ 530.484622][T15638] proc_fail_nth_read+0x1a6/0x220 [ 530.489650][T15638] ? proc_fault_inject_write+0x310/0x310 [ 530.495311][T15638] ? fsnotify_perm+0x248/0x550 [ 530.500078][T15638] ? proc_fault_inject_write+0x310/0x310 [ 530.505704][T15638] vfs_read+0x2db/0x960 [ 530.509933][T15638] ? kernel_read+0x1e0/0x1e0 [ 530.514520][T15638] ? __fget_files+0x28/0x460 [ 530.519124][T15638] ? __fget_files+0x3fc/0x460 [ 530.523803][T15638] ? __fdget_pos+0x2ae/0x360 [ 530.528403][T15638] ? ksys_read+0x70/0x260 [ 530.532731][T15638] ksys_read+0x14d/0x260 [ 530.536970][T15638] ? vfs_write+0x9a0/0x9a0 [ 530.541401][T15638] ? lockdep_hardirqs_on+0x94/0x140 [ 530.546603][T15638] do_syscall_64+0x4c/0xa0 [ 530.551015][T15638] ? clear_bhb_loop+0x60/0xb0 [ 530.555708][T15638] ? clear_bhb_loop+0x60/0xb0 [ 530.560384][T15638] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.566284][T15638] RIP: 0033:0x7ff35016974e [ 530.570693][T15638] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 530.590299][T15638] RSP: 002b:00007ff351096fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.598711][T15638] RAX: ffffffffffffffda RBX: 00007ff3510976c0 RCX: 00007ff35016974e [ 530.606676][T15638] RDX: 000000000000000f RSI: 00007ff3510970a0 RDI: 0000000000000007 [ 530.614638][T15638] RBP: 00007ff351097090 R08: 0000000000000000 R09: 0000000000000000 [ 530.622603][T15638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.630570][T15638] R13: 00007ff350426038 R14: 00007ff350425fa0 R15: 00007fff075c91d8 [ 530.638551][T15638] [ 531.120590][ T6601] bond0: (slave wlan0): Releasing backup interface [ 531.158444][ T6601] device wlan0 left promiscuous mode [ 531.247962][ T4291] Bluetooth: hci2: command 0x040f tx timeout [ 531.405893][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3264'. [ 531.523654][T15666] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3264'. [ 531.581998][T15670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3264'. [ 531.945377][ T6601] device bridge_slave_1 left promiscuous mode [ 531.957782][ T6601] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.987182][ T6601] device bridge_slave_0 left promiscuous mode [ 532.016269][ T6601] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.856408][ T6601] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 532.870604][ T6601] device batadv_slave_0 left promiscuous mode [ 533.069940][ T6601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.086016][ T6601] device bond_slave_1 left promiscuous mode [ 533.134697][ T6601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.145699][ T6601] device bond_slave_0 left promiscuous mode [ 533.330849][ T4291] Bluetooth: hci2: command 0x0419 tx timeout [ 533.424575][ T6601] bond0 (unregistering): Released all slaves [ 534.042979][T15514] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 534.094446][T15514] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 534.144705][T15514] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 534.192305][T15514] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 534.468906][T15731] netlink: 'syz.0.3277': attribute type 10 has an invalid length. [ 534.659858][T15731] team0: Device wg1 is of different type [ 534.750819][T15740] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3280'. [ 534.798413][T15741] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3280'. [ 534.881037][T15514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.912369][T15749] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.3281'. [ 534.950420][T15749] openvswitch: netlink: Message has 48126 unknown bytes. [ 534.953853][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.994824][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 535.020998][T15514] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.065075][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 535.076204][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 535.105410][T13516] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.112639][T13516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.208624][T15757] netlink: 'syz.4.3283': attribute type 10 has an invalid length. [ 535.226575][T15757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3283'. [ 535.249570][T15757] device ipvlan0 entered promiscuous mode [ 535.299582][T15757] bridge0: port 4(ipvlan0) entered blocking state [ 535.365157][T15757] bridge0: port 4(ipvlan0) entered disabled state [ 535.428973][T15757] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 535.589090][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 535.614495][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 535.625316][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 535.654203][T13516] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.661418][T13516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.717112][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 535.755027][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 535.794572][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 535.848199][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 535.863823][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 535.978419][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 536.021033][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 536.069054][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 536.099855][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 536.146163][T15514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.195061][T15514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 536.209225][T15775] netlink: 'syz.4.3287': attribute type 1 has an invalid length. [ 536.343822][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 536.358505][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 536.488450][T15782] rxe_eth0 speed is unknown, defaulting to 1000 [ 536.831432][T15799] netlink: 'syz.3.3293': attribute type 25 has an invalid length. [ 536.863189][T15799] netlink: 'syz.3.3293': attribute type 29 has an invalid length. [ 536.914386][T15800] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3293'. [ 537.145968][T15806] netlink: 126612 bytes leftover after parsing attributes in process `syz.2.3294'. [ 537.169640][T15806] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3294'. [ 537.457611][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 537.491863][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 537.542387][T15514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.610137][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 537.644089][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 537.710541][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 537.745019][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 537.769242][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 537.787134][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 537.805576][T15514] device veth0_vlan entered promiscuous mode [ 537.855338][T15514] device veth1_vlan entered promiscuous mode [ 537.918453][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 537.957566][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 537.975708][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 538.001090][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 538.046708][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 538.071057][T15833] netlink: 'syz.2.3301': attribute type 2 has an invalid length. [ 538.075951][ T6597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 538.101316][T15514] device veth0_macvtap entered promiscuous mode [ 538.125697][T15833] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3301'. [ 538.145752][T15514] device veth1_macvtap entered promiscuous mode [ 538.245948][T15514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.287377][T15514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.311296][T15514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.326643][T15514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.340143][T15514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.362510][T15514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.384291][T15514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.397610][T15514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.440342][T15514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.499545][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 538.518115][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 538.536114][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 538.557710][T13516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 538.599894][T15514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.619496][T15514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.634270][T15514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.645909][T15514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.670775][T15514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.710619][T15514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.745787][T15514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 538.775419][T15514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.817452][T15514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.863596][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 538.878651][ T7717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 538.915851][T15514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.957743][T15514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.980122][T15514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.004557][T15514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.178541][T15876] device veth1_macvtap left promiscuous mode [ 539.429489][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.437384][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.491759][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 539.564338][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.603158][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.656702][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 539.769795][T15901] netlink: 'syz.0.3313': attribute type 21 has an invalid length. [ 541.617096][T15921] netlink: 'syz.1.3319': attribute type 28 has an invalid length. [ 541.657431][T15921] netlink: 'syz.1.3319': attribute type 3 has an invalid length. [ 541.688357][T15921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3319'. [ 542.267318][T15934] netlink: 'syz.2.3323': attribute type 41 has an invalid length. [ 542.756114][T15941] IPv6: NLM_F_CREATE should be specified when creating new route [ 542.848467][T15944] netlink: 'syz.1.3327': attribute type 10 has an invalid length. [ 542.925249][T15944] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3327'. [ 543.063263][T15944] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.070957][T15944] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.179012][T15944] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.186256][T15944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.193840][T15944] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.201085][T15944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.220073][T15944] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 543.251768][T15957] netlink: 'syz.4.3331': attribute type 10 has an invalid length. [ 543.343177][T15957] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.410698][T15957] device bridge_slave_1 left promiscuous mode [ 543.483490][T15957] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.584529][T15957] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 543.992820][T15983] netlink: 'syz.1.3336': attribute type 20 has an invalid length. [ 544.025332][T15983] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3336'. [ 544.330852][T15992] netlink: 'syz.1.3340': attribute type 10 has an invalid length. [ 544.379072][T15992] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3340'. [ 545.350533][T16001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3342'. [ 545.585263][T16005] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3344'. [ 545.769127][T16010] netlink: 'syz.4.3347': attribute type 10 has an invalid length. [ 546.449381][T16010] team0: Device wg1 is of different type [ 548.116210][T16046] netlink: 'syz.4.3356': attribute type 2 has an invalid length. [ 548.370556][T16054] netlink: 'syz.4.3356': attribute type 2 has an invalid length. [ 548.882363][T16058] netlink: 'syz.2.3357': attribute type 10 has an invalid length. [ 548.928892][T16058] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3357'. [ 548.972968][T16058] bridge0: port 3(veth0_vlan) entered blocking state [ 549.013560][T16058] bridge0: port 3(veth0_vlan) entered disabled state [ 549.059690][T16058] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 549.144419][T16071] netlink: 'syz.1.3362': attribute type 10 has an invalid length. [ 549.399732][T16077] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3361'. [ 549.794985][T16095] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.3369'. [ 550.043159][T16103] netlink: 'syz.3.3371': attribute type 1 has an invalid length. [ 551.167510][T16103] rxe_eth0 speed is unknown, defaulting to 1000 [ 551.283427][T16132] netlink: 'syz.1.3379': attribute type 21 has an invalid length. [ 551.314013][T16132] netlink: 'syz.1.3379': attribute type 6 has an invalid length. [ 551.388253][T16132] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3379'. [ 551.739226][T16145] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3381'. [ 551.843405][T16146] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 551.870827][T16146] syzkaller1: linktype set to 825 [ 551.921855][T16154] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 552.017049][T16151] IPv6: NLM_F_CREATE should be specified when creating new route [ 553.013970][T16186] netlink: 'syz.4.3394': attribute type 12 has an invalid length. [ 553.098230][T16186] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3394'. [ 553.651898][T16198] netlink: 'syz.4.3396': attribute type 10 has an invalid length. [ 553.698209][T16198] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3396'. [ 553.758152][T16198] device batadv_slave_0 entered promiscuous mode [ 553.765089][T16198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.773571][T16198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.784577][T16198] bridge0: port 2(batadv_slave_0) entered blocking state [ 553.793492][T16198] bridge0: port 2(batadv_slave_0) entered disabled state [ 553.802693][T16198] bridge0: port 2(batadv_slave_0) entered blocking state [ 553.809883][T16198] bridge0: port 2(batadv_slave_0) entered forwarding state [ 553.826155][T16195] netlink: 'syz.2.3397': attribute type 10 has an invalid length. [ 553.834308][T16195] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3397'. [ 553.844411][T16195] device hsr0 entered promiscuous mode [ 553.852805][T16195] bridge0: port 3(hsr0) entered blocking state [ 553.860191][T16195] bridge0: port 3(hsr0) entered disabled state [ 553.870200][T16195] bridge0: port 3(hsr0) entered blocking state [ 553.876521][T16195] bridge0: port 3(hsr0) entered forwarding state [ 553.885933][T16193] netlink: 'syz.0.3395': attribute type 1 has an invalid length. [ 554.573900][T16199] rxe_eth0 speed is unknown, defaulting to 1000 [ 555.056523][T16228] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.3408'. [ 555.075997][T16225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3407'. [ 555.112783][T16228] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3408'. [ 555.122822][T16225] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3407'. [ 555.155032][T16237] netlink: 'syz.2.3410': attribute type 10 has an invalid length. [ 555.184775][T16237] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3410'. [ 555.229075][T16237] bridge0: port 3(hsr0) entered disabled state [ 555.235496][T16237] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.243203][T16237] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.354588][T16237] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 555.357469][T16242] netlink: 'syz.4.3412': attribute type 2 has an invalid length. [ 555.395182][T16237] bridge0: port 3(hsr0) entered blocking state [ 555.401580][T16237] bridge0: port 3(hsr0) entered forwarding state [ 555.408256][T16237] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.415431][T16237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.415587][T16242] netlink: 'syz.4.3412': attribute type 1 has an invalid length. [ 555.422918][T16237] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.437770][T16237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.461052][T16237] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 555.484159][T16240] netlink: 'syz.1.3411': attribute type 10 has an invalid length. [ 555.507375][T16240] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3411'. [ 555.527605][T16240] device batadv_slave_0 entered promiscuous mode [ 555.527818][T16246] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3413'. [ 555.537124][T16240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.582315][T16240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.621036][T16240] bridge0: port 3(batadv_slave_0) entered blocking state [ 555.633671][T16240] bridge0: port 3(batadv_slave_0) entered disabled state [ 555.678802][T16240] bridge0: port 3(batadv_slave_0) entered blocking state [ 555.686503][T16240] bridge0: port 3(batadv_slave_0) entered forwarding state [ 556.552995][T16269] validate_nla: 1 callbacks suppressed [ 556.553032][T16269] netlink: 'syz.4.3422': attribute type 21 has an invalid length. [ 556.576839][T16269] netlink: 'syz.4.3422': attribute type 6 has an invalid length. [ 556.619280][T16269] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3422'. [ 556.777132][T16270] device syzkaller0 entered promiscuous mode [ 557.205350][T16286] netlink: 'syz.0.3429': attribute type 10 has an invalid length. [ 557.218088][T16286] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3429'. [ 557.243087][T16286] device batadv_slave_0 entered promiscuous mode [ 557.253958][T16286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.280506][T16286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.327240][T16286] bridge0: port 3(batadv_slave_0) entered blocking state [ 557.342646][T16286] bridge0: port 3(batadv_slave_0) entered disabled state [ 557.362177][T16286] bridge0: port 3(batadv_slave_0) entered blocking state [ 557.369787][T16286] bridge0: port 3(batadv_slave_0) entered forwarding state [ 557.526323][T16297] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 557.980016][T16305] netlink: 'syz.0.3437': attribute type 2 has an invalid length. [ 559.345823][T16305] device .*! entered promiscuous mode [ 559.531287][ C0] [ 559.531296][ C0] ================================ [ 559.531301][ C0] WARNING: inconsistent lock state [ 559.531324][ C0] syzkaller #0 Not tainted [ 559.531332][ C0] -------------------------------- [ 559.531335][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 559.531342][ C0] syz.4.3438/16310 [HC2[2]:SC0[0]:HE0:SE1] takes: [ 559.531358][ C0] ffff888021af6a20 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 559.531493][ C0] {INITIAL USE} state was registered at: [ 559.531499][ C0] lock_acquire+0x1bc/0x4a0 [ 559.531519][ C0] _raw_spin_lock+0x2a/0x40 [ 559.531536][ C0] htab_lock_bucket+0x179/0x2f0 [ 559.531550][ C0] htab_map_update_elem+0x233/0x1070 [ 559.531565][ C0] bpf_map_update_value+0x59d/0x670 [ 559.531640][ C0] map_update_elem+0x4fa/0x6a0 [ 559.531659][ C0] __sys_bpf+0x4ec/0x780 [ 559.531675][ C0] __x64_sys_bpf+0x78/0x90 [ 559.531692][ C0] do_syscall_64+0x4c/0xa0 [ 559.531712][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.531731][ C0] irq event stamp: 2538 [ 559.531737][ C0] hardirqs last enabled at (2537): [] noist_exc_debug+0xee/0x120 [ 559.531755][ C0] hardirqs last disabled at (2538): [] irqentry_enter+0xf/0x50 [ 559.531775][ C0] softirqs last enabled at (2374): [] bpf_prog_load+0x111d/0x1530 [ 559.531798][ C0] softirqs last disabled at (2372): [] bpf_ksym_add+0x28/0x330 [ 559.531820][ C0] [ 559.531820][ C0] other info that might help us debug this: [ 559.531825][ C0] Possible unsafe locking scenario: [ 559.531825][ C0] [ 559.531829][ C0] CPU0 [ 559.531831][ C0] ---- [ 559.531834][ C0] lock(&htab->lockdep_key); [ 559.531844][ C0] [ 559.531847][ C0] lock(&htab->lockdep_key); [ 559.531856][ C0] [ 559.531856][ C0] *** DEADLOCK *** [ 559.531856][ C0] [ 559.531860][ C0] 1 lock held by syz.4.3438/16310: [ 559.531870][ C0] #0: ffffffff8db2daa0 (rcu_read_lock){....}-{1:2}, at: perf_event_output_forward+0xbe/0x2f0 [ 559.531924][ C0] [ 559.531924][ C0] stack backtrace: [ 559.531930][ C0] CPU: 0 PID: 16310 Comm: syz.4.3438 Not tainted syzkaller #0 [ 559.531943][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 559.531951][ C0] Call Trace: [ 559.531956][ C0] <#DB> [ 559.531961][ C0] dump_stack_lvl+0x188/0x24e [ 559.531984][ C0] ? show_regs_print_info+0x12/0x12 [ 559.532006][ C0] ? print_usage_bug+0x43d/0x6a0 [ 559.532028][ C0] ? verify_lock_unused+0x15/0x140 [ 559.532048][ C0] lock_acquire+0x2df/0x4a0 [ 559.532067][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 559.532084][ C0] ? read_lock_is_recursive+0x10/0x10 [ 559.532110][ C0] _raw_spin_lock+0x2a/0x40 [ 559.532125][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 559.532141][ C0] htab_lock_bucket+0x179/0x2f0 [ 559.532159][ C0] ? htab_lru_map_delete_node+0x610/0x610 [ 559.532177][ C0] ? look_up_lock_class+0x75/0x140 [ 559.532193][ C0] ? verify_lock_unused+0x15/0x140 [ 559.532213][ C0] ? htab_map_hash+0x269/0x6d0 [ 559.532230][ C0] htab_map_delete_elem+0x196/0x630 [ 559.532249][ C0] ? htab_map_update_elem+0x1070/0x1070 [ 559.532269][ C0] bpf_prog_d9e4944ddab785a3+0x3d/0x41 [ 559.532284][ C0] bpf_overflow_handler+0x50b/0x790 [ 559.532305][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 559.532321][ C0] ? perf_swevent_overflow+0x230/0x230 [ 559.532340][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 559.532363][ C0] __perf_event_overflow+0x457/0x630 [ 559.532386][ C0] perf_swevent_event+0x315/0x570 [ 559.532402][ C0] ? perf_tp_event+0xc10/0xc10 [ 559.532419][ C0] perf_bp_event+0x311/0x3f0 [ 559.532435][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 559.532467][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 559.532527][ C0] ? read_lock_is_recursive+0x10/0x10 [ 559.532549][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 559.532601][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 559.532618][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 559.532636][ C0] notify_die+0x141/0x1a0 [ 559.532653][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 559.532675][ C0] notify_debug+0x20/0x30 [ 559.532723][ C0] exc_debug+0xd9/0x130 [ 559.532738][ C0] asm_exc_debug+0x1a/0x40 [ 559.532757][ C0] RIP: 0010:__get_user_nocheck_8+0x9/0x13 [ 559.532779][ C0] Code: 90 0f 01 cb 0f ae e8 0f b7 10 31 c0 0f 01 ca c3 90 0f 01 cb 0f ae e8 8b 10 31 c0 0f 01 ca c3 90 90 0f 01 cb 0f ae e8 48 8b 10 <31> c0 0f 01 ca c3 90 0f 01 ca 31 d2 48 c7 c0 f2 ff ff ff c3 00 00 [ 559.532790][ C0] RSP: 0000:ffffc90003d6f640 EFLAGS: 00040806 [ 559.532803][ C0] RAX: 0000200000000300 RBX: dffffc0000000000 RCX: ffff88803b9d3c00 [ 559.532815][ C0] RDX: 00006370692f736e RSI: 0000200000000300 RDI: 00007fffffffeff0 [ 559.532826][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 [ 559.532835][ C0] R10: dffffc0000000000 R11: fffff520007adf27 R12: 00000000ffffffff [ 559.532845][ C0] R13: 0000200000000300 R14: 0000000000000003 R15: 00007fffffffeff0 [ 559.532861][ C0] [ 559.532866][ C0] [ 559.532871][ C0] perf_callchain_user+0x555/0x13c0 [ 559.532908][ C0] get_perf_callchain+0x39e/0x490 [ 559.532930][ C0] ? put_callchain_entry+0xb0/0xb0 [ 559.532952][ C0] ? __perf_event_header__init_id+0x421/0x530 [ 559.532974][ C0] perf_prepare_sample+0x399/0x2020 [ 559.532997][ C0] ? read_lock_is_recursive+0x10/0x10 [ 559.533017][ C0] ? perf_callchain+0x190/0x190 [ 559.533040][ C0] perf_event_output_forward+0x197/0x2f0 [ 559.533062][ C0] ? perf_event_output_forward+0xbe/0x2f0 [ 559.533082][ C0] ? perf_get_page_size+0x430/0x430 [ 559.533103][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 559.533126][ C0] ? sched_clock_cpu+0x6e/0x260 [ 559.533177][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 559.533200][ C0] __perf_event_overflow+0x457/0x630 [ 559.533225][ C0] perf_swevent_hrtimer+0x472/0x630 [ 559.533246][ C0] ? cpu_clock_event_read+0x50/0x50 [ 559.533272][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 559.533283][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 559.533295][ C0] ? _raw_spin_unlock+0x40/0x40 [ 559.533310][ C0] __hrtimer_run_queues+0x4e7/0xc90 [ 559.533323][ C0] ? ktime_get_update_offsets_now+0x95/0x3e0 [ 559.533369][ C0] ? cpu_clock_event_read+0x50/0x50 [ 559.533385][ C0] ? hrtimer_interrupt+0x980/0x980 [ 559.533397][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 559.533412][ C0] hrtimer_interrupt+0x399/0x980 [ 559.533431][ C0] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 559.533487][ C0] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 559.533500][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 559.533515][ C0] RIP: 0033:0x7f4611787cbd [ 559.533525][ C0] Code: 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 c5 fd 74 0f fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 90 f3 0f bc [ 559.533536][ C0] RSP: 002b:00007f46125898a8 EFLAGS: 00000283 [ 559.533549][ C0] RAX: 0000000000000300 RBX: 00007f4612589de0 RCX: 2f666c65732f636f [ 559.533559][ C0] RDX: 0000200000000300 RSI: 00007f4611862fa0 RDI: 0000200000000300 [ 559.533569][ C0] RBP: 0000200000000300 R08: 00007f461258a010 R09: 00000000ffffffff [ 559.533579][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 559.533587][ C0] R13: 0000000000000073 R14: 00007f4611837285 R15: 00007f4612589ea0 [ 559.533603][ C0] [ 560.387920][T16313] netlink: 'syz.1.3448': attribute type 4 has an invalid length. [ 560.396382][T16313] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3448'. [ 562.779755][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.786133][ T1284] ieee802154 phy1 wpan1: encryption failed: -22