last executing test programs: 5.750604278s ago: executing program 2 (id=2304): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r1 = socket$kcm(0xa, 0x3, 0x11) socket$kcm(0xa, 0x3, 0x11) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=0x0, @ANYRESDEC=r1], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0xffffffffffffff6d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x0, 0x10000, 0x0, 0x2, 0x582, 0x20005, 0x0, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="75f37538e49866a862938a7e0000000000"], 0xcfa4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x200008c0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair(0x21, 0x80000, 0xc9, 0x0) 5.159588257s ago: executing program 0 (id=2307): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)={@ifindex, 0xffffffffffffffff, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@fallback, r2, 0x2f, 0x2030, 0x4, @void, @void, @value=r3}, 0x20) perf_event_open$cgroup(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x2, 0xd, 0x9, 0x0, 0x5, 0x50049, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x6, 0xffff}, 0xc00, 0x5, 0xff, 0x0, 0x10001, 0x5e, 0x6a, 0x0, 0x5}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8e10000190081054e81f882db44b904021d005c06007c09e8fe55a10a00120ff21b66a7ceda0e1208600b", 0x2b}], 0x1}, 0x8000) socket$kcm(0x10, 0x2, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000190091c8b14a0778a8123d181d"], 0xfe33) 5.091713278s ago: executing program 2 (id=2308): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x5000000000000, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1000000000040}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6315}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x80, 0x11, 0x0, 0x10001, 0x10021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4d, 0xe67}, 0x0, 0x0, 0x3, 0x6, 0xa17c, 0x40ff, 0x3, 0x0, 0x1000004, 0x0, 0x80}, 0x0, 0x2, 0xffffffffffffffff, 0x1) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc5, 0xc5, 0x5, [@datasec={0x10, 0x7, 0x0, 0xf, 0x1, [{0x5, 0x2, 0x3}, {0x3, 0x6, 0x3}, {0x3, 0xd, 0x1000}, {0x3, 0x7, 0xbb9}, {0x4, 0x3, 0x6}, {0x4, 0x3, 0x9}, {0x5, 0x8, 0x7}], "d8"}, @const={0x2, 0x0, 0x0, 0xa, 0x5}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x6}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x9, 0x5}, {0x8}, {0x10, 0x2}, {0x4, 0x3}, {0xc, 0x4}, {0x6, 0x4}, {0x0, 0x5}]}]}, {0x0, [0x5f, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/132, 0xe5, 0x84, 0x0, 0x4}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="01000100"/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="01000000000000000100000000000000000000000000000000000000275bfdaaeb29ee7a43a7727ac3dda2a56f49f914aa51d78181a936bda35678d390a63c3ae4f6cbbab38e9a4d512e493b9739b716c73ebb52a837e671c9ee9fd3c287181a11c8bdb1778c"], 0x50) 4.270092846s ago: executing program 0 (id=2310): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf5d, 0x3}, 0x0, 0xca, 0xdc1, 0x8, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d8000000200081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xa}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a", 0x19}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1900000004000000040000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000007675cb6700000000000000000b00"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=r3, 0x24, 0x1, 0xfcf, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0]}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x7, 0x6c, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x13, &(0x7f0000000700)=ANY=[@ANYRESHEX=r9, @ANYRES8=r5, @ANYRESDEC=r8, @ANYRES32=r4], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r5], 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000ac00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.165991063s ago: executing program 1 (id=2312): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xdafc77463e8b25be, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x5, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x40002009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x10, 0xa, 0x0, &(0x7f0000000400)={0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x2a042, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'veth0_to_team\x00', 0xb02}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0xe, 0x0, 0x3, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="03e475274c5c41f9eb2770c60000000020000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) r6 = socket$kcm(0x29, 0x2, 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0x4, 0x2a, 0x37b}, 0x10, 0x11a81, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0400"/12, @ANYRES32, @ANYBLOB="bf8c511dbe558474469f71e52f50538037445e9dcccf2337d1e730df628a1be783aaace685bd08610a91482926188d300425302a6a19e22cb097033f7dfb0119b03988748b8ee9b57247b8bba51850a5501f300cb3085042766100e7c7df1090b5d5243d9c37f2fb45eba37cf7ddbfc0f0e651957cc957c7d2ef82a956af0b9154ececb29ea4782b17fdf12f1925f5ac5d6146ec1146d162e05e45e763a3ca613df7dc67b73922d50157a431293c751eb60b6d9fd820932eb41c166a118ea58170f8a8fbd76aa936cd884b47d595930cf90a34587227b106642d25", @ANYRES64=r5], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000000000000000000014000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) r7 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x225, 0x2}, 0x900, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000292457bf0077f938a5dd01ec1eb95c32e6c72f0780db6d4de1f8f4df100e883d688ceedb64f932859c00000000000009740008001d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x80) sendmsg$inet(r7, &(0x7f0000000440)={&(0x7f0000000200)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000580)=[{0x0, 0x56}, {0x0}, {0x0}, {0x0}], 0x4, &(0x7f0000000200)}, 0x0) 4.111238282s ago: executing program 2 (id=2313): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6b, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000900), &(0x7f0000001200), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, r0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) recvmsg$unix(r4, &(0x7f00000011c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000001100)=[{&(0x7f0000000380)=""/101, 0x65}, {&(0x7f0000000580)=""/203, 0xcb}, {&(0x7f0000000680)=""/163, 0xa3}, {&(0x7f0000000740)=""/168, 0xa8}, {&(0x7f0000000800)=""/244, 0xf4}, {&(0x7f0000000fc0)=""/90, 0x5a}, {&(0x7f0000001040)=""/110, 0x6e}, {&(0x7f00000010c0)=""/64, 0x40}], 0x8, &(0x7f0000001180)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.955870258s ago: executing program 0 (id=2314): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0xee, &(0x7f00000001c0)=[{}], 0x4, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000100)}}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x2, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x20, 0x16, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9b29}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0xb, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xa}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', r1, @netfilter=0x2d, r0, 0x8, &(0x7f0000000700)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x6, 0x3, 0x47136340}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000780)=[r0, r0], &(0x7f00000007c0)=[{0x2, 0x4, 0x9, 0xa}, {0x3, 0x2, 0xe, 0x9}, {0x5, 0x5, 0xf, 0x2}, {0x5, 0x1, 0xd, 0x9}, {0x4, 0x1, 0x5, 0xb}], 0x10, 0x4}, 0x94) openat$cgroup_type(r0, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000540)=0x3) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r3, 0x0) r5 = getpid() perf_event_open(&(0x7f0000000900)={0x3, 0x80, 0x6, 0x4, 0x0, 0xa, 0x0, 0x4, 0x50600, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x80000001}, 0x1202, 0x10001, 0x4, 0x9, 0x1ff, 0x3c, 0x0, 0x0, 0xe4d, 0x0, 0x5}, r5, 0x2, r4, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x555) r6 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x2, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x1000000, 0xe, 0x0, &(0x7f0000000240)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000500), 0x2, 0x0) 3.898190238s ago: executing program 1 (id=2316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES32], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0), 0x0}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002840)={r0, &(0x7f0000001800)="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", &(0x7f0000002800)=""/9, 0x4}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d00e8030000a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) r4 = gettid() perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x6, 0x7f, 0x39, 0x3, 0x0, 0x2f18f9f, 0x2000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x5}, 0x4201, 0x0, 0x0, 0x0, 0x8, 0x9, 0x5, 0x0, 0x1, 0x0, 0x1}, r4, 0xe, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000040)={'wlan1\x00', @random="2e2ee363a4b1"}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$sock(r2, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)="0270e0243a7fcb65233fe3719bc1834ba728d0b69b93497b73b670feea6177eb3a5ab17d151be5bf9509993edbe11ad828fb13", 0x33}, {&(0x7f00000000c0)="d4fd7c540d9d0f2c25d30de60ab6ac", 0xf}, {&(0x7f0000000200)="3b1643a9d401f8a5928da2c10b5383d4738e90463131b1c75dd94b436d1e20c879aaed0ab3eab1b916420d1e3d01643d19361f7b8ddeea81be7725a6e9897cbab17c7b73767154a1f44c19a4ecca38b3f6f16ef4999c03a8e1eba8f7c09213f9fe2d048e6eec198946f631615415bddf5f5349019e628494d6dc44f706b5b00c064777db294c36582cd0208cca5d7f2bdd76f69eb50d20eb9ae24439dc56455d9118fa3b04ae669cefd0c03d26f67205216667e6f0d47e796e247572910f4d7b94ea792b7f3ee37501a4657c1330aacee28e7bc408aa5ffbd9b5c68e9d6b0c58c867a3bba8344268494e59d221", 0xed}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="b712128a16f8cb1c38d57919868cfc0dbccb17b073b129b1305c51bc4b1a949ab4ffb76f2f719c7027b01e74588b95351dbe3d7ef3469ef4ba73c3b7906875e8b15b5416caba99897b3f9f201b3e", 0x4e}], 0x5}, 0x4000000) sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044f80200ac14143705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.735248345s ago: executing program 0 (id=2318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='.'], 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000039000000080000000b"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000700), 0x0}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x3, 0x0, 0x0, 0xc, 0x3}, @union={0xd, 0x1, 0x0, 0x5, 0x0, 0x4, [{0xf, 0x4, 0x38b}]}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000100)=""/14, 0x40, 0xe, 0x1, 0x8450, 0x10000}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x22, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044944, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000040), 0x4) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086"], 0xffdd) 3.565833963s ago: executing program 1 (id=2319): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300040c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x81c0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000004800912579b8a885d7e9fa080a"], 0xfe33) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="000000000007000006", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x0, &(0x7f0000000100), &(0x7f0000000180)='GPL\x00', 0xe0, 0x32, &(0x7f00000001c0)=""/50, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x1, 0x800, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000003c0), 0x10, 0x76d13400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x5, &(0x7f00000000c0), 0x3e) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8994, &(0x7f0000000000)={'bond0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r6], 0x48) openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f00000000c0), &(0x7f00000004c0)=r4}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff020000000000000000000000000001a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e0060000000000000580bb9ad809d5e1cace81b341139fe3cd4032e8", 0xd5}], 0x1, 0x0, 0x0, 0x7400}, 0x4040c04) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) 3.522694311s ago: executing program 3 (id=2320): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x1000, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 2.375736352s ago: executing program 1 (id=2321): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$kcm(0x2, 0x200000000000003, 0x106) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x74, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e0000002d008188042f8eeae0b8402e7b6e67d83c000000e3bd6efb440009000400010009000000000000000000", 0x2e}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xe, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0x23, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0104"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x3, 0x0, 0x10, 0xfc, 0x0, 0x0, 0x200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc8, 0x9, 0x7, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x8, 0x0, 0x200000000000}, 0x0, 0x6, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ee, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000100000000000000fcfbffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800ffffb704000001000000850000008200000085000000bdfdff00bf91000049cd46273ac34979947c00000000b7020000000000008500000085000000b70000000000"], &(0x7f00000000c0)='GPL\x00', 0x947, 0x0, 0x0, 0x41000, 0x71, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000540)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xb, 0xfffffff8, 0x6}, 0x10, 0xa8ac, r2, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1], 0x48) 2.373983943s ago: executing program 2 (id=2322): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001000001a00911c01000000000041da81"], 0xfe33) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0x691}], 0x1}, 0x4000080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f0000000980)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a00)="8f7d92728af0b663fdaee5f90cde20c292e8a567b815e46d7fd4362197d8ef7aca169e08b947ae147a30d7fac83d1285d87692f91583d3bedb9f6c9e635b486da263feeed9db299324db904a2fb9835d62287e590594cc058b765c317fad43ee715505177f7d4615e8e75d042de8835ff1a66c02d6d5377d62a70ac816c9c9bc64f171e260bd3c92dc4cc9b59c2ad2078103d6039d0877ad601ef534863581370ceb2e3d5639b96b3e39b4a83f15d3dcc2445858aea350d6ab22c652de65974ed7e166fc54f4fdc58fb39e2003850baec40a8358a81fc3f2f7124d44cba5b35e70891c509f0f2d4ec67194a17e1ca1c817", 0xf1}], 0x1}, 0x8040) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b35d25a806c8c6f94f91724fc60", 0x14}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="000000000000080000000400009efcffffff00000a2112100df6be3c7adcdb4b5f916888fb6d21184b508303b850e5f1f1e8d586ae4c1d8804fba6eaf6c19d5831b8ad8017eec01372d6eedce01984f480583780f1381a5cf11c03bd7d5d98d2a8c4348c36fe", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000fd300100000001dd163b1084513d99a0b9000000005d9220f9d28be676b14df51ca7721986804789290db8"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000380)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb6d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r5, 0x1}, 0xc) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'erspan0\x00', @random}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)}, 0x4000) 2.338147819s ago: executing program 3 (id=2323): r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4001}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000080) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f0000000140)=@raw=[@map_fd, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000240)='syzkaller\x00', 0xa, 0x35, &(0x7f0000000280)=""/53, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x0, 0x7, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0xffffffffffffffff], &(0x7f00000003c0)=[{0x3, 0x3, 0xd, 0x5}, {0x5, 0x4, 0x6, 0x2}], 0x10, 0x1}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f00000004c0)={r5}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) r6 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @private1, 0x0, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x8c1) 2.228942158s ago: executing program 1 (id=2324): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000200000000000000000000850000002700000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000009500000100000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffde5e}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x5, &(0x7f0000000700)=ANY=[@ANYRESOCT=r1, @ANYRES8=r1, @ANYRESDEC=r1, @ANYBLOB="a0b6d342a43a027a0f23914edde227be316e4fa070ed63b71f848aba079f9a5df70d3c1568a68aca602ff9133bb2df23ecdddb65d17d95e65a5616f29c7e43bc308804c8e52ff6cca04cea6001425c1bb7681b7918938ece3457ce7f257227ed2f76ee1ee22dda09a3a1d13e8231e9437093f2df9cd8bc2021de033848c0c96a668799b522860dd09d7bd52a2c7edac54396036ca120c7762e585d26329dbacb39422585ee1a5257c751a11500c2eb2ff50589d27839f2af729578245107f9c8", @ANYBLOB="f5716a6acd3d6c73"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x2b8edcbfccb9410a, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002a0, 0x1f, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000c40), 0x10, 0x1}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x10010) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r2, @ANYRES32=r3, @ANYRES8=r6, @ANYRESOCT=r0, @ANYRES32=r3], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x1, 0x0, 0x0, 0x1000000000, 0x31000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x1e, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xc, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r12 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffa, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0xf}, 0x11945d, 0x0, 0xffffffff, 0x4, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x8, 0x0, 0xc}, 0x0, 0x4, r12, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x2e, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100000000, 0x80000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000140)}, 0x0, 0xcc05, 0x7, 0x5, 0x9, 0x0, 0x81, 0x0, 0x101, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) close(r12) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03001d000b63d25a80648c2594f90124fc60100c030002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 2.073300433s ago: executing program 3 (id=2325): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000ea0000000000008d0002002a004d0085000000a000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48844) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x8, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2933], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffff7f}, 0xfffffffffffffd64}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r0, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{0x0}], 0x1}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xc, 0x4}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000880)=""/101, 0x30, 0x65, 0x1, 0x1000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{}, &(0x7f00000009c0), 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, &(0x7f0000000280)}, 0x20) 1.820602846s ago: executing program 3 (id=2326): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000012050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r1], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) 326.787245ms ago: executing program 0 (id=2327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa2, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x3, 0x5, 0x11, 0x3, 0x0, 0x6, 0x5b3d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x88, 0x5, 0x100, 0x9, 0x8, 0x5, 0x5, 0x0, 0x2, 0x0, 0x40000002}, 0x0, 0x8, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x5, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0xffffffffffffffff) bpf$PROG_BIND_MAP(0x23, &(0x7f00000002c0)={r4, r4}, 0xc) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffc}, 0x104101, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x4d4ecf10c1521adb, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r5], 0x12) socket$kcm(0x21, 0x2, 0x2) r8 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x28, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r8}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00e700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 307.330528ms ago: executing program 3 (id=2328): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) 251.549618ms ago: executing program 1 (id=2329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000010007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x11, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x7, 0x1, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x29}, @generic={0x6, 0xe, 0xd, 0x14d3, 0xffffaadc}]}, &(0x7f0000000780)='GPL\x00', 0x2, 0x25, &(0x7f0000000800)=""/37, 0x41100, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xe, 0x2, 0x7}, 0x10, 0x0, 0x0, 0x9, &(0x7f00000008c0)=[r0, r0], &(0x7f0000000900)=[{0x4, 0x1, 0x5, 0x8}, {0x4, 0x3, 0x2, 0xf}, {0x1, 0x3, 0x10, 0x6}, {0x1, 0x5, 0x2, 0x9}, {0x2, 0x3, 0x3, 0xa}, {0x1, 0x1, 0x7, 0x1}, {0x0, 0x5, 0xc}, {0x3, 0x3, 0x7}, {0x5, 0x4, 0x7, 0xc}], 0x10, 0xa2000}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x1}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r4}, 0xc) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x4, 0x3000000, 0x1f, 0x40000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r7, 0x2000000, 0x8, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0xfffffbff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f2, &(0x7f0000000040)='\xf25X\xc7\xda=KA\xce\x00\x00\xff\x02\xff\xff\xff\xfd\xff\x00\x00\x00\x00\x00\x00') 250.093008ms ago: executing program 2 (id=2330): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0xfffffffd, @dev, 0x0, 0xfffffffe}, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0xfffffffd, @dev, 0x0, 0xfffffffe}, 0x80, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x12, 0x8, 0x0, 0x0, 0x2, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd2c3, 0x3, 0x4, 0x5, 0x80000001, 0x251, 0x0, 0x0, 0x6fd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x12, 0x8, 0x0, 0x0, 0x2, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd2c3, 0x3, 0x4, 0x5, 0x80000001, 0x251, 0x0, 0x0, 0x6fd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0x2e, 0x1, 0x5, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0x2e, 0x1, 0x5, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@map=r4, r0, 0x25, 0x2000, 0x0, @value=r5, @void, @void, @void, r3}, 0x20) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x29, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f9, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) (async) sendmsg$inet(r7, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1ad}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r9, r8, 0x26}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r9, r8, 0x26}, 0x10) setsockopt$sock_attach_bpf(r6, 0x84, 0x8, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x84, 0x8, 0x0, 0x0) 84.224786ms ago: executing program 0 (id=2331): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x7f}, 0x100b28, 0x6, 0x0, 0x6, 0x7, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) (async, rerun: 32) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0x1, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0xffffffffffffffff, 0xde, 0x8}, 0xc) (async) r7 = socket$kcm(0x2b, 0x1, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r7, 0x6, 0x7, &(0x7f0000000000)=r8, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x4) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r10) (async) ioctl$SIOCSIFHWADDR(r10, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x20, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x48}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0xbc, 0xd, &(0x7f00000006c0)=""/13, 0x41000, 0x20, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000840)=[r6, r8, r9, r10], &(0x7f0000000880)=[{0x0, 0x3, 0x6, 0xb}, {0x5, 0x4, 0x3, 0xc}, {0x4, 0x3, 0x6, 0x9}, {0x4, 0x2, 0xe, 0x7}, {0x0, 0x5, 0x5, 0xb}], 0x10, 0xe21}, 0x94) (rerun: 64) r11 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r11, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x8040) (async) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c060002d000036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809b9596bb727ed0bffece0b42a9ecbee5de6ccd400"/216, 0xd8}, {&(0x7f00000001c0)="4b80366395608ae3961c4c71f14e69fa5a0831eefa291d4b6eb3860365848e9367e2284fbff7108c2fb4ab5d516b78f90b1b81d66cffcb264459d9e61890c105b2525e3b1801be4beb88a8daa9405408aa1a6399227189c2d81553a1d17e856f08bd1f47c8d99a746caecfbc8e39a7bae1523c55d80ce7a7601c346ae14f1cebbb3eed4914af40b367f63d7961a12e48c143", 0x92}, {&(0x7f0000000280)="26b14ac3d2e0", 0x6}], 0x3}, 0x20004080) 56.84793ms ago: executing program 3 (id=2332): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x4, 0x80, &(0x7f00000000c0)) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000deffffff090000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000580)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xd, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000001040), 0xadc, r6}, 0x38) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r8 = getpid() r9 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRES32=r1, @ANYRES32=r7], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe51}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x1, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000becd164cd5898c4d4ae71174d9b800000000b70300001a93009bd70000008000000017f50cef785ff5063e23b5502b0403dd22952922735f5200"/74], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r12) 0s ago: executing program 2 (id=2333): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x5, 0x20000001000}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4}, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a80016002000014003", 0x39}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) kernel console output (not intermixed with test programs): f interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.318133][ T6487] batman_adv: batadv0: Interface activated: vlan1 [ 127.696264][ T6506] netlink: 180 bytes leftover after parsing attributes in process `syz.2.184'. [ 128.005984][ T6512] netlink: 198284 bytes leftover after parsing attributes in process `syz.1.186'. [ 128.461961][ T6518] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.187'. [ 128.828710][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.189'. [ 128.886300][ T6523] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.190'. [ 130.971446][ T6546] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 131.000437][ T6546] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.388073][ T6552] netlink: 132 bytes leftover after parsing attributes in process `syz.3.197'. [ 131.833574][ T6562] netlink: 'syz.2.199': attribute type 10 has an invalid length. [ 132.023837][ T6562] team0: Port device dummy0 added [ 133.290019][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.296922][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.070596][ T6594] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 135.100988][ T6594] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 135.218377][ T6597] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 135.306678][ T6594] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 135.311643][ T6598] netlink: 'syz.1.208': attribute type 29 has an invalid length. [ 135.790398][ T6604] netlink: 'syz.1.210': attribute type 3 has an invalid length. [ 135.825697][ T6604] netlink: 'syz.1.210': attribute type 6 has an invalid length. [ 135.857604][ T6604] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.210'. [ 140.647329][ T6620] netlink: 830 bytes leftover after parsing attributes in process `syz.0.214'. [ 140.860260][ T6664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.226'. [ 141.270959][ T6682] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.239'. [ 141.394928][ T6684] pim6reg1: entered promiscuous mode [ 141.438001][ T6684] pim6reg1: entered allmulticast mode [ 142.044559][ T6696] netlink: 'syz.2.236': attribute type 13 has an invalid length. [ 142.068071][ T6696] netlink: 160 bytes leftover after parsing attributes in process `syz.2.236'. [ 142.145043][ T6696] erspan0: refused to change device tx_queue_len [ 142.187464][ T6696] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 142.314093][ T6706] dvmrp1: tun_chr_ioctl cmd 1074812118 [ 142.650449][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 142.720471][ T6722] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 142.752666][ T6722] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.243'. [ 142.794893][ T6722] netlink: 9 bytes leftover after parsing attributes in process `syz.3.243'. [ 143.104252][ T6730] netlink: 'syz.1.244': attribute type 6 has an invalid length. [ 143.133631][ T6730] netlink: 'syz.1.244': attribute type 1 has an invalid length. [ 143.155333][ T6730] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.244'. [ 143.296424][ T6738] netlink: 'syz.2.247': attribute type 2 has an invalid length. [ 143.327849][ T6738] netlink: 'syz.2.247': attribute type 8 has an invalid length. [ 143.335620][ T6738] netlink: 132 bytes leftover after parsing attributes in process `syz.2.247'. [ 143.417728][ T6747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.248'. [ 143.455602][ T6747] netlink: 60 bytes leftover after parsing attributes in process `syz.3.248'. [ 143.496111][ T6748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.248'. [ 144.936420][ T6811] netlink: 'syz.2.257': attribute type 3 has an invalid length. [ 145.882061][ T6847] netlink: 'syz.3.269': attribute type 1 has an invalid length. [ 146.171666][ T6857] netlink: 'syz.2.272': attribute type 10 has an invalid length. [ 147.035016][ T6869] syzkaller0: entered promiscuous mode [ 147.046146][ T6869] syzkaller0: entered allmulticast mode [ 149.550238][ T6909] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 149.626706][ T6909] team0: Port device wlan1 added [ 149.702902][ T6908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.924015][ T6932] delete_channel: no stack [ 153.280025][ T6948] netlink: 'syz.3.293': attribute type 21 has an invalid length. [ 153.297704][ T6948] __nla_validate_parse: 6 callbacks suppressed [ 153.297720][ T6948] netlink: 164 bytes leftover after parsing attributes in process `syz.3.293'. [ 153.336991][ T6948] netlink: 'syz.3.293': attribute type 3 has an invalid length. [ 153.365163][ T6948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.293'. [ 153.392957][ T6948] netlink: 'syz.3.293': attribute type 21 has an invalid length. [ 153.405784][ T6953] netlink: 'syz.3.293': attribute type 3 has an invalid length. [ 153.413786][ T6948] netlink: 164 bytes leftover after parsing attributes in process `syz.3.293'. [ 153.428892][ T6953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.293'. [ 153.890202][ T6961] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 153.985789][ T6961] team0: Port device wlan1 added [ 154.041229][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.872627][ T7009] netlink: 'syz.2.311': attribute type 10 has an invalid length. [ 155.921424][ T7014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.981074][ T7009] team0: Device wg1 is of different type [ 156.378451][ T7027] netlink: 'syz.2.316': attribute type 2 has an invalid length. [ 156.401074][ T7027] netlink: 'syz.2.316': attribute type 8 has an invalid length. [ 156.439910][ T7027] netlink: 132 bytes leftover after parsing attributes in process `syz.2.316'. [ 156.468155][ T7033] netlink: 'syz.0.318': attribute type 21 has an invalid length. [ 156.476194][ T7033] netlink: 132 bytes leftover after parsing attributes in process `syz.0.318'. [ 156.847347][ T7048] netlink: 'syz.3.322': attribute type 7 has an invalid length. [ 157.126826][ T7056] netlink: 'syz.0.326': attribute type 10 has an invalid length. [ 157.191307][ T7056] team0: Device veth0_macvtap failed to register rx_handler [ 157.620015][ T7076] netlink: 'syz.1.334': attribute type 9 has an invalid length. [ 157.632140][ T7076] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.334'. [ 157.769160][ T7080] netlink: 'syz.1.334': attribute type 5 has an invalid length. [ 157.854645][ T7080] netlink: 'syz.1.334': attribute type 9 has an invalid length. [ 157.875612][ T7080] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.334'. [ 158.146306][ T7087] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.336'. [ 159.805938][ T7087] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.336'. [ 160.153717][ T7100] À: port 1(veth1_virt_wifi) entered blocking state [ 160.178345][ T7100] À: port 1(veth1_virt_wifi) entered disabled state [ 160.185590][ T7100] veth1_virt_wifi: entered allmulticast mode [ 160.209313][ T7100] veth1_virt_wifi: entered promiscuous mode [ 160.505662][ T7122] netlink: 'syz.1.346': attribute type 2 has an invalid length. [ 160.519470][ T7122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.346'. [ 161.116453][ T7131] validate_nla: 1 callbacks suppressed [ 161.116495][ T7131] netlink: 'syz.3.348': attribute type 21 has an invalid length. [ 161.137531][ T7131] netlink: 156 bytes leftover after parsing attributes in process `syz.3.348'. [ 161.345223][ T7134] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 161.371020][ T7134] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 161.410813][ T7135] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 161.433963][ T7134] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 161.487269][ T7135] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 162.235285][ T7160] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.358'. [ 162.259707][ T7160] openvswitch: netlink: Key type 4112 is out of range max 32 [ 162.290423][ T7160] netlink: 'syz.3.358': attribute type 25 has an invalid length. [ 162.312044][ T7160] netlink: 'syz.3.358': attribute type 3 has an invalid length. [ 162.320866][ T7160] netlink: 132 bytes leftover after parsing attributes in process `syz.3.358'. [ 162.498197][ T7172] netlink: 'syz.3.362': attribute type 2 has an invalid length. [ 162.506325][ T7172] netlink: 'syz.3.362': attribute type 1 has an invalid length. [ 162.706543][ T7181] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.364'. [ 162.759130][ T7188] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.366'. [ 162.782218][ T7188] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.366'. [ 162.817982][ T7188] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.366'. [ 165.146736][ T7255] netlink: 132 bytes leftover after parsing attributes in process `syz.0.388'. [ 165.195157][ T7258] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.389'. [ 165.235691][ T7258] openvswitch: netlink: Key type 29 is not supported [ 165.413307][ T7265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.392'. [ 165.461885][ T7265] ipvlan1: entered promiscuous mode [ 165.467204][ T7265] ipvlan1: entered allmulticast mode [ 165.502323][ T7265] veth0_vlan: entered allmulticast mode [ 165.520600][ T7265] bridge0: port 3(ipvlan1) entered blocking state [ 165.542898][ T7265] bridge0: port 3(ipvlan1) entered disabled state [ 165.560244][ T7265] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 165.602679][ T7270] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.394'. [ 165.623599][ T7270] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.394'. [ 166.144022][ T7290] team0: Device hsr_slave_0 failed to register rx_handler [ 166.448269][ T7290] syz.3.398 (7290) used greatest stack depth: 17896 bytes left [ 166.743304][ T7309] aaaaaaaaaaaaaaa: entered promiscuous mode [ 166.810883][ T7312] validate_nla: 8 callbacks suppressed [ 166.810903][ T7312] netlink: 'syz.2.405': attribute type 9 has an invalid length. [ 166.828511][ T7312] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.405'. [ 166.975031][ T7312] netlink: 'syz.2.405': attribute type 5 has an invalid length. [ 167.084898][ T7313] netlink: 'syz.2.405': attribute type 9 has an invalid length. [ 167.103239][ T7313] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.405'. [ 167.692301][ T7326] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.409'. [ 167.815550][ T7332] netlink: 'syz.2.411': attribute type 28 has an invalid length. [ 167.828998][ T7332] netlink: 'syz.2.411': attribute type 29 has an invalid length. [ 167.837061][ T7332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.411'. [ 168.800484][ T7363] netlink: 'syz.0.421': attribute type 9 has an invalid length. [ 168.870388][ T7363] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.421'. [ 168.915096][ T7367] netlink: 'syz.3.423': attribute type 21 has an invalid length. [ 169.227618][ T7363] netlink: 'syz.0.421': attribute type 5 has an invalid length. [ 169.445157][ T7366] netlink: 'syz.0.421': attribute type 9 has an invalid length. [ 169.464476][ T7383] netlink: 'syz.1.428': attribute type 10 has an invalid length. [ 169.769132][ T7383] team0 (unregistering): Port device team_slave_0 removed [ 169.818351][ T7383] team0 (unregistering): Port device team_slave_1 removed [ 170.541694][ T7401] __nla_validate_parse: 2 callbacks suppressed [ 170.541714][ T7401] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.432'. [ 171.894238][ T7428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 173.616058][ T7428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.441'. [ 173.625832][ T7437] validate_nla: 1 callbacks suppressed [ 173.625847][ T7437] netlink: 'syz.0.442': attribute type 10 has an invalid length. [ 173.667373][ T7437] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 173.871270][ T7446] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.444'. [ 173.891587][ T7446] openvswitch: netlink: Duplicate key (type 0). [ 175.956610][ T7457] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 175.974533][ T7457] team0: Device hsr_slave_0 failed to register rx_handler [ 176.280837][ T7468] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.452'. [ 176.998511][ T7487] netlink: 'syz.0.458': attribute type 29 has an invalid length. [ 177.029950][ T7487] netlink: 'syz.0.458': attribute type 29 has an invalid length. [ 177.066213][ T7487] netlink: 'syz.0.458': attribute type 29 has an invalid length. [ 177.291961][ T7497] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.462'. [ 177.302362][ T7497] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 177.318486][ T7495] netlink: 'syz.2.461': attribute type 10 has an invalid length. [ 177.382942][ T7495] team0: Device hsr_slave_0 failed to register rx_handler [ 177.835028][ T7501] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.465'. [ 177.867843][ T7501] openvswitch: netlink: Key type 4112 is out of range max 32 [ 178.299963][ T7511] IPv6: Can't replace route, no match found [ 179.175526][ T7526] netlink: 'syz.2.472': attribute type 153 has an invalid length. [ 179.229398][ T7526] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.472'. [ 179.587016][ T7534] netlink: 'syz.2.473': attribute type 29 has an invalid length. [ 179.622093][ T7534] netlink: 'syz.2.473': attribute type 29 has an invalid length. [ 179.660976][ T7534] netlink: 'syz.2.473': attribute type 29 has an invalid length. [ 180.520465][ T7570] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.484'. [ 182.388822][ T7621] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.396136][ T7621] IPv6: NLM_F_CREATE should be set when creating new route [ 182.403588][ T7621] IPv6: NLM_F_CREATE should be set when creating new route [ 182.410910][ T7621] IPv6: NLM_F_CREATE should be set when creating new route [ 182.912857][ T7630] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.503'. [ 185.088451][ T7671] netlink: 16358 bytes leftover after parsing attributes in process `syz.0.516'. [ 185.583274][ T7686] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 186.029460][ T7695] pimreg0: tun_chr_ioctl cmd 1074025673 [ 186.035312][ T7695] pimreg0: tun_chr_ioctl cmd 1074025673 [ 186.043208][ T7695] pimreg0: tun_chr_ioctl cmd 1074025673 [ 186.386265][ T7706] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.525'. [ 187.821156][ T7706] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.525'. [ 187.830764][ T7708] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.526'. [ 188.049847][ T7717] netlink: 'syz.0.528': attribute type 21 has an invalid length. [ 188.082358][ T7717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.528'. [ 188.147122][ T7720] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.530'. [ 188.438407][ T7732] netlink: 'syz.0.533': attribute type 29 has an invalid length. [ 188.467864][ T7729] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.532'. [ 188.481118][ T7732] netlink: 'syz.0.533': attribute type 29 has an invalid length. [ 188.496933][ T7737] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.534'. [ 189.074997][ T7755] pim6reg1: entered promiscuous mode [ 189.081545][ T7755] pim6reg1: entered allmulticast mode [ 189.805822][ T7781] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.548'. [ 189.839282][ T7781] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 189.867765][ T7783] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.551'. [ 189.922649][ T7775] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.549'. [ 189.954951][ T7779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.028252][ T7777] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.017003][ T7796] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.554'. [ 192.026568][ T7796] bridge_slave_1: default FDB implementation only supports local addresses [ 192.036054][ T7800] netlink: 'syz.1.554': attribute type 5 has an invalid length. [ 192.196662][ T7803] netlink: 'syz.0.555': attribute type 3 has an invalid length. [ 192.204809][ T7803] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.555'. [ 192.236574][ T7805] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.556'. [ 194.642197][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.648697][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.931324][ T7843] netlink: 180 bytes leftover after parsing attributes in process `syz.1.569'. [ 194.942610][ T7841] netlink: 'syz.3.568': attribute type 9 has an invalid length. [ 194.953427][ T7841] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.568'. [ 195.055211][ T7847] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.571'. [ 195.072156][ T7848] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.571'. [ 195.278694][ T7853] netlink: 751 bytes leftover after parsing attributes in process `syz.2.572'. [ 195.485195][ T7855] netlink: 'syz.1.573': attribute type 39 has an invalid length. [ 196.466143][ T7906] sctp: [Deprecated]: syz.3.586 (pid 7906) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.466143][ T7906] Use struct sctp_sack_info instead [ 197.722492][ T7913] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 197.765521][ T7913] syzkaller0: entered promiscuous mode [ 197.778814][ T7913] syzkaller0: entered allmulticast mode [ 198.041925][ T7918] delete_channel: no stack [ 200.393002][ T7955] netlink: 'syz.0.600': attribute type 9 has an invalid length. [ 200.404738][ T7955] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.600'. [ 201.165353][ T7973] netlink: 'syz.0.607': attribute type 21 has an invalid length. [ 201.610740][ T7987] netlink: 'syz.2.613': attribute type 29 has an invalid length. [ 201.637838][ T7987] netlink: 'syz.2.613': attribute type 29 has an invalid length. [ 201.658156][ T7987] netlink: 'syz.2.613': attribute type 29 has an invalid length. [ 201.680192][ T7987] netlink: 'syz.2.613': attribute type 29 has an invalid length. [ 201.706884][ T7987] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.613'. [ 202.060906][ T7998] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.614'. [ 202.106140][ T7998] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 202.133973][ T7997] netlink: 144 bytes leftover after parsing attributes in process `syz.3.614'. [ 202.468824][ T8003] netlink: 'syz.2.616': attribute type 9 has an invalid length. [ 202.499986][ T8003] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.616'. [ 202.582215][ T8007] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.617'. [ 203.366716][ T8018] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 203.511460][ T8018] batman_adv: batadv0: Interface deactivated: vlan1 [ 203.949919][ T8018] batman_adv: batadv0: Interface activated: vlan1 [ 203.961566][ T8018] team0: Device veth0_vlan failed to register rx_handler [ 204.178571][ T8018] batman_adv: batadv0: Interface deactivated: vlan1 [ 204.468309][ T8018] syz.2.622 (8018) used greatest stack depth: 17576 bytes left [ 204.583649][ T8022] netlink: 'syz.2.622': attribute type 10 has an invalid length. [ 206.555013][ T8087] netlink: 'syz.2.639': attribute type 10 has an invalid length. [ 206.592357][ T8087] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.639'. [ 206.970003][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 206.976288][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 206.983657][ T5772] Bluetooth: hci0: command 0x0406 tx timeout [ 206.983685][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 207.475782][ T8117] netlink: 'syz.3.646': attribute type 12 has an invalid length. [ 207.505210][ T8117] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.646'. [ 207.539500][ T8124] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 207.566567][ T8124] netlink: 'syz.1.649': attribute type 10 has an invalid length. [ 207.589502][ T8124] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.649'. [ 207.637642][ T8124] openvswitch: netlink: Message has 4 unknown bytes. [ 207.831624][ T8136] netlink: 28 bytes leftover after parsing attributes in process `syz.0.651'. [ 208.260711][ T8143] netlink: 'syz.3.654': attribute type 33 has an invalid length. [ 208.297541][ T8143] netlink: 36 bytes leftover after parsing attributes in process `syz.3.654'. [ 208.684410][ T8152] syzkaller0: entered promiscuous mode [ 208.696836][ T8152] syzkaller0: entered allmulticast mode [ 213.097112][ T8176] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 213.160163][ T8176] veth0_vlan: left promiscuous mode [ 213.178142][ T8176] veth0_vlan: entered promiscuous mode [ 213.199632][ T8176] team0: Device veth0_vlan failed to register rx_handler [ 213.262694][ T8179] netlink: 'syz.3.663': attribute type 10 has an invalid length. [ 214.407130][ T8218] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 214.421363][ T8219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.538759][ T8223] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.679'. [ 214.622444][ T8225] netlink: 'syz.1.677': attribute type 10 has an invalid length. [ 218.199680][ T8288] netlink: 'syz.3.696': attribute type 21 has an invalid length. [ 219.266892][ T8302] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 219.522534][ T8302] team0: Device xfrm0 is of different type [ 221.858668][ T8353] netlink: 10 bytes leftover after parsing attributes in process `syz.0.712'. [ 222.601620][ T8361] syz.3.721[8361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.601842][ T8361] syz.3.721[8361] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.584032][ T8372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.716'. [ 224.614632][ T8403] netlink: 830 bytes leftover after parsing attributes in process `syz.1.727'. [ 225.180494][ T8420] netlink: 'syz.1.735': attribute type 2 has an invalid length. [ 225.207019][ T8420] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.735'. [ 225.770562][ T8433] netlink: 21 bytes leftover after parsing attributes in process `syz.1.738'. [ 225.789879][ T8433] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 226.850651][ T8451] netlink: 'syz.0.744': attribute type 4 has an invalid length. [ 226.875645][ T8451] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.744'. [ 228.602194][ T8481] netlink: 'syz.1.751': attribute type 10 has an invalid length. [ 228.617679][ T8481] netlink: 2 bytes leftover after parsing attributes in process `syz.1.751'. [ 228.626808][ T8481] hsr0: entered promiscuous mode [ 228.683558][ T8481] bridge0: port 3(hsr0) entered blocking state [ 228.703102][ T8481] bridge0: port 3(hsr0) entered disabled state [ 228.738853][ T8481] hsr0: entered allmulticast mode [ 228.755650][ T8481] hsr_slave_0: entered allmulticast mode [ 228.777920][ T8481] hsr_slave_1: entered allmulticast mode [ 228.822000][ T8481] bridge0: port 3(hsr0) entered blocking state [ 228.829285][ T8481] bridge0: port 3(hsr0) entered forwarding state [ 229.473407][ T8494] netlink: 'syz.3.752': attribute type 21 has an invalid length. [ 229.650702][ T8497] IPv6: Can't replace route, no match found [ 229.673149][ T8497] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 229.813314][ T8500] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.757'. [ 230.022847][ T8504] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 230.643566][ T8520] netlink: 'syz.0.763': attribute type 10 has an invalid length. [ 230.655780][ T8520] netlink: 2 bytes leftover after parsing attributes in process `syz.0.763'. [ 230.669932][ T8520] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 230.711321][ T8520] hsr0: entered promiscuous mode [ 230.820795][ T8520] bridge0: port 3(hsr0) entered blocking state [ 230.828830][ T8519] netlink: 'syz.3.762': attribute type 3 has an invalid length. [ 230.847624][ T8519] netlink: 'syz.3.762': attribute type 4 has an invalid length. [ 230.859082][ T8520] bridge0: port 3(hsr0) entered disabled state [ 230.874370][ T8519] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.762'. [ 230.924564][ T8520] hsr0: entered allmulticast mode [ 230.963195][ T8520] hsr_slave_0: entered allmulticast mode [ 230.993345][ T8520] hsr_slave_1: entered allmulticast mode [ 231.084905][ T8520] bridge0: port 3(hsr0) entered blocking state [ 231.093586][ T8520] bridge0: port 3(hsr0) entered listening state [ 231.325758][ T8525] netlink: 'syz.2.765': attribute type 4 has an invalid length. [ 231.333947][ T8525] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.765'. [ 231.527955][ T8526] syzkaller0: entered promiscuous mode [ 231.541352][ T8526] syzkaller0: entered allmulticast mode [ 231.739806][ T8545] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 231.777602][ T8545] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.769'. [ 236.226415][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.787'. [ 236.277132][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.787'. [ 236.319106][ T8621] netlink: 60 bytes leftover after parsing attributes in process `syz.3.787'. [ 236.350313][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.787'. [ 237.485430][ T8651] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.797'. [ 238.740726][ T8667] netlink: 'syz.0.804': attribute type 12 has an invalid length. [ 238.758041][ T8667] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.804'. [ 238.833319][ T8669] netlink: 'syz.3.805': attribute type 1 has an invalid length. [ 238.841901][ T8669] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.805'. [ 239.196272][ T8680] netlink: 6 bytes leftover after parsing attributes in process `syz.0.808'. [ 239.236507][ T8680] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 239.574941][ T8689] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.812'. [ 239.817082][ T8693] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 240.145653][ T8702] netlink: 763 bytes leftover after parsing attributes in process `syz.0.815'. [ 240.355755][ T8705] netlink: 'syz.2.817': attribute type 2 has an invalid length. [ 240.369299][ T8712] netlink: 'syz.0.819': attribute type 1 has an invalid length. [ 240.388079][ T8705] netlink: 'syz.2.817': attribute type 4 has an invalid length. [ 240.527130][ T8714] netlink: 'syz.1.820': attribute type 21 has an invalid length. [ 240.559092][ T8714] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 240.775660][ T8725] netlink: 'syz.0.823': attribute type 6 has an invalid length. [ 240.986698][ T8736] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 241.012319][ T8736] openvswitch: netlink: Message has 1 unknown bytes. [ 241.640599][ T8758] __nla_validate_parse: 5 callbacks suppressed [ 241.640639][ T8758] netlink: 830 bytes leftover after parsing attributes in process `syz.1.833'. [ 242.213404][ T8791] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 242.231983][ T8791] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.841'. [ 242.251486][ T8794] netlink: 'syz.2.843': attribute type 10 has an invalid length. [ 242.324940][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.333643][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.383352][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.390942][ T8794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.399611][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.406851][ T8794] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.443576][ T8794] team0: Port device bridge0 added [ 242.511199][ T8795] netlink: 140 bytes leftover after parsing attributes in process `syz.2.843'. [ 242.720307][ T8802] netlink: 132 bytes leftover after parsing attributes in process `syz.2.847'. [ 242.914171][ T8806] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.849'. [ 242.951620][ T8806] openvswitch: netlink: Flow key attr not present in new flow. [ 242.982329][ T8810] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.850'. [ 242.995071][ T8810] openvswitch: netlink: Flow key attr not present in new flow. [ 243.008255][ T8810] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.850'. [ 243.156254][ T8806] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.849'. [ 243.406726][ T8814] C: renamed from team_slave_0 [ 244.119938][ T8814] validate_nla: 5 callbacks suppressed [ 244.119971][ T8814] netlink: 'syz.2.852': attribute type 1 has an invalid length. [ 244.139995][ T8814] netlink: 116 bytes leftover after parsing attributes in process `syz.2.852'. [ 244.985419][ T5785] Bluetooth: hci0: ACL packet for unknown connection handle 3072 [ 246.478753][ C1] bridge0: port 3(hsr0) entered learning state [ 246.923518][ T8919] mac80211_hwsim hwsim6 »»»»»»: renamed from wlan0 [ 246.967839][ T8915] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.872'. [ 247.304479][ T8930] netlink: 'syz.2.876': attribute type 10 has an invalid length. [ 247.321542][ T8930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.876'. [ 247.339670][ T8930] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 247.962513][ T8944] netlink: 'syz.3.880': attribute type 10 has an invalid length. [ 247.973249][ T8944] netlink: 2 bytes leftover after parsing attributes in process `syz.3.880'. [ 248.002346][ T8944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.025769][ T8944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.045248][ T8944] hsr0: entered promiscuous mode [ 248.101908][ T8944] bridge0: port 3(hsr0) entered blocking state [ 248.133656][ T8944] bridge0: port 3(hsr0) entered disabled state [ 248.160548][ T8944] hsr0: entered allmulticast mode [ 248.182233][ T8944] hsr_slave_0: entered allmulticast mode [ 248.189836][ T8944] hsr_slave_1: entered allmulticast mode [ 248.532139][ T8951] netlink: 'syz.0.881': attribute type 1 has an invalid length. [ 248.544639][ T8951] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.881'. [ 248.567280][ T8957] syzkaller0: entered promiscuous mode [ 248.583649][ T8957] syzkaller0: entered allmulticast mode [ 248.649651][ T8951] netlink: 'syz.0.881': attribute type 4 has an invalid length. [ 248.697733][ T8951] netlink: 152 bytes leftover after parsing attributes in process `syz.0.881'. [ 248.775305][ T8951] wlan1: mtu less than device minimum [ 249.063030][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 3352 [ 249.879338][ T8987] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.890'. [ 250.199105][ T8995] netlink: 'syz.2.891': attribute type 9 has an invalid length. [ 250.206852][ T8995] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.891'. [ 251.389118][ T8994] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 251.396172][ T8994] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 251.689185][ T9008] netlink: 'syz.0.895': attribute type 27 has an invalid length. [ 251.723116][ T9008] netlink: 164 bytes leftover after parsing attributes in process `syz.0.895'. [ 252.126868][ T9020] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.899'. [ 252.844386][ T5082] Bluetooth: hci2: ISO packet for unknown connection handle 48 [ 253.033577][ T9039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.902'. [ 253.136715][ T9026] syzkaller0: entered promiscuous mode [ 253.142476][ T9026] syzkaller0: entered allmulticast mode [ 253.149174][ T9039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.902'. [ 253.171218][ T9041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.902'. [ 253.188134][ T9040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.902'. [ 253.227681][ T9043] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.903'. [ 253.237572][ T9043] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 256.221580][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.233852][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.275094][ T9068] netlink: 168 bytes leftover after parsing attributes in process `syz.1.911'. [ 259.701558][ T9117] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.923'. [ 259.705174][ T9115] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.921'. [ 259.736581][ T9115] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 260.184265][ T9141] netlink: 'syz.3.933': attribute type 6 has an invalid length. [ 260.192276][ T9141] netlink: 168 bytes leftover after parsing attributes in process `syz.3.933'. [ 260.217034][ T9141] netlink: 'syz.3.933': attribute type 6 has an invalid length. [ 260.232585][ T9141] netlink: 168 bytes leftover after parsing attributes in process `syz.3.933'. [ 261.840528][ C1] bridge0: port 3(hsr0) entered forwarding state [ 261.847003][ C1] bridge0: topology change detected, propagating [ 261.966122][ T9177] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.944'. [ 262.111931][ T9190] netlink: 'syz.3.947': attribute type 9 has an invalid length. [ 262.130861][ T9190] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.947'. [ 262.532475][ T9195] syzkaller0: entered promiscuous mode [ 262.558476][ T9195] syzkaller0: entered allmulticast mode [ 262.578113][ T9200] netlink: 'syz.3.950': attribute type 1 has an invalid length. [ 262.595884][ T9200] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.950'. [ 265.950892][ T9223] netlink: 'syz.3.956': attribute type 3 has an invalid length. [ 265.964082][ T9223] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.956'. [ 267.593637][ T9235] netlink: 'syz.3.960': attribute type 21 has an invalid length. [ 267.621505][ T9235] netlink: 128 bytes leftover after parsing attributes in process `syz.3.960'. [ 267.635763][ T9235] netlink: 'syz.3.960': attribute type 4 has an invalid length. [ 267.648091][ T9235] netlink: 'syz.3.960': attribute type 3 has an invalid length. [ 267.672252][ T9235] netlink: 3 bytes leftover after parsing attributes in process `syz.3.960'. [ 267.721275][ T9236] netlink: 2 bytes leftover after parsing attributes in process `syz.0.958'. [ 267.733840][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.754989][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.765740][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.782769][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.794638][ T9236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.828132][ T9236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.853415][ T9236] batadv_slave_1: entered promiscuous mode [ 267.861654][ T9239] netlink: 'syz.3.960': attribute type 1 has an invalid length. [ 268.085440][ T9244] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 268.166871][ T9251] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.965'. [ 268.211571][ T9251] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.965'. [ 268.229409][ T9244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.254668][ T9254] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 268.276668][ T9244] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 268.286540][ T9251] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.965'. [ 268.299838][ T9254] netlink: 'syz.1.963': attribute type 3 has an invalid length. [ 268.312355][ T9250] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 268.321072][ T9254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.963'. [ 268.340401][ T9251] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.965'. [ 268.374140][ T9250] netlink: 40 bytes leftover after parsing attributes in process `syz.1.963'. [ 268.420356][ T9250] batadv0: entered promiscuous mode [ 268.430356][ T9250] batadv0: entered allmulticast mode [ 268.439783][ T9250] bond0: (slave batadv0): Releasing backup interface [ 268.465884][ T9250] bridge0: port 4(batadv0) entered blocking state [ 268.476954][ T9250] bridge0: port 4(batadv0) entered disabled state [ 268.665925][ T6412] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 268.675744][ T6412] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 269.290292][ T9264] netlink: 'syz.0.968': attribute type 21 has an invalid length. [ 269.511508][ T9274] team_slave_0: entered allmulticast mode [ 269.600529][ T9279] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 269.635857][ T9279] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 271.199855][ T9343] __nla_validate_parse: 31 callbacks suppressed [ 271.199873][ T9343] netlink: 64 bytes leftover after parsing attributes in process `syz.1.990'. [ 271.694585][ T9363] validate_nla: 4 callbacks suppressed [ 271.694639][ T9363] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 271.726193][ T9363] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.997'. [ 272.406613][ T9381] netlink: 133828 bytes leftover after parsing attributes in process `syz.2.1001'. [ 272.885241][ T9393] tap0: tun_chr_ioctl cmd 1074025677 [ 272.903634][ T9393] tap0: linktype set to 0 [ 272.943148][ T9392] netlink: 'syz.2.1005': attribute type 10 has an invalid length. [ 272.952558][ T9392] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1005'. [ 273.081310][ T9396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1006'. [ 273.640299][ T9392] batman_adv: batadv0: Removing interface: vlan1 [ 274.983754][ T9430] syz.3.1016: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 275.028472][ T9430] CPU: 1 PID: 9430 Comm: syz.3.1016 Not tainted syzkaller #0 [ 275.035949][ T9430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 275.046073][ T9430] Call Trace: [ 275.049425][ T9430] [ 275.052402][ T9430] dump_stack_lvl+0x18c/0x250 [ 275.057158][ T9430] ? show_regs_print_info+0x20/0x20 [ 275.062425][ T9430] ? load_image+0x420/0x420 [ 275.067012][ T9430] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 275.073476][ T9430] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 275.080051][ T9430] warn_alloc+0x246/0x340 [ 275.084457][ T9430] ? stack_trace_save+0xaa/0x100 [ 275.089454][ T9430] ? zone_watermark_ok_safe+0x230/0x230 [ 275.095083][ T9430] ? kasan_set_track+0x5f/0x70 [ 275.099899][ T9430] ? kasan_set_track+0x4e/0x70 [ 275.104722][ T9430] ? __kasan_kmalloc+0x8f/0xa0 [ 275.109542][ T9430] ? xsk_init_queue+0xad/0x100 [ 275.114373][ T9430] ? xsk_setsockopt+0x4e5/0x760 [ 275.119290][ T9430] ? do_sock_setsockopt+0x175/0x1a0 [ 275.124553][ T9430] ? __x64_sys_setsockopt+0x182/0x200 [ 275.129999][ T9430] __vmalloc_node_range+0x126/0x1330 [ 275.135380][ T9430] ? free_vm_area+0x50/0x50 [ 275.140055][ T9430] vmalloc_user+0x74/0x80 [ 275.144481][ T9430] ? xskq_create+0xbf/0x170 [ 275.149049][ T9430] xskq_create+0xbf/0x170 [ 275.153439][ T9430] xsk_init_queue+0xad/0x100 [ 275.158086][ T9430] xsk_setsockopt+0x4e5/0x760 [ 275.162824][ T9430] ? xsk_poll+0x680/0x680 [ 275.167218][ T9430] ? __fget_files+0x28/0x4b0 [ 275.171867][ T9430] ? __fget_files+0x28/0x4b0 [ 275.176517][ T9430] ? aa_sock_opt_perm+0x74/0x100 [ 275.181523][ T9430] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 275.187125][ T9430] ? security_socket_setsockopt+0x7e/0xa0 [ 275.192894][ T9430] ? xsk_poll+0x680/0x680 [ 275.197284][ T9430] do_sock_setsockopt+0x175/0x1a0 [ 275.202361][ T9430] ? __fdget+0x180/0x210 [ 275.203980][ T9438] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1019'. [ 275.206643][ T9430] __x64_sys_setsockopt+0x182/0x200 [ 275.221209][ T9430] do_syscall_64+0x55/0xa0 [ 275.225676][ T9430] ? clear_bhb_loop+0x40/0x90 [ 275.230407][ T9430] ? clear_bhb_loop+0x40/0x90 [ 275.235138][ T9430] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.241092][ T9430] RIP: 0033:0x7f7a64f9c819 [ 275.245562][ T9430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.265246][ T9430] RSP: 002b:00007f7a65e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 275.273730][ T9430] RAX: ffffffffffffffda RBX: 00007f7a65215fa0 RCX: 00007f7a64f9c819 [ 275.281752][ T9430] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 275.289819][ T9430] RBP: 00007f7a65032c91 R08: 0000000000000004 R09: 0000000000000000 [ 275.297850][ T9430] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 275.305886][ T9430] R13: 00007f7a65216038 R14: 00007f7a65215fa0 R15: 00007fff613b4848 [ 275.313946][ T9430] [ 275.329393][ T9430] Mem-Info: [ 275.353748][ T9430] active_anon:8307 inactive_anon:0 isolated_anon:0 [ 275.353748][ T9430] active_file:16776 inactive_file:40001 isolated_file:0 [ 275.353748][ T9430] unevictable:768 dirty:25 writeback:0 [ 275.353748][ T9430] slab_reclaimable:10153 slab_unreclaimable:94419 [ 275.353748][ T9430] mapped:25697 shmem:3231 pagetables:620 [ 275.353748][ T9430] sec_pagetables:0 bounce:0 [ 275.353748][ T9430] kernel_misc_reclaimable:0 [ 275.353748][ T9430] free:1342008 free_pcp:8813 free_cma:0 [ 275.613278][ T9430] Node 0 active_anon:35628kB inactive_anon:0kB active_file:67104kB inactive_file:159804kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105388kB dirty:100kB writeback:0kB shmem:13888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11244kB pagetables:2480kB sec_pagetables:0kB all_unreclaimable? no [ 275.707507][ T9430] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 275.782534][ T9430] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 275.831657][ T9430] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 275.917674][ T9430] Node 0 DMA32 free:1445812kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:39288kB inactive_anon:0kB active_file:67104kB inactive_file:158984kB unevictable:1536kB writepending:100kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:18076kB local_pcp:11192kB free_cma:0kB [ 276.003733][ T9430] lowmem_reserve[]: 0 0 0 0 0 [ 276.017783][ T9430] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 276.047888][ T9454] delete_channel: no stack [ 276.085901][ T9460] netlink: 'syz.2.1024': attribute type 21 has an invalid length. [ 276.117491][ T9430] lowmem_reserve[]: 0 0 0 0 0 [ 276.127972][ T9460] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1024'. [ 276.157818][ T9430] Node 1 Normal free:3900692kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18232kB local_pcp:8544kB free_cma:0kB [ 276.260818][ T9430] lowmem_reserve[]: 0 0 0 0 0 [ 276.265663][ T9430] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 276.377430][ T9430] Node 0 DMA32: 2*4kB (UE) 2*8kB (UM) 13*16kB (E) 1034*32kB (UME) 200*64kB (UME) 73*128kB (UME) 62*256kB (UME) 30*512kB (UME) 18*1024kB (UME) 7*2048kB (UM) 321*4096kB (UM) = 1434280kB [ 276.495983][ T9464] syzkaller0: entered promiscuous mode [ 276.517642][ T9430] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 276.570404][ T9430] Node 1 Normal: 161*4kB (UE) 52*8kB (UE) 51*16kB (UE) 76*32kB (UE) 21*64kB (UME) 8*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900692kB [ 276.607939][ T9478] tap0: tun_chr_ioctl cmd 1074025677 [ 276.613507][ T9478] tap0: linktype set to 774 [ 276.687456][ T9430] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.721832][ T9430] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.752274][ T9430] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 276.776710][ T9430] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 276.796472][ T9430] 64252 total pagecache pages [ 276.806605][ T9430] 0 pages in swap cache [ 276.816738][ T9430] Free swap = 124996kB [ 276.821062][ T9430] Total swap = 124996kB [ 276.836986][ T9430] 2097051 pages RAM [ 276.847112][ T9430] 0 pages HighMem/MovableOnly [ 276.871643][ T9430] 416927 pages reserved [ 276.875887][ T9430] 0 pages cma reserved [ 277.274965][ T9490] netlink: 'syz.3.1031': attribute type 9 has an invalid length. [ 277.294733][ T9490] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1031'. [ 279.347847][ T9487] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1031'. [ 279.364252][ T9493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1031'. [ 280.172056][ T9511] syzkaller0: entered promiscuous mode [ 280.177753][ T9511] syzkaller0: entered allmulticast mode [ 282.452956][ T9537] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.563159][ T9541] netlink: 'syz.2.1043': attribute type 39 has an invalid length. [ 282.912630][ T9541] hsr_slave_1 (unregistering): left promiscuous mode [ 284.052822][ T9575] netlink: 'syz.1.1055': attribute type 1 has an invalid length. [ 284.060906][ T9575] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1055'. [ 285.838615][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1071'. [ 285.856481][ T9628] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1071'. [ 286.057573][ T9632] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1071'. [ 286.489202][ T9628] syzkaller0: entered promiscuous mode [ 286.495387][ T9628] syzkaller0: entered allmulticast mode [ 286.526682][ T9632] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 286.538349][ T9632] CPU: 1 PID: 9632 Comm: syz.3.1071 Not tainted syzkaller #0 [ 286.545801][ T9632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 286.555901][ T9632] Call Trace: [ 286.559257][ T9632] [ 286.562221][ T9632] dump_stack_lvl+0x18c/0x250 [ 286.566955][ T9632] ? show_regs_print_info+0x20/0x20 [ 286.572268][ T9632] ? load_image+0x420/0x420 [ 286.576845][ T9632] sysfs_warn_dup+0x8e/0xa0 [ 286.581434][ T9632] sysfs_do_create_link_sd+0xc0/0x110 [ 286.586870][ T9632] device_add_class_symlinks+0x1cf/0x240 [ 286.592565][ T9632] device_add+0x507/0xc20 [ 286.596960][ T9632] wiphy_register+0x1dad/0x2ae0 [ 286.601891][ T9632] ? cfg80211_event_work+0x40/0x40 [ 286.607042][ T9632] ? minstrel_ht_alloc+0x88a/0x990 [ 286.612198][ T9632] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 286.618302][ T9632] ieee80211_register_hw+0x3464/0x4250 [ 286.623856][ T9632] ? ieee80211_tasklet_handler+0x20/0x20 [ 286.629518][ T9632] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 286.635479][ T9632] ? __debug_object_init+0xec/0x450 [ 286.640721][ T9632] ? __asan_memset+0x22/0x40 [ 286.645345][ T9632] ? __hrtimer_init+0x186/0x270 [ 286.650237][ T9632] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 286.656015][ T9632] ? mac80211_hwsim_free+0x220/0x220 [ 286.661332][ T9632] ? rcu_is_watching+0x15/0xb0 [ 286.666138][ T9632] ? kstrndup+0xbd/0x140 [ 286.670430][ T9632] hwsim_new_radio_nl+0xdc9/0x1a90 [ 286.675581][ T9632] ? __nla_validate+0x50/0x50 [ 286.680302][ T9632] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 286.686668][ T9632] ? __nla_parse+0x40/0x50 [ 286.691115][ T9632] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 286.697475][ T9632] genl_family_rcv_msg_doit+0x211/0x310 [ 286.703070][ T9632] ? end_current_label_crit_section+0x170/0x170 [ 286.709345][ T9632] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 286.715286][ T9632] ? bpf_lsm_capable+0x9/0x10 [ 286.719998][ T9632] ? security_capable+0x89/0xb0 [ 286.724889][ T9632] genl_rcv_msg+0x619/0x7a0 [ 286.729424][ T9632] ? genl_bind+0x360/0x360 [ 286.733892][ T9632] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 286.740262][ T9632] netlink_rcv_skb+0x241/0x4d0 [ 286.745059][ T9632] ? genl_bind+0x360/0x360 [ 286.749504][ T9632] ? netlink_ack+0x1180/0x1180 [ 286.754322][ T9632] ? __lock_acquire+0x7d40/0x7d40 [ 286.759378][ T9632] ? down_read+0x1ac/0x2e0 [ 286.763824][ T9632] genl_rcv+0x28/0x40 [ 286.767830][ T9632] netlink_unicast+0x751/0x8d0 [ 286.772645][ T9632] netlink_sendmsg+0x8d0/0xbf0 [ 286.777452][ T9632] ? netlink_getsockopt+0x590/0x590 [ 286.782688][ T9632] ? aa_sock_msg_perm+0x94/0x150 [ 286.787663][ T9632] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.792980][ T9632] ? security_socket_sendmsg+0x80/0xa0 [ 286.798469][ T9632] ? netlink_getsockopt+0x590/0x590 [ 286.803709][ T9632] ____sys_sendmsg+0x5ba/0x960 [ 286.808517][ T9632] ? __asan_memset+0x22/0x40 [ 286.813236][ T9632] ? __sys_sendmsg_sock+0x30/0x30 [ 286.818288][ T9632] ? __import_iovec+0x5f2/0x850 [ 286.823178][ T9632] ? import_iovec+0x73/0xa0 [ 286.827711][ T9632] ___sys_sendmsg+0x2a6/0x360 [ 286.832437][ T9632] ? __sys_sendmsg+0x2a0/0x2a0 [ 286.837250][ T9632] ? debug_mutex_init+0x38/0x70 [ 286.842160][ T9632] __se_sys_sendmsg+0x1c2/0x2b0 [ 286.847044][ T9632] ? __x64_sys_sendmsg+0x80/0x80 [ 286.852032][ T9632] ? lockdep_hardirqs_on+0x98/0x150 [ 286.857267][ T9632] do_syscall_64+0x55/0xa0 [ 286.861719][ T9632] ? clear_bhb_loop+0x40/0x90 [ 286.866454][ T9632] ? clear_bhb_loop+0x40/0x90 [ 286.871160][ T9632] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.877104][ T9632] RIP: 0033:0x7f7a64f9c819 [ 286.881551][ T9632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.901192][ T9632] RSP: 002b:00007f7a65e03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.909682][ T9632] RAX: ffffffffffffffda RBX: 00007f7a65216090 RCX: 00007f7a64f9c819 [ 286.917700][ T9632] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 286.925713][ T9632] RBP: 00007f7a65032c91 R08: 0000000000000000 R09: 0000000000000000 [ 286.933710][ T9632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.941715][ T9632] R13: 00007f7a65216128 R14: 00007f7a65216090 R15: 00007fff613b4848 [ 286.949733][ T9632] [ 287.949610][ T9641] delete_channel: no stack [ 288.175748][ T9664] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1081'. [ 290.142458][ T9647] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1078'. [ 290.519196][ T9688] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1087'. [ 291.174609][ T9706] delete_channel: no stack [ 291.201613][ T9706] delete_channel: no stack [ 291.968240][ T9725] syzkaller0: entered promiscuous mode [ 291.979928][ T9725] syzkaller0: entered allmulticast mode [ 292.285048][ T9740] netlink: 'syz.1.1101': attribute type 5 has an invalid length. [ 292.324773][ T9739] netlink: 'syz.2.1102': attribute type 29 has an invalid length. [ 292.333647][ T9739] netlink: 'syz.2.1102': attribute type 29 has an invalid length. [ 292.354277][ T9739] netlink: 'syz.2.1102': attribute type 29 has an invalid length. [ 292.375756][ T9739] netlink: 'syz.2.1102': attribute type 29 has an invalid length. [ 292.391990][ T9739] netlink: 'syz.2.1102': attribute type 29 has an invalid length. [ 292.514183][ T9744] pim6reg1: entered allmulticast mode [ 292.777095][ T9757] netlink: 'syz.0.1106': attribute type 13 has an invalid length. [ 292.806232][ T9757] netlink: 'syz.0.1106': attribute type 58 has an invalid length. [ 292.823946][ T9757] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1106'. [ 293.087615][ T9770] netlink: 'syz.2.1110': attribute type 21 has an invalid length. [ 294.079878][ T9793] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1115'. [ 294.108960][ T9793] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1115'. [ 294.122225][ T9793] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1115'. [ 294.341680][ T9804] pim6reg1: entered promiscuous mode [ 294.357765][ T9804] pim6reg1: entered allmulticast mode [ 295.676464][ T9841] netlink: 'syz.1.1129': attribute type 2 has an invalid length. [ 295.706416][ T9842] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1129'. [ 296.257883][ T6404] wlan1: Trigger new scan to find an IBSS to join [ 296.872132][ T9867] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1136'. [ 297.813502][ T9884] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1142'. [ 298.267285][ T9900] netlink: 'syz.1.1145': attribute type 10 has an invalid length. [ 298.437689][ T9900] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1145'. [ 298.951684][ T9905] netlink: 'syz.3.1148': attribute type 2 has an invalid length. [ 298.970448][ T9905] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1148'. [ 299.007599][ T9907] netlink: 'syz.3.1148': attribute type 39 has an invalid length. [ 299.536210][ T9928] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1155'. [ 300.974774][ T9973] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1166'. [ 301.204643][ T6410] wlan1: Trigger new scan to find an IBSS to join [ 302.224842][ T6410] wlan1: Creating new IBSS network, BSSID 0e:96:d8:14:64:fd [ 302.765873][T10018] netlink: 'syz.1.1178': attribute type 21 has an invalid length. [ 303.151821][T10022] bridge0: port 4(batadv0) entered disabled state [ 303.224928][T10022] hsr0: left allmulticast mode [ 303.237573][T10022] hsr_slave_0: left allmulticast mode [ 303.263824][T10022] hsr_slave_1: left allmulticast mode [ 303.308932][T10022] bridge0: port 3(hsr0) entered disabled state [ 303.454561][T10022] bridge_slave_1: left allmulticast mode [ 303.487640][T10022] bridge_slave_1: left promiscuous mode [ 303.500458][T10022] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.580928][T10022] bridge_slave_0: left allmulticast mode [ 303.623067][T10022] bridge_slave_0: left promiscuous mode [ 303.641939][T10022] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.049247][T10029] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1180'. [ 305.003248][T10068] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 305.033166][T10068] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1195'. [ 305.104320][T10076] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1197'. [ 305.927449][T10085] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1201'. [ 306.372372][T10098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1202'. [ 307.322457][T10112] netlink: 'syz.3.1205': attribute type 9 has an invalid length. [ 307.361795][T10112] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1205'. [ 307.494498][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1208'. [ 307.562993][T10112] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1205'. [ 307.617461][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1208'. [ 307.947389][T10127] netlink: 'syz.0.1210': attribute type 21 has an invalid length. [ 307.988613][T10130] syz.1.1211: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 308.027914][T10130] CPU: 1 PID: 10130 Comm: syz.1.1211 Not tainted syzkaller #0 [ 308.035475][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 308.045580][T10130] Call Trace: [ 308.048907][T10130] [ 308.051881][T10130] dump_stack_lvl+0x18c/0x250 [ 308.056628][T10130] ? show_regs_print_info+0x20/0x20 [ 308.061916][T10130] ? load_image+0x420/0x420 [ 308.066495][T10130] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.072972][T10130] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 308.079534][T10130] warn_alloc+0x246/0x340 [ 308.083926][T10130] ? stack_trace_save+0xaa/0x100 [ 308.088976][T10130] ? zone_watermark_ok_safe+0x230/0x230 [ 308.094593][T10130] ? kasan_set_track+0x5f/0x70 [ 308.099445][T10130] ? kasan_set_track+0x4e/0x70 [ 308.104284][T10130] ? __kasan_kmalloc+0x8f/0xa0 [ 308.109104][T10130] ? xsk_init_queue+0xad/0x100 [ 308.113929][T10130] ? xsk_setsockopt+0x4e5/0x760 [ 308.118838][T10130] ? do_sock_setsockopt+0x175/0x1a0 [ 308.124080][T10130] ? __x64_sys_setsockopt+0x182/0x200 [ 308.129499][T10130] __vmalloc_node_range+0x126/0x1330 [ 308.134878][T10130] ? free_vm_area+0x50/0x50 [ 308.139448][T10130] vmalloc_user+0x74/0x80 [ 308.143836][T10130] ? xskq_create+0xbf/0x170 [ 308.148393][T10130] xskq_create+0xbf/0x170 [ 308.152799][T10130] xsk_init_queue+0xad/0x100 [ 308.157445][T10130] xsk_setsockopt+0x4e5/0x760 [ 308.162183][T10130] ? xsk_poll+0x680/0x680 [ 308.166620][T10130] ? __fget_files+0x28/0x4b0 [ 308.171270][T10130] ? __fget_files+0x28/0x4b0 [ 308.175908][T10130] ? aa_sock_opt_perm+0x74/0x100 [ 308.180900][T10130] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 308.186502][T10130] ? security_socket_setsockopt+0x7e/0xa0 [ 308.192271][T10130] ? xsk_poll+0x680/0x680 [ 308.196658][T10130] do_sock_setsockopt+0x175/0x1a0 [ 308.201760][T10130] ? __fdget+0x180/0x210 [ 308.206075][T10130] __x64_sys_setsockopt+0x182/0x200 [ 308.211335][T10130] do_syscall_64+0x55/0xa0 [ 308.215808][T10130] ? clear_bhb_loop+0x40/0x90 [ 308.220572][T10130] ? clear_bhb_loop+0x40/0x90 [ 308.225316][T10130] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.231268][T10130] RIP: 0033:0x7ff4ed59c819 [ 308.235736][T10130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.255398][T10130] RSP: 002b:00007ff4eb7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.264304][T10130] RAX: ffffffffffffffda RBX: 00007ff4ed816090 RCX: 00007ff4ed59c819 [ 308.272327][T10130] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 308.280392][T10130] RBP: 00007ff4ed632c91 R08: 0000000000000004 R09: 0000000000000000 [ 308.288412][T10130] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 308.296437][T10130] R13: 00007ff4ed816128 R14: 00007ff4ed816090 R15: 00007ffcf7cd27d8 [ 308.304487][T10130] [ 308.350610][T10130] Mem-Info: [ 308.353816][T10130] active_anon:32859 inactive_anon:0 isolated_anon:0 [ 308.353816][T10130] active_file:16776 inactive_file:40015 isolated_file:0 [ 308.353816][T10130] unevictable:768 dirty:33 writeback:0 [ 308.353816][T10130] slab_reclaimable:10605 slab_unreclaimable:93511 [ 308.353816][T10130] mapped:34025 shmem:27852 pagetables:605 [ 308.353816][T10130] sec_pagetables:0 bounce:0 [ 308.353816][T10130] kernel_misc_reclaimable:0 [ 308.353816][T10130] free:1298880 free_pcp:9649 free_cma:0 [ 308.399434][T10130] Node 0 active_anon:131336kB inactive_anon:0kB active_file:67104kB inactive_file:159860kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136100kB dirty:132kB writeback:0kB shmem:109772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11064kB pagetables:2420kB sec_pagetables:0kB all_unreclaimable? no [ 308.432707][T10130] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 308.463172][T10130] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.490686][T10130] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 308.496541][T10130] Node 0 DMA32 free:1279468kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:130996kB inactive_anon:0kB active_file:67104kB inactive_file:159040kB unevictable:1536kB writepending:124kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:21276kB local_pcp:14908kB free_cma:0kB [ 308.527340][T10130] lowmem_reserve[]: 0 0 0 0 0 [ 308.532133][T10130] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 308.617494][T10130] lowmem_reserve[]: 0 0 0 0 0 [ 308.622773][T10130] Node 1 Normal free:3900692kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18232kB local_pcp:8544kB free_cma:0kB [ 308.652488][T10130] lowmem_reserve[]: 0 0 0 0 0 [ 308.657278][T10130] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.670461][T10130] Node 0 DMA32: 1*4kB (U) 1*8kB (E) 2*16kB (UE) 2*32kB (UM) 2*64kB (ME) 0*128kB 1*256kB (M) 4*512kB (UM) 3*1024kB (UME) 0*2048kB 311*4096kB (UM) = 1279468kB [ 308.686876][T10130] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 308.698664][T10130] Node 1 Normal: 161*4kB (UE) 52*8kB (UE) 51*16kB (UE) 76*32kB (UE) 21*64kB (UME) 8*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3900692kB [ 308.716596][T10130] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.726353][T10130] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.735762][T10130] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.745421][T10130] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.754835][T10130] 83818 total pagecache pages [ 308.759623][T10130] 0 pages in swap cache [ 308.763823][T10130] Free swap = 124996kB [ 308.807365][T10130] Total swap = 124996kB [ 308.811632][T10130] 2097051 pages RAM [ 308.815489][T10130] 0 pages HighMem/MovableOnly [ 308.820342][T10130] 416927 pages reserved [ 308.824535][T10130] 0 pages cma reserved [ 309.341786][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1215'. [ 309.353997][T10150] netlink: 'syz.2.1217': attribute type 10 has an invalid length. [ 309.437806][T10150] team0: Device xfrm0 is of different type [ 309.902274][T10159] netlink: 150456 bytes leftover after parsing attributes in process `syz.0.1220'. [ 309.933465][T10159] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 310.611999][T10185] sctp: [Deprecated]: syz.2.1226 (pid 10185) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.611999][T10185] Use struct sctp_sack_info instead [ 310.826483][T10189] delete_channel: no stack [ 310.864300][T10188] delete_channel: no stack [ 311.547928][T10206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.392408][T10206] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.453089][T10209] netlink: 'syz.3.1235': attribute type 21 has an invalid length. [ 312.470000][T10209] netlink: 'syz.3.1235': attribute type 30 has an invalid length. [ 314.803135][T10234] netlink: 'syz.2.1240': attribute type 21 has an invalid length. [ 314.814170][T10234] IPv6: NLM_F_CREATE should be specified when creating new route [ 314.825130][T10234] IPv6: Can't replace route, no match found [ 315.057215][T10245] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1244'. [ 315.061137][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1242'. [ 315.087786][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1242'. [ 315.150473][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1242'. [ 315.201840][T10246] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1242'. [ 315.259851][T10249] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1245'. [ 315.298927][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1245'. [ 315.904353][T10246] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1242'. [ 315.960633][T10246] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1242'. [ 317.532048][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.538651][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.333623][T10242] delete_channel: no stack [ 320.736874][T10315] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1261'. [ 320.813339][T10317] netlink: 'syz.2.1262': attribute type 46 has an invalid length. [ 320.871301][T10321] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1264'. [ 321.177663][ T5082] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 321.198782][ T5082] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 321.209063][ T5082] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 321.218928][ T5082] CPU: 1 PID: 5082 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 321.226556][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.236691][ T5082] Workqueue: hci1 hci_rx_work [ 321.241423][ T5082] Call Trace: [ 321.244738][ T5082] [ 321.247704][ T5082] dump_stack_lvl+0x18c/0x250 [ 321.252431][ T5082] ? show_regs_print_info+0x20/0x20 [ 321.257671][ T5082] ? load_image+0x420/0x420 [ 321.262225][ T5082] sysfs_create_dir_ns+0x26e/0x2a0 [ 321.267540][ T5082] ? sysfs_warn_dup+0xa0/0xa0 [ 321.272257][ T5082] ? do_raw_spin_unlock+0x121/0x230 [ 321.277500][ T5082] kobject_add_internal+0x61c/0xcc0 [ 321.282750][ T5082] kobject_add+0x164/0x240 [ 321.287197][ T5082] ? __rwlock_init+0x150/0x150 [ 321.291995][ T5082] ? kobject_init+0x1e0/0x1e0 [ 321.296767][ T5082] ? _raw_spin_unlock+0x28/0x40 [ 321.301677][ T5082] ? get_device_parent+0x366/0x390 [ 321.306850][ T5082] device_add+0x408/0xc20 [ 321.311233][ T5082] hci_conn_add_sysfs+0xd5/0x1e0 [ 321.316216][ T5082] le_conn_complete_evt+0xf5d/0x1540 [ 321.321567][ T5082] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 321.327845][ T5082] ? bt_info+0x180/0x180 [ 321.332127][ T5082] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 321.337788][ T5082] ? skb_pull_data+0xfb/0x200 [ 321.342503][ T5082] hci_le_conn_complete_evt+0x187/0x440 [ 321.348081][ T5082] ? hci_remote_host_features_evt+0x150/0x150 [ 321.354194][ T5082] hci_event_packet+0x7ba/0x1270 [ 321.359172][ T5082] ? bis_list+0x290/0x290 [ 321.363545][ T5082] ? lockdep_hardirqs_on+0x98/0x150 [ 321.368783][ T5082] ? hci_send_to_monitor+0xd7/0x4f0 [ 321.374022][ T5082] hci_rx_work+0x43a/0xd60 [ 321.378486][ T5082] ? process_scheduled_works+0x96f/0x15d0 [ 321.384280][ T5082] process_scheduled_works+0xa5d/0x15d0 [ 321.389913][ T5082] ? worker_attach_to_pool+0x380/0x380 [ 321.395419][ T5082] ? assign_work+0x3d2/0x5d0 [ 321.400059][ T5082] worker_thread+0xa55/0xfc0 [ 321.404689][ T5082] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 321.410641][ T5082] ? _raw_spin_unlock+0x40/0x40 [ 321.415534][ T5082] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 321.421478][ T5082] kthread+0x2fa/0x390 [ 321.425577][ T5082] ? pr_cont_work+0x560/0x560 [ 321.430292][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 321.434915][ T5082] ret_from_fork+0x48/0x80 [ 321.439370][ T5082] ? kthread_blkcg+0xd0/0xd0 [ 321.444077][ T5082] ret_from_fork_asm+0x11/0x20 [ 321.448977][ T5082] [ 321.453190][ T5082] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 321.467271][ T5082] Bluetooth: hci1: failed to register connection device [ 321.616786][T10341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1268'. [ 322.875265][T10363] netlink: 'syz.3.1275': attribute type 3 has an invalid length. [ 322.899002][T10348] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1270'. [ 322.909298][T10363] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1275'. [ 322.997234][T10348] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 323.057628][T10348] CPU: 0 PID: 10348 Comm: syz.0.1270 Not tainted syzkaller #0 [ 323.065192][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 323.075301][T10348] Call Trace: [ 323.078636][T10348] [ 323.081619][T10348] dump_stack_lvl+0x18c/0x250 [ 323.086355][T10348] ? show_regs_print_info+0x20/0x20 [ 323.091595][T10348] ? load_image+0x420/0x420 [ 323.096150][T10348] sysfs_warn_dup+0x8e/0xa0 [ 323.100692][T10348] sysfs_do_create_link_sd+0xc0/0x110 [ 323.106098][T10348] device_add_class_symlinks+0x1cf/0x240 [ 323.111784][T10348] device_add+0x507/0xc20 [ 323.116147][T10348] wiphy_register+0x1dad/0x2ae0 [ 323.121047][T10348] ? cfg80211_event_work+0x40/0x40 [ 323.126216][T10348] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 323.132319][T10348] ieee80211_register_hw+0x3464/0x4250 [ 323.137826][T10348] ? ieee80211_tasklet_handler+0x20/0x20 [ 323.143540][T10348] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 323.149468][T10348] ? __debug_object_init+0xec/0x450 [ 323.154723][T10348] ? __asan_memset+0x22/0x40 [ 323.159348][T10348] ? __hrtimer_init+0x186/0x270 [ 323.164227][T10348] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 323.170009][T10348] ? mac80211_hwsim_free+0x220/0x220 [ 323.175340][T10348] ? rcu_is_watching+0x15/0xb0 [ 323.180138][T10348] ? kstrndup+0xbd/0x140 [ 323.184424][T10348] hwsim_new_radio_nl+0xdc9/0x1a90 [ 323.189565][T10348] ? __nla_validate+0x50/0x50 [ 323.194281][T10348] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 323.200650][T10348] ? __nla_parse+0x40/0x50 [ 323.205186][T10348] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 323.211559][T10348] genl_family_rcv_msg_doit+0x211/0x310 [ 323.217133][T10348] ? end_current_label_crit_section+0x170/0x170 [ 323.223405][T10348] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 323.229349][T10348] ? bpf_lsm_capable+0x9/0x10 [ 323.234069][T10348] ? security_capable+0x89/0xb0 [ 323.238959][T10348] genl_rcv_msg+0x619/0x7a0 [ 323.243498][T10348] ? genl_bind+0x360/0x360 [ 323.247933][T10348] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 323.254299][T10348] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.260504][T10348] netlink_rcv_skb+0x241/0x4d0 [ 323.265309][T10348] ? genl_bind+0x360/0x360 [ 323.269749][T10348] ? netlink_ack+0x1180/0x1180 [ 323.274573][T10348] ? __lock_acquire+0x7d40/0x7d40 [ 323.279661][T10348] ? down_read+0x1ac/0x2e0 [ 323.284128][T10348] genl_rcv+0x28/0x40 [ 323.288165][T10348] netlink_unicast+0x751/0x8d0 [ 323.292980][T10348] netlink_sendmsg+0x8d0/0xbf0 [ 323.297787][T10348] ? netlink_getsockopt+0x590/0x590 [ 323.303036][T10348] ? netlink_getsockopt+0x590/0x590 [ 323.308264][T10348] ____sys_sendmsg+0x5ba/0x960 [ 323.313060][T10348] ? __asan_memset+0x22/0x40 [ 323.317677][T10348] ? __sys_sendmsg_sock+0x30/0x30 [ 323.322727][T10348] ? __import_iovec+0x5f2/0x850 [ 323.327633][T10348] ? import_iovec+0x73/0xa0 [ 323.332185][T10348] ___sys_sendmsg+0x2a6/0x360 [ 323.336895][T10348] ? __sys_sendmsg+0x2a0/0x2a0 [ 323.341744][T10348] __se_sys_sendmsg+0x1c2/0x2b0 [ 323.346633][T10348] ? __x64_sys_sendmsg+0x80/0x80 [ 323.351625][T10348] ? syscall_enter_from_user_mode+0x2e/0x80 [ 323.357552][T10348] do_syscall_64+0x55/0xa0 [ 323.362012][T10348] ? clear_bhb_loop+0x40/0x90 [ 323.366712][T10348] ? clear_bhb_loop+0x40/0x90 [ 323.371413][T10348] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.377358][T10348] RIP: 0033:0x7f25be99c819 [ 323.381801][T10348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.401439][T10348] RSP: 002b:00007f25bf89f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.409891][T10348] RAX: ffffffffffffffda RBX: 00007f25bec15fa0 RCX: 00007f25be99c819 [ 323.417892][T10348] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 323.425924][T10348] RBP: 00007f25bea32c91 R08: 0000000000000000 R09: 0000000000000000 [ 323.434358][T10348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.442448][T10348] R13: 00007f25bec16038 R14: 00007f25bec15fa0 R15: 00007ffdcd030828 [ 323.450476][T10348] [ 323.498410][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 323.999348][T10389] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1279'. [ 324.879997][T10407] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1286'. [ 325.597656][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 327.584945][T10415] netlink: 'syz.3.1290': attribute type 29 has an invalid length. [ 327.617622][T10415] netlink: 'syz.3.1290': attribute type 29 has an invalid length. [ 327.648040][T10415] netlink: 'syz.3.1290': attribute type 29 has an invalid length. [ 327.709710][T10420] pim6reg1: entered promiscuous mode [ 327.717414][T10420] pim6reg1: entered allmulticast mode [ 327.892862][T10424] netlink: 'syz.2.1292': attribute type 10 has an invalid length. [ 327.902312][T10424] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1292'. [ 329.082987][T10460] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 329.095665][T10460] netlink: 'syz.0.1304': attribute type 3 has an invalid length. [ 329.105294][T10460] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1304'. [ 329.190360][T10464] netlink: 'syz.3.1306': attribute type 1 has an invalid length. [ 329.207482][T10464] netlink: 'syz.3.1306': attribute type 3 has an invalid length. [ 329.215588][T10464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1306'. [ 329.237893][T10462] netlink: 'syz.1.1305': attribute type 10 has an invalid length. [ 329.255459][T10462] bond0: (slave bond_slave_0): Releasing backup interface [ 329.281464][T10465] netlink: 'syz.1.1305': attribute type 2 has an invalid length. [ 329.298411][T10465] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1305'. [ 331.325613][T10483] delete_channel: no stack [ 331.386926][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1320'. [ 331.711517][T10520] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1324'. [ 332.820726][T10542] netlink: 'syz.0.1330': attribute type 21 has an invalid length. [ 332.835943][T10542] netlink: 'syz.0.1330': attribute type 6 has an invalid length. [ 332.850262][T10542] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1330'. [ 333.072536][T10550] C: renamed from team_slave_0 [ 333.103657][T10550] netlink: 'syz.0.1334': attribute type 1 has an invalid length. [ 333.123177][T10550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1334'. [ 333.172209][T10553] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1334'. [ 333.362819][T10559] netlink: 'syz.3.1336': attribute type 10 has an invalid length. [ 333.387518][T10559] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1336'. [ 333.463898][T10566] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 333.475051][T10566] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1338'. [ 333.484770][T10566] netlink: 'syz.1.1338': attribute type 1 has an invalid length. [ 334.809779][ T6393] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.847193][T10606] netlink: 'syz.3.1349': attribute type 21 has an invalid length. [ 334.986235][T10616] netlink: 'syz.0.1352': attribute type 10 has an invalid length. [ 335.014683][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.118072][T10616] bridge_slave_1: left allmulticast mode [ 335.123814][T10616] bridge_slave_1: left promiscuous mode [ 335.175445][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.256987][T10616] team0: Port device bridge_slave_1 added [ 335.279515][T10622] netlink: 'syz.0.1352': attribute type 10 has an invalid length. [ 336.573415][T10655] netlink: 'syz.0.1360': attribute type 3 has an invalid length. [ 336.581944][T10655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1360'. [ 336.728148][T10659] veth1_to_bond: entered promiscuous mode [ 336.741153][T10659] veth1_to_bond: entered allmulticast mode [ 340.563070][T10693] netlink: 'syz.1.1372': attribute type 33 has an invalid length. [ 340.615839][T10693] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1372'. [ 340.651091][T10693] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 341.343236][T10715] netlink: 'syz.1.1378': attribute type 12 has an invalid length. [ 341.364825][T10721] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1381'. [ 341.369234][T10715] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1378'. [ 343.105704][T10781] netlink: 'syz.1.1398': attribute type 9 has an invalid length. [ 343.121584][T10781] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1398'. [ 343.327066][T10786] netlink: 'syz.2.1400': attribute type 27 has an invalid length. [ 343.338339][T10786] netlink: 'syz.2.1400': attribute type 4 has an invalid length. [ 343.346507][T10786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1400'. [ 343.792792][T10805] team0: Port device C removed [ 343.800734][T10805] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 344.267785][T10825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1409'. [ 344.348123][T10827] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 345.065387][T10842] netlink: 'syz.1.1416': attribute type 10 has an invalid length. [ 345.112102][T10843] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1415'. [ 345.787665][T10861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1421'. [ 345.846368][T10861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1421'. [ 345.953400][T10863] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1421'. [ 345.990917][T10861] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1421'. [ 346.484353][T10879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.775334][T10888] netlink: 'syz.3.1429': attribute type 29 has an invalid length. [ 346.818355][T10888] netlink: 'syz.3.1429': attribute type 29 has an invalid length. [ 347.044749][T10894] netlink: 'syz.0.1431': attribute type 21 has an invalid length. [ 347.078997][T10894] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1431'. [ 347.109656][T10893] netlink: 'syz.0.1431': attribute type 2 has an invalid length. [ 347.125080][T10893] netlink: 'syz.0.1431': attribute type 8 has an invalid length. [ 347.150905][T10893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1431'. [ 347.176810][T10895] netlink: 'syz.0.1431': attribute type 2 has an invalid length. [ 347.202348][T10895] netlink: 'syz.0.1431': attribute type 8 has an invalid length. [ 347.238202][T10895] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1431'. [ 347.694408][T10900] can: request_module (can-proto-0) failed. [ 348.353610][T10919] netlink: 'syz.1.1438': attribute type 10 has an invalid length. [ 348.424765][T10925] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1438'. [ 348.593907][T10923] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1437'. [ 349.081044][T10941] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1444'. [ 351.311796][T10959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.319267][T10959] IPv6: NLM_F_CREATE should be set when creating new route [ 351.326629][T10959] IPv6: NLM_F_CREATE should be set when creating new route [ 351.333979][T10959] IPv6: NLM_F_CREATE should be set when creating new route [ 351.808671][T10973] netlink: 'syz.1.1452': attribute type 9 has an invalid length. [ 351.870884][T10974] __nla_validate_parse: 1 callbacks suppressed [ 351.870917][T10974] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1450'. [ 351.900661][T10973] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1452'. [ 352.216861][T10983] netlink: 'syz.2.1453': attribute type 3 has an invalid length. [ 352.239837][T10989] netlink: 'syz.2.1453': attribute type 3 has an invalid length. [ 352.282170][T10988] pimreg0: tun_chr_ioctl cmd 1074025681 [ 352.300661][T10984] pimreg0: tun_chr_ioctl cmd 35108 [ 352.307883][T10989] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1453'. [ 352.326349][T10983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1453'. [ 353.530286][T11007] netlink: 'syz.0.1458': attribute type 8 has an invalid length. [ 353.603309][T11007] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1458'. [ 354.715283][T11020] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 354.723543][T11020] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1461'. [ 355.411481][T11002] syzkaller0: entered promiscuous mode [ 355.422683][T11002] syzkaller0: entered allmulticast mode [ 357.765319][T11035] netlink: 'syz.3.1467': attribute type 10 has an invalid length. [ 357.783594][T11035] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1467'. [ 358.267569][T11061] netlink: 'syz.0.1475': attribute type 39 has an invalid length. [ 358.566391][T11070] netlink: 'syz.1.1476': attribute type 13 has an invalid length. [ 358.574647][T11070] netlink: 'syz.1.1476': attribute type 58 has an invalid length. [ 358.582733][T11070] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1476'. [ 358.715460][T11074] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.183244][T11091] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.1484'. [ 359.198224][T11091] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 359.223420][ T5785] Bluetooth: hci1: unexpected event 0x01 length: 151 > 1 [ 359.260300][T11093] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1485'. [ 359.600832][T11103] netlink: 'syz.0.1489': attribute type 3 has an invalid length. [ 359.646572][T11103] netlink: 'syz.0.1489': attribute type 6 has an invalid length. [ 359.668898][T11112] netlink: 'syz.1.1492': attribute type 1 has an invalid length. [ 359.676736][T11112] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 359.684990][T11103] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1489'. [ 359.701547][T11112] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1492'. [ 361.104857][T11132] netlink: 'syz.0.1496': attribute type 1 has an invalid length. [ 361.125921][T11132] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1496'. [ 362.877206][T11139] netlink: 'syz.1.1499': attribute type 21 has an invalid length. [ 362.918145][T11138] netlink: 'syz.1.1499': attribute type 21 has an invalid length. [ 362.944633][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1501'. [ 362.998270][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1501'. [ 363.405082][T11158] netlink: 'syz.2.1504': attribute type 3 has an invalid length. [ 363.427651][T11158] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1504'. [ 363.730747][T11172] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1508'. [ 365.896021][T11242] netlink: 'syz.1.1528': attribute type 10 has an invalid length. [ 365.926809][T11242] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 365.943597][T11241] netlink: 'syz.1.1528': attribute type 10 has an invalid length. [ 366.090738][T11248] netlink: 'syz.1.1530': attribute type 9 has an invalid length. [ 366.103343][T11248] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1530'. [ 366.175891][T11249] raw_sendmsg: syz.3.1529 forgot to set AF_INET. Fix it! [ 366.538850][T11255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1533'. [ 366.809221][ T6394] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 366.905679][T11274] netlink: 'syz.2.1538': attribute type 6 has an invalid length. [ 366.939377][T11274] netlink: 'syz.2.1538': attribute type 1 has an invalid length. [ 366.978600][T11274] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1538'. [ 367.196347][T11279] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1540'. [ 367.775017][T11303] netlink: 'syz.1.1546': attribute type 39 has an invalid length. [ 368.674789][T11313] netlink: 162840 bytes leftover after parsing attributes in process `syz.3.1549'. [ 368.919725][T11322] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1553'. [ 370.046060][T11349] À: port 1(veth0_to_team) entered blocking state [ 370.053479][T11349] À: port 1(veth0_to_team) entered disabled state [ 370.074525][T11349] veth0_to_team: entered allmulticast mode [ 370.118710][T11349] veth0_to_team: entered promiscuous mode [ 371.340815][T11385] netlink: 'syz.3.1564': attribute type 4 has an invalid length. [ 371.446218][T11385] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1564'. [ 371.464660][T11385] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 372.815481][T11410] netlink: 'syz.0.1576': attribute type 7 has an invalid length. [ 373.521468][T11425] netlink: 'syz.0.1581': attribute type 9 has an invalid length. [ 373.550481][T11425] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1581'. [ 373.766244][T11428] netlink: 'syz.0.1581': attribute type 9 has an invalid length. [ 373.776024][T11428] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1581'. [ 375.022540][T11456] netlink: 'syz.0.1589': attribute type 10 has an invalid length. [ 378.664622][T11482] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1597'. [ 379.005029][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.011822][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.209670][T11499] netlink: 'syz.2.1602': attribute type 6 has an invalid length. [ 380.228274][T11499] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1602'. [ 380.337009][T11502] tap0: tun_chr_ioctl cmd 35108 [ 380.700676][T11523] netlink: 'syz.0.1608': attribute type 29 has an invalid length. [ 380.725559][T11520] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1607'. [ 380.730842][T11523] netlink: 'syz.0.1608': attribute type 29 has an invalid length. [ 380.832294][T11523] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 381.039626][T11527] netlink: 'syz.3.1610': attribute type 1 has an invalid length. [ 381.048437][T11527] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1610'. [ 381.226469][T11535] netlink: 14469 bytes leftover after parsing attributes in process `syz.2.1612'. [ 381.299756][T11539] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1621'. [ 382.156976][T11560] hsr0: left allmulticast mode [ 382.179712][T11560] hsr_slave_0: left allmulticast mode [ 382.211002][T11560] hsr_slave_1: left allmulticast mode [ 382.272276][T11560] bridge0: port 3(hsr0) entered disabled state [ 382.435422][T11560] bridge_slave_1: left allmulticast mode [ 382.459661][T11560] bridge_slave_1: left promiscuous mode [ 382.481173][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.575687][T11560] bridge_slave_0: left allmulticast mode [ 382.592486][T11560] bridge_slave_0: left promiscuous mode [ 382.617662][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.934531][T11573] netlink: 'syz.2.1630': attribute type 21 has an invalid length. [ 382.943989][T11573] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1630'. [ 383.528171][T11586] netlink: 'syz.1.1626': attribute type 10 has an invalid length. [ 383.543889][T11586] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1626'. [ 384.815665][T11619] sctp: [Deprecated]: syz.0.1631 (pid 11619) Use of int in max_burst socket option deprecated. [ 384.815665][T11619] Use struct sctp_assoc_value instead [ 384.838876][ T5785] Bluetooth: hci2: ISO packet for unknown connection handle 3846 [ 384.839519][T11620] netlink: 'syz.3.1629': attribute type 3 has an invalid length. [ 384.862298][T11620] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1629'. [ 385.192537][T11626] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1632'. [ 386.477840][T11652] netlink: 'syz.3.1641': attribute type 10 has an invalid length. [ 386.485914][T11652] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1641'. [ 387.534065][T11664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1643'. [ 387.592066][T11675] netlink: 'syz.0.1646': attribute type 12 has an invalid length. [ 387.624399][T11675] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1646'. [ 387.917988][T11678] netlink: 'syz.1.1655': attribute type 9 has an invalid length. [ 387.954580][T11678] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1655'. [ 388.001685][T11684] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1648'. [ 389.095186][T11695] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1650'. [ 389.810524][T11699] netlink: 'syz.1.1652': attribute type 1 has an invalid length. [ 389.843131][T11699] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1652'. [ 389.957437][T11702] netlink: 'syz.1.1652': attribute type 4 has an invalid length. [ 389.965434][T11702] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1652'. [ 390.001412][T11702] wlan1: mtu less than device minimum [ 391.065930][T11715] netlink: 'syz.3.1656': attribute type 10 has an invalid length. [ 391.280763][T11717] netlink: 'syz.3.1656': attribute type 1 has an invalid length. [ 391.294152][T11717] netlink: 'syz.3.1656': attribute type 3 has an invalid length. [ 391.306094][T11717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1656'. [ 391.315767][T11715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.385537][T11715] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 391.396123][T11716] netlink: 'syz.3.1656': attribute type 10 has an invalid length. [ 391.406317][T11716] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1656'. [ 391.427099][T11716] batadv0: entered promiscuous mode [ 391.432645][T11716] batadv0: entered allmulticast mode [ 391.442198][T11716] bond0: (slave batadv0): Releasing backup interface [ 391.459560][T11716] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 391.872907][T11728] netlink: 'syz.1.1658': attribute type 10 has an invalid length. [ 391.892548][T11728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1658'. [ 391.968846][T11727] netlink: 'syz.0.1657': attribute type 10 has an invalid length. [ 391.977204][T11727] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1657'. [ 392.026770][T11725] netlink: 'syz.3.1660': attribute type 9 has an invalid length. [ 392.071768][T11725] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1660'. [ 393.463650][T11750] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 393.469335][T11739] netlink: 'syz.3.1664': attribute type 1 has an invalid length. [ 393.494968][T11739] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1664'. [ 393.620240][T11755] netlink: 'syz.2.1665': attribute type 1 has an invalid length. [ 393.642479][T11750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.650062][T11755] netlink: 'syz.2.1665': attribute type 3 has an invalid length. [ 393.682009][T11750] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 393.705146][T11755] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1665'. [ 393.727591][T11744] netlink: 'syz.3.1664': attribute type 4 has an invalid length. [ 393.746215][T11744] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1664'. [ 393.838919][T11744] .`: renamed from bond0 (while UP) [ 394.812245][T11754] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 394.857493][T11754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1665'. [ 394.888920][T11754] batadv0: entered promiscuous mode [ 394.894235][T11754] batadv0: entered allmulticast mode [ 394.919184][T11754] bond0: (slave batadv0): Releasing backup interface [ 394.941657][T11754] bridge0: port 3(batadv0) entered blocking state [ 394.967790][T11754] bridge0: port 3(batadv0) entered disabled state [ 395.253070][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 395.262568][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 395.656569][T11790] netlink: 'syz.3.1675': attribute type 49 has an invalid length. [ 395.706287][T11788] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1673'. [ 395.745152][T11793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.780224][T11793] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 395.813845][T11792] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 396.275323][T11800] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1677'. [ 397.089007][T11824] validate_nla: 5 callbacks suppressed [ 397.089025][T11824] netlink: 'syz.3.1684': attribute type 46 has an invalid length. [ 398.797954][ T6410] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.345032][T11824] netlink: 'syz.3.1684': attribute type 46 has an invalid length. [ 401.353247][T11825] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1684'. [ 402.318602][T11863] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 402.331981][T11863] netlink: 'syz.1.1694': attribute type 4 has an invalid length. [ 402.341891][T11863] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1694'. [ 402.812934][T11886] netlink: 'syz.1.1700': attribute type 9 has an invalid length. [ 402.821698][T11886] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1700'. [ 402.995828][T11886] netlink: 'syz.1.1700': attribute type 28 has an invalid length. [ 403.023588][T11886] netlink: 'syz.1.1700': attribute type 9 has an invalid length. [ 403.037761][T11886] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1700'. [ 403.503175][T11899] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1703'. [ 403.550911][T11899] netlink: zone id is out of range [ 403.556147][T11899] netlink: zone id is out of range [ 403.567601][T11899] netlink: zone id is out of range [ 403.572831][T11899] netlink: zone id is out of range [ 403.579396][T11899] netlink: zone id is out of range [ 403.584609][T11899] netlink: zone id is out of range [ 403.591186][T11899] netlink: zone id is out of range [ 403.596471][T11899] netlink: zone id is out of range [ 403.614180][T11899] netlink: zone id is out of range [ 403.628262][T11899] netlink: zone id is out of range [ 404.281888][T11916] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1708'. [ 404.531726][T11930] netlink: 'syz.3.1713': attribute type 9 has an invalid length. [ 404.541268][T11930] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1713'. [ 404.748653][T11938] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1714'. [ 404.758702][T11935] netlink: 'syz.3.1713': attribute type 28 has an invalid length. [ 404.872647][T11930] netlink: 'syz.3.1713': attribute type 9 has an invalid length. [ 404.898341][T11930] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1713'. [ 405.145791][T11950] syzkaller0: entered promiscuous mode [ 405.162346][T11950] syzkaller0: entered allmulticast mode [ 407.784881][T11975] netlink: 'syz.3.1724': attribute type 28 has an invalid length. [ 407.829944][T11975] netlink: 'syz.3.1724': attribute type 29 has an invalid length. [ 407.850441][T11975] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1724'. [ 408.294979][T11993] netlink: 'syz.0.1728': attribute type 29 has an invalid length. [ 408.327850][T11993] netlink: 'syz.0.1728': attribute type 29 has an invalid length. [ 408.351966][T11993] netlink: 'syz.0.1728': attribute type 29 has an invalid length. [ 408.547572][T12001] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 [ 408.736066][T12011] netlink: 'syz.1.1733': attribute type 21 has an invalid length. [ 408.745410][T12011] IPv6: Can't replace route, no match found [ 408.794283][T12013] netlink: 'syz.0.1734': attribute type 46 has an invalid length. [ 408.811337][T12013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1734'. [ 408.879743][ T6393] tipc: Subscription rejected, illegal request [ 408.887391][T12013] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1734'. [ 409.500882][T12034] netlink: 'syz.0.1739': attribute type 3 has an invalid length. [ 409.538066][T12034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1739'. [ 410.983276][T12053] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1744'. [ 411.007676][T12053] bridge_slave_1: default FDB implementation only supports local addresses [ 411.648417][T12053] netlink: 'syz.0.1744': attribute type 13 has an invalid length. [ 411.656618][T12053] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1744'. [ 411.792789][T12053] erspan0: refused to change device tx_queue_len [ 411.817940][T12053] net_ratelimit: 216 callbacks suppressed [ 411.817959][T12053] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 412.255924][T12077] netlink: 'syz.2.1751': attribute type 21 has an invalid length. [ 412.289919][T12077] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1751'. [ 412.460725][T12086] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1753'. [ 412.985585][T12106] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1759'. [ 413.141687][T12106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.171915][T12106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.200924][T12106] bond0 (unregistering): Released all slaves [ 413.544979][T12118] netlink: 3259 bytes leftover after parsing attributes in process `syz.2.1762'. [ 415.452398][T12121] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1763'. [ 415.727150][T12133] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.1767'. [ 415.800186][T12133] netlink: 194488 bytes leftover after parsing attributes in process `syz.3.1767'. [ 416.459182][T12150] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.1771'. [ 416.771371][T12154] netlink: 'syz.2.1772': attribute type 28 has an invalid length. [ 416.823743][T12154] netlink: 'syz.2.1772': attribute type 29 has an invalid length. [ 416.878015][T12154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1772'. [ 417.596616][T12174] netlink: 'syz.1.1776': attribute type 3 has an invalid length. [ 417.619254][T12174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1776'. [ 418.097603][T12182] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1778'. [ 418.120706][T12182] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1778'. [ 418.132024][T12181] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1778'. [ 418.157851][T12181] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1778'. [ 419.906643][T12197] netlink: 'syz.2.1783': attribute type 3 has an invalid length. [ 419.934372][T12197] netlink: 'syz.2.1783': attribute type 8 has an invalid length. [ 419.964747][T12197] netlink: 197324 bytes leftover after parsing attributes in process `syz.2.1783'. [ 421.305182][T12201] netlink: 16278 bytes leftover after parsing attributes in process `syz.2.1784'. [ 421.534630][T12211] netlink: 'syz.0.1789': attribute type 10 has an invalid length. [ 421.542815][T12211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1789'. [ 421.897191][T12209] netlink: 'syz.1.1788': attribute type 10 has an invalid length. [ 422.208457][T12228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1795'. [ 422.235405][T12225] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1794'. [ 422.239793][T12228] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1795'. [ 422.266557][T12221] netlink: 'syz.3.1792': attribute type 10 has an invalid length. [ 422.292335][T12228] netlink: 'syz.1.1795': attribute type 21 has an invalid length. [ 422.635857][T12244] netlink: 'syz.2.1799': attribute type 21 has an invalid length. [ 423.166435][T12265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.175239][T12265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.189666][T12265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.202352][T12265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.335742][T12267] netlink: 'syz.3.1805': attribute type 10 has an invalid length. [ 423.612717][T12274] __nla_validate_parse: 6 callbacks suppressed [ 423.612735][T12274] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1810'. [ 423.629098][T12272] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 423.637070][T12272] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1809'. [ 423.938055][T12291] netlink: 'syz.3.1815': attribute type 10 has an invalid length. [ 424.754093][T12291] team0: Device vxcan1 is of different type [ 425.261781][T12326] netlink: 'syz.0.1821': attribute type 10 has an invalid length. [ 425.301098][T12326] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1821'. [ 425.354260][T12328] netlink: 'syz.3.1825': attribute type 9 has an invalid length. [ 425.375175][T12328] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1825'. [ 425.862730][T12341] netlink: 'syz.1.1829': attribute type 6 has an invalid length. [ 425.887769][T12341] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1829'. [ 426.000954][T12346] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1830'. [ 426.359071][T12363] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1834'. [ 431.475693][T12398] validate_nla: 1 callbacks suppressed [ 431.475703][T12398] netlink: 'syz.1.1842': attribute type 39 has an invalid length. [ 433.633491][T12458] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1859'. [ 433.681718][T12457] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1859'. [ 433.706619][T12461] netlink: 'syz.3.1860': attribute type 9 has an invalid length. [ 433.712206][T12458] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 433.736111][T12457] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 435.424506][T12488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1867'. [ 435.758454][T12494] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1870'. [ 435.899626][T12502] netlink: 'syz.2.1872': attribute type 2 has an invalid length. [ 435.907892][T12502] netlink: 'syz.2.1872': attribute type 1 has an invalid length. [ 435.915724][T12502] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.1872'. [ 437.053205][T12520] netlink: 'syz.0.1878': attribute type 4 has an invalid length. [ 437.171294][T12520] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1878'. [ 437.417655][T12523] netlink: 'syz.2.1877': attribute type 4 has an invalid length. [ 437.518858][T12523] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1877'. [ 438.897772][T12539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1882'. [ 439.298078][T12532] netlink: 'syz.3.1881': attribute type 10 has an invalid length. [ 440.403873][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.410837][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.543560][T12585] netlink: 'syz.3.1893': attribute type 39 has an invalid length. [ 448.437173][T12624] netlink: 'syz.0.1900': attribute type 3 has an invalid length. [ 448.585862][T12624] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1900'. [ 450.429993][T12663] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 450.474103][T12663] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 451.539893][T12680] netlink: 'syz.0.1920': attribute type 9 has an invalid length. [ 452.785147][ T5785] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 452.881878][ T6393] tipc: Subscription rejected, illegal request [ 455.510266][T12770] netlink: 'syz.2.1946': attribute type 29 has an invalid length. [ 455.588378][T12770] netlink: 'syz.2.1946': attribute type 29 has an invalid length. [ 455.608475][T12771] netlink: 'syz.2.1946': attribute type 29 has an invalid length. [ 455.616749][T12775] netlink: 'syz.2.1946': attribute type 29 has an invalid length. [ 455.661373][T12770] netlink: 'syz.2.1946': attribute type 29 has an invalid length. [ 456.542588][T12788] netlink: 'syz.3.1952': attribute type 8 has an invalid length. [ 456.578851][T12788] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1952'. [ 456.854341][T12788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1952'. [ 457.657657][T12818] hsr_slave_0: left promiscuous mode [ 457.681514][T12818] hsr_slave_1: left promiscuous mode [ 457.696646][T12818] bridge0: port 3(hsr0) entered disabled state [ 457.756287][T12818] bridge0: port 3(hsr0) entered disabled state [ 458.111437][T12825] bridge_slave_0: left promiscuous mode [ 458.123034][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.530323][T12837] netlink: 'syz.3.1971': attribute type 29 has an invalid length. [ 458.806155][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1962'. [ 458.819309][T12834] netlink: 'syz.2.1964': attribute type 9 has an invalid length. [ 458.841207][T12837] netlink: 'syz.3.1971': attribute type 29 has an invalid length. [ 459.072490][T12846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.174156][T12847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.312928][T12853] netlink: 'syz.2.1968': attribute type 8 has an invalid length. [ 459.337868][T12853] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1968'. [ 459.424496][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1968'. [ 459.484709][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.642406][T12853] bridge_slave_0 (unregistering): left allmulticast mode [ 459.652680][T12853] bridge_slave_0 (unregistering): left promiscuous mode [ 459.663817][T12853] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.822977][T12874] syz.3.1973[12874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.823143][T12874] syz.3.1973[12874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 459.881845][T12865] C: renamed from team_slave_0 [ 459.905218][T12865] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 459.915649][T12865] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1972'. [ 459.931021][T12865] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 460.030488][T12863] syzkaller0: entered promiscuous mode [ 460.036230][T12863] syzkaller0: entered allmulticast mode [ 461.153208][T12888] netlink: 'syz.2.1978': attribute type 27 has an invalid length. [ 461.161297][T12888] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1978'. [ 462.250956][T12885] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1977'. [ 462.261324][T12901] netlink: 'syz.2.1982': attribute type 10 has an invalid length. [ 462.269538][T12901] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1982'. [ 462.282270][T12902] netlink: 'syz.2.1982': attribute type 13 has an invalid length. [ 462.297785][T12902] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1982'. [ 462.527192][T12908] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1985'. [ 462.801766][T12912] netlink: 'syz.2.1986': attribute type 6 has an invalid length. [ 462.827450][T12912] netlink: 'syz.2.1986': attribute type 3 has an invalid length. [ 462.856196][T12912] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1986'. [ 463.246964][T12924] IPv6: NLM_F_CREATE should be specified when creating new route [ 463.445630][T12937] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1993'. [ 463.455636][T12937] openvswitch: netlink: Duplicate key (type 0). [ 465.032467][T12973] validate_nla: 1 callbacks suppressed [ 465.032489][T12973] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 465.373301][T12973] team0: Port device hsr_slave_0 added [ 465.910664][T12995] netlink: 'syz.3.2011': attribute type 10 has an invalid length. [ 465.949063][T12995] netlink: 'syz.3.2011': attribute type 19 has an invalid length. [ 465.972066][T12997] netlink: 'syz.2.2012': attribute type 29 has an invalid length. [ 465.980564][T12995] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.2011'. [ 466.015207][T12997] netlink: 'syz.2.2012': attribute type 29 has an invalid length. [ 466.034257][T12997] netlink: 'syz.2.2012': attribute type 29 has an invalid length. [ 466.058254][T12997] netlink: 'syz.2.2012': attribute type 29 has an invalid length. [ 466.202659][T12975] delete_channel: no stack [ 466.398912][T13017] netlink: 'syz.2.2019': attribute type 9 has an invalid length. [ 466.407050][T13017] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2019'. [ 466.852794][T13039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2027'. [ 466.987174][T13045] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2030'. [ 467.096216][T13049] netlink: 'syz.3.2031': attribute type 15 has an invalid length. [ 467.117337][T13049] netlink: 'syz.3.2031': attribute type 7 has an invalid length. [ 470.102883][T13149] validate_nla: 1 callbacks suppressed [ 470.102903][T13149] netlink: 'syz.1.2057': attribute type 2 has an invalid length. [ 470.616319][T13157] netlink: 'syz.0.2059': attribute type 1 has an invalid length. [ 470.639428][T13157] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2059'. [ 470.928464][ T5785] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13 [ 473.130256][T13157] netlink: 'syz.0.2059': attribute type 4 has an invalid length. [ 473.145697][T13157] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2059'. [ 473.162252][T13157] ..ãc¤±: mtu less than device minimum [ 473.394670][T13175] netlink: 'syz.1.2066': attribute type 4 has an invalid length. [ 473.404783][T13175] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2066'. [ 473.458696][T13176] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2065'. [ 473.651011][T13181] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2068'. [ 473.660844][T13181] openvswitch: netlink: Key type 4112 is out of range max 32 [ 473.726315][T13186] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 473.739513][T13187] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 473.776096][T13186] netlink: 'syz.1.2069': attribute type 3 has an invalid length. [ 473.803438][T13186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2069'. [ 474.065747][T13197] netlink: 'syz.1.2073': attribute type 14 has an invalid length. [ 474.176053][T13197] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2073'. [ 474.996474][T13202] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.2074'. [ 475.028628][T13202] netlink: 6116 bytes leftover after parsing attributes in process `syz.2.2074'. [ 475.059831][T13202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'. [ 475.146789][T13210] __sock_release: fasync list not empty! [ 475.817180][T13235] netlink: 'syz.0.2084': attribute type 6 has an invalid length. [ 475.832779][T13235] __nla_validate_parse: 3 callbacks suppressed [ 475.832797][T13235] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2084'. [ 475.886868][T13234] netlink: 'syz.1.2083': attribute type 1 has an invalid length. [ 476.536210][T13242] hsr0: entered promiscuous mode [ 476.565038][T13242] hsr0: entered allmulticast mode [ 476.597600][T13242] hsr_slave_0: entered allmulticast mode [ 476.731764][T13257] netlink: 'syz.3.2090': attribute type 1 has an invalid length. [ 477.143166][T13276] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.2098'. [ 477.155852][T13278] delete_channel: no stack [ 477.177502][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 477.226620][T13278] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2096'. [ 477.368213][T13283] netlink: 'syz.0.2099': attribute type 10 has an invalid length. [ 477.842056][T13271] delete_channel: no stack [ 478.681737][T13309] netlink: 'syz.3.2108': attribute type 29 has an invalid length. [ 478.717739][T13309] netlink: 'syz.3.2108': attribute type 29 has an invalid length. [ 478.738101][T13309] netlink: 'syz.3.2108': attribute type 29 has an invalid length. [ 478.793378][T13309] netlink: 'syz.3.2108': attribute type 29 has an invalid length. [ 478.832853][T13309] netlink: 'syz.3.2108': attribute type 29 has an invalid length. [ 480.139265][T13343] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2118'. [ 480.163823][T13347] netlink: 'syz.1.2120': attribute type 3 has an invalid length. [ 480.189243][T13348] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2120'. [ 480.202864][T13347] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2120'. [ 480.873280][T13370] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2127'. [ 484.446894][T13450] validate_nla: 1 callbacks suppressed [ 484.446914][T13450] netlink: 'syz.3.2158': attribute type 10 has an invalid length. [ 484.656765][T13459] IPv6: Can't replace route, no match found [ 485.844229][T13482] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2169'. [ 485.906202][T13482] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 488.751626][T13530] netlink: 'syz.1.2181': attribute type 29 has an invalid length. [ 488.895307][T13533] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.2182'. [ 490.233395][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2192'. [ 491.525070][T13595] netlink: 'syz.2.2203': attribute type 2 has an invalid length. [ 491.557415][T13595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2203'. [ 494.414304][T13606] netlink: 668 bytes leftover after parsing attributes in process `syz.2.2205'. [ 494.469009][T13606] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 494.523601][T13606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.446598][T13637] netlink: 'syz.3.2215': attribute type 10 has an invalid length. [ 495.508862][T13635] netlink: 'syz.3.2215': attribute type 10 has an invalid length. [ 496.607889][T13662] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2223'. [ 496.668502][T13662] openvswitch: netlink: Key type 4112 is out of range max 32 [ 496.740539][T13672] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2227'. [ 496.780255][T13672] netlink: 'syz.0.2227': attribute type 9 has an invalid length. [ 496.808459][T13672] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2227'. [ 496.854222][T13676] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2228'. [ 497.592283][T13715] syz.1.2239[13715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.592425][T13715] syz.1.2239[13715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 497.764854][T13720] syzkaller0: entered promiscuous mode [ 497.801746][T13720] syzkaller0: entered allmulticast mode [ 498.150546][T13734] netlink: 'syz.2.2247': attribute type 2 has an invalid length. [ 498.162395][T13734] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2247'. [ 499.223166][T13764] netlink: 'syz.0.2257': attribute type 21 has an invalid length. [ 499.801899][T13773] netlink: 'syz.3.2259': attribute type 1 has an invalid length. [ 499.810832][T13773] netlink: 'syz.3.2259': attribute type 3 has an invalid length. [ 499.837550][T13773] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2259'. [ 499.963800][T13782] netlink: 'syz.2.2262': attribute type 21 has an invalid length. [ 499.977537][T13782] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2262'. [ 500.118813][T13787] netlink: 'syz.0.2265': attribute type 6 has an invalid length. [ 500.385391][T13799] netlink: 'syz.1.2268': attribute type 9 has an invalid length. [ 500.737579][T13808] netlink: 'syz.3.2270': attribute type 3 has an invalid length. [ 500.764136][T13808] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2270'. [ 500.834053][ T5785] Bluetooth: hci1: unexpected event 0x01 length: 151 > 1 [ 500.845212][T13810] netlink: 'syz.0.2271': attribute type 29 has an invalid length. [ 501.566577][T13825] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.2275'. [ 501.604126][T13825] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2275'. [ 501.841521][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.850436][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.039430][T13835] validate_nla: 3 callbacks suppressed [ 502.039448][T13835] netlink: 'syz.2.2279': attribute type 3 has an invalid length. [ 502.057447][T13835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2279'. [ 502.932267][T13854] netlink: 'syz.2.2285': attribute type 10 has an invalid length. [ 502.957802][T13854] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.978124][T13854] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.990473][T13854] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.000570][T13854] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.034272][T13854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.140843][T13854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.167485][T13854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.207755][T13854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.244997][T13854] team0: Port device geneve1 added [ 503.705363][T13871] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 503.716886][T13871] dvmrp1: linktype set to 804 [ 503.731165][T13871] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2288'. [ 504.224706][T13876] Dead loop on virtual device ip6_vti0, fix it urgently! [ 504.694837][T13894] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2295'. [ 504.722659][T13899] netlink: 'syz.3.2297': attribute type 3 has an invalid length. [ 504.733949][T13899] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2297'. [ 505.709194][T13920] netlink: 'syz.1.2302': attribute type 6 has an invalid length. [ 505.731990][T13920] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2302'. [ 505.786725][T13920] netlink: 'syz.1.2302': attribute type 10 has an invalid length. [ 505.977165][T13923] netlink: 'syz.3.2303': attribute type 10 has an invalid length. [ 506.901396][T13945] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.2307'. [ 506.954855][T13946] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2308'. [ 507.689342][T13953] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2310'. [ 507.731376][ T5785] Bluetooth: hci1: ISO packet for unknown connection handle 3847 [ 508.083068][T13967] netlink: 'syz.1.2316': attribute type 13 has an invalid length. [ 508.097458][T13967] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2316'. [ 508.167853][T13968] mac80211_hwsim hwsim5 ..ãc¤±: renamed from wlan1 [ 508.198837][T13967] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2316'. [ 508.358246][T13972] syzkaller0: entered promiscuous mode [ 508.363854][T13972] syzkaller0: entered allmulticast mode [ 508.433476][T13975] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2319'. [ 509.805957][T13997] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2324'. [ 511.452094][T13988] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.2322'. [ 511.462613][T13997] netlink: 'syz.1.2324': attribute type 3 has an invalid length. [ 511.467158][T14003] netlink: 'syz.3.2326': attribute type 33 has an invalid length. [ 511.471749][T13997] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2324'. [ 511.685125][T14011] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2329'. [ 512.015184][ C0] [ 512.015192][ C0] ================================ [ 512.015199][ C0] WARNING: inconsistent lock state [ 512.015210][ C0] syzkaller #0 Not tainted [ 512.015220][ C0] -------------------------------- [ 512.015226][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 512.015234][ C0] syz.3.2332/14020 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 512.015255][ C0] ffff88805eb34218 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 512.015319][ C0] {INITIAL USE} state was registered at: [ 512.015331][ C0] lock_acquire+0x19e/0x420 [ 512.015353][ C0] _raw_spin_lock+0x2e/0x40 [ 512.015374][ C0] htab_lock_bucket+0x17d/0x300 [ 512.015394][ C0] __htab_lru_percpu_map_update_elem+0x2c8/0x970 [ 512.015416][ C0] bpf_percpu_hash_update+0x119/0x200 [ 512.015436][ C0] bpf_map_update_value+0x3c3/0x720 [ 512.015454][ C0] generic_map_update_batch+0x5ec/0x810 [ 512.015471][ C0] bpf_map_do_batch+0x3d7/0x610 [ 512.015491][ C0] __sys_bpf+0x381/0x890 [ 512.015509][ C0] __x64_sys_bpf+0x7c/0x90 [ 512.015526][ C0] do_syscall_64+0x55/0xa0 [ 512.015548][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.015572][ C0] irq event stamp: 3016 [ 512.015579][ C0] hardirqs last enabled at (3015): [] _raw_spin_unlock_irqrestore+0x86/0x120 [ 512.015615][ C0] hardirqs last disabled at (3016): [] exc_debug+0x73/0x140 [ 512.015639][ C0] softirqs last enabled at (992): [] bpf_prog_load+0x1266/0x1670 [ 512.015665][ C0] softirqs last disabled at (990): [] bpf_ksym_add+0x2d/0x340 [ 512.015692][ C0] [ 512.015692][ C0] other info that might help us debug this: [ 512.015698][ C0] Possible unsafe locking scenario: [ 512.015698][ C0] [ 512.015703][ C0] CPU0 [ 512.015706][ C0] ---- [ 512.015709][ C0] lock(&htab->lockdep_key); [ 512.015722][ C0] [ 512.015725][ C0] lock(&htab->lockdep_key); [ 512.015737][ C0] [ 512.015737][ C0] *** DEADLOCK *** [ 512.015737][ C0] [ 512.015741][ C0] no locks held by syz.3.2332/14020. [ 512.015750][ C0] [ 512.015750][ C0] stack backtrace: [ 512.015756][ C0] CPU: 0 PID: 14020 Comm: syz.3.2332 Not tainted syzkaller #0 [ 512.015776][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 512.015787][ C0] Call Trace: [ 512.015796][ C0] <#DB> [ 512.015804][ C0] dump_stack_lvl+0x18c/0x250 [ 512.015844][ C0] ? show_regs_print_info+0x20/0x20 [ 512.015888][ C0] ? print_usage_bug+0x475/0x690 [ 512.015913][ C0] ? verify_lock_unused+0x18/0x140 [ 512.015944][ C0] lock_acquire+0x2c2/0x420 [ 512.015966][ C0] ? look_up_lock_class+0x75/0x140 [ 512.015997][ C0] ? htab_lock_bucket+0x17d/0x300 [ 512.016031][ C0] ? read_lock_is_recursive+0x20/0x20 [ 512.016053][ C0] ? lock_release+0xb5/0x8c0 [ 512.016085][ C0] ? perf_trace_lock_acquire+0x104/0x410 [ 512.016125][ C0] _raw_spin_lock+0x2e/0x40 [ 512.016147][ C0] ? htab_lock_bucket+0x17d/0x300 [ 512.016170][ C0] htab_lock_bucket+0x17d/0x300 [ 512.016198][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 512.016222][ C0] ? look_up_lock_class+0x75/0x140 [ 512.016250][ C0] ? verify_lock_unused+0x18/0x140 [ 512.016277][ C0] ? jhash+0x34e/0x740 [ 512.016304][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 512.016336][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 512.016360][ C0] ? perf_callchain+0x220/0x220 [ 512.016394][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 512.016419][ C0] bpf_overflow_handler+0x1fc/0x510 [ 512.016456][ C0] ? bpf_overflow_handler+0xde/0x510 [ 512.016486][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 512.016526][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 512.016555][ C0] __perf_event_overflow+0x447/0x630 [ 512.016591][ C0] perf_swevent_overflow+0x268/0x340 [ 512.016625][ C0] ? perf_event_switch_output+0x790/0x790 [ 512.016657][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 512.016692][ C0] perf_swevent_event+0x45c/0x570 [ 512.016726][ C0] ? perf_tp_event+0x1520/0x1520 [ 512.016760][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 512.016789][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 512.016851][ C0] perf_bp_event+0x319/0x430 [ 512.016884][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 512.016909][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 512.016976][ C0] ? lock_acquire+0x2c2/0x420 [ 512.017027][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 512.017063][ C0] notifier_call_chain+0x197/0x380 [ 512.017092][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 512.017122][ C0] atomic_notifier_call_chain+0xda/0x180 [ 512.017153][ C0] notify_die+0x145/0x1a0 [ 512.017184][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 512.017223][ C0] ? rcu_is_watching+0x15/0xb0 [ 512.017254][ C0] notify_debug+0x2e/0x50 [ 512.017273][ C0] exc_debug+0xde/0x140 [ 512.017299][ C0] asm_exc_debug+0x1e/0x40 [ 512.017322][ C0] RIP: 0010:rep_movs_alternative+0x15/0x90 [ 512.017343][ C0] Code: 8b 1c 24 4c 8b 64 24 08 48 83 c4 10 c3 cc cc cc cc cc cc cc cc f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 [ 512.017360][ C0] RSP: 0018:ffffc9000bce7bd0 EFLAGS: 00040202 [ 512.017375][ C0] RAX: ffffffff842a2100 RBX: 0000000000000001 RCX: 0000000000000001 [ 512.017389][ C0] RDX: 0000000000000001 RSI: 0000200000000302 RDI: ffff88802c58c758 [ 512.017403][ C0] RBP: ffffc9000bce7d20 R08: 0000000000000000 R09: 0000000000000001 [ 512.017415][ C0] R10: dffffc0000000000 R11: ffffed10058b18eb R12: 0000200000000303 [ 512.017429][ C0] R13: 1ffff9200179cfbd R14: ffff88802c58c758 R15: 0000200000000302 [ 512.017455][ C0] ? _copy_from_user+0x30/0xe0 [ 512.017491][ C0] [ 512.017497][ C0] [ 512.017503][ C0] _copy_from_user+0x8b/0xe0 [ 512.017532][ C0] generic_map_update_batch+0x54b/0x810 [ 512.017569][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 512.017597][ C0] ? __fdget+0x180/0x210 [ 512.017635][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 512.017651][ C0] bpf_map_do_batch+0x3d7/0x610 [ 512.017682][ C0] __sys_bpf+0x381/0x890 [ 512.017707][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 512.017752][ C0] ? lock_chain_count+0x20/0x20 [ 512.017788][ C0] __x64_sys_bpf+0x7c/0x90 [ 512.017811][ C0] do_syscall_64+0x55/0xa0 [ 512.017829][ C0] ? clear_bhb_loop+0x40/0x90 [ 512.017853][ C0] ? clear_bhb_loop+0x40/0x90 [ 512.017882][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 512.017905][ C0] RIP: 0033:0x7f7a64f9c819 [ 512.017923][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.017940][ C0] RSP: 002b:00007f7a65e24028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.017960][ C0] RAX: ffffffffffffffda RBX: 00007f7a65215fa0 RCX: 00007f7a64f9c819 [ 512.017975][ C0] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 512.017988][ C0] RBP: 00007f7a65032c91 R08: 0000000000000000 R09: 0000000000000000 [ 512.018008][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.018020][ C0] R13: 00007f7a65216038 R14: 00007f7a65215fa0 R15: 00007fff613b4848 [ 512.018057][ C0]