last executing test programs: 7.425457736s ago: executing program 0 (id=4522): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000002640)={&(0x7f0000000080)=@qipcrtr={0x2a, 0x4, 0x7ffe}, 0x80, 0x0, 0x0, &(0x7f0000000980)=[@timestamping={{0x14, 0x1, 0x41, 0x2}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000040000000400000022"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r2, &(0x7f0000000140), 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_clone(0x0, &(0x7f0000000080)="9935310e88b677c31a5718c72c027e100cad966eb32988ce24e6b8497b11813c0ea4f6da261a1d4ce2c6993632423b067f2281980637775889e2a6845a6529c41873e730d24a6e1bd160b1c5bd20560797d033c279774e2124376ea14d54675c726bb200b5d1e1e8f0dcb9d21fbf480dd7f4234824c5cb7e22", 0x79, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="fd7c857bbd0b7e18c595244bb33d0b4b11435a91636897bbf6bb66df0bcfe7454a42b2069d6082108f131f0d480540b9cf71ac2bbf6a70f3775e79c9ba0e2bbf9ccdbad4871d39628e41751cd0c91dee28dc6cda4d7a97fe6388240ee3fc794087c827bdc185491ce8bcb2370b5ececbd683d44433d7950113ee16b164dfcbb2187dd4e84bc93cc6eed547146bf4a410333619835b01874806") ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000500)={'bridge0\x00', @remote}) r5 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x8, 0x7f, 0x5, 0x0, 0x2, 0x1040, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x3}, 0x6be, 0x9, 0x0, 0x6, 0x5, 0x4, 0x9, 0x0, 0x594, 0x0, 0x5}, 0x0, 0xd, r0, 0x3) perf_event_open(0x0, r4, 0xeffffffffffffbff, r5, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r1) 6.29198811s ago: executing program 0 (id=4528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000040000000400000009"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x6c10, 0x36, &(0x7f0000000240)=""/54, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2bc9d, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000002c0)=[{0x0, 0x4, 0x6, 0xa}, {0x2, 0x4, 0x9}, {0x4, 0x3, 0x8, 0xecc0f4816784c8ff}, {0x0, 0x5, 0x10, 0xa}, {0x4, 0x5, 0xa, 0x7}, {0x4, 0x2, 0x2, 0x6}, {0x0, 0x2, 0xd, 0x6}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x32, 0x1, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@fallback, r5, 0x32, 0x0, 0x0, @void, @value=r7, @void, @void, r6}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x53, 0x10, &(0x7f0000000140)=""/16, 0x41000, 0x13, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xc, 0xee, 0x8}, 0x10, 0x19e83, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[r0], &(0x7f0000000440)=[{0x1, 0x2, 0x10, 0xc}], 0x10, 0x1000}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe800000000000"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[@ANYBLOB='b *:* rmw'], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x10, 0x3, 0x10) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x63, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207104e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @broadcast}}}], 0x50}, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90d24fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) 5.363834674s ago: executing program 0 (id=4535): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000f000000cc000200060000ec05"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)='T', &(0x7f0000000000), 0x7fff, r0}, 0x38) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x4788, 0x37}, 0x80, 0x0}, 0x4000080) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r0}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x75, &(0x7f0000000000)=r5, 0x8) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000240)="0a858c1cea5eec0594ecb3cabdedb7701c69feac35d57aa7cb72c9549f59c3194abf07932793caf389e969647769f74d16fc9dcd747f83c988419447c0885a4da900d0cca90ce9f847f7bcf36ab8c3b091ae2d76a8147a1319a3968682cb4f64f7cc579e2b5a9ebdfbebf30fc961914f7a64e79cd9c8a6c04d96c08aff67ab30c0ca373fe8757e740852ee9089fd595b2f63e559da9d62779111d42804f38239f2ee211053fe4435835edf6a7bd92ce5c9276c", &(0x7f0000000300)=""/39, &(0x7f0000000380)="f621b49b52ff3d2e68b09fbb9b2828ef0559c8a328b4af71eb06af2acd2a6cdce0eaeeee05edf6ccfcbdbb37b3f2f6f1c7fb318368bdc2788f7a327298aeccafb0a6fc8060bbe10ea2e980557242922910bdf5", &(0x7f0000000400)="aef21f862d1a19c4c232d1beccdd7a4e31be59a6579eca7244e5b169ca57d3c47465b2efc03754b87c733ddadfcf6da28f8bf0b0917343af72890913bb", 0x800, r5}, 0x38) write$cgroup_subtree(r2, &(0x7f0000001480)=ANY=[], 0xc54c295c) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x4d54b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x1fba, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r0, 0x4) 3.678495364s ago: executing program 0 (id=4542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffff000000000085000000330000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=0x0, 0x11, 0x1, 0x7ff, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="028000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000080000000001001a0000000b00"/28], 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="6a69c274386d178550cb864bd572", 0x0, 0xffff6340, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x400000000008, 0x8000008}, 0x107004, 0x2, 0xfffffffe, 0x0, 0x0, 0x2, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000004000000040000000a00000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="2b8186000000000000000000000900"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000300)=@raw=[@ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @alu={0x7, 0x0, 0xb}, @exit], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(r7, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.612294555s ago: executing program 1 (id=4547): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x2, 0x2, &(0x7f00000002c0)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x4, 0x8}, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0], 0x0, 0x8a, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x9e, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x1, 0x4}]}, @ptr={0x6, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x61, 0x2e, 0x5f, 0x0, 0x61]}}, &(0x7f0000000a00)=""/115, 0x47, 0x73, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x1e, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_val={0x18, 0xe168cbf98758dece, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='syzkaller\x00', 0x5, 0xd7, &(0x7f0000000540)=""/215, 0x41000, 0x2, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000ac0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0xc, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000b40)=[{0x2, 0x2, 0x9}, {0x2, 0x1, 0xf, 0x1}, {0x4, 0x2, 0x10, 0xc}, {0x2, 0x2, 0x7, 0xc}, {0x1, 0x4, 0xf, 0x7}], 0x10, 0x3}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r5 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) 2.498981391s ago: executing program 3 (id=4549): ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x5, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x0, 0x1, 0x5, 0x0, 0xffffffffffffffe0}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x1}, @alu={0x4, 0x0, 0x2, 0x2, 0x7, 0x20, 0x4}, @ldst={0x0, 0x1, 0x6, 0xa, 0x4, 0xffffffffffffffff, 0x8}], &(0x7f0000000080)='GPL\x00', 0x2d64, 0x75, &(0x7f00000000c0)=""/117, 0x40f00, 0x22, '\x00', r0, @fallback=0x12, r1, 0x8, &(0x7f0000000240)={0xa, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r2, 0x5, 0x0, &(0x7f00000002c0)=[{0x4, 0x4, 0x10, 0xc}, {0x2, 0x3, 0xe, 0xa}, {0x2, 0x4, 0x1}, {0x0, 0x5, 0x0, 0x6}, {0x2, 0x4, 0x6, 0x2}], 0x10, 0x8}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3ff, '\x00', r0, r1, 0x2, 0x4, 0x4}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x4, '\x00', r0, r1, 0x1, 0x5, 0x2}, 0x50) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000540)) ioctl$PERF_EVENT_IOC_QUERY_BPF(r5, 0xc008240a, &(0x7f0000000580)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x400, '\x00', r0, r5, 0x4, 0x1, 0x5}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x7fff, 0xc256, 0x2, 0x2020, r4, 0x9, '\x00', r0, r1, 0x0, 0x0, 0x4, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x7, 0x42, &(0x7f0000000740)=""/66, 0x41000, 0x10, '\x00', 0x0, 0x1a, r7, 0x8, &(0x7f0000000800)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0x9, 0x9, 0x1}, 0x10, 0x6632, r5, 0x1, &(0x7f00000009c0)=[r3, r4, r8, r9], &(0x7f0000000a00)=[{0x5, 0x5, 0x7, 0x2}], 0x10, 0x2}, 0x94) recvmsg$unix(r5, &(0x7f0000002c80)={&(0x7f0000000b00), 0x6e, &(0x7f0000002b80)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x2, &(0x7f0000002bc0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}, 0x10021) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002cc0)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x45, '\x00', 0x0, r11, 0x3, 0x2, 0x1}, 0x50) r16 = perf_event_open(&(0x7f0000002d80)={0x5, 0x80, 0x9, 0x7, 0x9, 0x8, 0x0, 0x2, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000002d40)}, 0x7506, 0xbe, 0x4, 0x9, 0x99, 0x7, 0xd, 0x0, 0x95d4, 0x0, 0x7fffffffffffffff}, 0x0, 0x3, r15, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r16, 0x4008240b, &(0x7f0000002e40)={0x1, 0x80, 0x6, 0xfd, 0x0, 0x38, 0x0, 0xfffffffffffffffa, 0x69007, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002e00), 0x91744615b66e5023}, 0x10, 0x2, 0x9, 0x9, 0x8, 0xffff, 0x8, 0x0, 0x7, 0x0, 0x1000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002ec0)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_RESET(r14, 0x2403, 0x7) ioctl$TUNGETFEATURES(r13, 0x800454cf, &(0x7f0000002f00)) close(r12) r17 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000041c0)=@o_path={&(0x7f0000004180)='./file0\x00', 0x0, 0x0, r7}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000004200)={&(0x7f0000002f40)="69acdeb3abb6995d356a5db1a85309012f4ceb2fa3f5ba6ea94669b384b640d3628cf6048542c261b9e25b7fa2bbdd25bc4aee7e850b7c17697ff37698f671c92f558343fbb6fbc93c8e7b0a2905e1a2e9d4b4e3ddb5f67183c8b33faddddda880e81210fbd3c72f7c6f787921fc083fc6dab55d46208036b9089923d19086ab965d88646597e23f7084a6e6a7d078e831074769fd6d1354051d3c4804dbea43b40cf328d3bb3694366e52d1eb4e4b078f68d87e2fd7d6b71f2213d968187c1156ea96", &(0x7f0000003040)=""/4096, &(0x7f0000004040)="815ca6c6d048b1a67098d533cb513f3e3998b1012c39273b4d74ba9733076c7c3f374a0558756b88a551b28021e359b9af6b8f01a7832a7b57bf9ce463d1ae906ce1441bd9c1053ed4cc2f8d735ada195f728f53cb2fbd2a56e21388d8126d1b35ee2757c63e3e1ab1424d928b8c300545868029cef91f4c7871c1f663c9ce260987568af2418966ade0477dc6053bc423e1185d3c30b5db9cb372", &(0x7f0000004100)="ae1b0eac5e11cef407916a0167882852ebdd2a70efc2f271f3c9bfdd85857496110bee33263b97088e4745ca39dc14508c96ddad622edeabfda8f8d156e94bea67c35dd56b2dad65a901ba875563f6", 0x8001, r17, 0x4}, 0x38) r18 = bpf$ITER_CREATE(0x21, &(0x7f0000004240)={r13}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000004280)=@base={0x17, 0x0, 0x80000001, 0x9, 0x1a050, r11, 0x8, '\x00', 0x0, r18, 0x1, 0x4, 0x2, 0x0, @value=r5, @void, @value=r13}, 0x50) perf_event_open(&(0x7f0000004300)={0x0, 0x80, 0xa8, 0x0, 0x4, 0x2, 0x0, 0x5, 0x100c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}, 0x14d7c, 0x2, 0x5, 0x4, 0x0, 0x7635705b, 0x4, 0x0, 0xbf2e, 0x0, 0x5}, r10, 0x4, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004600)={r11, 0x0, 0x4d, 0x79, &(0x7f0000004380)="e513a602b62eb2badb70de5bd7a7d985a43959e931df9eb56b7500ac60ca4832cc44f5ade673a5f0a1945d536c8d9cccc96b17e189889b0322499571ccb40a4b4422172164b329abeee1ee8ed8", &(0x7f0000004400)=""/121, 0x0, 0x0, 0xcd, 0x56, &(0x7f0000004480)="5a88cabacd09f7fd2aabfa82e2d710d82dc890bb564ef5465b46306b1eb8f2fd13d83af2428fc1460b41d9463f82afb774c2c203fdcc1b432046ba7a8f2b7489ccdee3755f4cea7df474c0351c982ce999d096aea036be1d2e4ad664cbe8cd11c20d90d71f9808d3095959831250a34c51d0671f73096c0d4750111baf30b8c3858595ac51fac822fedd3745de53825d3f0ceb01f394a66fbf19269d3587e43cd277442dc1298d64667306e1bab2fa55509ee5fed6a9dc3aa212d5eb848fd13f999144805ef1a904b533b01816", &(0x7f0000004580)="3b38b5805693f2de13b5f56f1babda1d70a72aef3fbca07ff586e5c363de282cb2e28ab4bc464f6041ddf74daff6712b6aab9ebbee6f8da548870ea5b68b388e15add082825bb46ede2ad85bc43631251ae97aa30df6", 0x1}, 0x50) openat$cgroup_ro(r12, &(0x7f0000004680)='blkio.bfq.sectors\x00', 0x0, 0x0) 2.349518268s ago: executing program 2 (id=4550): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRES64=r0, @ANYBLOB="9f9c6a2c4727e054a05b1d4cba3d2cf6ed79835c62c4806b6e360765bebded414ffafe68020bc9093b4f47e1bc5d8a2767ea163ad6e800744a4cdd95d75ba088d13818c3d669e9025af5bb7c1001531893d79471903279e0de4577fadcada1e75c40147eb640f389fb4bd1a7ebd32fe9dfdc4361890dd53698ac54bb0a", @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="12c21f5f8c03f33b30a8b8d1646c6321dead932465efd614d1b0fa69a4fb7b82ed5b7fbb0c4e48331d887f9b552af4d198a8208c555bd4830583c309f09e2b1c41e254dc38be6e5fea6937db55da455ea9e8e30a61e8217afb9b08f15c2570619ae18d", @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000003fc0)}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$kcm(0x2, 0x3, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000800)='%+9llu \x00'}, 0x20) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x6, 0x9, &(0x7f0000000c40)=r9, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r12 = gettid() r13 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x4, 0x9, 0x3, 0x0, 0x1, 0x4, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000080), 0xc}, 0x4, 0x8000000000000001, 0x7, 0x5, 0x40, 0x4, 0x6, 0x0, 0x1ff, 0x0, 0x7b95}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r14 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6a, 0x6, 0x2, 0xb, 0x0, 0x9, 0xa00, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd, 0x4, @perf_config_ext={0x0, 0x4}, 0x500, 0x2, 0x40, 0x6, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x11c}, r12, 0xffffffffffffffff, r13, 0xf) r15 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r14}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=0xffffffffffffffff, 0x16, 0x1, 0x80, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0}, 0x40) r18 = openat$cgroup(r16, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r12, r13, 0x0, 0x3b, &(0x7f0000000400)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)=ANY=[@ANYRES32=r18, @ANYRES32=r15, @ANYBLOB="130900003400000000000000", @ANYRES32=r19, @ANYRES64=r17], 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x32d6aa9471b0a2e8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r20, @ANYRES32=r1, @ANYBLOB="aa53511c894c8ea2c6b45a804c4e2a86282ad3701c769d1a6c90b869195002dd99e2267bcfebfb08cce487cb33fa5128f5c284b75d63f58502fc72d20acac2c8651d11c750124022ec8b8fa14586fbd1a0d1f34b36d6fa518ec204d02eb7cb38194d42f08f8416364cb82e177fc43f553be2924e9c1eb642abb15f418a539e07ba99c0871283a800741b71df5740173e4bb90b6cc8f0f180e7dad0a565f85f60979845eea0ce66401b7537bd45ac83d631ba09f5b94a89cd6dcf0a801f1f390d83bdc263fba665932f212437c596d593ccc48ce12a9069cdabf00f906cd68ebe1cc81f73c99c29d8a36e7d3f8bcdaff914abe4fd09b6ac85f4da24b1899ecda4d0d6144261b0088cf5bf985666b85f62a584805fb09e1d0c8dd373585cfb1446df8c10740c57fe218dc4b779a1ba077c9dfe969541e51308227838579a712c264a8d3e6db87236a6d689d8f8dba79a5cdb207d3b6fd18d3c2e321af52ef2605c2c63a7cdd8222da798fdbee90258e4be4512ee300c1924561d46f17c514adda6895fbc1ce4aaaeb7ee0402e978551ee41f238fac0a9ae697", @ANYRES32=r1, @ANYRES32=r9, @ANYBLOB, @ANYRES64=r17], 0x20) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000005c0)}, 0x40) 2.106622419s ago: executing program 3 (id=4551): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@exit, @map_fd, @exit, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x8}], 0x0, 0x1, 0x0, 0x0, 0x41100}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.996363755s ago: executing program 3 (id=4552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa280, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x1}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x98, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x73, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000380)=r1) 1.994925595s ago: executing program 1 (id=4553): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800180001"], 0x48) 1.866345991s ago: executing program 0 (id=4554): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1", 0x1c}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, 0x0, 0x40) (async) sendmsg$inet(r1, 0x0, 0x40) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="1c0000005e007f029e3b470d649bc33b0285bb9f72ab25394cd956c0", 0x1c}], 0x1}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60100007000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r7, r6}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async) recvmsg$unix(r8, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff343, 0x80}, 0x104101, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.865726021s ago: executing program 2 (id=4555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0], 0x0, 0xe3, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x8, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000100000000611800000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xc3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @generic={0xe, 0x6, 0x9, 0x1ff, 0x4829}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x39, '\x00', r3, 0x25, r8, 0x8, &(0x7f0000000780)={0x2, 0x2}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x9, 0x6d5, 0x800}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000800)=[r0, r0, r0], &(0x7f0000000840)=[{0x1, 0x3, 0x1, 0x8}, {0x2, 0x4, 0x3, 0xb}, {0x1, 0x1, 0xd, 0xb}, {0x5, 0x5, 0x1, 0xc}, {0x1, 0x3, 0x8, 0x3}, {0x0, 0x4, 0xb, 0xd}], 0x10, 0xfffffff1}, 0x94) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r2) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00122800014006042400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r11 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x78, 0x9}, 0x11efa, 0x4, 0x98, 0x4, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) 1.389522233s ago: executing program 2 (id=4556): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) socket$kcm(0x29, 0x2, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x800, 0xfffffffd, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[], 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) (rerun: 64) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000380), 0x4) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30008000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000600)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@cb_func={0x18, 0x8}, @map_fd={0x18, 0x0, 0x0}, @map_fd, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0x0, 0x0}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1804000000000000000000000000000040000000010000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x8f, &(0x7f0000000200)=""/143, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x38) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000200)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000002980), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x20075, r4}, 0x38) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x8000c, 0x8}, 0x410, 0x2000001, 0x4, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.331549096s ago: executing program 3 (id=4557): r0 = socket$kcm(0x29, 0x6, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r3, &(0x7f0000000100)="77c89a9f16a92a3bd14f07c588340e6a7895dff179f69c597d1359815b93513f5f33e65613fcaffe4258806154e0d2740c9a1f9cc83b327a542d2e293ce64615c04b8402cc7f3688b239ff562101ade6d26b57c0cb0f46944cdacdaefe7cbba9bed3623e71cd0d1ad512ab8bb37742f57fae2f24fc626d966c54588e45e03a554d7af57d5103ab2809", &(0x7f00000001c0)=""/46}, 0x20) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @float={0xa, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x61, 0x41]}}, &(0x7f00000002c0)=""/15, 0x34, 0xf, 0x1, 0x6}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r5, 0x4, 0x2, 0x1}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$TUNGETIFF(r7, 0x800454d2, &(0x7f0000000400)={'wlan1\x00'}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r6, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0xb, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0xc}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000500)='syzkaller\x00', 0x1000, 0xb0, &(0x7f0000000540)=""/176, 0x40f00, 0x41, '\x00', r8, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x3, 0x7, 0x8}, 0x10, 0x7a4c, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000700)=[{0x2, 0x5, 0xb, 0x4}], 0x10, 0xf}, 0x94) socketpair(0x15, 0x80000, 0x4, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x181000, 0x0) close(r11) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000880)=r9) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000008c0)={'\x00', 0x1000}) recvmsg(r11, &(0x7f0000000e40)={&(0x7f0000000900)=@nl=@unspec, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000980)=""/141, 0x8d}, {&(0x7f0000000a40)=""/218, 0xda}, {&(0x7f0000000b40)=""/40, 0x28}, {&(0x7f0000000b80)=""/35, 0x23}, {&(0x7f0000000bc0)=""/65, 0x41}, {&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/81, 0x51}, {&(0x7f0000000d00)=""/191, 0xbf}], 0x8}, 0x10101) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x1, '\x00', 0x0, r5, 0x5, 0x1, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r9, 0xe0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000001140)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001180), &(0x7f00000011c0), 0x8, 0x93, 0x8, 0x8, &(0x7f0000001200)}}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1c, 0x9, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0x4, 0x1, 0x0, r13}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @ldst={0x0, 0x0, 0x3, 0x7, 0x8, 0x0, 0x8}]}, &(0x7f0000000f80)='GPL\x00', 0x6, 0x65, &(0x7f0000000fc0)=""/101, 0x41000, 0x69, '\x00', r14, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000001380)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000013c0)=[r10], 0x0, 0x10, 0x8}, 0x94) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000014c0)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x10001, '\x00', r8, r5, 0x3, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000015c0)={{r16}, &(0x7f0000001540), &(0x7f0000001580)=r15}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001700)={@cgroup, 0x3, 0x0, 0x2, &(0x7f0000001600)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{r10, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001740)={@map=r18, r9, 0x1e, 0xc, 0x0, @void, @value=r9, @void, @void, r17}, 0x20) r19 = syz_clone(0x8000000, &(0x7f0000003d00)="004c0a39e640f2cda087b3f1b277740990d0f6e4c711456497c8f825b85b167f4e39a9a3ea4a84be27b935b414512e79bc623c7eacdb1472de04a62a0fd3f526959530df4e10d1789a05c61cb327e8325de6a283f60ca7e1b457abc384fde4a1bc6b3cf455737783e8f08a0f17339c3770203c0da77b202c15815bc1d4c545120c603d1cd06703dc829b5bd4bba226f373f2036050f6a7d81288dcc797267db52bf93bce0c20d09caf96201c1fd60afa53307fdef2e86ba6346e5f955d43b30d9ef92ceeea6a97fa025a9262ef0c3cc765", 0xd1, &(0x7f0000003e00), &(0x7f0000003e40), &(0x7f0000003e80)="24e6087651aa1d6e82fb1de411729aef47c8f1f2fb01234e2847eb00a473c0491f7c1ac4fdaaa6d10f3007bb2f895a838d47713fa1730a22b7b3df73cee0b9edd3be3905138253b0ed4ea80a4d3ba9da7bd90096a3d5c4a90edcbec7d5e863f164b60429f474f7b10b8a0578aabff2") sendmsg$unix(r2, &(0x7f0000003f40)={&(0x7f0000001840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f00000018c0)="963f52af6200fef80e31eadbc9c876dbbb74a997744e0469df0c911a1627bc0e076c03260b7a5b8d9f4c9e9835185fdf21b9e8b21597e02fcc0831714d569b6034263a135b3aa118cf68715ea42471eb15e205d60a2678f3b071feafa5f7e1df26e77085fb8ab29ea449a6647098e1d9fd8229ab70a0e7d695ed997687a139d0e81406a4f0abd848f622cb6423a249ca11f4ce12f8ae52a4c58b187c19e518e9efe5642f10c5acbbdc35", 0xaa}, {&(0x7f0000001980)="10bc8bd3b261e6fe6a75723d453b1a1681ee6647aad718b1f276ad7fcf2d61b3e26800513dce094bcdb626ce95d1e17bbb862f2e5b38765ffd21d91fd59e3f34a1905577659f725fefe8ffafe2f25c1d4da51eeab8db83ec8f4b4e08be14759951a31ea8115cfe55daea03a4af4b1d6f9ccb1226c944120be669709cae36a674c82e319b60046355a1e0a606ccd6313166a697592664847866d7574f06fb815b7a26a38dc6b60439d5420b06480b62f6d6c61a22608bce50c70cdb146be5d08310d90621c19189b15e486b689cceac873480594eb09c32decce11abe0a16dba8c0c5d93c7df9ea75e73988b95427a6ad", 0xf0}, {&(0x7f0000001a80)="0ebf6654983caecf27da808015203beb943213c8e2ed6423f39d5127a7651aad6eed7e776089fbab68a8c4498c192f967b7d2fc9a430fbef0489436da207ef31e72577244b3cebe86f51ea96eab4c8987804e9f7acefdd0a54b0603602bb2b23cc0ccb56934aaeb946197f9ede76a746db403299c97c0f6c40b8d30b23711bd23958", 0x82}, {&(0x7f0000001b40)="10a13ddf71b59efed2a47235ae6a2e19d03aea0e5d1a6997d5f65dc9f3dc665ac6c4c82226c6b214", 0x28}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="0b8dcca9d659e5f93e4300cd2cdda61149fff27157e8fb146ac56c8bbee4ba62f6aad9d8d3a279f683e65004d2a98e98603c02aaf42bf7dc358ad3268e5ce3a950216cc0d77fa1a7e670023c207ac254b343cefa6ad02e8bc410ca6879f022a664ceddcf5a2c78bb7fdb3573778976dd8ccb6bfab376649c2a7c0cc4215583a669b65f874803b16d00def88c6a7cd031f5d6cce440827397de47a1b994a3d1804ce0e312472b49", 0xa7}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="ab20f03330684b95e89c6c3988", 0xd}], 0x8, &(0x7f0000003f00)=[@cred={{0x1c, 0x1, 0x2, {r19, 0xffffffffffffffff}}}], 0x20, 0x80}, 0x4000850) 1.274713559s ago: executing program 1 (id=4558): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) sendmsg$sock(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)='#', 0x1}], 0x1}, 0x400c804) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)="e8", 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c20", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)="454f644e5495ba936905e604402c1e867aa7f2d9fde1d81eed6155c382f41f6e6a6e7b4590ca7c15e0d7b06a56783cc0f28bfd6511ce367d47e0f247c9bb41ae6555d5526cd0bc3daaa7c41016d67afa4f09e8d892409896b75c4c892fa7212652ca687826c4ff43f35611ed166746bb69ad478be541430952fa957ad8634391a2c1bb2ee613eb50fbd55e9a95f7c06251d7dfa606295a677149609ecda9cf1d755c14233a47ef02c2ea2f36d4a414836e12496ee25917ec246a3369bd6f008012aed216110111fddfc22ed8c9a799f328b29ce91db496ee87560e2066eb719b51a9db400a48540103fb264515bded5fb2d6ab36bfa3", 0xf6}, {&(0x7f0000000440)="39426ad4f9258744e8cf2a06e034bb1b72276914a76f9febd636f943855ed5ea9b506495f9c23485a1dcce", 0x2b}, {&(0x7f0000000480)="43ba2a56fe5998b3678c606f499cc8711103f1da4a901556ef9bc05b806565f68e9565c6155c75e001bd51144814b05bdef0e890e729df27ad50a8322996", 0x3e}, {&(0x7f0000003440)="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", 0x461}], 0x4, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) 1.091500688s ago: executing program 1 (id=4559): socketpair(0x8, 0x3, 0x8, &(0x7f0000000040)={0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x80000000, 0x71, 0x10, 0xb6}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.04242889s ago: executing program 2 (id=4560): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ceb71c0010ec90db133c22a690ae7080000000000040875b0089"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@exit, @map_fd, @exit, @jmp={0x5, 0x0, 0x4, 0x0, 0x0, 0x8}], 0x0, 0x1, 0x0, 0x0, 0x41100}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 816.943491ms ago: executing program 1 (id=4561): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x4040010) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) socket$kcm(0x2, 0x5, 0x84) (async) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async) close(r5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="18490000060000000000000000000000852000000400000018250000", @ANYRES32=r8, @ANYBLOB="000000000300000018210000", @ANYRESDEC=r6, @ANYBLOB="c240ddaba3000000000001000085200000020000009500030000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r9 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0x10001, 0x5, 0x4c11, 0xffffffffffffffff, 0xfffffffc}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x7, 0x10001, 0x5, 0x4c11, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(0x3) (async) close(0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x12}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x20040000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 815.574821ms ago: executing program 2 (id=4562): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x3d98, 0x0, 0x8, 0x3fe, 0xfffffff4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x23000200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x308) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r5, r6}) 710.465196ms ago: executing program 3 (id=4563): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r2}, 0x38) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="745522a1123fecd4ab33a868014c5f8253a00c2792f5711a425aa31f3ffb8bdfe8f4ae08cd5c8c787db9fda1cc35cba661014d01e25912648db8dce2ac6bde06bf303a4b36fc2dafd10e80e505968d6f1ba5c3cc18248ed9e94412b7e2a98708b04c97c84fd7a2e6ac658eff6d8c071ddc5fb2a8e4b249d653b5eb236ea34c7a4bdbc017fc3c2c896ff0cfa4cdd915b6b3da526756138910", @ANYRES64=r3], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="745522a1123fecd4ab33a868014c5f8253a00c2792f5711a425aa31f3ffb8bdfe8f4ae08cd5c8c787db9fda1cc35cba661014d01e25912648db8dce2ac6bde06bf303a4b36fc2dafd10e80e505968d6f1ba5c3cc18248ed9e94412b7e2a98708b04c97c84fd7a2e6ac658eff6d8c071ddc5fb2a8e4b249d653b5eb236ea34c7a4bdbc017fc3c2c896ff0cfa4cdd915b6b3da526756138910", @ANYRES64=r3], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x37, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x11, &(0x7f0000000700)=ANY=[@ANYBLOB="1800110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000005791feffffffffff4d790c0010000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a80)='syzkaller\x00', 0xcc1, 0x15, &(0x7f0000000ac0)=""/21, 0x40f00, 0x21, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000b00)={0xfffffff7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000bc0)=[r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r0], &(0x7f0000000c00)=[{0x4, 0x5, 0x6, 0x6}, {0x2, 0x2, 0x8}, {0x0, 0x1, 0xa, 0x3}, {0x3, 0x3, 0x7, 0x8}, {0x5, 0x3, 0xb, 0x8}, {0x4, 0x1, 0x1}], 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x3, 0x10) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000004000000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c4", 0x45}], 0x1}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x83, 0x25, &(0x7f0000000240)="35a0af28fbdf23e63167ae332799ae7624ee051ec01ded3e65f4d9a72746079b68f7768d51b0131ad1eb0c58c44a0ee8b57462bc2391ad68a283279daf944f23192bce43dc776f3106c888d80453150db11ad73775330f3324534dacd24daa0914f9183223982ecefcc2acf15f9901a38b3e7377d6dbd99fc3158da12a9e3f29e4bcaf", &(0x7f0000000380)=""/37, 0xffff7fff, 0x0, 0xd3, 0xb7, &(0x7f0000000500)="95341ec5eb489b5bcddcb6eb7e2af1323d9ff3560a5fb6dbe161d0fa153a2d5e3268017b1ef2d23a1430233a3ed06f204cfc30606450f3758173864fd93769519212eed29ff28b651874e8defdc9e36ebf2885e5b92fec51edc5acc57596f7cd367ad74a64c81dc2aaaa4124572fef2601f03dbbef5936cae48dbefdc8c31366befd2f69d089058139106b8608cc7ed073a6d12c3e2d834d9535a438fb6ab45ce2b8476767858f0de04512f517c2aa6bb7cba84c1d1cd9bf893548beab0f8edbcce84b1f229414152aa83b6fc73dc6be2efc6d", &(0x7f0000000940)="c515486ca4b5d2c2fcca06943f1f1399d092c41ee6b3ad13e83aeafa2400fdfa34dc249ceaa08891ca7cc8861379a443b8e79929384c8efffc8f86336d4f5a11a7dde5ae5794156888fcea59138a01c507a9715941000375c445c5e0c942e40f40163bcf132bea36823ae313ba48a84ceea0c9a25edc29a340706d40949f16e566aad813e9f838066c53c67b5fdab434b749d9d5fb4c759e92d6f01cac3ef998f0b77020cf2f2a76f00c144055329497807dd17ff5b573", 0x1, 0x0, 0x7fff}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x83, 0x25, &(0x7f0000000240)="35a0af28fbdf23e63167ae332799ae7624ee051ec01ded3e65f4d9a72746079b68f7768d51b0131ad1eb0c58c44a0ee8b57462bc2391ad68a283279daf944f23192bce43dc776f3106c888d80453150db11ad73775330f3324534dacd24daa0914f9183223982ecefcc2acf15f9901a38b3e7377d6dbd99fc3158da12a9e3f29e4bcaf", &(0x7f0000000380)=""/37, 0xffff7fff, 0x0, 0xd3, 0xb7, &(0x7f0000000500)="95341ec5eb489b5bcddcb6eb7e2af1323d9ff3560a5fb6dbe161d0fa153a2d5e3268017b1ef2d23a1430233a3ed06f204cfc30606450f3758173864fd93769519212eed29ff28b651874e8defdc9e36ebf2885e5b92fec51edc5acc57596f7cd367ad74a64c81dc2aaaa4124572fef2601f03dbbef5936cae48dbefdc8c31366befd2f69d089058139106b8608cc7ed073a6d12c3e2d834d9535a438fb6ab45ce2b8476767858f0de04512f517c2aa6bb7cba84c1d1cd9bf893548beab0f8edbcce84b1f229414152aa83b6fc73dc6be2efc6d", &(0x7f0000000940)="c515486ca4b5d2c2fcca06943f1f1399d092c41ee6b3ad13e83aeafa2400fdfa34dc249ceaa08891ca7cc8861379a443b8e79929384c8efffc8f86336d4f5a11a7dde5ae5794156888fcea59138a01c507a9715941000375c445c5e0c942e40f40163bcf132bea36823ae313ba48a84ceea0c9a25edc29a340706d40949f16e566aad813e9f838066c53c67b5fdab434b749d9d5fb4c759e92d6f01cac3ef998f0b77020cf2f2a76f00c144055329497807dd17ff5b573", 0x1, 0x0, 0x7fff}, 0x50) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x1, 0xff, &(0x7f0000000600)=""/255, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000007c0)=[r6, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x5, 0x3, 0x0, 0x2}, {0x0, 0x5, 0x8, 0xb}, {0xd, 0x1, 0x4, 0x2}, {0x0, 0x2, 0xe, 0x8}, {0x0, 0x2, 0x7, 0x4}], 0x10, 0x1}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x9, 0x12, 0x0, 0xfffffffffff7bbff, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x2000800000, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x2}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) 340.913464ms ago: executing program 2 (id=4564): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8929, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000400)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f0000000480)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x44, '\x00', r4, @cgroup_skb=0x1, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x800, 0xe, 0x5, 0x5b}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000a80)=[{0x5, 0x5, 0xb}, {0x3, 0x5, 0x7, 0x7}], 0x10, 0x1}, 0x94) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90924fc60040f030048000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x88, 0x67, 0x0, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 248.715398ms ago: executing program 0 (id=4565): r0 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x114, 0x1d, 0x0, 0x4) (async) socket$kcm(0xf, 0x3, 0x2) r1 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x8112) (async) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r7) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r10, 0x1, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r11}, &(0x7f00000001c0), &(0x7f0000000400)}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) 452.53µs ago: executing program 1 (id=4566): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x2, 0x8, &(0x7f00000002c0)="b800", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc6004000e000a7403004700000037153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x1000, 0x0, 0x8, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0900000013000000000000000a00000004000000", @ANYRES32, @ANYBLOB="0300000000000000000008000000000000000000fd75d6c87cdd8f98e2011e4766a703a9476497a4a4da9457b190a9607d01e4d61203933e0984341647c1455c4775d9468fbd20a283b39632be8692fa217a25dcffe9644d49be7df8a6a5f9990d394b70210752d53c65ec296aaaacd429e23c8f8f163b389fc1d68f388f411f0ca36decc2ac621ff9ff28f36b8b0b47ae37c78155196eef596c9a76c778d709f4d7d7f1a680854cb47a409a68040cdfc6adb19fe7414643d50b799e0657a17f19845b8a0dbb9c62d54994d26ac9bedf040f472939245f3fd520e6ae001f511c84b3f2476f6f2c52cc3678d15d0a585cc9b576253008b58471741e8adb49203f7709d4b52b18215048d5fa91ebcd4cb81a2c09c3275348e5cc608eb6ce059330b297c0d93ab68a450000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x50) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xa, 0x8000000, 0x9, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x7, 0x0, 0x2a, 0x8, 0x0, 0x8, 0x908, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x1a0c0, 0x9, 0xa79, 0x9, 0x7fffffff, 0xfd, 0xfff8, 0x0, 0x1, 0x0, 0x4}, 0xffffffffffffffff, 0x9, r2, 0x1) r3 = socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x800, 0x2000000, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r4, 0xf8, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x88, &(0x7f0000000540), 0x30, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0xad, 0x8, 0x8, &(0x7f00000006c0)}}, 0xd) r5 = socket$kcm(0x2, 0x3, 0x106) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @multicast}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547e841fd74eabc89b6f5b32", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af36504000100381c1500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 3 (id=4567): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) (async) recvmsg(r2, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) (async, rerun: 32) r3 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x00') (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90a24fc601000040006000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 4] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2899'. [ 791.145913][T17889] €Â0: renamed from pim6reg1 [ 795.667077][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 796.335825][T17919] žÿ: renamed from team_slave_1 [ 796.343855][T17932] netlink: 'syz.3.2903': attribute type 5 has an invalid length. [ 796.525632][T17943] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2907'. [ 796.571053][T17950] netlink: 'syz.2.2908': attribute type 10 has an invalid length. [ 796.583744][T17950] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2908'. [ 797.249516][T17976] delete_channel: no stack [ 797.255996][T17976] delete_channel: no stack [ 797.271809][T17976] netlink: 'syz.0.2914': attribute type 25 has an invalid length. [ 797.284013][T17976] netlink: 'syz.0.2914': attribute type 9 has an invalid length. [ 797.292196][T17976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2914'. [ 797.792514][T17994] netlink: 'syz.1.2920': attribute type 29 has an invalid length. [ 797.832390][T17994] netlink: 'syz.1.2920': attribute type 29 has an invalid length. [ 797.862134][T17996] netlink: 'syz.1.2920': attribute type 10 has an invalid length. [ 797.876919][T17996] veth0_vlan: entered allmulticast mode [ 798.150057][T17998] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2921'. [ 798.190810][T17998] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 799.431717][T18023] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2926'. [ 799.975923][T18032] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2929'. [ 800.073736][T18032] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 800.106373][T18032] CPU: 0 PID: 18032 Comm: syz.0.2929 Not tainted syzkaller #0 [ 800.113941][T18032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 800.124047][T18032] Call Trace: [ 800.127461][T18032] [ 800.130446][T18032] dump_stack_lvl+0x18c/0x250 [ 800.135361][T18032] ? show_regs_print_info+0x20/0x20 [ 800.140603][T18032] ? load_image+0x420/0x420 [ 800.145160][T18032] sysfs_warn_dup+0x8e/0xa0 [ 800.149689][T18032] sysfs_do_create_link_sd+0xc0/0x110 [ 800.155086][T18032] device_add_class_symlinks+0x1cf/0x240 [ 800.160748][T18032] device_add+0x4f9/0xc40 [ 800.165094][T18032] wiphy_register+0x1d99/0x2ac0 [ 800.169984][T18032] ? cfg80211_event_work+0x40/0x40 [ 800.175113][T18032] ? minstrel_ht_alloc+0x88a/0x990 [ 800.180249][T18032] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 800.186332][T18032] ieee80211_register_hw+0x2dd8/0x3b30 [ 800.191823][T18032] ? ieee80211_register_hw+0xfb1/0x3b30 [ 800.197394][T18032] ? ieee80211_tasklet_handler+0x20/0x20 [ 800.203043][T18032] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 800.208961][T18032] ? __debug_object_init+0xec/0x450 [ 800.214183][T18032] ? __asan_memset+0x22/0x40 [ 800.218796][T18032] ? __hrtimer_init+0x189/0x270 [ 800.223667][T18032] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 800.229511][T18032] ? mac80211_hwsim_free+0x220/0x220 [ 800.234816][T18032] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 800.240122][T18032] hwsim_new_radio_nl+0xdad/0x1a70 [ 800.245252][T18032] ? __nla_validate+0x50/0x50 [ 800.249959][T18032] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 800.256322][T18032] ? __nla_parse+0x40/0x50 [ 800.260764][T18032] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 800.267119][T18032] genl_family_rcv_msg_doit+0x21a/0x310 [ 800.272689][T18032] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 800.278605][T18032] ? bpf_lsm_capable+0x9/0x10 [ 800.283292][T18032] ? security_capable+0x89/0xb0 [ 800.288170][T18032] genl_rcv_msg+0x611/0x7a0 [ 800.292697][T18032] ? genl_bind+0x360/0x360 [ 800.297220][T18032] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 800.303571][T18032] ? mark_lock+0x94/0x320 [ 800.307926][T18032] netlink_rcv_skb+0x235/0x4c0 [ 800.312715][T18032] ? genl_bind+0x360/0x360 [ 800.317155][T18032] ? netlink_ack+0x1160/0x1160 [ 800.321927][T18032] ? lockdep_hardirqs_on+0x98/0x150 [ 800.327170][T18032] ? kasan_check_range+0x7f/0x290 [ 800.332316][T18032] ? down_read+0x1ac/0x2e0 [ 800.336752][T18032] genl_rcv+0x28/0x40 [ 800.340755][T18032] netlink_unicast+0x7b1/0x930 [ 800.345542][T18032] netlink_sendmsg+0x8d0/0xbf0 [ 800.350335][T18032] ? netlink_getsockopt+0x590/0x590 [ 800.355556][T18032] ? apparmor_socket_sendmsg+0x8e/0x330 [ 800.361120][T18032] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 800.366418][T18032] ? security_socket_sendmsg+0x80/0xa0 [ 800.371899][T18032] ? netlink_getsockopt+0x590/0x590 [ 800.377114][T18032] ____sys_sendmsg+0x61b/0x980 [ 800.381903][T18032] ? __asan_memset+0x22/0x40 [ 800.386511][T18032] ? __sys_sendmsg_sock+0x30/0x30 [ 800.391560][T18032] ? __import_iovec+0x5f2/0x850 [ 800.396437][T18032] ? import_iovec+0x73/0xa0 [ 800.400964][T18032] ___sys_sendmsg+0x2a6/0x360 [ 800.405670][T18032] ? __sys_sendmsg+0x2b0/0x2b0 [ 800.410541][T18032] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 800.416564][T18032] ? lockdep_hardirqs_on+0x98/0x150 [ 800.421791][T18032] ? kasan_check_range+0x89/0x290 [ 800.426840][T18032] __se_sys_sendmsg+0x1d0/0x2c0 [ 800.431728][T18032] ? __x64_sys_sendmsg+0x80/0x80 [ 800.436963][T18032] ? syscall_enter_from_user_mode+0x2e/0x80 [ 800.442872][T18032] do_syscall_64+0x55/0xb0 [ 800.447391][T18032] ? clear_bhb_loop+0x40/0x90 [ 800.452088][T18032] ? clear_bhb_loop+0x40/0x90 [ 800.456882][T18032] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 800.462790][T18032] RIP: 0033:0x7f812779e159 [ 800.467305][T18032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.487184][T18032] RSP: 002b:00007f81286c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 800.495616][T18032] RAX: ffffffffffffffda RBX: 00007f8127a25fa0 RCX: 00007f812779e159 [ 800.503601][T18032] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 800.511758][T18032] RBP: 00007f812783506b R08: 0000000000000000 R09: 0000000000000000 [ 800.519739][T18032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.527722][T18032] R13: 00007f8127a26038 R14: 00007f8127a25fa0 R15: 00007ffc3acf8ac8 [ 800.535719][T18032] [ 800.746929][T18037] netlink: 'syz.3.2930': attribute type 22 has an invalid length. [ 800.790094][T18037] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.2930'. [ 800.812109][T18052] netlink: 'syz.2.2933': attribute type 3 has an invalid length. [ 800.854931][T18052] netlink: 'syz.2.2933': attribute type 1 has an invalid length. [ 800.885428][T18052] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.2933'. [ 801.414047][T18072] validate_nla: 2 callbacks suppressed [ 801.414064][T18072] netlink: 'syz.0.2937': attribute type 17 has an invalid length. [ 801.429856][T18071] sctp: [Deprecated]: syz.1.2938 (pid 18071) Use of int in max_burst socket option deprecated. [ 801.429856][T18071] Use struct sctp_assoc_value instead [ 801.487050][T18072] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2937'. [ 801.543360][T18071] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2938'. [ 801.584677][T18071] netlink: zone id is out of range [ 801.609912][T18062] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2935'. [ 801.616402][T18071] netlink: zone id is out of range [ 801.626862][T18071] netlink: zone id is out of range [ 801.656858][T18071] netlink: zone id is out of range [ 801.676809][T18071] netlink: zone id is out of range [ 801.699369][T18071] netlink: zone id is out of range [ 801.724913][T18062] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 801.743704][T18071] netlink: zone id is out of range [ 801.751694][T18071] netlink: zone id is out of range [ 802.127966][T18086] netlink: 'syz.1.2941': attribute type 23 has an invalid length. [ 802.485635][T18089] netlink: 'syz.3.2942': attribute type 10 has an invalid length. [ 802.600674][T18089] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2942'. [ 803.160907][T18093] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 803.185980][T18093] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 804.069957][T18112] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2949'. [ 804.090057][T18112] net_ratelimit: 219 callbacks suppressed [ 804.090073][T18112] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 804.396074][T18118] ÿ: renamed from bond_slave_0 [ 804.784411][T18128] netlink: 'syz.3.2952': attribute type 10 has an invalid length. [ 805.746689][T18137] netlink: 'syz.1.2957': attribute type 46 has an invalid length. [ 805.776114][T18137] netlink: 163632 bytes leftover after parsing attributes in process `syz.1.2957'. [ 805.891088][T18146] netlink: 12082 bytes leftover after parsing attributes in process `syz.2.2958'. [ 806.372752][T18157] netlink: 'syz.3.2960': attribute type 4 has an invalid length. [ 806.381226][T18157] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2960'. [ 806.396422][T18157] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 807.352170][T18198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2965'. [ 807.576694][T18203] netlink: 135056 bytes leftover after parsing attributes in process `syz.3.2969'. [ 807.586439][T18203] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 807.794340][T18208] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2971'. [ 807.803669][T18208] openvswitch: netlink: Flow actions attr not present in new flow. [ 807.820289][T18211] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2971'. [ 807.829818][T18211] openvswitch: netlink: Flow actions attr not present in new flow. [ 808.950028][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.956466][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.539718][T18213] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2972'. [ 810.173880][T18236] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2978'. [ 810.296366][T18238] netlink: 'syz.1.2981': attribute type 10 has an invalid length. [ 810.336597][T18238] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2981'. [ 810.348796][T18240] netlink: 'syz.0.2979': attribute type 10 has an invalid length. [ 810.356672][T18240] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2979'. [ 810.385780][T18238] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 810.417066][T18240] hsr0: entered promiscuous mode [ 810.423206][T18240] bridge0: port 4(hsr0) entered blocking state [ 810.444323][T18240] bridge0: port 4(hsr0) entered disabled state [ 810.464758][T18240] hsr0: entered allmulticast mode [ 810.476994][T18240] hsr_slave_0: entered allmulticast mode [ 810.489063][T18240] hsr_slave_1: entered allmulticast mode [ 810.510714][T18240] bridge0: port 4(hsr0) entered blocking state [ 810.517142][T18240] bridge0: port 4(hsr0) entered forwarding state [ 810.721540][T18261] netlink: 135056 bytes leftover after parsing attributes in process `syz.3.2985'. [ 810.744631][T18261] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 810.764944][T18265] tap0: tun_chr_ioctl cmd 1074025677 [ 810.771100][T18265] tap0: linktype set to 804 [ 810.776071][T18264] tap0: tun_chr_ioctl cmd 1074025673 [ 810.795085][T18268] tap0: tun_chr_ioctl cmd 1074025677 [ 810.813512][T18268] tap0: linktype set to 804 [ 811.215464][T18287] netlink: 'syz.3.2993': attribute type 9 has an invalid length. [ 811.301974][T18295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2995'. [ 812.077043][T18296] netlink: 'syz.3.2993': attribute type 9 has an invalid length. [ 812.642356][T18333] netlink: 'syz.2.3001': attribute type 3 has an invalid length. [ 812.650424][T18333] __nla_validate_parse: 5 callbacks suppressed [ 812.650440][T18333] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3001'. [ 812.684773][T18329] netlink: 'syz.1.3000': attribute type 10 has an invalid length. [ 812.703669][T18329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3000'. [ 813.200930][T18353] netlink: 2220 bytes leftover after parsing attributes in process `syz.0.3004'. [ 813.239111][T18355] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3003'. [ 813.309973][T18353] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3004'. [ 813.391949][T18342] syzkaller0: entered promiscuous mode [ 813.409518][T18342] syzkaller0: entered allmulticast mode [ 813.447165][T18355] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3003'. [ 813.486970][T18354] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3003'. [ 817.134938][T18376] netlink: 'syz.1.3010': attribute type 25 has an invalid length. [ 817.146796][T18376] netlink: 'syz.1.3010': attribute type 29 has an invalid length. [ 817.156002][T18377] netlink: 'syz.1.3010': attribute type 39 has an invalid length. [ 817.322268][T18386] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3012'. [ 817.608957][T18389] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 817.638693][T18389] mac80211_hwsim hwsim33 wlan0: left allmulticast mode [ 817.789408][T18392] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode [ 817.803833][T18392] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 818.322789][T18409] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.3019'. [ 819.469526][T18433] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.3024'. [ 819.588335][T18433] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3024'. [ 820.415761][T18443] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 820.718240][T18443] mac80211_hwsim hwsim34 wlan1: left allmulticast mode [ 820.924746][T18449] netlink: 'syz.1.3027': attribute type 9 has an invalid length. [ 820.980347][T18449] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3027'. [ 821.029163][T18443] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 821.117584][T18443] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 821.158932][T18443] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 821.177111][T18448] netlink: 'syz.1.3027': attribute type 9 has an invalid length. [ 821.222047][T18443] netlink: 'syz.3.3025': attribute type 10 has an invalid length. [ 821.304537][T18448] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3027'. [ 823.927975][T18487] sctp: [Deprecated]: syz.3.3035 (pid 18487) Use of int in maxseg socket option. [ 823.927975][T18487] Use struct sctp_assoc_value instead [ 824.731062][T18500] netlink: 'syz.0.3038': attribute type 9 has an invalid length. [ 824.854119][T18500] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3038'. [ 824.984343][T18498] netlink: 'syz.0.3038': attribute type 9 has an invalid length. [ 825.017955][T18498] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3038'. [ 826.611818][T18512] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.640814][T18512] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.912646][T18512] bridge0: entered allmulticast mode [ 827.407321][T18513] bridge0: port 2(bridge_slave_1) entered blocking state [ 827.414619][T18513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.422590][T18513] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.430028][T18513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 827.539463][T18513] bridge0: entered promiscuous mode [ 827.788624][T18523] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3046'. [ 828.031654][T18528] netlink: 'syz.2.3048': attribute type 1 has an invalid length. [ 828.068223][T18528] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.3048'. [ 828.117219][T18528] netlink: 'syz.2.3048': attribute type 1 has an invalid length. [ 828.261523][T18528] netlink: 'syz.2.3048': attribute type 2 has an invalid length. [ 828.316969][T18528] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.3048'. [ 828.921543][T18533] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3049'. [ 829.197314][T18531] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3047'. [ 829.307402][T18531] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 831.374858][T18554] netlink: 'syz.3.3052': attribute type 3 has an invalid length. [ 831.677434][T18554] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3052'. [ 832.872012][T18570] syz.0.3058[18570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 832.872517][T18570] syz.0.3058[18570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 833.433340][T18583] netlink: 'syz.0.3060': attribute type 10 has an invalid length. [ 833.608817][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.663902][T18583] bridge_slave_1: left allmulticast mode [ 833.677597][T18583] bridge_slave_1: left promiscuous mode [ 833.695242][T18583] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.793383][T18583] bridge_slave_1: entered promiscuous mode [ 833.811056][T18583] bridge_slave_1: entered allmulticast mode [ 833.846339][T18583] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 834.707467][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 17 (since boot) is 1041 jiffies old. [ 835.013223][T18609] netlink: 'syz.3.3064': attribute type 39 has an invalid length. [ 836.650654][T18636] netlink: 'syz.2.3070': attribute type 3 has an invalid length. [ 836.727001][T18636] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3070'. [ 837.237921][T18647] netlink: 'syz.3.3073': attribute type 6 has an invalid length. [ 837.245741][T18647] netlink: 187932 bytes leftover after parsing attributes in process `syz.3.3073'. [ 841.618086][T18713] netlink: 'syz.1.3087': attribute type 3 has an invalid length. [ 841.633032][T18713] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3087'. [ 841.796216][T18718] netlink: 16102 bytes leftover after parsing attributes in process `syz.2.3090'. [ 841.841149][T18713] netlink: 149412 bytes leftover after parsing attributes in process `syz.1.3087'. [ 842.272192][T18730] netlink: 'syz.1.3094': attribute type 21 has an invalid length. [ 842.287704][T18730] netlink: 'syz.1.3094': attribute type 4 has an invalid length. [ 842.315798][T18730] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3094'. [ 842.429046][T18735] netlink: 'syz.2.3096': attribute type 10 has an invalid length. [ 842.443930][T18735] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3096'. [ 842.462247][T18735] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3096'. [ 842.623370][T18737] netlink: 'syz.1.3097': attribute type 39 has an invalid length. [ 842.692470][T18737] macvlan0: entered promiscuous mode [ 842.716407][T18737] macvlan0: entered allmulticast mode [ 843.319166][T18758] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3102'. [ 843.901069][T18758] hsr_slave_0: left promiscuous mode [ 843.912208][T18758] hsr_slave_1: left promiscuous mode [ 843.934333][T18758] bridge0: port 4(hsr0) entered disabled state [ 844.011624][T18758] hsr0 (unregistering): left allmulticast mode [ 844.027499][T18758] bridge0: port 4(hsr0) entered disabled state [ 844.054359][T18762] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3103'. [ 844.079479][T18762] hsr_slave_0: left promiscuous mode [ 844.086098][T18762] hsr_slave_1: left promiscuous mode [ 844.116462][T18762] bridge0: port 5(hsr0) entered disabled state [ 844.230805][T18762] hsr0 (unregistering): left allmulticast mode [ 844.256955][T18762] bridge0: port 5(hsr0) entered disabled state [ 845.924536][T18800] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3113'. [ 845.955084][T18800] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 846.127003][T18802] lo: entered promiscuous mode [ 846.131853][T18802] lo: entered allmulticast mode [ 846.426249][T18815] netlink: 'syz.0.3116': attribute type 1 has an invalid length. [ 848.117477][T18842] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 848.135247][T18842] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 849.010399][T18860] netlink: 'syz.3.3129': attribute type 9 has an invalid length. [ 849.040637][T18860] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3129'. [ 849.192768][T18864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 849.207586][T18864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 849.215831][T18864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 849.225764][T18864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 849.238931][T18864] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 849.246601][T18864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 851.266936][T18864] Bluetooth: hci0: command tx timeout [ 851.908084][T18861] netlink: 'syz.3.3129': attribute type 9 has an invalid length. [ 851.915892][T18861] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3129'. [ 851.990319][T18869] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3131'. [ 852.179707][T16324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.305413][T16324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.328701][T18863] chnl_net:caif_netlink_parms(): no params data found [ 852.571139][T16324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.594656][T18879] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3133'. [ 852.605344][T18879] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.658035][T16324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.790582][T18863] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.800610][T18863] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.808810][T18863] bridge_slave_0: entered allmulticast mode [ 852.817826][T18863] bridge_slave_0: entered promiscuous mode [ 852.835026][T18863] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.845985][T18863] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.854038][T18863] bridge_slave_1: entered allmulticast mode [ 852.869052][T18863] bridge_slave_1: entered promiscuous mode [ 852.973707][T18890] syzkaller0: entered promiscuous mode [ 852.980208][T18890] syzkaller0: entered allmulticast mode [ 852.991097][T18863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.031229][T18863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.126421][T18863] team0: Port device team_slave_0 added [ 853.149188][T18863] team0: Port device team_slave_1 added [ 853.155572][T16324] tipc: Left network mode [ 853.351738][T18864] Bluetooth: hci0: command tx timeout [ 855.369092][T18898] netlink: 'syz.3.3136': attribute type 21 has an invalid length. [ 855.377143][T18898] IPv6: NLM_F_CREATE should be specified when creating new route [ 855.384922][T18898] IPv6: Can't replace route, no match found [ 855.428312][T18864] Bluetooth: hci0: command tx timeout [ 855.622317][T18863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.650244][T18863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.701286][T18863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.772693][T18863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.787194][T18863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.817233][T18863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.050155][T18863] hsr_slave_0: entered promiscuous mode [ 856.069661][T18863] hsr_slave_1: entered promiscuous mode [ 857.510062][T18864] Bluetooth: hci0: command tx timeout [ 858.586233][T18998] netlink: 'syz.3.3150': attribute type 4 has an invalid length. [ 858.600906][T18998] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.3150'. [ 858.603124][T18999] netlink: 'syz.3.3150': attribute type 4 has an invalid length. [ 858.625867][T18999] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.3150'. [ 858.981973][T18863] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 859.034802][T18863] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 859.064966][T18863] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 859.089186][T18863] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 859.123155][T19004] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3152'. [ 859.145141][T19005] sctp: [Deprecated]: syz.3.3152 (pid 19005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 859.145141][T19005] Use struct sctp_sack_info instead [ 859.444735][T16324] ¥: port 1(team0) entered disabled state [ 859.821510][T19025] sock: sock_set_timeout: `syz.1.3159' (pid 19025) tries to set negative timeout [ 859.961484][T16324] geneve1 (unregistering): left promiscuous mode [ 859.968562][T16324] geneve1 (unregistering): left allmulticast mode [ 859.984724][T16324] team0 (unregistering): Port device geneve1 removed [ 860.427098][T16324] žÿ (unregistering): left promiscuous mode [ 860.433349][T16324] žÿ (unregistering): left allmulticast mode [ 860.448932][T16324] team0 (unregistering): Port device 76žÿ removed [ 861.072462][T19013] netlink: 'syz.0.3155': attribute type 25 has an invalid length. [ 861.082956][T19013] netlink: 'syz.0.3155': attribute type 9 has an invalid length. [ 861.107258][T19013] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3155'. [ 861.314841][T18863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.399579][T18863] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.441327][T12979] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.448576][T12979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.478494][T12979] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.485703][T12979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.517497][T19037] netlink: 'syz.0.3162': attribute type 10 has an invalid length. [ 861.537765][T19037] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3162'. [ 862.004993][T19044] netlink: 'syz.3.3161': attribute type 4 has an invalid length. [ 862.015834][T19044] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3161'. [ 862.765306][T18863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 862.891637][T18863] veth0_vlan: entered promiscuous mode [ 862.919181][T18863] veth1_vlan: entered promiscuous mode [ 863.119711][T18863] veth0_macvtap: entered promiscuous mode [ 863.139236][T18863] veth1_macvtap: entered promiscuous mode [ 863.202668][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.214224][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.233470][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.264561][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.285098][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.305951][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.341213][T18863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 863.383462][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.426859][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.450190][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.491697][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.516617][T18863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 863.535764][T18863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 863.559963][T18863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 863.613884][T18863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.643349][T18863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.676208][T18863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.701498][T18863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.952206][T12971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.988094][T12971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.191665][T12979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.211703][T12979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.191680][T19137] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3177'. [ 866.531171][T19153] netlink: 'syz.3.3182': attribute type 1 has an invalid length. [ 867.253070][T19169] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.263118][T19169] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.329869][T19169] bridge0: left promiscuous mode [ 867.974729][T19201] netlink: 'syz.1.3193': attribute type 39 has an invalid length. [ 869.187217][T19232] netlink: 'syz.2.3197': attribute type 16 has an invalid length. [ 869.253494][T19232] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3197'. [ 869.306673][T19232] veth1_macvtap: entered allmulticast mode [ 870.006173][T19229] syzkaller0: entered promiscuous mode [ 870.013294][T19229] syzkaller0: entered allmulticast mode [ 870.476162][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.482769][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.235042][T19269] netlink: 'syz.1.3205': attribute type 26 has an invalid length. [ 873.261943][T19269] netlink: 62827 bytes leftover after parsing attributes in process `syz.1.3205'. [ 873.440201][T19277] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3206'. [ 873.696898][T19297] netlink: 'syz.2.3209': attribute type 1 has an invalid length. [ 873.706578][T19297] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.3209'. [ 873.721395][T19297] netlink: 703 bytes leftover after parsing attributes in process `syz.2.3209'. [ 873.783775][T19297] netlink: 'syz.2.3209': attribute type 3 has an invalid length. [ 873.801783][T19297] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3209'. [ 874.354911][T19319] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3213'. [ 874.604973][T19329] netlink: 'syz.3.3216': attribute type 1 has an invalid length. [ 874.613657][T19329] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3216'. [ 875.153465][T19336] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3219'. [ 875.212599][T19336] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3219'. [ 875.271637][T19335] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3219'. [ 875.824034][T19352] netlink: 'syz.2.3224': attribute type 1 has an invalid length. [ 875.865377][T19352] netlink: 'syz.2.3224': attribute type 3 has an invalid length. [ 875.912941][T19354] netlink: 'syz.2.3224': attribute type 10 has an invalid length. [ 878.757435][T19383] __nla_validate_parse: 3 callbacks suppressed [ 878.757455][T19383] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3230'. [ 878.800846][T19383] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3230'. [ 878.968813][T19382] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3230'. [ 879.061899][T19387] netlink: 'syz.2.3231': attribute type 10 has an invalid length. [ 879.140637][T19387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.169158][T19387] team0: Port device bond0 added [ 880.092982][T19403] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3236'. [ 880.595882][T19406] netlink: 'syz.0.3237': attribute type 10 has an invalid length. [ 880.635958][T19406] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3237'. [ 882.021816][T19427] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3250'. [ 885.437828][T19448] tap0: tun_chr_ioctl cmd 1074025681 [ 890.400245][T19476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3255'. [ 892.216445][T19502] delete_channel: no stack [ 892.345522][T19506] netlink: 'syz.2.3262': attribute type 1 has an invalid length. [ 892.363342][T19506] netlink: 'syz.2.3262': attribute type 3 has an invalid length. [ 892.372527][T19506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3262'. [ 893.227124][T19517] netlink: 'syz.3.3265': attribute type 10 has an invalid length. [ 896.331581][T19536] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3269'. [ 896.718878][T19523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 897.475530][T19548] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3273'. [ 897.539634][T19548] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3273'. [ 897.855649][T19561] netlink: 'syz.2.3277': attribute type 9 has an invalid length. [ 897.946891][T19561] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3277'. [ 898.363007][T19571] netlink: 'syz.3.3278': attribute type 3 has an invalid length. [ 898.402939][T19571] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3278'. [ 898.563592][T19576] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 898.587066][T19576] netlink: 'syz.1.3279': attribute type 3 has an invalid length. [ 898.616850][T19576] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3279'. [ 901.020467][T19614] netlink: 'syz.3.3291': attribute type 10 has an invalid length. [ 902.095357][T19619] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3293'. [ 902.241823][T19622] netlink: 'syz.3.3294': attribute type 1 has an invalid length. [ 902.251304][T19622] netlink: 'syz.3.3294': attribute type 3 has an invalid length. [ 902.264842][T19622] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3294'. [ 905.076476][T19642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3299'. [ 905.265589][T19648] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3300'. [ 905.314084][T19648] netlink: zone id is out of range [ 905.386811][T19648] netlink: zone id is out of range [ 905.406811][T19648] netlink: zone id is out of range [ 905.412009][T19648] netlink: zone id is out of range [ 905.431101][T19648] netlink: zone id is out of range [ 905.436311][T19648] netlink: zone id is out of range [ 905.441648][T19648] netlink: zone id is out of range [ 905.451759][T19648] netlink: zone id is out of range [ 905.476918][T19648] netlink: zone id is out of range [ 905.487269][T19648] netlink: zone id is out of range [ 906.794667][T19683] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3307'. [ 906.924314][T19686] netlink: 208052 bytes leftover after parsing attributes in process `syz.3.3310'. [ 906.957110][T19686] netlink: 'syz.3.3310': attribute type 1 has an invalid length. [ 906.976898][T19686] netlink: 'syz.3.3310': attribute type 2 has an invalid length. [ 907.005961][T19686] netlink: 'syz.3.3310': attribute type 3 has an invalid length. [ 907.058581][T19688] netlink: 208052 bytes leftover after parsing attributes in process `syz.3.3310'. [ 907.077119][T19686] netlink: 'syz.3.3310': attribute type 4 has an invalid length. [ 908.497645][T19709] netlink: 'syz.2.3314': attribute type 29 has an invalid length. [ 908.583264][T19709] netlink: 'syz.2.3314': attribute type 29 has an invalid length. [ 909.334417][T19726] netlink: 'syz.0.3321': attribute type 9 has an invalid length. [ 909.392573][T19728] netlink: 'syz.0.3321': attribute type 21 has an invalid length. [ 909.408470][T19728] netlink: 'syz.0.3321': attribute type 6 has an invalid length. [ 909.457343][T19728] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3321'. [ 910.434275][T19738] syzkaller0: entered allmulticast mode [ 910.447566][T19737] netlink: 'syz.3.3322': attribute type 10 has an invalid length. [ 910.845685][T19766] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3326'. [ 910.866466][T19766] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3326'. [ 911.553389][T19774] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3331'. [ 912.381541][T19791] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3333'. [ 913.591647][T19805] syzkaller0: entered promiscuous mode [ 913.607008][T19805] syzkaller0: entered allmulticast mode [ 914.164531][T19821] veth1_to_bond: entered allmulticast mode [ 916.581750][T19831] IPv6: Can't replace route, no match found [ 916.622215][T19836] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3343'. [ 916.657933][T19836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 916.665235][T19836] IPv6: NLM_F_CREATE should be set when creating new route [ 916.672679][T19836] IPv6: NLM_F_CREATE should be set when creating new route [ 916.680078][T19836] IPv6: NLM_F_CREATE should be set when creating new route [ 916.729790][T19838] validate_nla: 2 callbacks suppressed [ 916.729810][T19838] netlink: 'syz.0.3343': attribute type 9 has an invalid length. [ 916.761584][T19838] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3343'. [ 916.794254][T19839] netlink: 'syz.1.3344': attribute type 11 has an invalid length. [ 916.807142][T19839] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3344'. [ 916.882088][T19841] netlink: 'syz.1.3344': attribute type 11 has an invalid length. [ 916.917545][T19841] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3344'. [ 916.985194][T19856] IPv6: NLM_F_CREATE should be specified when creating new route [ 917.940268][T19885] syzkaller0: entered promiscuous mode [ 917.957071][T19885] syzkaller0: entered allmulticast mode [ 918.032847][T19885] netlink: 'syz.3.3355': attribute type 21 has an invalid length. [ 918.046992][T19885] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3355'. [ 921.927696][T19942] netlink: 'syz.3.3369': attribute type 10 has an invalid length. [ 921.961284][T19942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3369'. [ 923.012284][T19922] delete_channel: no stack [ 923.562936][T19970] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3379'. [ 923.982619][T19980] netlink: 'syz.3.3381': attribute type 3 has an invalid length. [ 923.990745][T19980] netlink: 'syz.3.3381': attribute type 1 has an invalid length. [ 923.995510][T19982] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3382'. [ 924.057765][T19982] netlink: 'syz.0.3382': attribute type 10 has an invalid length. [ 924.195253][T19982] hsr_slave_0: entered promiscuous mode [ 924.243145][T19982] team0: Port device hsr_slave_0 added [ 925.078947][T20007] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3389'. [ 925.170602][T20004] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3388'. [ 925.201697][T20004] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 925.287795][T20010] @0Ù: renamed from bond_slave_1 (while UP) [ 925.605980][T20018] ipvlan1: entered promiscuous mode [ 925.631760][T20018] ipvlan1: entered allmulticast mode [ 925.645200][T20018] veth0_vlan: entered allmulticast mode [ 925.989627][T20031] netlink: 'syz.3.3394': attribute type 3 has an invalid length. [ 926.019582][T20031] netlink: 'syz.3.3394': attribute type 6 has an invalid length. [ 926.037272][T20031] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.3394'. [ 926.827294][T20036] netlink: 'syz.1.3395': attribute type 5 has an invalid length. [ 926.835097][T20036] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3395'. [ 926.855931][T20036] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.3395'. [ 926.868360][T20036] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3395'. [ 926.914525][T20038] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.3396'. [ 927.049642][T20038] netlink: 'syz.2.3396': attribute type 17 has an invalid length. [ 927.064896][T20038] netlink: 'syz.2.3396': attribute type 16 has an invalid length. [ 927.085319][T20038] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3396'. [ 927.623288][T20065] netlink: 142576 bytes leftover after parsing attributes in process `syz.0.3405'. [ 929.277666][T20102] netlink: 'syz.1.3413': attribute type 15 has an invalid length. [ 929.299853][T20102] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3413'. [ 929.843144][T20124] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.3416'. [ 930.600926][T20148] netlink: 'syz.1.3422': attribute type 1 has an invalid length. [ 930.691463][T20148] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3422'. [ 930.722155][T20154] netlink: 'syz.1.3422': attribute type 1 has an invalid length. [ 930.769200][T20153] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.3422'. [ 930.921231][T20151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3423'. [ 930.943310][T20172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3425'. [ 930.949311][T20151] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3423'. [ 930.963161][T20171] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3425'. [ 931.834361][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.841013][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.110052][T20192] netlink: 'syz.2.3430': attribute type 3 has an invalid length. [ 932.118716][T20192] netlink: 'syz.2.3430': attribute type 1 has an invalid length. [ 932.136873][T20192] netlink: 'syz.2.3430': attribute type 1 has an invalid length. [ 932.144682][T20192] netlink: 'syz.2.3430': attribute type 2 has an invalid length. [ 932.166366][T20192] __nla_validate_parse: 66 callbacks suppressed [ 932.166382][T20192] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.3430'. [ 932.337476][T20195] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3431'. [ 932.373741][T20197] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3432'. [ 932.383618][T20197] net_ratelimit: 216 callbacks suppressed [ 932.383636][T20197] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 932.564033][T20199] netlink: 'syz.2.3433': attribute type 21 has an invalid length. [ 932.572226][T20199] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 932.771895][T20201] netlink: 'syz.0.3434': attribute type 10 has an invalid length. [ 932.806907][T20201] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3434'. [ 932.838523][T20201] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 933.080133][T20201] batman_adv: batadv0: Removing interface: virt_wifi0 [ 933.197986][T20215] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.3437'. [ 933.533237][T20219] netlink: 'syz.0.3438': attribute type 10 has an invalid length. [ 933.580159][T20219] veth0_vlan: left promiscuous mode [ 933.623890][T20219] veth0_vlan: entered promiscuous mode [ 933.742387][T20219] team0: Device veth0_vlan failed to register rx_handler [ 934.673235][T20239] netlink: 'syz.0.3443': attribute type 29 has an invalid length. [ 934.731308][T20243] netlink: 'syz.1.3445': attribute type 1 has an invalid length. [ 934.788686][T20243] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3445'. [ 934.827164][T20242] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.3445'. [ 935.812769][T20262] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3450'. [ 936.899950][T20280] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3454'. [ 938.173195][T20291] validate_nla: 8 callbacks suppressed [ 938.173243][T20291] netlink: 'syz.3.3456': attribute type 29 has an invalid length. [ 938.273896][T20291] netlink: 'syz.3.3456': attribute type 29 has an invalid length. [ 938.589460][T20308] netlink: 'syz.2.3459': attribute type 1 has an invalid length. [ 938.639646][T20308] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.3459'. [ 939.267179][T20322] netlink: 'syz.1.3465': attribute type 21 has an invalid length. [ 939.293068][T20315] netlink: 'syz.3.3463': attribute type 9 has an invalid length. [ 939.376806][T20315] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3463'. [ 939.519104][T20320] netlink: zone id is out of range [ 939.544662][T20320] netlink: set zone limit has 8 unknown bytes [ 944.805573][T18864] Bluetooth: hci0: ISO packet for unknown connection handle 1854 [ 950.997880][T20439] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3495'. [ 951.034823][T20439] ip6_tunnel: non-ECT from 0000:00ff:0000:0000:0000:ffff:ac14:140a with DS=0x31 [ 951.237261][T18864] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 951.704648][T20452] netlink: 'syz.3.3497': attribute type 3 has an invalid length. [ 951.768595][T20452] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3497'. [ 951.775891][T20444] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3493'. [ 951.791446][T18864] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 951.842835][T20444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 952.145348][T20460] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3500'. [ 952.270080][T20467] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3502'. [ 952.301073][T20467] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3502'. [ 952.357700][T20463] netlink: 'syz.1.3502': attribute type 63 has an invalid length. [ 952.366826][T20463] netlink: 'syz.1.3502': attribute type 63 has an invalid length. [ 952.375626][T20463] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3502'. [ 953.812155][T20496] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3512'. [ 953.824958][T20496] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3512'. [ 953.853897][T20496] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3512'. [ 954.052244][T20508] netlink: 'syz.2.3515': attribute type 4 has an invalid length. [ 954.068568][T20512] netlink: 'syz.3.3516': attribute type 10 has an invalid length. [ 954.087371][T20512] netlink: 'syz.3.3516': attribute type 10 has an invalid length. [ 954.102697][T20512] netlink: 'syz.3.3516': attribute type 10 has an invalid length. [ 954.129594][T20512] netlink: 'syz.3.3516': attribute type 10 has an invalid length. [ 954.622808][T20533] netlink: 'syz.2.3521': attribute type 10 has an invalid length. [ 954.641577][T20533] hsr0: entered promiscuous mode [ 954.657425][T20533] bridge0: port 3(hsr0) entered blocking state [ 954.665070][T20533] bridge0: port 3(hsr0) entered disabled state [ 954.683490][T20533] hsr0: entered allmulticast mode [ 954.692637][T20533] hsr_slave_0: entered allmulticast mode [ 954.700697][T20533] hsr_slave_1: entered allmulticast mode [ 954.714161][T20533] bridge0: port 3(hsr0) entered blocking state [ 954.720545][T20533] bridge0: port 3(hsr0) entered forwarding state [ 954.737337][T20533] netlink: 'syz.2.3521': attribute type 10 has an invalid length. [ 955.583661][T20560] Ù: renamed from bond_slave_1 (while UP) [ 956.316722][T20556] geneve1: entered promiscuous mode [ 956.354084][T20556] geneve1: entered allmulticast mode [ 956.404180][T20556] team0: Port device geneve1 added [ 956.889690][T20582] validate_nla: 32 callbacks suppressed [ 956.889712][T20582] netlink: 'syz.1.3535': attribute type 12 has an invalid length. [ 956.917458][T20582] __nla_validate_parse: 38 callbacks suppressed [ 956.917480][T20582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3535'. [ 956.958266][T20582] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3535'. [ 956.980234][T20582] netlink: 'syz.1.3535': attribute type 12 has an invalid length. [ 957.004213][T20582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3535'. [ 957.032464][T20586] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3536'. [ 957.348526][T20603] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.3540'. [ 959.250638][T20647] sit0: entered allmulticast mode [ 960.312665][T20686] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3560'. [ 960.605499][T20698] netlink: 'syz.3.3563': attribute type 7 has an invalid length. [ 960.943641][T20706] tun0: tun_chr_ioctl cmd 1074812118 [ 961.402515][T20715] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 961.718419][T20721] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3569'. [ 962.317376][T20728] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3572'. [ 963.726333][T20754] C: renamed from team_slave_0 [ 963.790297][T20754] netlink: 'syz.2.3577': attribute type 4 has an invalid length. [ 963.820369][T20754] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 963.865007][T20765] netlink: 'syz.0.3579': attribute type 1 has an invalid length. [ 963.902648][T20765] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3579'. [ 963.938769][T20765] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3579'. [ 964.183058][T20769] sock: sock_set_timeout: `syz.1.3581' (pid 20769) tries to set negative timeout [ 964.469131][T20780] netlink: 'syz.0.3584': attribute type 3 has an invalid length. [ 964.515078][T20780] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3584'. [ 964.894924][T20792] netlink: 'syz.3.3580': attribute type 6 has an invalid length. [ 964.909773][T20792] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3580'. [ 965.026948][T20792] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 965.043016][T20792] dvmrp1: persist disabled [ 965.053756][T20792] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3580'. [ 965.251782][T20800] netlink: 'syz.0.3590': attribute type 2 has an invalid length. [ 965.260011][T20800] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3590'. [ 966.565333][T20821] netlink: 'syz.0.3598': attribute type 2 has an invalid length. [ 966.636939][T20821] netlink: 'syz.0.3598': attribute type 11 has an invalid length. [ 966.665131][T20821] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3598'. [ 966.789757][T20824] netlink: 'syz.0.3598': attribute type 10 has an invalid length. [ 966.846023][T20824] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3598'. [ 966.871517][T20824] ipvlan1: entered promiscuous mode [ 966.901304][T20824] ipvlan1: entered allmulticast mode [ 966.920414][T20824] bridge0: port 2(ipvlan1) entered blocking state [ 966.922550][T18864] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 966.984936][T20824] bridge0: port 2(ipvlan1) entered disabled state [ 967.028972][T20824] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 967.078672][T20826] netlink: 'syz.2.3599': attribute type 10 has an invalid length. [ 967.105079][T20826] bridge0: port 3(hsr0) entered disabled state [ 967.111659][T20826] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.120459][T20826] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.157715][T20826] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 967.203483][T20826] bridge0: port 3(hsr0) entered blocking state [ 967.209919][T20826] bridge0: port 3(hsr0) entered forwarding state [ 967.216716][T20826] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.223945][T20826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.231564][T20826] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.238867][T20826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.355808][T20826] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 967.378043][T20831] netlink: 'syz.3.3601': attribute type 2 has an invalid length. [ 967.386176][T20831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3601'. [ 967.409522][T20832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3601'. [ 967.442852][T20833] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3601'. [ 967.477692][T20842] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3602'. [ 967.532661][T20845] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3602'. [ 967.712062][T20848] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.3605'. [ 968.629037][T20865] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3610'. [ 968.737846][T20867] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3610'. [ 968.992166][T20874] validate_nla: 6 callbacks suppressed [ 968.992188][T20874] netlink: 'syz.3.3611': attribute type 3 has an invalid length. [ 969.022304][T20874] netlink: 'syz.3.3611': attribute type 4 has an invalid length. [ 969.057416][T20874] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3611'. [ 969.627263][T20883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3613'. [ 972.772354][T20904] syzkaller0: entered promiscuous mode [ 972.806283][T20904] syzkaller0: entered allmulticast mode [ 974.876106][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 976.990534][T20937] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.802646][T20971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3630'. [ 977.828092][T20964] netlink: 161340 bytes leftover after parsing attributes in process `syz.2.3630'. [ 977.901008][T20975] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3631'. [ 977.932589][T20975] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 978.545329][T20990] syzkaller0: entered promiscuous mode [ 978.563867][T20990] syzkaller0: entered allmulticast mode [ 980.612834][T21054] netlink: 'syz.0.3651': attribute type 27 has an invalid length. [ 980.633050][T21054] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3651'. [ 980.756986][T21063] netlink: 'syz.0.3651': attribute type 27 has an invalid length. [ 980.791102][T21063] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.3651'. [ 981.559719][T21082] netlink: 'syz.1.3656': attribute type 10 has an invalid length. [ 981.719724][T21082] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3656'. [ 981.754443][T21082] hsr0: entered promiscuous mode [ 981.782215][T21082] bridge0: port 3(hsr0) entered blocking state [ 981.795354][T21082] bridge0: port 3(hsr0) entered disabled state [ 981.807002][T21078] netlink: 'syz.3.3655': attribute type 29 has an invalid length. [ 981.810881][T21082] hsr0: entered allmulticast mode [ 981.828835][T21082] hsr_slave_0: entered allmulticast mode [ 981.844072][T21082] hsr_slave_1: entered allmulticast mode [ 981.884380][T21078] netlink: 'syz.3.3655': attribute type 29 has an invalid length. [ 981.936815][T21084] netlink: 'syz.3.3655': attribute type 29 has an invalid length. [ 982.008096][T21085] netlink: 'syz.3.3655': attribute type 29 has an invalid length. [ 982.078156][T18864] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 982.379549][T21085] netlink: 'syz.3.3655': attribute type 29 has an invalid length. [ 982.401650][T21099] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3658'. [ 982.416803][T21099] tc_dump_action: action bad kind [ 982.787549][T21114] sock: sock_timestamping_bind_phc: sock not bind to device [ 982.847834][T21113] netlink: 'syz.1.3662': attribute type 12 has an invalid length. [ 982.862444][T21114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3661'. [ 982.929842][T21114] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.122966][T21121] netlink: 'syz.2.3664': attribute type 9 has an invalid length. [ 983.139394][T21114] bridge_slave_0 (unregistering): left allmulticast mode [ 983.162542][T21114] bridge_slave_0 (unregistering): left promiscuous mode [ 983.182145][T21121] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3664'. [ 983.201357][T21114] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.312988][T21113] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3662'. [ 983.329725][T21116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 983.338315][T21116] IPv6: NLM_F_CREATE should be set when creating new route [ 983.347454][T21116] IPv6: NLM_F_CREATE should be set when creating new route [ 983.355661][T21116] IPv6: NLM_F_CREATE should be set when creating new route [ 984.251358][T21139] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3670'. [ 984.280492][T21139] netlink: 21820 bytes leftover after parsing attributes in process `syz.1.3670'. [ 985.349296][T21149] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3674'. [ 985.375154][T21149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 986.231509][T21174] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3679'. [ 986.266383][T21174] netlink: zone id is out of range [ 986.287232][T21174] netlink: zone id is out of range [ 986.347098][T21174] netlink: zone id is out of range [ 986.373407][T21174] netlink: zone id is out of range [ 986.451586][T21174] netlink: zone id is out of range [ 986.514934][T21174] netlink: zone id is out of range [ 986.536932][T21174] netlink: zone id is out of range [ 986.542585][T21174] netlink: zone id is out of range [ 986.549216][T21174] netlink: zone id is out of range [ 986.724223][T21188] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3682'. [ 986.817641][T21188] validate_nla: 2 callbacks suppressed [ 986.817659][T21188] netlink: 'syz.2.3682': attribute type 27 has an invalid length. [ 986.836524][T21188] netlink: 'syz.2.3682': attribute type 25 has an invalid length. [ 987.291138][T21208] netlink: 'syz.2.3690': attribute type 10 has an invalid length. [ 987.381728][T21208] team0: Port device geneve1 added [ 987.589946][T21213] netlink: 'syz.0.3691': attribute type 20 has an invalid length. [ 987.719527][T21213] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3691'. [ 988.250980][T21241] netlink: 'syz.1.3695': attribute type 29 has an invalid length. [ 988.349687][T21241] netlink: 'syz.1.3695': attribute type 29 has an invalid length. [ 988.401104][T18864] Bluetooth: hci4: Unknown advertising packet type: 0x35 [ 988.401224][T18864] Bluetooth: hci4: Malformed LE Event: 0x0d [ 988.422005][T21247] netlink: 'syz.1.3695': attribute type 29 has an invalid length. [ 988.533057][T21254] netlink: 'syz.1.3695': attribute type 29 has an invalid length. [ 988.597488][T21247] netlink: 'syz.1.3695': attribute type 10 has an invalid length. [ 988.670860][T21241] netlink: 'syz.1.3695': attribute type 29 has an invalid length. [ 988.756629][T21254] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3695'. [ 989.479533][T21270] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3701'. [ 989.501178][T21267] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.565595][T21269] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.574454][T21269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.602890][T21265] netlink: 161340 bytes leftover after parsing attributes in process `syz.0.3701'. [ 989.695955][T21272] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3703'. [ 990.717150][T21284] syzkaller0: entered promiscuous mode [ 990.722696][T21284] syzkaller0: entered allmulticast mode [ 990.798494][T21293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3707'. [ 993.277247][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.283628][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.456058][T21330] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3714'. [ 994.522258][T21328] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3715'. [ 994.546064][T21330] netlink: 161340 bytes leftover after parsing attributes in process `syz.1.3714'. [ 995.658423][T21354] validate_nla: 3 callbacks suppressed [ 995.658441][T21354] netlink: 'syz.1.3721': attribute type 10 has an invalid length. [ 995.699513][T21353] netlink: 'syz.0.3722': attribute type 1 has an invalid length. [ 995.717638][T21353] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3722'. [ 995.957924][T21368] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3727'. [ 995.976810][T21368] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3727'. [ 996.126152][T18864] Bluetooth: hci0: ISO packet for unknown connection handle 2878 [ 996.189330][T21371] tun0: tun_chr_ioctl cmd 1074025675 [ 996.214849][T21371] tun0: persist disabled [ 996.220052][T21371] tun0: tun_chr_ioctl cmd 1074025675 [ 996.240886][T21371] tun0: persist disabled [ 996.248220][T21376] vcan0: entered allmulticast mode [ 996.300902][T21376] netlink: 'syz.0.3730': attribute type 10 has an invalid length. [ 996.316592][T21376] veth0_macvtap: left promiscuous mode [ 996.662030][T21390] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3735'. [ 996.823014][T21393] netlink: 'syz.2.3736': attribute type 2 has an invalid length. [ 996.862755][T21393] netlink: 'syz.2.3736': attribute type 8 has an invalid length. [ 996.876311][T21393] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3736'. [ 997.194602][T21405] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3739'. [ 997.607989][T21421] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.3741'. [ 998.634000][T21461] netlink: 'syz.3.3751': attribute type 21 has an invalid length. [ 998.652182][T21461] IPv6: Can't replace route, no match found [ 999.359982][T21476] netlink: 'syz.0.3757': attribute type 41 has an invalid length. [ 1000.340557][T21490] netlink: 'syz.3.3762': attribute type 2 has an invalid length. [ 1000.365282][T21490] __nla_validate_parse: 4 callbacks suppressed [ 1000.365298][T21490] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1000.398945][T21492] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.3763'. [ 1000.438800][T21493] netlink: 'syz.3.3762': attribute type 2 has an invalid length. [ 1000.462322][T21495] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3765'. [ 1000.591006][T21501] bridge0: port 3(team0) entered disabled state [ 1000.598607][T21501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.609025][T21501] bridge0: entered allmulticast mode [ 1000.675036][T21497] bridge0: port 3(team0) entered disabled state [ 1000.731648][T21497] bridge_slave_0: left allmulticast mode [ 1000.745199][T21497] bridge_slave_0: left promiscuous mode [ 1000.756237][T21497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.197061][T21520] netlink: 'syz.3.3770': attribute type 12 has an invalid length. [ 1001.205613][T21520] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3770'. [ 1001.293515][T21524] netlink: 'syz.2.3771': attribute type 29 has an invalid length. [ 1001.314856][T21524] netlink: 'syz.2.3771': attribute type 29 has an invalid length. [ 1001.338316][T21526] netlink: 'syz.2.3771': attribute type 29 has an invalid length. [ 1001.393714][T21524] netlink: 'syz.2.3771': attribute type 29 has an invalid length. [ 1001.516432][T21535] delete_channel: no stack [ 1001.679376][T21541] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1001.740078][T21547] netlink: 181424 bytes leftover after parsing attributes in process `syz.1.3778'. [ 1001.765282][T21547] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1001.785424][T21547] CPU: 0 PID: 21547 Comm: syz.1.3778 Not tainted syzkaller #0 [ 1001.792955][T21547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.803050][T21547] Call Trace: [ 1001.806369][T21547] [ 1001.809335][T21547] dump_stack_lvl+0x18c/0x250 [ 1001.814076][T21547] ? show_regs_print_info+0x20/0x20 [ 1001.819318][T21547] ? load_image+0x420/0x420 [ 1001.823891][T21547] sysfs_warn_dup+0x8e/0xa0 [ 1001.828440][T21547] sysfs_do_create_link_sd+0xc0/0x110 [ 1001.833853][T21547] device_add_class_symlinks+0x1cf/0x240 [ 1001.839550][T21547] device_add+0x4f9/0xc40 [ 1001.843929][T21547] wiphy_register+0x1d99/0x2ac0 [ 1001.848865][T21547] ? cfg80211_event_work+0x40/0x40 [ 1001.854035][T21547] ? minstrel_ht_alloc+0x88a/0x990 [ 1001.859218][T21547] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1001.865349][T21547] ieee80211_register_hw+0x2dd8/0x3b30 [ 1001.870876][T21547] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1001.876480][T21547] ? ieee80211_tasklet_handler+0x20/0x20 [ 1001.882169][T21547] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1001.888128][T21547] ? __debug_object_init+0xec/0x450 [ 1001.893398][T21547] ? __asan_memset+0x22/0x40 [ 1001.898042][T21547] ? __hrtimer_init+0x189/0x270 [ 1001.902949][T21547] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1001.908748][T21547] ? mac80211_hwsim_free+0x220/0x220 [ 1001.914078][T21547] ? rcu_is_watching+0x15/0xb0 [ 1001.919327][T21547] ? kstrndup+0xbd/0x140 [ 1001.923643][T21547] hwsim_new_radio_nl+0xdad/0x1a70 [ 1001.928817][T21547] ? __nla_validate+0x50/0x50 [ 1001.933550][T21547] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1001.939940][T21547] ? __nla_parse+0x40/0x50 [ 1001.944403][T21547] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1001.950788][T21547] genl_family_rcv_msg_doit+0x21a/0x310 [ 1001.956394][T21547] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1001.962356][T21547] ? bpf_lsm_capable+0x9/0x10 [ 1001.967081][T21547] ? security_capable+0x89/0xb0 [ 1001.971993][T21547] genl_rcv_msg+0x611/0x7a0 [ 1001.976556][T21547] ? genl_bind+0x360/0x360 [ 1001.981022][T21547] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1001.987404][T21547] ? ref_tracker_free+0x686/0x830 [ 1001.992470][T21547] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1001.997807][T21547] netlink_rcv_skb+0x235/0x4c0 [ 1002.002618][T21547] ? genl_bind+0x360/0x360 [ 1002.007071][T21547] ? netlink_ack+0x1160/0x1160 [ 1002.011897][T21547] ? __lock_acquire+0x7d80/0x7d80 [ 1002.016974][T21547] ? down_read+0x1ac/0x2e0 [ 1002.021430][T21547] genl_rcv+0x28/0x40 [ 1002.025452][T21547] netlink_unicast+0x7b1/0x930 [ 1002.030267][T21547] netlink_sendmsg+0x8d0/0xbf0 [ 1002.035089][T21547] ? netlink_getsockopt+0x590/0x590 [ 1002.040334][T21547] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1002.045931][T21547] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1002.051264][T21547] ? security_socket_sendmsg+0x80/0xa0 [ 1002.056774][T21547] ? netlink_getsockopt+0x590/0x590 [ 1002.062022][T21547] ____sys_sendmsg+0x61b/0x980 [ 1002.066839][T21547] ? __asan_memset+0x22/0x40 [ 1002.071453][T21547] ? __sys_sendmsg_sock+0x30/0x30 [ 1002.076498][T21547] ? __import_iovec+0x5f2/0x850 [ 1002.081385][T21547] ? import_iovec+0x73/0xa0 [ 1002.085922][T21547] ___sys_sendmsg+0x2a6/0x360 [ 1002.090627][T21547] ? __sys_sendmsg+0x2b0/0x2b0 [ 1002.095458][T21547] __se_sys_sendmsg+0x1d0/0x2c0 [ 1002.100325][T21547] ? perf_trace_preemptirq_template+0x269/0x330 [ 1002.106593][T21547] ? __x64_sys_sendmsg+0x80/0x80 [ 1002.111567][T21547] ? lockdep_hardirqs_on+0x98/0x150 [ 1002.116786][T21547] do_syscall_64+0x55/0xb0 [ 1002.121219][T21547] ? clear_bhb_loop+0x40/0x90 [ 1002.125915][T21547] ? clear_bhb_loop+0x40/0x90 [ 1002.130613][T21547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1002.136521][T21547] RIP: 0033:0x7f220939e159 [ 1002.140950][T21547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.160575][T21547] RSP: 002b:00007f220a338028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.169009][T21547] RAX: ffffffffffffffda RBX: 00007f2209625fa0 RCX: 00007f220939e159 [ 1002.177009][T21547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1002.185095][T21547] RBP: 00007f220943506b R08: 0000000000000000 R09: 0000000000000000 [ 1002.193076][T21547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.201055][T21547] R13: 00007f2209626038 R14: 00007f2209625fa0 R15: 00007ffd0fda2b98 [ 1002.209062][T21547] [ 1003.146966][T21565] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3782'. [ 1003.396163][T21574] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1003.414194][T21574] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1003.440946][T21575] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3784'. [ 1006.720044][T21580] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3786'. [ 1006.746830][T21580] net_ratelimit: 81 callbacks suppressed [ 1006.746848][T21580] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1006.770936][T21579] netlink: 'syz.2.3785': attribute type 6 has an invalid length. [ 1006.796219][T21579] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1006.852785][T21590] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3788'. [ 1006.994562][T21596] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3790'. [ 1007.922557][T21622] netlink: 'syz.3.3799': attribute type 1 has an invalid length. [ 1007.932065][T21622] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.3799'. [ 1008.290522][T21629] netlink: 'syz.2.3803': attribute type 6 has an invalid length. [ 1008.301800][T21629] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3803'. [ 1012.655966][T21736] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3821'. [ 1012.720472][T21736] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1012.759197][T21751] netlink: 207684 bytes leftover after parsing attributes in process `syz.3.3824'. [ 1012.768824][T21751] netlink: 'syz.3.3824': attribute type 1 has an invalid length. [ 1012.776896][T21751] netlink: 'syz.3.3824': attribute type 2 has an invalid length. [ 1013.460171][T21758] netlink: 'syz.3.3826': attribute type 3 has an invalid length. [ 1013.486981][T21758] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1014.075138][T21781] netlink: 'syz.0.3831': attribute type 9 has an invalid length. [ 1014.083535][T21781] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3831'. [ 1015.098654][T21798] netlink: 22 bytes leftover after parsing attributes in process `syz.0.3835'. [ 1015.733998][T21812] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3838'. [ 1015.760314][T21812] tc_dump_action: action bad kind [ 1016.063851][T21820] netlink: 'syz.0.3840': attribute type 27 has an invalid length. [ 1016.073078][T21820] netlink: 'syz.0.3840': attribute type 3 has an invalid length. [ 1016.082029][T21820] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3840'. [ 1016.169606][T21827] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3843'. [ 1016.227813][T21827] netlink: del zone limit has 4 unknown bytes [ 1016.823187][T21848] netlink: 539 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1017.653089][T21861] netlink: 'syz.1.3851': attribute type 6 has an invalid length. [ 1017.755323][T21861] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3851'. [ 1019.431040][T21884] sit0: entered allmulticast mode [ 1019.627330][T21888] netlink: 'syz.1.3856': attribute type 10 has an invalid length. [ 1019.645178][T18864] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1019.653780][T18864] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1019.673334][T21887] netlink: 'syz.1.3856': attribute type 10 has an invalid length. [ 1019.732738][T21888] netlink: 'syz.1.3856': attribute type 10 has an invalid length. [ 1020.168605][T21902] netlink: 'syz.0.3859': attribute type 29 has an invalid length. [ 1020.183156][T21902] netlink: 'syz.0.3859': attribute type 29 has an invalid length. [ 1020.207545][T21902] netlink: 'syz.0.3859': attribute type 29 has an invalid length. [ 1020.245884][T21906] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3861'. [ 1020.521107][T21913] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3863'. [ 1020.724376][T21921] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3866'. [ 1023.240181][T21980] netlink: 'syz.0.3885': attribute type 1 has an invalid length. [ 1023.266972][T21980] netlink: 'syz.0.3885': attribute type 3 has an invalid length. [ 1024.888349][T22000] netlink: 'syz.0.3889': attribute type 21 has an invalid length. [ 1024.916727][T22000] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3889'. [ 1027.952772][T22035] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1028.217177][T22040] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1028.246990][T22040] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1028.255379][T22040] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1028.282153][T22043] netlink: 'syz.2.3899': attribute type 3 has an invalid length. [ 1028.318871][T22038] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3898'. [ 1028.328563][T22043] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1028.413035][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.413260][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.422975][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.430437][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.438177][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.446169][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.453904][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.462591][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.470546][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1028.487236][T18864] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 1030.830313][T22071] syzkaller0: entered promiscuous mode [ 1030.850532][T22071] syzkaller0: entered allmulticast mode [ 1030.989721][T22089] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3911'. [ 1033.380916][T22109] netlink: 'syz.0.3916': attribute type 1 has an invalid length. [ 1033.637406][T22126] netlink: 'syz.0.3919': attribute type 3 has an invalid length. [ 1033.650876][T22126] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 1033.660957][T22126] netlink: 'syz.0.3919': attribute type 6 has an invalid length. [ 1033.674420][T22126] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.3919'. [ 1033.690682][T22127] netlink: 'syz.1.3918': attribute type 4 has an invalid length. [ 1033.721121][T22127] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1033.829964][T22124] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.3920'. [ 1033.869358][T22131] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1033.884083][T22131] netlink: 'syz.0.3921': attribute type 1 has an invalid length. [ 1033.899526][T22131] netlink: 21820 bytes leftover after parsing attributes in process `syz.0.3921'. [ 1035.540672][T22160] netlink: 'syz.3.3928': attribute type 1 has an invalid length. [ 1035.561766][T22160] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3928'. [ 1035.596928][T22160] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3928'. [ 1036.791897][T22185] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1036.839814][T22185] netlink: 'syz.2.3932': attribute type 1 has an invalid length. [ 1036.857206][T22185] netlink: 21820 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1037.356950][T22201] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3937'. [ 1037.578102][T22212] netlink: 'syz.1.3942': attribute type 21 has an invalid length. [ 1037.693575][T22217] netlink: 'syz.0.3944': attribute type 3 has an invalid length. [ 1037.701999][T22217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3944'. [ 1037.876105][T22221] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3947'. [ 1037.911520][T22221] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1038.142921][T22223] IPv6: Can't replace route, no match found [ 1038.575777][T22251] netlink: 'syz.2.3954': attribute type 9 has an invalid length. [ 1038.604007][T22251] netlink: 391 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1038.851797][T22252] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3955'. [ 1039.125327][T22260] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 1039.138095][T22260] mac80211_hwsim hwsim33 wlan0: left allmulticast mode [ 1039.506769][T22264] netlink: 'syz.3.3956': attribute type 2 has an invalid length. [ 1040.025065][T18864] Bluetooth: hci0: ISO packet for unknown connection handle 1854 [ 1042.316045][T22285] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1042.477951][T22292] syz.1.3963[22292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1042.478214][T22292] syz.1.3963[22292] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1045.860002][T22327] delete_channel: no stack [ 1045.919782][T22327] delete_channel: no stack [ 1046.171052][T22336] netlink: 'syz.0.3977': attribute type 10 has an invalid length. [ 1046.185257][T22336] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3977'. [ 1050.009224][T22364] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3983'. [ 1050.281821][T22364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.400830][T22364] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 1050.498060][T22364] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 1050.623621][T22364] bond0 (unregistering): Released all slaves [ 1051.026493][T22388] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1051.141690][T22388] netlink: 'syz.1.3991': attribute type 10 has an invalid length. [ 1051.719277][T22396] netlink: 'syz.0.3993': attribute type 7 has an invalid length. [ 1051.751810][T22406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3996'. [ 1051.783093][T22410] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1051.818244][T22410] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1051.993985][T22422] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1052.531403][T22436] netlink: 'syz.1.4002': attribute type 27 has an invalid length. [ 1052.556810][T22436] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1052.572116][T22438] netlink: 'syz.2.4003': attribute type 21 has an invalid length. [ 1052.604677][T22438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4003'. [ 1053.631046][T22453] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4006'. [ 1053.755405][T22456] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.4007'. [ 1053.765607][T22442] netlink: 'syz.1.4005': attribute type 10 has an invalid length. [ 1054.346511][T22459] netlink: 'syz.2.4008': attribute type 10 has an invalid length. [ 1054.409554][T22459] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4008'. [ 1054.639499][T22466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1054.711432][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.720304][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.186163][T22479] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4013'. [ 1055.250400][T22484] veth1_to_bond: entered allmulticast mode [ 1055.328516][T22485] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4015'. [ 1055.408719][T22485] openvswitch: netlink: Flow actions attr not present in new flow. [ 1055.880299][T22495] netlink: 703 bytes leftover after parsing attributes in process `syz.1.4018'. [ 1056.330293][T22504] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4019'. [ 1057.589094][T22510] veth1_macvtap: left promiscuous mode [ 1057.605918][T22510] macsec0: entered allmulticast mode [ 1063.365543][T22532] netlink: 'syz.0.4025': attribute type 21 has an invalid length. [ 1063.819302][T22537] netlink: 'syz.3.4026': attribute type 10 has an invalid length. [ 1063.846611][T22537] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4026'. [ 1064.783398][T22547] netlink: 'syz.3.4030': attribute type 39 has an invalid length. [ 1064.924385][T22554] mac80211_hwsim hwsim43 .3ãc¤±: renamed from wlan1 [ 1065.091090][T22561] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.4034'. [ 1066.835682][T22590] netlink: 'syz.0.4040': attribute type 3 has an invalid length. [ 1066.857007][T22591] netlink: 'syz.0.4040': attribute type 3 has an invalid length. [ 1066.875845][T22590] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1066.908090][T22585] netlink: 'syz.3.4038': attribute type 28 has an invalid length. [ 1066.917289][T22591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4040'. [ 1066.956850][T22585] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4038'. [ 1067.404214][T22597] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4042'. [ 1067.455805][T22597] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1067.466547][T22597] CPU: 0 PID: 22597 Comm: syz.0.4042 Not tainted syzkaller #0 [ 1067.474112][T22597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1067.484213][T22597] Call Trace: [ 1067.487538][T22597] [ 1067.490514][T22597] dump_stack_lvl+0x18c/0x250 [ 1067.495245][T22597] ? show_regs_print_info+0x20/0x20 [ 1067.500492][T22597] ? load_image+0x420/0x420 [ 1067.505079][T22597] sysfs_warn_dup+0x8e/0xa0 [ 1067.509632][T22597] sysfs_do_create_link_sd+0xc0/0x110 [ 1067.515048][T22597] device_add_class_symlinks+0x1cf/0x240 [ 1067.520733][T22597] device_add+0x4f9/0xc40 [ 1067.525123][T22597] wiphy_register+0x1d99/0x2ac0 [ 1067.530052][T22597] ? cfg80211_event_work+0x40/0x40 [ 1067.535203][T22597] ? minstrel_ht_alloc+0x88a/0x990 [ 1067.540367][T22597] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1067.546484][T22597] ieee80211_register_hw+0x2dd8/0x3b30 [ 1067.552020][T22597] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1067.557623][T22597] ? ieee80211_tasklet_handler+0x20/0x20 [ 1067.563302][T22597] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1067.569255][T22597] ? __debug_object_init+0xec/0x450 [ 1067.574507][T22597] ? __asan_memset+0x22/0x40 [ 1067.579149][T22597] ? __hrtimer_init+0x189/0x270 [ 1067.584059][T22597] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1067.589856][T22597] ? mac80211_hwsim_free+0x220/0x220 [ 1067.595202][T22597] ? rcu_is_watching+0x15/0xb0 [ 1067.600011][T22597] ? kstrndup+0xbd/0x140 [ 1067.604318][T22597] hwsim_new_radio_nl+0xdad/0x1a70 [ 1067.609482][T22597] ? __nla_validate+0x50/0x50 [ 1067.614238][T22597] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1067.620634][T22597] ? __nla_parse+0x40/0x50 [ 1067.625102][T22597] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1067.631491][T22597] genl_family_rcv_msg_doit+0x21a/0x310 [ 1067.637112][T22597] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1067.643071][T22597] ? bpf_lsm_capable+0x9/0x10 [ 1067.647790][T22597] ? security_capable+0x89/0xb0 [ 1067.652699][T22597] genl_rcv_msg+0x611/0x7a0 [ 1067.657268][T22597] ? genl_bind+0x360/0x360 [ 1067.661730][T22597] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1067.667764][T22597] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1067.674144][T22597] ? perf_trace_lock+0xfc/0x3b0 [ 1067.679050][T22597] netlink_rcv_skb+0x235/0x4c0 [ 1067.683862][T22597] ? genl_bind+0x360/0x360 [ 1067.688324][T22597] ? netlink_ack+0x1160/0x1160 [ 1067.693151][T22597] ? __lock_acquire+0x7d80/0x7d80 [ 1067.698238][T22597] ? down_read+0x1ac/0x2e0 [ 1067.702705][T22597] genl_rcv+0x28/0x40 [ 1067.706733][T22597] netlink_unicast+0x7b1/0x930 [ 1067.711567][T22597] netlink_sendmsg+0x8d0/0xbf0 [ 1067.716390][T22597] ? netlink_getsockopt+0x590/0x590 [ 1067.721659][T22597] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1067.727255][T22597] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1067.732589][T22597] ? security_socket_sendmsg+0x80/0xa0 [ 1067.738091][T22597] ? netlink_getsockopt+0x590/0x590 [ 1067.743341][T22597] ____sys_sendmsg+0x61b/0x980 [ 1067.748168][T22597] ? __asan_memset+0x22/0x40 [ 1067.752799][T22597] ? __sys_sendmsg_sock+0x30/0x30 [ 1067.757871][T22597] ? __import_iovec+0x5f2/0x850 [ 1067.762795][T22597] ? import_iovec+0x73/0xa0 [ 1067.767383][T22597] ___sys_sendmsg+0x2a6/0x360 [ 1067.772124][T22597] ? __sys_sendmsg+0x2b0/0x2b0 [ 1067.776972][T22597] ? trace_call_bpf+0xc3/0x6c0 [ 1067.781815][T22597] __se_sys_sendmsg+0x1d0/0x2c0 [ 1067.786715][T22597] ? __x64_sys_sendmsg+0x80/0x80 [ 1067.791717][T22597] ? lockdep_hardirqs_on+0x98/0x150 [ 1067.796969][T22597] do_syscall_64+0x55/0xb0 [ 1067.801424][T22597] ? clear_bhb_loop+0x40/0x90 [ 1067.806141][T22597] ? clear_bhb_loop+0x40/0x90 [ 1067.810865][T22597] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1067.816809][T22597] RIP: 0033:0x7f812779e159 [ 1067.821272][T22597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1067.840931][T22597] RSP: 002b:00007f81286c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1067.849402][T22597] RAX: ffffffffffffffda RBX: 00007f8127a25fa0 RCX: 00007f812779e159 [ 1067.857426][T22597] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 1067.865433][T22597] RBP: 00007f812783506b R08: 0000000000000000 R09: 0000000000000000 [ 1067.873437][T22597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1067.881450][T22597] R13: 00007f8127a26038 R14: 00007f8127a25fa0 R15: 00007ffc3acf8ac8 [ 1067.889489][T22597] [ 1070.957465][T22629] netlink: 'syz.3.4051': attribute type 29 has an invalid length. [ 1070.978060][T22629] netlink: 'syz.3.4051': attribute type 29 has an invalid length. [ 1070.999024][T22629] netlink: 'syz.3.4051': attribute type 29 has an invalid length. [ 1071.018149][T22629] netlink: 'syz.3.4051': attribute type 29 has an invalid length. [ 1071.318712][T22629] netlink: 'syz.3.4051': attribute type 29 has an invalid length. [ 1072.022985][T22656] netlink: 'syz.1.4055': attribute type 10 has an invalid length. [ 1072.033720][T22656] netlink: 'syz.1.4055': attribute type 4 has an invalid length. [ 1072.049439][T22656] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4055'. [ 1072.065786][T22656] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4055'. [ 1072.341080][T22664] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4059'. [ 1072.513071][T22668] netlink: 'syz.2.4059': attribute type 20 has an invalid length. [ 1072.625006][T22673] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1072.689991][T22673] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1072.790620][T22673] netlink: 'syz.0.4062': attribute type 21 has an invalid length. [ 1072.799786][T22673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4062'. [ 1073.590929][T22686] netlink: 'syz.1.4065': attribute type 17 has an invalid length. [ 1073.652897][T22686] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4065'. [ 1074.091536][T22700] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4068'. [ 1074.123195][T22709] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.4071'. [ 1074.167215][T22700] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1074.839130][T22704] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4070'. [ 1074.868271][T22704] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1076.631833][T22727] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4074'. [ 1077.845178][T22774] validate_nla: 1 callbacks suppressed [ 1077.845192][T22774] netlink: 'syz.0.4096': attribute type 9 has an invalid length. [ 1077.897008][T22774] __nla_validate_parse: 3 callbacks suppressed [ 1077.897024][T22774] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4096'. [ 1077.988231][T22777] IPv6: NLM_F_CREATE should be specified when creating new route [ 1078.871184][T22786] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4090'. [ 1080.993583][T22825] netlink: 'syz.3.4105': attribute type 1 has an invalid length. [ 1081.013733][T22825] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4105'. [ 1081.254147][T22828] syzkaller0: entered promiscuous mode [ 1081.295465][T22828] syzkaller0: entered allmulticast mode [ 1081.306519][T22827] veth0_vlan: mtu less than device minimum [ 1085.086124][T22840] netlink: 'syz.1.4107': attribute type 21 has an invalid length. [ 1085.648154][T22856] netlink: 'syz.0.4111': attribute type 10 has an invalid length. [ 1085.673317][T22856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4111'. [ 1086.613153][T18864] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1086.781058][T22876] netlink: 'syz.0.4117': attribute type 29 has an invalid length. [ 1086.796482][T22876] netlink: 'syz.0.4117': attribute type 29 has an invalid length. [ 1088.204637][T22890] sit0: entered allmulticast mode [ 1088.273541][T22892] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4123'. [ 1088.516970][T22894] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1089.045619][T22906] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.4126'. [ 1091.386913][T22925] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4131'. [ 1091.521743][T22926] netlink: 'syz.2.4131': attribute type 3 has an invalid length. [ 1091.521803][T22926] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.4131'. [ 1092.956147][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1092.979759][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1092.988422][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1093.020750][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1093.030348][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1093.041581][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1093.269444][ T3466] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1093.746300][ T3466] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.281036][ T3466] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.022122][T22947] chnl_net:caif_netlink_parms(): no params data found [ 1095.107838][T18864] Bluetooth: hci1: command tx timeout [ 1095.346115][T22963] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4140'. [ 1095.369253][T22963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1095.622070][T22947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.662420][T22972] netlink: 'syz.2.4141': attribute type 29 has an invalid length. [ 1095.663328][T22947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.705230][T22947] bridge_slave_0: entered allmulticast mode [ 1095.719973][T22947] bridge_slave_0: entered promiscuous mode [ 1095.740182][T22972] netlink: 'syz.2.4141': attribute type 29 has an invalid length. [ 1095.869699][ T3466] bridge0: port 3(ip6gretap0) entered disabled state [ 1096.130979][ T3466] ip6gretap0 (unregistering): left allmulticast mode [ 1096.145843][ T3466] ip6gretap0 (unregistering): left promiscuous mode [ 1096.173469][ T3466] bridge0: port 3(ip6gretap0) entered disabled state [ 1096.250309][T22989] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.4144'. [ 1096.448673][T22947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.455880][T22947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.497884][T22947] bridge_slave_1: entered allmulticast mode [ 1096.505431][T22947] bridge_slave_1: entered promiscuous mode [ 1096.733704][T22947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.809459][T22947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1096.869542][T22999] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4145'. [ 1097.110742][T22947] team0: Port device team_slave_0 added [ 1097.187219][T18864] Bluetooth: hci1: command tx timeout [ 1097.280351][T22947] team0: Port device team_slave_1 added [ 1098.085374][T22947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.100616][T22947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.129617][T22947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.266902][T18864] Bluetooth: hci1: command tx timeout [ 1099.859918][T23023] netlink: 'syz.1.4148': attribute type 9 has an invalid length. [ 1099.931194][T23023] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4148'. [ 1100.192954][T22947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1100.366166][T22947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1100.406969][T22947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.679202][T22947] hsr_slave_0: entered promiscuous mode [ 1100.686537][T22947] hsr_slave_1: entered promiscuous mode [ 1100.698142][T22947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1100.705840][T22947] Cannot create hsr debugfs directory [ 1101.346943][T18864] Bluetooth: hci1: command tx timeout [ 1102.099773][T23054] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.4152'. [ 1102.251364][T23060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1102.348412][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1102.358753][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1102.438724][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1102.467282][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1102.576429][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1102.585789][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1102.615140][T23067] netlink: 'syz.0.4155': attribute type 2 has an invalid length. [ 1102.673119][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1102.684227][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1102.797114][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1102.807863][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1102.869779][ T3466] bond0: (slave wlan1): Releasing backup interface [ 1102.881143][ T3466] mac80211_hwsim hwsim34 wlan1 (unregistering): left promiscuous mode [ 1102.906812][ T3466] mac80211_hwsim hwsim34 wlan1 (unregistering): left allmulticast mode [ 1102.959999][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1102.986851][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1103.023954][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1103.044621][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1103.082764][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1103.113734][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1103.186019][T23061] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4153'. [ 1103.247643][T23061] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1103.500799][ T3466] batman_adv: : Interface deactivated: batadv_slave_0 [ 1103.527157][ T3466] batman_adv: : Removing interface: batadv_slave_0 [ 1103.569052][ T3466] batman_adv: : Interface deactivated: batadv_slave_1 [ 1103.576093][ T3466] batman_adv: : Removing interface: batadv_slave_1 [ 1103.615937][ T3466] bridge0: port 4(team0) entered disabled state [ 1104.059836][ T3466] geneve1 (unregistering): left promiscuous mode [ 1104.066544][ T3466] geneve1 (unregistering): left allmulticast mode [ 1104.090097][ T3466] team0 (unregistering): Port device geneve1 removed [ 1104.172055][T23100] netlink: 'syz.2.4161': attribute type 10 has an invalid length. [ 1104.497800][T23106] netlink: 'syz.2.4164': attribute type 3 has an invalid length. [ 1104.505923][T23106] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 1104.514343][T23106] netlink: 'syz.2.4164': attribute type 1 has an invalid length. [ 1104.522484][T23106] netlink: 'syz.2.4164': attribute type 2 has an invalid length. [ 1104.595164][ T3466] team_slave_1 (unregistering): left promiscuous mode [ 1104.602258][ T3466] team_slave_1 (unregistering): left allmulticast mode [ 1104.615598][ T3466] team0 (unregistering): Port device team_slave_1 removed [ 1104.737591][ T3466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1104.749405][ T3466] bond_slave_1 (unregistering): left promiscuous mode [ 1104.756201][ T3466] bond_slave_1 (unregistering): left allmulticast mode [ 1105.041185][ T3466] bond0 (unregistering): left promiscuous mode [ 1105.047634][ T3466] bond0 (unregistering): left allmulticast mode [ 1105.055522][ T3466] team0 (unregistering): Port device bond0 removed [ 1105.091132][ T3466] bond0 (unregistering): Released all slaves [ 1105.219145][T23094] netlink: 'syz.0.4158': attribute type 10 has an invalid length. [ 1105.344772][T22947] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1105.377498][T22947] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1105.427778][T22947] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1105.505885][T22947] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1106.908629][T23144] netlink: 'syz.1.4170': attribute type 1 has an invalid length. [ 1108.888383][T22947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1108.980748][T22947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.056441][ T3442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.063687][ T3442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.091948][ T3442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.099184][ T3442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.335967][T23172] __nla_validate_parse: 5 callbacks suppressed [ 1109.335988][T23172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4176'. [ 1109.474407][T23174] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4177'. [ 1109.564010][T23172] netlink: 'syz.2.4176': attribute type 10 has an invalid length. [ 1109.572704][T23172] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4176'. [ 1109.582871][T23172] batadv_slave_1: entered promiscuous mode [ 1109.594704][T23172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.612129][T23172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.374960][T22947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.397193][T23208] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4183'. [ 1110.523683][T22947] veth0_vlan: entered promiscuous mode [ 1110.580063][T22947] veth1_vlan: entered promiscuous mode [ 1110.708480][T22947] veth0_macvtap: entered promiscuous mode [ 1110.732182][T22947] veth1_macvtap: entered promiscuous mode [ 1110.771647][T22947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.794347][T22947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.826836][T22947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.849927][T22947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.876694][T22947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1110.906649][T22947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1110.943168][T22947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1111.002917][T23240] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.4188'. [ 1111.035335][T22947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.071968][T22947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.122092][T22947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1111.146844][T22947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1111.218555][T22947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1111.249005][T22947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.274069][T22947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.299011][T22947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.310783][T22947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.538562][T16329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.546461][T16329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.609412][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.647078][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.680660][T23260] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.4192'. [ 1113.921783][T23285] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.4196'. [ 1114.209196][T23304] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4200'. [ 1114.529145][T23308] netlink: 'syz.0.4203': attribute type 39 has an invalid length. [ 1118.744550][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.751220][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.942568][T23318] netlink: 'syz.2.4206': attribute type 2 has an invalid length. [ 1128.965422][T23318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4206'. [ 1129.872612][T23352] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.4212'. [ 1130.410689][T23347] syzkaller0: entered promiscuous mode [ 1130.416405][T23347] syzkaller0: entered allmulticast mode [ 1130.567707][T23363] netlink: 'syz.3.4214': attribute type 9 has an invalid length. [ 1130.575635][T23363] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1130.996380][T23372] netlink: 'syz.0.4216': attribute type 21 has an invalid length. [ 1131.064460][T23372] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4216'. [ 1131.223056][T23384] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4218'. [ 1131.289145][T23374] netlink: 'syz.0.4216': attribute type 10 has an invalid length. [ 1131.999899][T23388] netlink: 127924 bytes leftover after parsing attributes in process `syz.3.4220'. [ 1132.026753][T23388] netlink: 16384 bytes leftover after parsing attributes in process `syz.3.4220'. [ 1132.061328][T23388] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4220'. [ 1132.712402][T23402] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1132.777016][T23402] syzkaller0: entered promiscuous mode [ 1132.948375][T23402] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4226'. [ 1133.465850][T23430] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4232'. [ 1134.024832][T23430] team0: Port device C removed [ 1134.048624][T23430] net_ratelimit: 1 callbacks suppressed [ 1134.048650][T23430] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1135.209043][T23442] netlink: 'syz.3.4234': attribute type 5 has an invalid length. [ 1136.046305][T23460] À: port 1(vlan0) entered blocking state [ 1136.073952][T23460] À: port 1(vlan0) entered disabled state [ 1136.091743][T23460] vlan0: entered allmulticast mode [ 1136.118883][T23460] vlan0: entered promiscuous mode [ 1136.360599][T23465] netlink: 'syz.3.4242': attribute type 29 has an invalid length. [ 1136.409925][T23469] netlink: 'syz.3.4242': attribute type 29 has an invalid length. [ 1136.448099][T23469] netlink: 'syz.3.4242': attribute type 29 has an invalid length. [ 1139.845626][T23520] netlink: 'syz.0.4257': attribute type 1 has an invalid length. [ 1139.856433][T23520] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.4257'. [ 1140.002669][T23524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4258'. [ 1140.128471][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4258'. [ 1140.156745][T23524] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4258'. [ 1140.167206][T23524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4258'. [ 1140.176761][T23524] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4258'. [ 1140.663282][T23543] netlink: 'syz.0.4262': attribute type 12 has an invalid length. [ 1140.687923][T23543] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.4262'. [ 1140.743751][T23538] netlink: 'syz.3.4260': attribute type 10 has an invalid length. [ 1140.752668][T23538] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4260'. [ 1140.764672][T23538] hsr0: entered promiscuous mode [ 1140.806787][T23538] bridge0: port 3(hsr0) entered blocking state [ 1140.831125][T23538] bridge0: port 3(hsr0) entered disabled state [ 1140.848364][T23538] hsr0: entered allmulticast mode [ 1140.863236][T23538] hsr_slave_0: entered allmulticast mode [ 1140.872696][T23538] hsr_slave_1: entered allmulticast mode [ 1140.993683][T23538] bridge0: port 3(hsr0) entered blocking state [ 1141.000999][T23538] bridge0: port 3(hsr0) entered forwarding state [ 1141.458082][T23553] netlink: 'syz.1.4265': attribute type 1 has an invalid length. [ 1141.573590][T23566] netlink: 'syz.0.4268': attribute type 10 has an invalid length. [ 1141.623959][T23566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1141.752225][T23567] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1141.762488][T23567] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1141.815358][T23572] netlink: 'syz.2.4270': attribute type 12 has an invalid length. [ 1141.939448][T23573] netlink: 'syz.3.4269': attribute type 21 has an invalid length. [ 1143.073302][T23608] netlink: 'syz.0.4276': attribute type 29 has an invalid length. [ 1143.107393][T23601] netlink: 'syz.0.4276': attribute type 29 has an invalid length. [ 1143.165550][T23608] netlink: 'syz.0.4276': attribute type 29 has an invalid length. [ 1143.314030][T23618] netlink: 'syz.1.4278': attribute type 21 has an invalid length. [ 1143.568181][T23620] syz_tun: refused to change device tx_queue_len [ 1143.576457][T23620] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1143.760197][T23629] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1145.802549][T23672] validate_nla: 6 callbacks suppressed [ 1145.802588][T23672] netlink: 'syz.3.4297': attribute type 1 has an invalid length. [ 1145.861686][T23672] __nla_validate_parse: 7 callbacks suppressed [ 1145.861718][T23672] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4297'. [ 1145.876570][T23682] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4299'. [ 1145.973516][T23683] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1146.197905][T23691] netlink: 'syz.2.4302': attribute type 2 has an invalid length. [ 1146.223987][T23692] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.4302'. [ 1146.309810][T23699] netlink: 'syz.3.4301': attribute type 17 has an invalid length. [ 1146.327348][T23699] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4301'. [ 1146.779194][T23716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4307'. [ 1146.803151][T23716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4307'. [ 1146.841451][T23711] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4307'. [ 1148.179655][T23747] tap1: tun_chr_ioctl cmd 1074025677 [ 1148.192409][T23747] tap1: linktype set to 768 [ 1148.225611][T23747] netlink: 763 bytes leftover after parsing attributes in process `syz.1.4315'. [ 1148.659812][T23759] netlink: 'syz.1.4320': attribute type 1 has an invalid length. [ 1148.694988][T23759] netlink: 'syz.1.4320': attribute type 4 has an invalid length. [ 1148.720199][T23759] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4320'. [ 1149.505194][T23779] netlink: 'syz.2.4323': attribute type 1 has an invalid length. [ 1149.527026][T23779] netlink: 'syz.2.4323': attribute type 3 has an invalid length. [ 1149.532482][T23781] netlink: 'syz.0.4325': attribute type 3 has an invalid length. [ 1149.578536][T23787] netlink: 'syz.2.4323': attribute type 10 has an invalid length. [ 1149.600825][T23784] netlink: 'syz.1.4326': attribute type 10 has an invalid length. [ 1150.946337][T23814] netlink: 'syz.0.4335': attribute type 29 has an invalid length. [ 1150.971202][T23813] netlink: 'syz.0.4335': attribute type 3 has an invalid length. [ 1150.987648][T23813] netlink: 'syz.0.4335': attribute type 1 has an invalid length. [ 1151.004320][T23813] __nla_validate_parse: 5 callbacks suppressed [ 1151.004358][T23813] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.4335'. [ 1153.333211][T23811] netlink: 'syz.3.4334': attribute type 10 has an invalid length. [ 1153.344540][T23811] veth1_vlan: entered allmulticast mode [ 1153.389441][T23811] team0: Device veth1_vlan failed to register rx_handler [ 1153.402890][T23814] netlink: 'syz.0.4335': attribute type 29 has an invalid length. [ 1153.778710][T23833] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4339'. [ 1153.978985][T23839] netlink: 'syz.3.4342': attribute type 1 has an invalid length. [ 1153.991014][T23839] netlink: 'syz.3.4342': attribute type 2 has an invalid length. [ 1154.008174][T23839] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4342'. [ 1154.049761][T23839] netlink: 'syz.3.4342': attribute type 21 has an invalid length. [ 1154.079375][T23839] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4342'. [ 1154.106913][T23839] netlink: 'syz.3.4342': attribute type 4 has an invalid length. [ 1154.157288][T23839] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4342'. [ 1154.351662][T23850] netlink: 'syz.1.4346': attribute type 13 has an invalid length. [ 1154.366139][T23850] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1154.470726][T23855] ÿ: renamed from bond_slave_0 (while UP) [ 1155.056426][T23875] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.4354'. [ 1155.708682][T23895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4359'. [ 1158.657948][T23929] validate_nla: 3 callbacks suppressed [ 1158.657966][T23929] netlink: 'syz.0.4368': attribute type 10 has an invalid length. [ 1162.913719][T23986] netlink: 'syz.1.4384': attribute type 9 has an invalid length. [ 1162.923357][T23986] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4384'. [ 1162.954788][T23986] netlink: 'syz.1.4384': attribute type 9 has an invalid length. [ 1162.966804][T23986] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4384'. [ 1163.073203][T23988] ref_ctr_offset mismatch. inode: 0xad7 offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 1163.162360][T23994] ref_ctr_offset mismatch. inode: 0xad7 offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 1163.360491][T23987] netlink: 'syz.0.4382': attribute type 33 has an invalid length. [ 1163.460127][T23987] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4382'. [ 1163.498857][T23987] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1163.626812][T24001] delete_channel: no stack [ 1164.099144][T24011] netlink: 'syz.0.4390': attribute type 10 has an invalid length. [ 1164.888114][T24032] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.4396'. [ 1165.036119][T24044] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.4398'. [ 1165.107521][T24049] netlink: 'syz.0.4400': attribute type 153 has an invalid length. [ 1165.125722][T24049] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4400'. [ 1165.154143][T24050] IPv6: NLM_F_CREATE should be specified when creating new route [ 1165.194043][T24050] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4399'. [ 1165.205884][T24054] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4401'. [ 1165.552585][T24059] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.4402'. [ 1166.169647][T24092] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4407'. [ 1166.363609][T24094] netlink: 'syz.0.4409': attribute type 3 has an invalid length. [ 1166.724300][T24111] netlink: 'syz.0.4411': attribute type 10 has an invalid length. [ 1166.744177][T24103] netlink: 'syz.0.4411': attribute type 29 has an invalid length. [ 1166.802351][T24111] team0: Device veth0_vlan failed to register rx_handler [ 1166.895391][T24121] delete_channel: no stack [ 1166.902949][T24121] delete_channel: no stack [ 1166.956339][T24103] netlink: 'syz.0.4411': attribute type 29 has an invalid length. [ 1166.963853][T24118] netlink: 'syz.3.4414': attribute type 9 has an invalid length. [ 1166.987092][T24105] netlink: 'syz.0.4411': attribute type 29 has an invalid length. [ 1167.023601][T24105] netlink: 'syz.0.4411': attribute type 29 has an invalid length. [ 1167.078728][T24105] netlink: 'syz.0.4411': attribute type 29 has an invalid length. [ 1167.963418][T24149] __nla_validate_parse: 6 callbacks suppressed [ 1167.963438][T24149] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.4423'. [ 1169.830557][T24186] validate_nla: 5 callbacks suppressed [ 1169.830577][T24186] netlink: 'syz.0.4432': attribute type 21 has an invalid length. [ 1171.471715][T24208] syzkaller0: entered allmulticast mode [ 1172.048367][T24220] netlink: 'syz.3.4442': attribute type 2 has an invalid length. [ 1172.063036][T24220] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1172.141502][T24221] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1172.244097][T24221] netlink: 252 bytes leftover after parsing attributes in process `syz.3.4442'. [ 1172.504562][T24237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4446'. [ 1172.526827][T24237] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4446'. [ 1172.551085][T24232] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4446'. [ 1172.571109][T24240] netlink: 'syz.1.4448': attribute type 39 has an invalid length. [ 1172.692288][T24240] hsr_slave_1 (unregistering): left promiscuous mode [ 1172.760428][T24232] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4446'. [ 1173.006097][T24249] netlink: 668 bytes leftover after parsing attributes in process `syz.3.4450'. [ 1173.022215][T24249] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1173.030677][T24249] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1173.065909][T24255] netlink: 'syz.1.4451': attribute type 10 has an invalid length. [ 1173.315087][T24262] netlink: 'syz.3.4452': attribute type 8 has an invalid length. [ 1173.323128][T24262] netlink: 'syz.3.4452': attribute type 6 has an invalid length. [ 1173.334983][T24262] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.4452'. [ 1173.596509][T24268] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4454'. [ 1175.462632][T24313] netlink: 'syz.3.4468': attribute type 5 has an invalid length. [ 1175.509333][T24313] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4468'. [ 1175.838602][T24332] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4471'. [ 1176.705670][T24346] netlink: 'syz.1.4476': attribute type 29 has an invalid length. [ 1176.832505][T24346] netlink: 'syz.1.4476': attribute type 29 has an invalid length. [ 1177.475172][T24367] netlink: 'syz.0.4480': attribute type 2 has an invalid length. [ 1177.507190][T24367] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4480'. [ 1177.527912][T24366] netlink: 'syz.0.4480': attribute type 2 has an invalid length. [ 1177.905981][T24366] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4480'. [ 1177.918090][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.918171][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.217187][T24381] netlink: 'syz.1.4482': attribute type 10 has an invalid length. [ 1178.225281][T24381] netlink: 'syz.1.4482': attribute type 10 has an invalid length. [ 1178.244855][T24381] netlink: 'syz.1.4482': attribute type 10 has an invalid length. [ 1178.253353][T24381] netlink: 'syz.1.4482': attribute type 10 has an invalid length. [ 1178.265705][T24381] netlink: 'syz.1.4482': attribute type 10 has an invalid length. [ 1178.279784][T24382] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4484'. [ 1178.479927][T24390] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.4487'. [ 1178.531544][T24384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4485'. [ 1178.561508][T24388] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.4486'. [ 1178.593905][T24384] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 1178.601776][T24384] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1178.647995][T24384] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 1178.670201][T24394] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4486'. [ 1178.803736][T24394] bond0: (slave bond_slave_0): Releasing backup interface [ 1178.845562][T24394] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1178.943291][T24401] syzkaller0: entered promiscuous mode [ 1178.960934][T24401] syzkaller0: entered allmulticast mode [ 1179.160597][T24410] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4492'. [ 1179.362117][T24418] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4491'. [ 1181.897741][T24433] validate_nla: 62 callbacks suppressed [ 1181.897863][T24433] netlink: 'syz.2.4494': attribute type 10 has an invalid length. [ 1181.929903][T24433] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4494'. [ 1181.940683][T24442] netlink: 'syz.3.4500': attribute type 21 has an invalid length. [ 1181.951930][T24442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4500'. [ 1181.961514][T24442] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4500'. [ 1182.146234][T24453] netlink: 'syz.3.4502': attribute type 1 has an invalid length. [ 1182.173234][T24452] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1182.255328][T24449] netlink: 'syz.0.4501': attribute type 9 has an invalid length. [ 1183.150571][T24463] netlink: 'syz.2.4506': attribute type 25 has an invalid length. [ 1183.660220][T24484] netlink: 'syz.0.4513': attribute type 13 has an invalid length. [ 1183.673957][T24484] __nla_validate_parse: 3 callbacks suppressed [ 1183.673973][T24484] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.4513'. [ 1184.003993][T24499] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4518'. [ 1185.147353][T24521] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4525'. [ 1188.495876][T24581] netlink: 'syz.1.4541': attribute type 10 has an invalid length. [ 1188.552803][T24581] netlink: 196620 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1188.613616][T24581] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1189.764819][T24594] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4542'. [ 1189.853191][T24605] netlink: 'syz.2.4550': attribute type 10 has an invalid length. [ 1189.886482][T24605] bond0: (slave team0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1189.918266][T24605] 8021q: adding VLAN 0 to HW filter on device team0 [ 1189.940425][T24594] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4542'. [ 1189.997644][T24580] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4542'. [ 1190.179149][T24613] pimreg: tun_chr_ioctl cmd 1074025677 [ 1190.184811][T24613] pimreg: linktype set to 774 [ 1190.573535][T24620] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1190.649817][T24621] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1190.808866][T24620] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.4554'. [ 1190.816458][T24631] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4558'. [ 1190.839812][T24631] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1192.010421][T24656] ================================================================== [ 1192.018556][T24656] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 1192.026416][T24656] Write of size 72 at addr ffff88805d6e3210 by task syz.0.4565/24656 [ 1192.034530][T24656] [ 1192.036883][T24656] CPU: 1 PID: 24656 Comm: syz.0.4565 Not tainted syzkaller #0 [ 1192.044801][T24656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.052332][T24654] netlink: 'syz.2.4564': attribute type 3 has an invalid length. [ 1192.054877][T24656] Call Trace: [ 1192.054888][T24656] [ 1192.054897][T24656] dump_stack_lvl+0x18c/0x250 [ 1192.054931][T24656] ? read_lock_is_recursive+0x20/0x20 [ 1192.054956][T24656] ? show_regs_print_info+0x20/0x20 [ 1192.054981][T24656] ? load_image+0x420/0x420 [ 1192.055004][T24656] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1192.055029][T24656] ? __virt_addr_valid+0x10c/0x380 [ 1192.076083][T24654] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1192.079056][T24656] ? __virt_addr_valid+0x10c/0x380 [ 1192.079089][T24656] ? __virt_addr_valid+0x10c/0x380 [ 1192.079114][T24656] print_report+0xa8/0x210 [ 1192.079158][T24656] ? __bpf_get_stackid+0x6c7/0x900 [ 1192.079180][T24656] kasan_report+0x117/0x150 [ 1192.079209][T24656] ? __bpf_get_stackid+0x6c7/0x900 [ 1192.079237][T24656] kasan_check_range+0x241/0x290 [ 1192.079260][T24656] ? __bpf_get_stackid+0x6c7/0x900 [ 1192.079284][T24656] __asan_memcpy+0x40/0x70 [ 1192.079310][T24656] __bpf_get_stackid+0x6c7/0x900 [ 1192.079346][T24656] bpf_get_stackid_pe+0x343/0x410 [ 1192.079374][T24656] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 1192.079397][T24656] bpf_overflow_handler+0x1fc/0x510 [ 1192.079425][T24656] ? bpf_overflow_handler+0xde/0x510 [ 1192.079451][T24656] ? tp_perf_event_destroy+0x20/0x20 [ 1192.079475][T24656] ? perf_trace_preemptirq_template+0x144/0x330 [ 1192.079504][T24656] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1192.079534][T24656] ? __perf_event_account_interrupt+0x187/0x280 [ 1192.079557][T24656] __perf_event_overflow+0x461/0x660 [ 1192.079584][T24656] perf_swevent_event+0x319/0x570 [ 1192.079607][T24656] ? perf_tp_event+0x1550/0x1550 [ 1192.079636][T24656] ___perf_sw_event+0x4ab/0x730 [ 1192.079659][T24656] ? ___perf_sw_event+0x19e/0x730 [ 1192.079681][T24656] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1192.079706][T24656] ? __lock_acquire+0x1336/0x7d80 [ 1192.079730][T24656] ? rep_movs_alternative+0x4a/0x90 [ 1192.079763][T24656] ? verify_lock_unused+0x140/0x140 [ 1192.079785][T24656] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1192.079810][T24656] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1192.079834][T24656] ? lock_chain_count+0x20/0x20 [ 1192.079856][T24656] __perf_sw_event+0x139/0x270 [ 1192.079881][T24656] do_user_addr_fault+0x1242/0x12d0 [ 1192.079908][T24656] ? rcu_is_watching+0x15/0xb0 [ 1192.079935][T24656] exc_page_fault+0x64/0x100 [ 1192.079956][T24656] asm_exc_page_fault+0x26/0x30 [ 1192.079981][T24656] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1192.080010][T24656] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1192.080027][T24656] RSP: 0018:ffffc90003357bd0 EFLAGS: 00050206 [ 1192.080046][T24656] RAX: ffffffff84342b01 RBX: 000000000000056d RCX: 0000000000000246 [ 1192.080060][T24656] RDX: 0000000000000001 RSI: 000020000000c000 RDI: ffff888079f1c327 [ 1192.080074][T24656] RBP: ffffc90003357d20 R08: 0000000000000004 R09: 0000000000000005 [ 1192.080088][T24656] R10: dffffc0000000000 R11: ffffed100f3e38ad R12: 000020000000c246 [ 1192.080102][T24656] R13: 1ffff9200066afbd R14: ffff888079f1c000 R15: 000020000000bcd9 [ 1192.080120][T24656] ? rcuref_put_slowpath+0x101/0x150 [ 1192.080149][T24656] _copy_from_user+0x8b/0xe0 [ 1192.080171][T24656] generic_map_update_batch+0x58c/0x800 [ 1192.080198][T24656] ? rcu_read_unlock+0xa0/0xa0 [ 1192.080219][T24656] ? __fdget+0x180/0x210 [ 1192.080244][T24656] ? rcu_read_unlock+0xa0/0xa0 [ 1192.080262][T24656] bpf_map_do_batch+0x3f2/0x600 [ 1192.080284][T24656] ? bpf_lsm_key_free+0x10/0x10 [ 1192.080312][T24656] __sys_bpf+0x381/0x890 [ 1192.080342][T24656] ? bpf_link_show_fdinfo+0x560/0x560 [ 1192.080371][T24656] ? lock_chain_count+0x20/0x20 [ 1192.080396][T24656] __x64_sys_bpf+0x7c/0x90 [ 1192.080417][T24656] do_syscall_64+0x55/0xb0 [ 1192.080440][T24656] ? clear_bhb_loop+0x40/0x90 [ 1192.080464][T24656] ? clear_bhb_loop+0x40/0x90 [ 1192.080489][T24656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.080514][T24656] RIP: 0033:0x7f812779e159 [ 1192.080530][T24656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.080546][T24656] RSP: 002b:00007f81286c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1192.080566][T24656] RAX: ffffffffffffffda RBX: 00007f8127a25fa0 RCX: 00007f812779e159 [ 1192.080581][T24656] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1192.080594][T24656] RBP: 00007f812783506b R08: 0000000000000000 R09: 0000000000000000 [ 1192.080607][T24656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.080619][T24656] R13: 00007f8127a26038 R14: 00007f8127a25fa0 R15: 00007ffc3acf8ac8 [ 1192.080639][T24656] [ 1192.080646][T24656] [ 1192.080650][T24656] Allocated by task 24656: [ 1192.080659][T24656] kasan_set_track+0x4e/0x70 [ 1192.080679][T24656] __kasan_kmalloc+0x8f/0xa0 [ 1192.080699][T24656] __kmalloc_node+0xb6/0x240 [ 1192.080722][T24656] bpf_map_area_alloc+0x5e/0x110 [ 1192.080746][T24656] prealloc_elems_and_freelist+0x86/0x1c0 [ 1192.080769][T24656] stack_map_alloc+0x32b/0x4b0 [ 1192.080790][T24656] map_create+0x877/0x12f0 [ 1192.080807][T24656] __sys_bpf+0x651/0x890 [ 1192.080825][T24656] __x64_sys_bpf+0x7c/0x90 [ 1192.080841][T24656] do_syscall_64+0x55/0xb0 [ 1192.080863][T24656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.080886][T24656] [ 1192.080890][T24656] Last potentially related work creation: [ 1192.080896][T24656] kasan_save_stack+0x3e/0x60 [ 1192.080916][T24656] __kasan_record_aux_stack+0xaf/0xc0 [ 1192.080939][T24656] call_rcu+0x153/0x900 [ 1192.080960][T24656] __nf_register_net_hook+0x787/0x910 [ 1192.081052][T24656] nf_register_net_hook+0xb2/0x190 [ 1192.081077][T24656] nf_register_net_hooks+0x44/0x1b0 [ 1192.081101][T24656] nf_ct_netns_do_get+0x3c0/0x5c0 [ 1192.081117][T24656] nf_ct_netns_inet_get+0x1f/0x150 [ 1192.081133][T24656] nf_conncount_init+0x127/0x380 [ 1192.081216][T24656] ovs_ct_init+0x264/0x430 [ 1192.081257][T24656] ovs_init_net+0x1e6/0x250 [ 1192.081297][T24656] ops_init+0x391/0x640 [ 1192.081351][T24656] setup_net+0x3b6/0xa20 [ 1192.081369][T24656] copy_net_ns+0x361/0x530 [ 1192.081387][T24656] create_new_namespaces+0x3ce/0x700 [ 1192.081416][T24656] copy_namespaces+0x42a/0x4a0 [ 1192.081435][T24656] copy_process+0x16f6/0x3da0 [ 1192.081453][T24656] kernel_clone+0x24b/0x8a0 [ 1192.081472][T24656] __x64_sys_clone+0x1b7/0x230 [ 1192.081490][T24656] do_syscall_64+0x55/0xb0 [ 1192.081511][T24656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.081534][T24656] [ 1192.081537][T24656] Second to last potentially related work creation: [ 1192.081545][T24656] kasan_save_stack+0x3e/0x60 [ 1192.081563][T24656] __kasan_record_aux_stack+0xaf/0xc0 [ 1192.081586][T24656] call_rcu+0x153/0x900 [ 1192.081607][T24656] nf_unregister_net_hooks+0xcb/0x130 [ 1192.081632][T24656] nf_defrag_ipv4_disable+0x95/0xe0 [ 1192.081700][T24656] nf_ct_netns_put+0x2da/0x520 [ 1192.081716][T24656] nf_conncount_destroy+0x41/0x150 [ 1192.081738][T24656] ovs_ct_exit_finish+0xa5/0x210 [ 1192.081755][T24656] ovs_exit_net+0xed/0x7a0 [ 1192.081774][T24656] cleanup_net+0x6f7/0xb00 [ 1192.081792][T24656] process_scheduled_works+0xa60/0x1600 [ 1192.081815][T24656] worker_thread+0xa5e/0xfe0 [ 1192.081835][T24656] kthread+0x2fa/0x390 [ 1192.081852][T24656] ret_from_fork+0x48/0x80 [ 1192.081872][T24656] ret_from_fork_asm+0x11/0x20 [ 1192.081908][T24656] [ 1192.081911][T24656] The buggy address belongs to the object at ffff88805d6e3200 [ 1192.081911][T24656] which belongs to the cache kmalloc-cg-64 of size 64 [ 1192.081928][T24656] The buggy address is located 16 bytes inside of [ 1192.081928][T24656] allocated 40-byte region [ffff88805d6e3200, ffff88805d6e3228) [ 1192.081948][T24656] [ 1192.081952][T24656] The buggy address belongs to the physical page: [ 1192.081960][T24656] page:ffffea000175b8c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d6e3 [ 1192.081980][T24656] memcg:ffff888078cad201 [ 1192.081988][T24656] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1192.082005][T24656] page_type: 0xffffffff() [ 1192.082022][T24656] raw: 00fff00000000800 ffff888017c4da00 ffffea0000c32dc0 dead000000000007 [ 1192.082038][T24656] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888078cad201 [ 1192.082047][T24656] page dumped because: kasan: bad access detected [ 1192.082055][T24656] page_owner tracks the page as allocated [ 1192.082061][T24656] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 15937, tgid 15935 (syz.0.2425), ts 680495381416, free_ts 679525875658 [ 1192.082092][T24656] post_alloc_hook+0x1c1/0x200 [ 1192.082117][T24656] get_page_from_freelist+0x2181/0x22a0 [ 1192.082134][T24656] __alloc_pages+0x1f0/0x460 [ 1192.082149][T24656] alloc_slab_page+0x5d/0x180 [ 1192.082165][T24656] new_slab+0x87/0x2d0 [ 1192.082180][T24656] ___slab_alloc+0xc5c/0x12f0 [ 1192.082195][T24656] __kmem_cache_alloc_node+0x11f/0x250 [ 1192.082219][T24656] kmalloc_trace+0x2a/0xe0 [ 1192.082241][T24656] alloc_fdtable+0xca/0x2c0 [ 1192.082263][T24656] dup_fd+0x747/0xa20 [ 1192.082283][T24656] copy_files+0xaf/0x110 [ 1192.082299][T24656] copy_process+0x157d/0x3da0 [ 1192.082317][T24656] kernel_clone+0x24b/0x8a0 [ 1192.082343][T24656] __x64_sys_clone+0x1b7/0x230 [ 1192.082361][T24656] do_syscall_64+0x55/0xb0 [ 1192.082382][T24656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.082404][T24656] page last free stack trace: [ 1192.082409][T24656] free_unref_page_prepare+0x7d7/0x8f0 [ 1192.082425][T24656] free_unref_page_list+0xbe/0x860 [ 1192.082440][T24656] release_pages+0x208a/0x2300 [ 1192.082458][T24656] tlb_flush_mmu+0x379/0x510 [ 1192.082483][T24656] tlb_finish_mmu+0xf4/0x220 [ 1192.082506][T24656] exit_mmap+0x428/0xb90 [ 1192.082527][T24656] __mmput+0x118/0x3a0 [ 1192.082543][T24656] exit_mm+0x23f/0x340 [ 1192.082566][T24656] do_exit+0x909/0x2530 [ 1192.082588][T24656] do_group_exit+0x22d/0x2f0 [ 1192.082602][T24656] __x64_sys_exit_group+0x3f/0x40 [ 1192.082618][T24656] do_syscall_64+0x55/0xb0 [ 1192.082639][T24656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.082661][T24656] [ 1192.082665][T24656] Memory state around the buggy address: [ 1192.082675][T24656] ffff88805d6e3100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1192.082687][T24656] ffff88805d6e3180: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1192.082698][T24656] >ffff88805d6e3200: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1192.082706][T24656] ^ [ 1192.082716][T24656] ffff88805d6e3280: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1192.082728][T24656] ffff88805d6e3300: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1192.082736][T24656] ================================================================== [ 1192.082746][T24656] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1192.082755][T24656] CPU: 1 PID: 24656 Comm: syz.0.4565 Not tainted syzkaller #0 [ 1192.082773][T24656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1192.082783][T24656] Call Trace: [ 1192.082790][T24656] [ 1192.082798][T24656] dump_stack_lvl+0x18c/0x250 [ 1192.082823][T24656] ? show_regs_print_info+0x20/0x20 [ 1192.082847][T24656] ? load_image+0x420/0x420 [ 1192.082873][T24656] panic+0x2ca/0x720 [ 1192.082892][T24656] ? __lock_acquire+0x7d80/0x7d80 [ 1192.082915][T24656] ? bpf_jit_dump+0xd0/0xd0 [ 1192.082937][T24656] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1192.082960][T24656] ? _raw_spin_unlock+0x40/0x40 [ 1192.082982][T24656] ? __bpf_get_stackid+0x6c7/0x900 [ 1192.083004][T24656] check_panic_on_warn+0x84/0xa0 [ 1192.083026][T24656] ? __bpf_get_stackid+0x6c7/0x900 [ 1192.083046][T24656] end_report+0x6f/0x130 [ 1192.083065][T24656] kasan_report+0x128/0x150 [ 1192.083087][T24656] ? __bpf_get_stackid+0x6c7/0x900 [ 1192.083112][T24656] kasan_check_range+0x241/0x290 [ 1192.083132][T24656] ? __bpf_get_stackid+0x6c7/0x900 [ 1192.083154][T24656] __asan_memcpy+0x40/0x70 [ 1192.083176][T24656] __bpf_get_stackid+0x6c7/0x900 [ 1192.083201][T24656] bpf_get_stackid_pe+0x343/0x410 [ 1192.083226][T24656] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 1192.083246][T24656] bpf_overflow_handler+0x1fc/0x510 [ 1192.083271][T24656] ? bpf_overflow_handler+0xde/0x510 [ 1192.083294][T24656] ? tp_perf_event_destroy+0x20/0x20 [ 1192.083317][T24656] ? perf_trace_preemptirq_template+0x144/0x330 [ 1192.083349][T24656] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1192.083375][T24656] ? __perf_event_account_interrupt+0x187/0x280 [ 1192.083396][T24656] __perf_event_overflow+0x461/0x660 [ 1192.083419][T24656] perf_swevent_event+0x319/0x570 [ 1192.083440][T24656] ? perf_tp_event+0x1550/0x1550 [ 1192.083465][T24656] ___perf_sw_event+0x4ab/0x730 [ 1192.083486][T24656] ? ___perf_sw_event+0x19e/0x730 [ 1192.083505][T24656] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1192.083527][T24656] ? __lock_acquire+0x1336/0x7d80 [ 1192.083547][T24656] ? rep_movs_alternative+0x4a/0x90 [ 1192.083577][T24656] ? verify_lock_unused+0x140/0x140 [ 1192.083595][T24656] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1192.083616][T24656] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1192.083637][T24656] ? lock_chain_count+0x20/0x20 [ 1192.083657][T24656] __perf_sw_event+0x139/0x270 [ 1192.083679][T24656] do_user_addr_fault+0x1242/0x12d0 [ 1192.083702][T24656] ? rcu_is_watching+0x15/0xb0 [ 1192.083726][T24656] exc_page_fault+0x64/0x100 [ 1192.083744][T24656] asm_exc_page_fault+0x26/0x30 [ 1192.083765][T24656] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1192.083788][T24656] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 1192.083803][T24656] RSP: 0018:ffffc90003357bd0 EFLAGS: 00050206 [ 1192.083819][T24656] RAX: ffffffff84342b01 RBX: 000000000000056d RCX: 0000000000000246 [ 1192.083832][T24656] RDX: 0000000000000001 RSI: 000020000000c000 RDI: ffff888079f1c327 [ 1192.083844][T24656] RBP: ffffc90003357d20 R08: 0000000000000004 R09: 0000000000000005 [ 1192.083855][T24656] R10: dffffc0000000000 R11: ffffed100f3e38ad R12: 000020000000c246 [ 1192.083868][T24656] R13: 1ffff9200066afbd R14: ffff888079f1c000 R15: 000020000000bcd9 [ 1192.083884][T24656] ? rcuref_put_slowpath+0x101/0x150 [ 1192.083907][T24656] _copy_from_user+0x8b/0xe0 [ 1192.083927][T24656] generic_map_update_batch+0x58c/0x800 [ 1192.083949][T24656] ? rcu_read_unlock+0xa0/0xa0 [ 1192.083968][T24656] ? __fdget+0x180/0x210 [ 1192.083990][T24656] ? rcu_read_unlock+0xa0/0xa0 [ 1192.084006][T24656] bpf_map_do_batch+0x3f2/0x600 [ 1192.084025][T24656] ? bpf_lsm_key_free+0x10/0x10 [ 1192.084049][T24656] __sys_bpf+0x381/0x890 [ 1192.084069][T24656] ? bpf_link_show_fdinfo+0x560/0x560 [ 1192.084094][T24656] ? lock_chain_count+0x20/0x20 [ 1192.084116][T24656] __x64_sys_bpf+0x7c/0x90 [ 1192.084134][T24656] do_syscall_64+0x55/0xb0 [ 1192.084155][T24656] ? clear_bhb_loop+0x40/0x90 [ 1192.084176][T24656] ? clear_bhb_loop+0x40/0x90 [ 1192.084199][T24656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1192.084220][T24656] RIP: 0033:0x7f812779e159 [ 1192.084234][T24656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.084248][T24656] RSP: 002b:00007f81286c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1192.084265][T24656] RAX: ffffffffffffffda RBX: 00007f8127a25fa0 RCX: 00007f812779e159 [ 1192.084278][T24656] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 1192.084289][T24656] RBP: 00007f812783506b R08: 0000000000000000 R09: 0000000000000000 [ 1192.084300][T24656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.084311][T24656] R13: 00007f8127a26038 R14: 00007f8127a25fa0 R15: 00007ffc3acf8ac8 [ 1192.084337][T24656] [ 1192.088497][T24656] Kernel Offset: disabled