last executing test programs: 23.728596926s ago: executing program 2 (id=3144): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80047437, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80047437, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@volatile={0x8, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x2e, 0x61]}}, &(0x7f00000001c0)=""/32, 0x28, 0x20, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x2, 0x0, r2, 0x401, '\x00', 0x0, r3, 0x0, 0x4, 0x4}, 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r5 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r7) setsockopt$sock_attach_bpf(r5, 0x6, 0x1e, &(0x7f0000000500)=r8, 0x4) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xfffffeff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000000500000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff00"}) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 22.872414962s ago: executing program 2 (id=3148): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x7, 0xeffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xfffffffffffffe0f, &(0x7f00000001c0), 0x2}, 0x12) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0x6b, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000c348e8eaa38633321fc4a42dd614ae76377166849b3cb82770d3ed81495f9df7f1a115bb04000000fde32949d2f5d49041ec3f862800eb2f0f9a65956aa33e1e7add4e029a5fbfb536ced49b1bc7b17ee3b0181866e76db57ba451942a", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.983139809s ago: executing program 2 (id=3152): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008810) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB=','], 0x9a) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x4, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0), &(0x7f0000000280)=[0x0, 0x0], 0x0}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="12000000040000"], 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="3200000000000000000000001f36cd35abf803ab2c4aefbb92de3b9138378447bbfd50c18d9f7ad2bea924334c1d8568a6b5f045b0a54f04c1e126e2c0950416682a763e2c56f6c3c884a565182f7b1c39efbda870e5f39427db868f45c46fc4a988d7c251dbcc40597872c54551ad7e47ed72a8915f8580e94d5b6bcab522ee93e2270f445e058c660c7611445c8625eb444d64aedc25216e0c8fa6af594d76b72203430f", @ANYRES32=r7, @ANYBLOB, @ANYRES64=r5], 0x20) r8 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random='<\x00'}) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000001940), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) r11 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7be", 0x95}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada744195f31cd5e6fc4b2a32", 0x43}], 0x2}, 0x20000050) 21.465311874s ago: executing program 2 (id=3156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18040000000000000000000000008000408000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x82, &(0x7f0000000200)=""/130, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000002c0)=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0x58, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000015c0), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r7}, &(0x7f0000001780)=0x4, 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000016c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f00000004c0)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000500)=""/4096, 0x82300, 0x24, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000001600)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xa29a, r0, 0x0, &(0x7f0000001640)=[r7], &(0x7f0000001680), 0x10, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001840)={{r7, 0xffffffffffffffff}, &(0x7f0000001680), &(0x7f00000017c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001900)={r8, &(0x7f0000001880)="791b03f4b43707ed3fce8a8246aff1fbf2058bb29d4d1b05a4b132b5fb20ca16825c67e54ee7da4215b15e487ce90e3a22aa62cff3acd60002c8f438b36e0dcb44f2628270dbcac016a296b4556b523235d5c5970bc03d"}, 0x20) 21.074663486s ago: executing program 2 (id=3160): openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x8e82, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1000}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff4) (async) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB="00000000000000000100000000000000000000002f4d62aa673211b9837b34081b66a5b793e2dafeb311488f4f174efaa58061167c3539732cab2cfc872d241da0308e83087da5fedc37c57590909cfd819afa7d3187a00df1855626bda62a660aca15", @ANYBLOB="f10445f4f68c0245cda0a6226d7afb3b6cfeb817c0e1fb512861c849f1908c94d1f2e152fa09eb1b73ca9b38cf747104fca93eb1c69ac73667b4125fbcde70d29af00ab3c404a661879ce226d0ee12f660a0f648998a5734d4b427d5e6e104169b89bc9023f5dd3f3a4d6c6ed7ba0bc22bf3e28ca01ad738f98e18622be592d6a9da80f8449afa13e4", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_clone(0x2000000, &(0x7f00000009c0)="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", 0x200, &(0x7f00000012c0), &(0x7f0000000100), &(0x7f0000000680)="3152610b19f89e414ace9aaa3b52dc3dbb00f2e794658057ff013b6e306bdfd4b8d9920e72d92da983f8603f5b4698ef36aee889e76613aa336ab393dcd8b0e2d1d52279df35f4aa741fda817925e2911fd4ee3a5b8a5f59d47c9cd8d604e67a46f95db57cf0227634dcfc98550c5f084a4731b782da995b3567e37e3986e7538b714defab90b5a01912d24354ce41af8a0d468503eeef232ef17e07d8c40d102803a5fe547ad6090368d1b8c3c17279031610a184d50657b18c232f40aab3909d8e6e82a09a98c4c2261b20dc561b90094a031f568b70c771652e6a") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xf9, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000026c0)="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", 0x1072}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a307100e69cfac4377876021d7131b838059f96bd", 0x26}], 0x2, &(0x7f0000001440)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000026c0)="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", 0x1072}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a307100e69cfac4377876021d7131b838059f96bd", 0x26}], 0x2, &(0x7f0000001440)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0x2000000002, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x2, @perf_bp={0x0}, 0x7502, 0x3, 0x0, 0x4, 0xffffffffffffffff, 0x35da, 0x2, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x10000000000f, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81008, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x2, @perf_bp={0x0}, 0x7502, 0x3, 0x0, 0x4, 0xffffffffffffffff, 0x35da, 0x2, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x10000000000f, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x3, 0x10) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000029000b12d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, r1, 0xb, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, r1, 0xb, 0xffffffffffffffff, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) (async) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000640)=r5, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000000), 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000440)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) 20.570774432s ago: executing program 2 (id=3163): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c022, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000640)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000711825000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000300)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x4869, 0x6, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0xe872}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0), 0x12) write$cgroup_int(r7, &(0x7f0000000100)=0x1, 0x12) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback=r7, r7, 0x0, 0x28, 0x0, @void, @void, @void, @value=r8}, 0x20) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) 8.081214777s ago: executing program 3 (id=3219): r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) close(r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='.9\xb7\xa8(\x05\xb6\xbc\xdc\x11\x85\xb2\xda\xda%\x00\xe9\a\xd9\x12s\x03\x00\xd0O\x87\x8fI\xa5\xbbHd\xfd\x19l\xca\x89\x8e)P\x18\x14\'\x81\n\x02\\\xca\f\xc30p{\x94\xd8wn>\btn\xc3\xfd\xca\x0f\xdb\xab\xae\x04\x0e*\xb4\x06@v\xfd\x86\x9d\xb7\x801\x80\x9a\xc0N,\x8d\x13\x11eJ\x10CQ\xb9ab\xf311\xf9\x03\xd5\xec\x9fa7S\x8b\xdan\xd9W#\x06&P)\x1ak~LB\xa4\f@\xff\xb2]\xddk\xa9\xbd}\xefp}\x90\xd0\xdb\xcc\xf9\xe8\":O\f\x98D\xf07\\F\b\xe2\x82\xfa\xe3L\xb5\x8d\xe3\x87\xa6v\x9a\xb6\xf4\x80\x85\";\xe5\xdf\xa2\xbd\xf9}\\\xbe?\x93|\xcbg\x1c~\xb6Y\xaa\xf3\xd6%\x89\xe4\x1b\xb6.f\x12\xe5\xabm \xb6\\\xb9T\fZma\xb9\xd7xzS\xd3\x8b\x02Qj\xf5\xb7X\xc6\b\x19.\xae\xdd\xa9\xd0\xf2\xdc\x1f\xf1z\v\xf9\xc3\xf0V5D&a\xf6^\x94\x19\xe0\b\xf0\xdcD{(\x1b\xf9|\xe9\xa1]\xdc\xe8\xb8\xdb\xd5<2\x96\'s\xe7\x84\x82\xea\xbb\xff\xb7\xb8%-?\x83\x9cwOe|\xb4\xef\xb6\xf4\xdf\xbf\x1e\xc6OSs\xc4_6H\xde\x9eN\x12\x9cH\x86\x824\xaf\x177\t:\xe3_w-\xbf\x1b\x14\xc7\x1d\xb4\x99\x1f\xadf\x9e\xc7X\x040\x9e^ \xc9m\x9ek\x86\t\x9f \xc8\xcf\xf5\x80(\xd9l\x91\xf7x\x7f\xaa\xd9\xd4nO\xa0\xa0M6\v.\xd8[\xc9\xa4` \x8e\x1a\xb9\xd5\xa1B\xe5\xcd\xc1\xefPHG-\xf5\x0e\xec\x13l\xd1`A/\xef\xa6\xe7\f\x8c') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x3, 0x9fa, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r5}, 0x38) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, &(0x7f0000000000)=""/36, &(0x7f0000000280), &(0x7f0000001340), 0x3}, 0x38) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @loopback}}}], 0x20}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x0, 0x0, 0xfffffff7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 7.28946483s ago: executing program 3 (id=3220): r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xffc1, 0x0, &(0x7f0000000100)="443b6164ec0faec6180fe94d61d4e2ab1e031b2ff6fdade11f0b43761e3a79d61607b3e36c7477d3297b96e8d6145f66f4dd08b8702f27d96ed60372e02eb62d0dffef", 0x0, 0x5008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x39) sendmsg$inet(r4, &(0x7f0000001700)={&(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000100)="ea", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x9, &(0x7f0000000000), 0x98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f00000002c0)={'vlan0\x00', @random="0100061f8145"}) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x1f4, 0x20, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc88643acd3aaf000c0057bd21762ae3fe8892b69c", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 3.746599357s ago: executing program 4 (id=3221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'gretap0\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext, 0x5689, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0fffffffff8bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x94, &(0x7f0000000580)=""/148}, 0x90) sendmsg$kcm(r1, 0x0, 0x4000040) 3.678990509s ago: executing program 0 (id=3222): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @generic={0x65}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @cb_func={0x18, 0x3}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 3.678463649s ago: executing program 3 (id=3223): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x20000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$kcm(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="2b72646d64bf87f452806b85e1ba0ad2636120"], 0x6) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1ff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x336) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 3.398829207s ago: executing program 4 (id=3225): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000085001af8ea00060000bfab00000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) (async) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x38, 0x0, 0x1300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff0000000095007400000000009f7c9177ee43b0f7973ff49cb471b1fa3344ec1d7b00afe5fc906b357720c8bff70a48b41ae137826fc445bba69cddda9242e904"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff0000000095007400000000009f7c9177ee43b0f7973ff49cb471b1fa3344ec1d7b00afe5fc906b357720c8bff70a48b41ae137826fc445bba69cddda9242e904"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 3.398509877s ago: executing program 0 (id=3226): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000003f000b12d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="94248f0fbb2b468893824a52167e277fc3b6de522d0fce4fb815e9c9436e5528ba087c06c170aafcf8ae9bcae0130b6e680dedea99234a16dea0189429ba5a3248dabbebce9ea541336c0fa5baa7bbba8b5032dc20a12dec2c4019d795aa6afbafd247032cf826be021228b12540b27ccdc49ecfe00c368f3b6f4c631272050aec11e47cd9af665076ceafe9138d69d3a391d250cf4cf47ef1656c90595767e799f097", 0xa3}, {&(0x7f0000000180)="a88ac566ef660d534d9ded3412fb835da05d88bef10b5526124fbd8caa777abfef055dc4210b7895466fedefc25172c49f8de46a7b1f3b83b7df2fbcf91ecffa1db0f526055c5f3efc8316cfe6e5ca8d93ab9a524737b1212ff236efd4fb28d8bf9e91205a1d2ad426d941", 0x6b}, {&(0x7f0000000200)="c4bd552865dbac63115404b4693668c47411585c8271dfb4730ef80a4f5fdfd5c43ecdc64e3b507d934306ae8d3e8e5435513d9ba3d8c6df6d46cb357682055a0fffa242530a1020f396fa9ef3728719d067d675a13a034189deb52f4cb0a853b7ed49f5152c3ed57cdcde57083df49985c62132ac9dc78ef18cd55c7f3fe8d1752cb2d2822a8a2b8bfd29b39df9d01ffe24b07471373b17b22fea4ee3fb0d052284aa0ba0106fac70bb1c3cf23545ee5773b66da530763a6f5fdb267d5281852121c175633e864cfc6e3853753ac1c3f853ffa788cd51349e3506a7d676e018b9c10a2f778c", 0xe6}], 0x3, &(0x7f0000000340)=[@mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x100}}], 0x48}, 0x40004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea0900bce100000000009ba56a", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.246547432s ago: executing program 4 (id=3227): socket$kcm(0x2b, 0x1, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1e}, 0x58c8, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x29, 0xb, 0x0) (async) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@llc={0x1a, 0x303, 0xc5, 0x8, 0x3, 0x40, @local}, 0x80, &(0x7f0000000640)}, 0x0) (async) r1 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x6b}, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r3], 0xfe33) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r4, 0x0, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x2a, 0x5, 0x8, &(0x7f00000000c0)) (async) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1212000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) 3.146553355s ago: executing program 1 (id=3229): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0xf7, 0x0, 0xa, 0x0, 0x80, 0x10d06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0)}, 0x7402, 0x0, 0x0, 0x9, 0x2, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0xfffffffffffffcb3) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000050000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}, 0x41) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r5 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x1e, &(0x7f0000000000), 0x4) close(r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x31) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x3}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) 3.010500919s ago: executing program 0 (id=3230): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0xa0000000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000bc0)={r0, 0x20, &(0x7f0000000b80)={&(0x7f0000000040)=""/2, 0x2, 0x0, &(0x7f0000000a80)=""/254, 0xfe}}, 0x10) (async, rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) (async, rerun: 32) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r5}, 0x8) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$inet(r7, &(0x7f00000002c0)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x24008000) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x3, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000cc0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) (async, rerun: 64) r9 = socket$kcm(0x2, 0x2, 0x0) (rerun: 64) setsockopt$sock_attach_bpf(r9, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) (async) close(r9) 2.829453294s ago: executing program 4 (id=3231): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000aecd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad94ed406f21caf5adcf920569c00cc1199684fa75814709fea019af247c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c1faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6fab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b79db2e3d5986c82b5aa94e539b204d58f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c7160ec83070000020000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72b0000000000001cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2cc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78ac02ca3cdf6a662db1c9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad943e392955f4f979ea13201bafedcd2063d11dd665647223c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd89346cfbb5567e54d3504723177d356c4604b7a492ecec37e83efceefd7ca2533659edc8be05cc85451c6a14507434eb54b6f43caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffca9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a294351c5356c1d06c92cf8ce3c7c56cd31121624d74517fd3666277f670e812b28e2f30d035cee5d0e77a3c7220000000000000005a474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f034b8d3ebce68663ef5af469abe75b314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041e12282ce24463aaf28345bd168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f09000000000000004fc4bda3453602004535a976eacd3adaa4d2ee6fe0d072ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d401adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb40f7f02f750d6c977a191852c9ae031db044b2353199546609f9f69a6cfefdf879d447df53f3b9b70d10355b00300000000000000553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f58fab987baab97a9bfbd8f185b5631820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe527340935aa3c0b4f3f45b418a18217747ae442e31560e5b741445ea2a1acee2a81425ff000000d2a0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51423b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f88735fce5115dc83ed73d8ee4a91322608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf5000000000000fa08ad0631c4b839688b22c4da2a6bc4cf45854d221a2d5f96bc64647f15daa2ba79cd0f4254ed55217912ef84bd2927df82fc061aef2920c49b2a90886da75561173fa186cb7ee86dd4285c4721eb428c953296bb2f5d825da54dbef07c1b349b4901e093d13e6b9a0000009b5b22e887bc061d40bcaf0aa18623fd9b7179ccc692ba74b531b65c4decf9d080a8ac7e82d4cde1267aa64b2a94fd87a009e6742c2ddc3a9d7eccbb1831b1fa218277c2814a91cab7cb59c697166d6f1bb1a360470000000000000000000000000000000000000000000000000000f9f9b4ce7e871f507084c8c88e0652decbe579b03ed84ea94597dd1059620a050f69ea03b99b4e19d35f4a3b54e96ae2172effecec80f6baa4bf69a6ebf5392882df78b0983e662dc0cb64b77f3f006b6b25443197ae93f0be6de5a703d003f00720943c0e4b33af00000000000000000021a688b2d7007fcc4b59f719afb0b3b7e0aee306ca70fe42bf4984a68f40e1fc043a03a17e4744359b87dc27c82d51cbeb64e52a28daeb6a78d6fe06181ecc840000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002a00)={0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000002c80)={&(0x7f0000002a40)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x3, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004040}, 0x41) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x5}, {0x6, 0x1}]}) 2.610437721s ago: executing program 0 (id=3232): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="00693cda000028eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.729614527s ago: executing program 1 (id=3233): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xffffff7c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b2557eb3c5ca683a4b6fc89398f2b9000f224891060017cfaa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f7098696afb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a032de54a2ad9cdac2e981ab59016f81860324b8003029e938858ffa30ce8a55129fa207d2513b711d83d366a7e0df0667a2c8dd2b0665de28cd407db6f8ef6082cb509b628203fab234cef6a77d6016a6cbf19f9687717d399233ef170b5bfdb55cab50aab08c8ddebd55654ea4d0caf2a2409db567260721a9b731cb58810978b60f930b7c92475c3483b06855d3b6ebde0092e67c0020000000000000067badf02c28f8cd94d347888a769591ce0dbb84a7aa02bff13398335aefbd1e874a6568d3f3d96dd30211bd963a45bca24a231d4f0b468a1667762972cdfde32ae7a69c23c50911a3c8a24622889f8aebce8e0bc88f35f5e40e21e4f2bf4b90655667acc84d84d67d6b240ddceafc5cd4fe94b79a00058566f49787d426ce3aae17094ab0078770155481c86c8e9e6ddb9a680af2d65ed710e3e9e370b711f31f865f2c1c5684e834ce38ff08bcc7429a596a7b1b3f45ffd6e2431f101189b00540986c22232521c8a87aecc3131595bac7c28076b55f071459adedd5953e4bde7c5e679739b07baa099338777899d54f13de88e5bdcd671c1742b0fabd0f40d1302e554090649eb2ec27f7b5afd721dab34"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$sock_attach_bpf(r0, 0x10d, 0x11, &(0x7f0000000000)=r1, 0x4) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454ce, 0x1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0), 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x15) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x7, 0x16, &(0x7f0000000a80)=ANY=[@ANYBLOB="611250000000000061134c0000000000bf2000000000000015000200000000103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff07006702000003000000160600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf5400f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f1247c1aad829a97233bae1d03d6e5e5c836cd68962827f59c7555538ea2c789c491be00b092b376897497577560f9196f1fcde4ed0d0cf3943a30766f25e29bff8b0863cc863ae4b841c051a69a484624fca65285f0d0eb353cf4e9d63ec6443fa1f9997836652e96dc8201c562cf3974149d0cbbc1fd7b7b915b4615a44cc5ad1f2ee4707c12b9dabd6615d285ea7e38ea6583fd8a4ae8f05d03202f0d18d72950ac909b298019d", @ANYBLOB="b18cfbb2983e72e1f7ab0eaef9cea4f2cb5474a46ec23c90337092e90658067d1cdc68ca4757d3f111b0d51ccb6887326d", @ANYRES16=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x16016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x8918, &(0x7f0000000000)={r8}) 1.724441078s ago: executing program 0 (id=3234): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r3, r2}, 0xc) r4 = socket$kcm(0x22, 0x3, 0x0) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff0000000071104e000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000980)={&(0x7f0000000000)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000600)=""/54, 0x36}, {&(0x7f0000000640)=""/222, 0xde}, {&(0x7f0000000740)=""/24, 0x18}, {&(0x7f0000000780)=""/36, 0x24}, {&(0x7f00000007c0)=""/24, 0x18}], 0x6, &(0x7f0000000900)=""/108, 0x6c}, 0x40000000) (async) recvmsg$kcm(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10002) recvmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/101, 0x65}], 0x3}, 0x0) (async) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x100) 1.724133527s ago: executing program 3 (id=3235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'gretap0\x00', 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNGETIFF(r0, 0x800454d2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext, 0x5689, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff1fffffffbfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x1, 0x94, &(0x7f0000000580)=""/148}, 0x90) sendmsg$kcm(r1, 0x0, 0x4000040) 1.575423142s ago: executing program 4 (id=3236): socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d00028422fb564500006e23e3f58e76110165f450e71bfc74e3002500028d459e37000f0000000000bf9367a17e51f60a64c9f4d49380", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x5d0e, 0xb1218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x0, 0x80, 0x26, 0x5, 0xe3, 0x1, 0x0, 0x200, 0xa0052, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x547, 0x0, @perf_config_ext={0x0, 0x8}, 0x400, 0x101, 0x3ff, 0x9, 0xc, 0x5, 0x8, 0x0, 0xc602, 0x0, 0x4}, r1, 0x8, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40000100) recvmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b05d25a806f8c6394f90824fc602f0000000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES8], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000840)="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", 0x1a9}], 0x1}, 0x8045) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) 1.126868035s ago: executing program 4 (id=3237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, 0x0) close(0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x24702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f00000002c0)={0x6, &(0x7f0000000200)=[{0x7, 0x7f, 0x3, 0xf2e4}, {0x6f, 0x10, 0x5, 0x10000}, {0x4, 0x3, 0xff, 0x6}, {0x0, 0xff, 0x1b, 0x5}, {0x8, 0x80, 0x2, 0x7}, {0x0, 0x5, 0x1, 0x9}]}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000002c0), 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x44, &(0x7f0000000640), 0x4) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'veth0_virt_wifi\x00', @broadcast}) 983.92643ms ago: executing program 0 (id=3238): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8402, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e6, 0x5, 0x4, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="030000"], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4a}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x1, 0x49, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1, 0x7, 0x0, 0x3}, 0x0, 0x1, r3, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0xc00}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x81000600, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 899.361812ms ago: executing program 1 (id=3239): r0 = perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x4, 0xff, 0x3, 0x5, 0x0, 0x79a, 0x63c00, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0xc}, 0x10ac0, 0x8, 0x7, 0x2, 0x718, 0x9, 0x8, 0x0, 0x3ff, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000580)=0x6) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x29, 0x8, 0x6, 0xf0, 0x0, 0x4, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe, 0x2, @perf_config_ext={0x2, 0xfffffffffffffffd}, 0x10, 0x1, 0x6, 0x7, 0x6, 0x2, 0xfffb, 0x0, 0x7, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xc) (async) r1 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x29, 0x8, 0x6, 0xf0, 0x0, 0x4, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xe, 0x2, @perf_config_ext={0x2, 0xfffffffffffffffd}, 0x10, 0x1, 0x6, 0x7, 0x6, 0x2, 0xfffb, 0x0, 0x7, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xc) r2 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x104888, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000000080}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000040)) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r5, 0x4, r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 717.982438ms ago: executing program 3 (id=3240): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800b35a5c37a94d6207ce3fdbf92f2b00000002000000000000000100008500000000001c000000000000000000000000b423061ebcb8fee7b6aa06465da6046d7ec67543685a07cbd72ceb067c9918c5a3854efb2b6e19beab4af6eb390dfed2226b4995352f67cc77526f60198035786d3fd36845bdcb6f0c4c5c9dce980f570de564808091aab7506e941f00f75b2474161306396dd5ed52ed4a22afb42b63bbe3d1df193dfeafe4bb553512b3a963eb08907d94e9fe2ac48b44bef35ec2edbfd2ab58f816675af665d3501f2ce2b3bd507ccb3e0a3bab08ab876b1efb9f"], &(0x7f0000000740)=""/201, 0x32, 0xc9, 0x1}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1}}, @func_proto, @datasec={0x2, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x0, 0x10001}], '9#'}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "921c"}]}, {0x0, [0x0, 0x61]}}, &(0x7f00000006c0)=""/196, 0x68, 0xc4, 0x1}, 0x28) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x123e671f, '\x00', 0x0, r1, 0x4, 0x5, 0x1}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b00)={r0, 0xe0, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0], 0x0, 0x82, &(0x7f00000011c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001200), &(0x7f0000001980), 0x8, 0xcf, 0x8, 0x8, &(0x7f00000019c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x3, 0x7, 0x760a, 0x7, 0x4000, r3, 0x3, '\x00', r4, r2, 0x3, 0x5, 0x1}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x21, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800b976a8090b7ace060721eced4e5bbb", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xceed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x400, 0x3, 0xfffffffe}, 0x0, 0x0, r7, 0xb) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=ANY=[], 0x50) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) (async) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) r8 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x26, 0x80003, 0xbe, &(0x7f0000001000)) (async) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc090000000000000000053582c12d153e370248018000f01700d1bd", 0x2e}, {&(0x7f0000000300)="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", 0xfca0}, {&(0x7f0000000200)="58129ccdd82921bbbe491f0225e447b9650182b350883b90822e51f30df8a84769b4ea9b454e9ca6", 0x28}, {&(0x7f00000000c0)="7e0f2f433e4174d136ac76824c88872b3835e6bb834fb2231c9c80ffd035dcdc6b0de6b95d8408814afc8115783759d9d0152307000000c851d4120f9ca74acae882f83b9fee97437decc4efa3320a73fca217d1c364d23a50fc09a6ccc4d3808c5ab46376529081e4059988f48ca7d909530bfcc31704e5ceca1bdcc865939111e3c53e6d9392896eb804471ca40cb4b25fecd2459903ac4cde442af4f48ea290990fcbdaf107f9cf6eec23b530c7fb635d9fcf0c298ddc0c2430778b1b7c5ad66bbbfa202a3e3a1ea5aa1e86b4ada4ac5f580f53983408a63315f20a0c5e5defa335cb199120efbca2622fca092dc40f", 0x4a}], 0x4}, 0x40040) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f0, &(0x7f0000000080)) (async) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 424.599817ms ago: executing program 1 (id=3241): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0xb}, {0x10000002, 0xfffffffe, 0x4, 0x9}], 0x10, 0xd5}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ecae", 0x2}], 0x1}, 0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000840)={&(0x7f0000000300)=@isdn={0x22, 0x8, 0x4, 0x3, 0x80}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="3654d8ac58596085e81797b1f1e2e19564d41f1fd3e71caba239bb60b82f33d66796d0eacef7706957a899713e8096e45a1ab3fd71c1e42448d38f8b03f9b072fda4563a787146b321ce98173c2c437ff3f90307dea5bcd92e9ad48e8443586d6ebbe27d3622649b30488296b3a8f013aff45b6d6209f781137e2bc8af9ab8d67328c84ef20f9899ba1a55aa4e56b9f5399958c71cffbc94628a39ac53944a43f6302dc33078f8e5", 0xa8}, {&(0x7f0000000500)}, {&(0x7f0000000600)="d1d6b0e5fd720bf070d1e633faf1c8de8e9cb94f0f6f4e99222252874d6e77d70c36df4a00adbb74e3c1218a6f6423b29536dc3979da0a2b7698ca33f021d31dd0e9cddf1645dcb5fa6b9ff55da5c5efd721afbc3ddbe2b0041e69099491a193ee3fc61b70cebc8e9e2148b23cf9907b283159df03fbc059e468e2a4fcc1f47034c80f95d8269442c39bec7ffcb5612fa585636a8a4962d4ac338d081563b4a0fd527e198831d0ab1fbfc7490cdd22534f1041258599b58469e0bc36acce333854f7a0ccbb04158d90bb", 0xca}, {&(0x7f0000000700)="a32190f9877dc9b008d004f682f986d3b4c20ab3f1713072ecdd15127d023fbbfd02d3d5e0e93db947baeddacf9c29c214e130f826eeb5e47c35dc67ad5f354eefae50dea44f8df5b60cfbe70c2c443bbaa59eb3f836a0cc9e0c967d92b6fb43cfcb6d53e55abef5256d07990706d3c943db0df67a948a42336285a0c896f2e2de478c7faaf606800e5bea08c94257e6df03e048a0c7471884e3", 0x9a}], 0x5}, 0x20000000) 200.073643ms ago: executing program 3 (id=3242): socket$kcm(0x10, 0x7, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x20, &(0x7f0000000bc0)={&(0x7f0000000a80)=""/11, 0xb, 0x0, &(0x7f0000000ac0)=""/219, 0xdb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x3, &(0x7f0000000c40)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x6, 0x53, 0x0, 0x40f00, 0x38, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f00000001c0)='cpuacct.usage\x00', 0x2, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000d80)}, 0x0, 0x0, 0x25, 0x8, 0x2, 0xfffffffc, 0x0, 0x0, 0x8}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) r10 = perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0xd627}, 0x0, 0x2, 0xc2ba, 0x4, 0x8000000000000004, 0x106e, 0xa641, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x3, &(0x7f0000001240)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) close(0xffffffffffffffff) socketpair(0x25, 0x6, 0x5, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) 134.867046ms ago: executing program 1 (id=3243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x4, 0x99, &(0x7f0000000480)=""/153}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @fwd, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map, 0x4, 0x1, 0xffffffff, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}, 0x40) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) 0s ago: executing program 1 (id=3244): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x8a, 0x39, 0x0, 0x0, 0x100000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): butes in process `syz.0.1305'. [ 343.120167][ T9218] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1310'. [ 343.484982][ T9228] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1314'. [ 344.229959][ T9250] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 344.237925][ T9246] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 344.265927][ T9246] netlink: 'syz.2.1318': attribute type 29 has an invalid length. [ 344.585252][ T9253] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1332'. [ 344.719124][ T9253] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1332'. [ 344.840327][ T9260] netlink: 'syz.1.1322': attribute type 2 has an invalid length. [ 344.959065][ T9260] netlink: 'syz.1.1322': attribute type 8 has an invalid length. [ 345.038831][ T9260] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1322'. [ 346.170352][ T9288] device pim6reg1 entered promiscuous mode [ 348.382398][ T9328] netlink: 'syz.2.1340': attribute type 2 has an invalid length. [ 348.495858][ T9338] sock: sock_set_timeout: `syz.4.1338' (pid 9338) tries to set negative timeout [ 348.510289][ T9328] netlink: 'syz.2.1340': attribute type 8 has an invalid length. [ 348.535740][ T9328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1340'. [ 348.566372][ T9331] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1341'. [ 348.631350][ T9342] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1343'. [ 348.957955][ T9346] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 349.825065][ T9374] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1355'. [ 350.554978][ T9393] netlink: 'syz.4.1361': attribute type 10 has an invalid length. [ 350.594009][ T9393] team0: Device hsr_slave_0 failed to register rx_handler [ 350.779643][ T9392] delete_channel: no stack [ 350.863079][ T9398] netlink: 'syz.0.1362': attribute type 11 has an invalid length. [ 350.876942][ T9398] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1362'. [ 351.094275][ T9403] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1363'. [ 351.540856][ T9422] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1369'. [ 352.246041][ T9445] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1376'. [ 353.578111][ T9472] netlink: 'syz.1.1384': attribute type 39 has an invalid length. [ 354.336286][ T9473] netlink: 'syz.1.1384': attribute type 21 has an invalid length. [ 354.980634][ T9494] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 355.319521][ T9507] device pim6reg1 entered promiscuous mode [ 355.410656][ T9508] netlink: 'syz.3.1393': attribute type 3 has an invalid length. [ 355.531048][ T9508] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1393'. [ 356.331367][ T9544] netlink: 'syz.3.1403': attribute type 10 has an invalid length. [ 356.385002][ T9544] team0: Device hsr_slave_0 failed to register rx_handler [ 356.854921][ T9553] netlink: 'syz.3.1406': attribute type 10 has an invalid length. [ 356.880275][ T9553] device vxcan1 entered promiscuous mode [ 356.886111][ T9553] team0: Device vxcan1 is of different type [ 356.972784][ T9554] device wlan1 entered promiscuous mode [ 357.050009][ T9554] netlink: 'syz.2.1407': attribute type 3 has an invalid length. [ 357.132189][ T9554] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1407'. [ 357.219595][ T9563] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1410'. [ 357.642461][ T4368] tipc: Subscription rejected, illegal request [ 357.837450][ T9] wlan1: Trigger new scan to find an IBSS to join [ 358.171205][ T9593] netlink: 'syz.2.1419': attribute type 3 has an invalid length. [ 358.224893][ T9593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1419'. [ 358.857171][ T9615] netlink: 'syz.0.1425': attribute type 7 has an invalid length. [ 358.865000][ T9615] netlink: 191184 bytes leftover after parsing attributes in process `syz.0.1425'. [ 359.573105][ T9640] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1435'. [ 359.603075][ T9640] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1435'. [ 360.409344][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 360.477547][ T9661] netlink: 'syz.1.1442': attribute type 21 has an invalid length. [ 361.730226][ T9673] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1447'. [ 361.845790][ T9673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.869296][ T9673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.893700][ T9673] bond0 (unregistering): Released all slaves [ 362.740530][ T9719] netlink: 'syz.0.1460': attribute type 1 has an invalid length. [ 362.799101][ T6302] wlan1: Trigger new scan to find an IBSS to join [ 363.096875][ T9723] : port 1(ip6gretap0) entered blocking state [ 363.147587][ T9723] : port 1(ip6gretap0) entered disabled state [ 363.293781][ T9723] device ip6gretap0 entered promiscuous mode [ 363.391860][ T9720] device ip6gretap0 left promiscuous mode [ 363.436650][ T9720] : port 1(ip6gretap0) entered disabled state [ 365.622077][ T6302] wlan1: Creating new IBSS network, BSSID b2:e7:7a:a3:bc:25 [ 366.209686][ T9741] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1466'. [ 366.711395][ T9755] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1469'. [ 368.088059][ T9773] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1474'. [ 368.245507][ T9777] netlink: 'syz.2.1476': attribute type 13 has an invalid length. [ 368.270824][ T9777] netlink: 'syz.2.1476': attribute type 14 has an invalid length. [ 368.317038][ T9777] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1476'. [ 368.589275][ T9790] netlink: 'syz.4.1481': attribute type 2 has an invalid length. [ 368.912786][ T9797] netlink: 'syz.1.1483': attribute type 21 has an invalid length. [ 368.973429][ T9797] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1483'. [ 369.676064][ T9825] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1492'. [ 370.207263][ T9847] delete_channel: no stack [ 371.017870][ T9869] netlink: 'syz.2.1504': attribute type 1 has an invalid length. [ 371.063399][ T9871] netlink: 'syz.0.1501': attribute type 10 has an invalid length. [ 371.077831][ T9869] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.1504'. [ 371.156226][ T9871] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1501'. [ 371.208432][ T9871] device dummy0 entered promiscuous mode [ 371.220333][ T9871] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 371.252553][ T9877] netlink: 'syz.1.1505': attribute type 21 has an invalid length. [ 371.327134][ T9877] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.1505'. [ 376.427223][ T9929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.508129][ T9929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.568153][ T9929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.608037][ T9929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.673855][ T9929] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 376.707148][ T9929] batman_adv: batadv0: Removing interface: virt_wifi0 [ 376.754548][ T9929] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 376.776944][ T9929] batman_adv: batadv0: Removing interface: veth1_vlan [ 377.608256][ T9931] : port 1(ip6gretap0) entered blocking state [ 377.646032][ T9931] : port 1(ip6gretap0) entered disabled state [ 377.725448][ T9931] device ip6gretap0 entered promiscuous mode [ 377.785844][ T9932] device ip6gretap0 left promiscuous mode [ 377.792130][ T9932] : port 1(ip6gretap0) entered disabled state [ 378.543810][ T9973] ref_ctr_offset mismatch. inode: 0x5ce offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1fe [ 378.563583][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.570116][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.533678][ T9993] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1536'. [ 379.600687][ T9999] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1538'. [ 380.207339][T10008] : port 1(ip6gretap0) entered blocking state [ 380.247187][T10008] : port 1(ip6gretap0) entered disabled state [ 380.274368][T10008] device ip6gretap0 entered promiscuous mode [ 380.406585][T10009] device ip6gretap0 left promiscuous mode [ 380.441717][T10009] : port 1(ip6gretap0) entered disabled state [ 380.506459][T10020] netlink: 'syz.1.1540': attribute type 11 has an invalid length. [ 380.639617][T10020] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1540'. [ 380.683716][T10020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.852963][T10029] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1544'. [ 381.640510][T10055] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1552'. [ 381.746676][T10055] netlink: zone id is out of range [ 381.796953][T10055] netlink: zone id is out of range [ 381.849375][T10055] netlink: del zone limit has 4 unknown bytes [ 382.571573][T10074] netlink: 'syz.0.1558': attribute type 3 has an invalid length. [ 382.589443][T10074] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1558'. [ 382.665929][T10074] netlink: 'syz.0.1558': attribute type 21 has an invalid length. [ 382.685923][T10074] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1558'. [ 382.737907][T10074] netlink: 'syz.0.1558': attribute type 4 has an invalid length. [ 382.767365][T10074] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1558'. [ 383.446577][T10103] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1565'. [ 383.587020][T10107] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1565'. [ 383.612750][T10103] netlink: 'syz.3.1565': attribute type 3 has an invalid length. [ 384.341235][T10123] delete_channel: no stack [ 384.351506][T10123] delete_channel: no stack [ 384.376151][T10123] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 384.610868][T10122] delete_channel: no stack [ 385.075063][T10132] __nla_validate_parse: 3 callbacks suppressed [ 385.075082][T10132] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1573'. [ 385.178304][T10131] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 385.253338][T10131] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1573'. [ 386.126946][T10159] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 386.172554][T10159] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1579'. [ 386.599807][T10170] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.626935][T10170] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1583'. [ 387.449099][T10180] netlink: 'syz.1.1584': attribute type 3 has an invalid length. [ 387.463886][T10180] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.1584'. [ 388.881539][T10210] netlink: 'syz.0.1591': attribute type 10 has an invalid length. [ 389.120161][T10213] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 389.594332][T10228] netlink: 'syz.0.1596': attribute type 1 has an invalid length. [ 389.823823][T10228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1596'. [ 390.102488][T10237] netlink: 'syz.2.1599': attribute type 10 has an invalid length. [ 390.886866][T10237] team0 (unregistering): Port device team_slave_0 removed [ 391.113011][T10237] team0 (unregistering): Port device team_slave_1 removed [ 391.471931][T10261] netlink: 'syz.3.1603': attribute type 11 has an invalid length. [ 391.525294][T10261] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1603'. [ 392.649005][T10260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.991456][T10289] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.024316][T10289] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1611'. [ 393.073440][T10293] netlink: 'syz.2.1612': attribute type 46 has an invalid length. [ 393.159083][T10293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1612'. [ 394.074076][T10314] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1617'. [ 394.337051][T10319] netlink: 'syz.1.1620': attribute type 2 has an invalid length. [ 394.357817][T10319] netlink: 'syz.1.1620': attribute type 8 has an invalid length. [ 394.386485][T10319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1620'. [ 394.979378][T10337] IPv6: NLM_F_CREATE should be specified when creating new route [ 394.989154][T10325] can: request_module (can-proto-3) failed. [ 395.038427][T10337] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1624'. [ 395.358398][T10350] netlink: 'syz.3.1628': attribute type 39 has an invalid length. [ 395.565144][T10357] netlink: 'syz.4.1627': attribute type 1 has an invalid length. [ 395.638386][T10357] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1627'. [ 396.071236][T10366] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1630'. [ 396.503224][T10366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.542372][T10366] device bond_slave_1 left promiscuous mode [ 396.647527][T10366] bond0 (unregistering): Released all slaves [ 396.803535][T10379] netlink: 'syz.1.1633': attribute type 12 has an invalid length. [ 396.822439][T10379] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1633'. [ 398.275707][T10421] netlink: 'syz.3.1646': attribute type 21 has an invalid length. [ 398.329017][T10421] netlink: 'syz.3.1646': attribute type 1 has an invalid length. [ 398.388032][ T6279] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 398.792940][T10431] netlink: 'syz.1.1649': attribute type 1 has an invalid length. [ 398.909000][T10431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1649'. [ 399.310815][T10446] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1652'. [ 399.971194][T10454] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.103063][T10455] netlink: 'syz.2.1655': attribute type 10 has an invalid length. [ 400.134699][T10455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1655'. [ 400.192626][T10455] device dummy0 entered promiscuous mode [ 400.255586][T10455] bridge0: port 4(dummy0) entered blocking state [ 400.281250][T10455] bridge0: port 4(dummy0) entered disabled state [ 400.303321][T10455] bridge0: port 4(dummy0) entered blocking state [ 400.310354][T10455] bridge0: port 4(dummy0) entered listening state [ 400.337400][T10465] netlink: 'syz.3.1658': attribute type 2 has an invalid length. [ 400.381779][T10465] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1658'. [ 400.398204][T10461] netlink: 'syz.0.1657': attribute type 10 has an invalid length. [ 400.412092][T10461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1657'. [ 400.452461][T10461] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 400.511040][T10462] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1658'. [ 400.976622][T10476] device syzkaller0 entered promiscuous mode [ 400.988799][T10483] netlink: 'syz.4.1665': attribute type 21 has an invalid length. [ 401.008218][T10483] netlink: 'syz.4.1665': attribute type 4 has an invalid length. [ 401.027081][T10483] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1665'. [ 403.274851][T10498] netlink: 'syz.2.1669': attribute type 25 has an invalid length. [ 403.284256][T10498] netlink: 'syz.2.1669': attribute type 9 has an invalid length. [ 403.585649][T10517] netlink: 'syz.4.1674': attribute type 21 has an invalid length. [ 403.648435][T10519] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1674'. [ 403.875052][T10524] netlink: 'syz.3.1677': attribute type 3 has an invalid length. [ 403.907238][T10524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1677'. [ 404.535211][T10546] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1683'. [ 404.584751][T10546] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1683'. [ 405.213497][T10569] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1690'. [ 405.263263][T10569] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 405.332415][T10569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 405.466294][T10580] netlink: 'syz.1.1694': attribute type 1 has an invalid length. [ 405.586829][T10580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 405.874957][T10590] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1698'. [ 405.949257][T10592] netlink: 212940 bytes leftover after parsing attributes in process `syz.4.1699'. [ 405.981550][T10590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1698'. [ 406.633933][T10592] netlink: 'syz.4.1699': attribute type 3 has an invalid length. [ 406.762415][T10592] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1699'. [ 408.102874][T10646] netlink: 'syz.1.1713': attribute type 29 has an invalid length. [ 408.135673][T10646] netlink: 'syz.1.1713': attribute type 29 has an invalid length. [ 408.186542][T10648] netlink: 'syz.1.1713': attribute type 29 has an invalid length. [ 408.228579][T10646] netlink: 'syz.1.1713': attribute type 29 has an invalid length. [ 408.280303][T10646] netlink: 'syz.1.1713': attribute type 2 has an invalid length. [ 408.811635][T10656] device syzkaller0 entered promiscuous mode [ 409.328754][T10673] netlink: 'syz.2.1721': attribute type 21 has an invalid length. [ 409.356415][T10673] __nla_validate_parse: 1 callbacks suppressed [ 409.356435][T10673] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1721'. [ 412.141303][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.156901][T10686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.177917][T10686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.185416][T10686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.202264][T10686] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 412.215823][T10686] batman_adv: batadv0: Removing interface: virt_wifi0 [ 412.372791][T10685] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.1724'. [ 412.454898][T10684] netlink: 'syz.3.1724': attribute type 10 has an invalid length. [ 412.489889][T10684] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1724'. [ 412.582238][T10684] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 412.689473][T10689] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1725'. [ 412.743219][T10689] bond0: (slave bond_slave_0): Releasing backup interface [ 412.795909][T10689] device bond_slave_0 left promiscuous mode [ 412.886272][T10689] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 412.930679][T10698] netlink: 'syz.4.1727': attribute type 8 has an invalid length. [ 412.977224][T10698] netlink: 'syz.4.1727': attribute type 9 has an invalid length. [ 413.036946][T10698] netlink: 'syz.4.1727': attribute type 10 has an invalid length. [ 413.044861][T10698] netlink: 'syz.4.1727': attribute type 11 has an invalid length. [ 413.100103][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1727'. [ 413.183584][T10700] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1728'. [ 413.221677][T10700] device hsr_slave_0 left promiscuous mode [ 413.280374][T10709] netlink: 'syz.2.1730': attribute type 29 has an invalid length. [ 413.343166][T10700] device hsr_slave_1 left promiscuous mode [ 413.565568][T10709] netlink: 'syz.2.1730': attribute type 29 has an invalid length. [ 413.590937][T10711] netlink: 'syz.2.1730': attribute type 29 has an invalid length. [ 413.613829][T10713] netlink: 'syz.2.1730': attribute type 29 has an invalid length. [ 413.709633][T10715] netlink: 'syz.3.1731': attribute type 10 has an invalid length. [ 414.032854][T10732] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1736'. [ 414.796551][T10754] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 414.889643][T10754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 415.668193][ C1] bridge0: port 4(dummy0) entered learning state [ 416.113286][T10800] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1755'. [ 416.142151][T10800] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1755'. [ 416.640837][T10817] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1759'. [ 416.949210][T10835] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1762'. [ 417.078775][T10817] bridge0: port 3(bond0) entered disabled state [ 417.134378][T10817] bridge0: port 3(bond0) entered disabled state [ 417.160717][T10817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.171724][T10817] device bond_slave_0 left promiscuous mode [ 417.220646][T10817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.232975][T10817] device bond_slave_1 left promiscuous mode [ 417.273328][T10817] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 417.342237][T10817] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 417.429760][T10817] bond0 (unregistering): Released all slaves [ 417.533232][T10832] validate_nla: 4 callbacks suppressed [ 417.533251][T10832] netlink: 'syz.4.1760': attribute type 19 has an invalid length. [ 417.565325][T10832] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1760'. [ 417.607519][T10843] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1763'. [ 418.324856][T10868] netlink: 'syz.3.1772': attribute type 21 has an invalid length. [ 418.356902][T10868] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1772'. [ 418.366078][T10868] netlink: 'syz.3.1772': attribute type 4 has an invalid length. [ 418.434353][T10868] netlink: 'syz.3.1772': attribute type 5 has an invalid length. [ 418.477127][T10868] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1772'. [ 419.608390][T10897] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.1780'. [ 420.950201][T10919] netlink: 'syz.3.1788': attribute type 13 has an invalid length. [ 421.023411][T10919] netlink: 'syz.3.1788': attribute type 58 has an invalid length. [ 421.102570][T10919] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1788'. [ 423.848162][T10930] netlink: 'syz.0.1787': attribute type 21 has an invalid length. [ 423.892395][T10930] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1787'. [ 423.912704][T10930] netlink: 'syz.0.1787': attribute type 4 has an invalid length. [ 423.943138][T10930] netlink: 'syz.0.1787': attribute type 5 has an invalid length. [ 423.976837][T10930] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1787'. [ 424.191754][T10948] netlink: 'syz.3.1791': attribute type 27 has an invalid length. [ 425.110716][T10968] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1796'. [ 425.743273][T10980] netlink: 'syz.0.1802': attribute type 25 has an invalid length. [ 425.805490][T10980] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1802'. [ 428.058413][T11033] netlink: 'syz.2.1818': attribute type 1 has an invalid length. [ 428.092521][T11033] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1818'. [ 429.191736][T11051] sock: sock_timestamping_bind_phc: sock not bind to device [ 431.026822][ C1] bridge0: port 4(dummy0) entered forwarding state [ 431.033485][ C1] bridge0: topology change detected, propagating [ 431.155633][T11102] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1840'. [ 431.183465][T11102] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 431.221598][T11102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.536996][T11118] netlink: 'syz.4.1846': attribute type 12 has an invalid length. [ 431.558760][T11118] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1846'. [ 431.631311][T11121] netlink: 'syz.3.1847': attribute type 17 has an invalid length. [ 431.647524][T11121] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1847'. [ 432.270972][T11125] bridge0: port 4(dummy0) entered disabled state [ 432.279582][T11125] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.290250][T11125] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.765450][T11151] netlink: 'syz.2.1856': attribute type 11 has an invalid length. [ 432.964727][T11160] netlink: 'syz.1.1857': attribute type 21 has an invalid length. [ 433.006928][T11160] netlink: 'syz.1.1857': attribute type 1 has an invalid length. [ 433.015027][T11160] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.1857'. [ 433.330212][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 4095 [ 433.963464][T11172] netlink: 125520 bytes leftover after parsing attributes in process `syz.1.1862'. [ 434.316509][T11181] netlink: 'syz.0.1876': attribute type 4 has an invalid length. [ 434.359416][T11181] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1876'. [ 435.140847][T11197] sock: sock_timestamping_bind_phc: sock not bind to device [ 435.348936][T11201] delete_channel: no stack [ 435.551395][T11209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1874'. [ 435.599355][T11209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1874'. [ 435.641530][T11210] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1874'. [ 436.154247][T11235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1885'. [ 436.244778][T11232] sock: sock_timestamping_bind_phc: sock not bind to device [ 437.082660][T11248] delete_channel: no stack [ 437.466554][T11259] netlink: 'syz.4.1892': attribute type 46 has an invalid length. [ 438.294326][T11278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1897'. [ 439.021285][T11290] netlink: 'syz.4.1900': attribute type 39 has an invalid length. [ 439.063051][T11290] device veth0_macvtap left promiscuous mode [ 439.990572][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.997088][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.080756][T11311] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 441.148493][T11311] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.1908'. [ 448.127010][T11424] netlink: 'syz.2.1934': attribute type 21 has an invalid length. [ 448.134939][T11424] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1934'. [ 448.228368][T11424] netlink: 'syz.2.1934': attribute type 4 has an invalid length. [ 448.267012][T11424] netlink: 'syz.2.1934': attribute type 3 has an invalid length. [ 448.294481][T11424] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1934'. [ 448.337748][T11416] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1935'. [ 448.402432][T11429] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 448.428824][T11431] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1940'. [ 448.493384][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 448.733607][T11441] netlink: 'syz.3.1942': attribute type 9 has an invalid length. [ 448.755317][T11441] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1942'. [ 449.365060][T11454] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1946'. [ 450.090812][T11477] netlink: 'syz.1.1952': attribute type 13 has an invalid length. [ 450.106468][T11477] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1952'. [ 450.850179][T11477] erspan0: refused to change device tx_queue_len [ 450.879582][T11477] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 454.540877][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 454.581070][T11521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 454.859394][T11525] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1966'. [ 455.595893][T11549] netlink: 'syz.1.1972': attribute type 2 has an invalid length. [ 455.667411][T11549] netlink: 'syz.1.1972': attribute type 8 has an invalid length. [ 455.752233][T11549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1972'. [ 455.961906][T11552] netlink: 'syz.3.1974': attribute type 39 has an invalid length. [ 456.028421][T11552] device veth0_macvtap left promiscuous mode [ 456.431156][T11574] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.1979'. [ 456.784185][T11578] netlink: 'syz.2.1981': attribute type 21 has an invalid length. [ 456.797156][T11578] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1981'. [ 456.819661][T11578] netlink: 'syz.2.1981': attribute type 4 has an invalid length. [ 456.847718][T11578] netlink: 'syz.2.1981': attribute type 5 has an invalid length. [ 456.866193][T11578] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1981'. [ 458.182359][T11615] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1991'. [ 458.213833][T11615] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 458.732203][T11626] can: request_module (can-proto-0) failed. [ 459.594606][T11659] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2004'. [ 461.181005][T11719] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2019'. [ 461.217209][T11719] device hsr_slave_0 left promiscuous mode [ 461.237893][T11719] device hsr_slave_1 left promiscuous mode [ 462.421292][ T6302] tipc: Subscription rejected, illegal request [ 462.604653][T11739] device lo entered promiscuous mode [ 462.649606][T11739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.486207][T11777] netlink: 'syz.1.2033': attribute type 2 has an invalid length. [ 463.800197][T11785] netlink: 'syz.3.2039': attribute type 10 has an invalid length. [ 464.330405][T11808] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2046'. [ 465.374671][T11849] netlink: 'syz.2.2057': attribute type 2 has an invalid length. [ 465.461055][T11849] netlink: 'syz.2.2057': attribute type 8 has an invalid length. [ 465.494477][T11849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2057'. [ 466.628568][T11889] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2069'. [ 466.819723][T11897] netlink: 'syz.0.2073': attribute type 13 has an invalid length. [ 466.882739][T11897] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2073'. [ 467.219504][T11914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2078'. [ 467.264955][T11911] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2077'. [ 467.296665][T11914] netlink: 'syz.1.2078': attribute type 29 has an invalid length. [ 467.335939][T11911] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.376669][T11918] netlink: 'syz.3.2079': attribute type 10 has an invalid length. [ 467.430598][T11918] device geneve1 entered promiscuous mode [ 467.453831][T11926] netlink: 'syz.0.2080': attribute type 27 has an invalid length. [ 467.480423][T11918] team0: Port device geneve1 added [ 467.486934][T11914] netlink: 'syz.1.2078': attribute type 29 has an invalid length. [ 467.509706][T11926] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2080'. [ 467.546362][T11919] netlink: 'syz.1.2078': attribute type 29 has an invalid length. [ 467.601143][T11921] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2080'. [ 468.225029][T11950] netlink: 'syz.1.2087': attribute type 11 has an invalid length. [ 468.258018][T11950] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2087'. [ 468.707762][T11969] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2093'. [ 472.481572][T11974] validate_nla: 3 callbacks suppressed [ 472.481594][T11974] netlink: 'syz.2.2095': attribute type 21 has an invalid length. [ 472.874979][T11982] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.2098'. [ 475.575642][T12056] netlink: 'syz.3.2121': attribute type 3 has an invalid length. [ 475.604581][T12056] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 475.617389][T12052] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2120'. [ 475.637730][T12056] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2121'. [ 475.765183][T12063] netlink: 'syz.1.2123': attribute type 1 has an invalid length. [ 475.831501][T12063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2123'. [ 476.234135][T12074] delete_channel: no stack [ 476.381397][T12079] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2128'. [ 476.641984][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2126'. [ 477.172436][T12096] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.2132'. [ 477.201780][T12099] netlink: 'syz.3.2132': attribute type 19 has an invalid length. [ 477.236556][T12099] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2132'. [ 479.425751][T12157] netlink: 'syz.2.2152': attribute type 29 has an invalid length. [ 479.454764][T12157] netlink: 'syz.2.2152': attribute type 29 has an invalid length. [ 479.475260][T12157] netlink: 'syz.2.2152': attribute type 29 has an invalid length. [ 479.965433][ T48] Bluetooth: hci0: ISO packet for unknown connection handle 3853 [ 480.999163][T12219] netlink: 'syz.4.2169': attribute type 2 has an invalid length. [ 481.035821][T12219] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2169'. [ 482.568871][T12260] delete_channel: no stack [ 483.323662][T12292] netlink: 'syz.2.2192': attribute type 10 has an invalid length. [ 483.750693][T12308] netlink: 'syz.3.2195': attribute type 21 has an invalid length. [ 484.991190][T12360] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2209'. [ 485.015578][T12360] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 485.049718][T12360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.155826][T12368] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2212'. [ 488.104103][T12362] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2212'. [ 488.141254][T12360] netlink: 'syz.3.2209': attribute type 1 has an invalid length. [ 488.157715][T12360] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.2209'. [ 488.252112][T12372] netlink: 'syz.4.2214': attribute type 22 has an invalid length. [ 488.553362][T12377] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2215'. [ 488.624708][T12384] netlink: 'syz.1.2217': attribute type 7 has an invalid length. [ 488.691473][T12377] erspan0: mtu less than device minimum [ 488.752438][T12386] netlink: 'syz.3.2216': attribute type 29 has an invalid length. [ 488.829213][T12386] netlink: 'syz.3.2216': attribute type 29 has an invalid length. [ 488.924291][T12394] netlink: 'syz.4.2220': attribute type 2 has an invalid length. [ 488.958414][T12394] netlink: 'syz.4.2220': attribute type 1 has an invalid length. [ 488.966481][T12394] netlink: 'syz.4.2220': attribute type 8 has an invalid length. [ 489.048945][T12394] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2220'. [ 489.200806][T12398] netlink: 'syz.4.2220': attribute type 7 has an invalid length. [ 489.307290][T12398] netlink: 'syz.4.2220': attribute type 6 has an invalid length. [ 489.944416][T12408] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.2224'. [ 490.737688][T12426] netlink: 146340 bytes leftover after parsing attributes in process `syz.4.2229'. [ 490.778913][T12426] openvswitch: netlink: Key type 386 is out of range max 32 [ 491.809032][T12446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2235'. [ 492.658774][T12459] device syzkaller0 entered promiscuous mode [ 493.503518][T12471] validate_nla: 2 callbacks suppressed [ 493.503540][T12471] netlink: 'syz.4.2244': attribute type 29 has an invalid length. [ 495.561062][T12471] netlink: 'syz.4.2244': attribute type 29 has an invalid length. [ 495.898999][T12485] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2249'. [ 496.172822][T12499] netlink: 'syz.0.2252': attribute type 1 has an invalid length. [ 496.192857][T12505] netlink: 'syz.2.2253': attribute type 4 has an invalid length. [ 496.199067][T12499] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2252'. [ 496.216397][T12505] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2253'. [ 496.292112][T12505] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 496.957450][T12521] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2258'. [ 496.966619][T12521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 497.269497][T12528] netlink: 'syz.1.2258': attribute type 10 has an invalid length. [ 497.448316][T12528] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2258'. [ 497.487693][T12528] device hsr0 entered promiscuous mode [ 497.730930][T12535] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2262'. [ 497.806789][T12535] openvswitch: netlink: Key type 386 is out of range max 32 [ 497.840956][T12537] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2265'. [ 497.871291][T12543] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2266'. [ 498.144586][T12552] netlink: 177648 bytes leftover after parsing attributes in process `syz.2.2269'. [ 498.914630][T12575] netlink: 'syz.4.2276': attribute type 11 has an invalid length. [ 498.943505][T12575] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2276'. [ 499.406398][T12605] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 499.437416][T12605] device geneve0 entered promiscuous mode [ 499.489369][T12605] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 500.512266][T12632] netlink: 'syz.1.2292': attribute type 3 has an invalid length. [ 501.116053][T12653] netlink: 'syz.3.2297': attribute type 21 has an invalid length. [ 501.161784][T12653] netlink: 'syz.3.2297': attribute type 1 has an invalid length. [ 501.430210][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.436645][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.714556][T12678] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 501.742226][T12678] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 501.753289][T12679] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 501.769530][T12678] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 501.795080][T12681] __nla_validate_parse: 2 callbacks suppressed [ 501.795105][T12681] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2306'. [ 501.826892][T12682] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2306'. [ 501.870831][T12679] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 501.893666][T12686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2305'. [ 501.919395][T12688] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2305'. [ 502.376378][T12704] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2310'. [ 502.612040][T12709] -1: renamed from syzkaller0 [ 503.607596][T12722] device syzkaller0 entered promiscuous mode [ 503.624919][T12723] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.2316'. [ 504.282794][T12751] validate_nla: 4 callbacks suppressed [ 504.282918][T12751] netlink: 'syz.3.2326': attribute type 1 has an invalid length. [ 504.307368][T12751] netlink: 'syz.3.2326': attribute type 46 has an invalid length. [ 504.322009][T12751] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2326'. [ 504.701399][ T48] Bluetooth: hci4: unexpected subevent 0x04 length: 150 > 11 [ 505.693024][T12773] can: request_module (can-proto-0) failed. [ 505.702969][T12779] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2335'. [ 506.796658][T12803] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2342'. [ 508.073554][T12829] netlink: 'syz.1.2350': attribute type 11 has an invalid length. [ 508.157074][T12829] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2350'. [ 508.183908][T12828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.355570][T12844] netlink: 'syz.1.2355': attribute type 29 has an invalid length. [ 508.392997][T12844] netlink: 'syz.1.2355': attribute type 29 has an invalid length. [ 508.577010][T12854] netlink: 'syz.3.2357': attribute type 2 has an invalid length. [ 508.820112][T12862] netlink: 'syz.0.2358': attribute type 21 has an invalid length. [ 508.853225][T12862] netlink: 'syz.0.2358': attribute type 15 has an invalid length. [ 509.484229][T12888] netlink: 'syz.0.2366': attribute type 2 has an invalid length. [ 512.172599][T12898] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2368'. [ 512.236425][T12900] device wlan1 entered promiscuous mode [ 514.034864][T12953] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2387'. [ 514.370922][T12964] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2390'. [ 514.391543][T12964] netlink: 'syz.4.2390': attribute type 10 has an invalid length. [ 514.410777][T12964] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2390'. [ 514.464127][T12964] device team0 entered promiscuous mode [ 514.494444][T12964] device team_slave_0 entered promiscuous mode [ 514.516497][T12964] device team_slave_1 entered promiscuous mode [ 514.532029][T12964] device bridge0 entered promiscuous mode [ 514.547763][T12964] bridge0: port 4(team0) entered blocking state [ 514.575491][T12964] bridge0: port 4(team0) entered disabled state [ 514.902520][T12964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 515.915137][T13003] netlink: 'syz.3.2403': attribute type 3 has an invalid length. [ 515.968838][T13003] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2403'. [ 516.450451][T13028] netlink: 'syz.0.2410': attribute type 13 has an invalid length. [ 516.517312][T13028] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2410'. [ 516.580881][T13028] erspan0: refused to change device tx_queue_len [ 516.636487][T13031] netlink: 'syz.1.2411': attribute type 22 has an invalid length. [ 516.646573][T13031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'. [ 517.091702][T13053] netlink: 'syz.2.2417': attribute type 29 has an invalid length. [ 517.128600][T13053] netlink: 'syz.2.2417': attribute type 29 has an invalid length. [ 517.171546][T13056] netlink: 'syz.2.2417': attribute type 29 has an invalid length. [ 517.246564][T13053] netlink: 'syz.2.2417': attribute type 29 has an invalid length. [ 517.333927][T13059] netlink: 'syz.1.2419': attribute type 3 has an invalid length. [ 517.382692][T13059] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2419'. [ 517.835365][T13083] netlink: 'syz.4.2426': attribute type 10 has an invalid length. [ 517.856095][T13083] device hsr0 entered promiscuous mode [ 517.879795][T13083] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 518.242894][T13083] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.2426'. [ 519.166572][T13112] netlink: 'syz.2.2436': attribute type 3 has an invalid length. [ 519.207120][T13112] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2436'. [ 520.550881][T13144] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2446'. [ 520.760825][T13142] delete_channel: no stack [ 522.332302][T13178] tun0: tun_chr_ioctl cmd 1074025675 [ 522.343035][T13178] tun0: persist enabled [ 522.354592][T13178] tun0: tun_chr_ioctl cmd 1074025675 [ 522.362629][T13178] tun0: persist enabled [ 523.406966][T13206] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2462'. [ 523.446791][T13206] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.516532][T13277] netlink: 'syz.4.2491': attribute type 6 has an invalid length. [ 525.541550][T13277] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2491'. [ 525.950856][T13288] netlink: 'syz.4.2495': attribute type 27 has an invalid length. [ 526.162113][T13289] can: request_module (can-proto-0) failed. [ 526.295912][T13288] bond0: (slave bond_slave_0): Releasing backup interface [ 526.321822][T13288] device bond_slave_0 left promiscuous mode [ 526.494875][T13291] netlink: 'syz.2.2494': attribute type 10 has an invalid length. [ 526.720396][T13309] netlink: 'syz.3.2498': attribute type 21 has an invalid length. [ 526.762203][T13309] netlink: 'syz.3.2498': attribute type 1 has an invalid length. [ 526.778440][T13309] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2498'. [ 526.826590][T13310] netlink: 'syz.2.2500': attribute type 21 has an invalid length. [ 526.887481][T13310] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.895461][T13310] IPv6: Can't replace route, no match found [ 527.570084][T13334] device wlan1 entered promiscuous mode [ 527.821961][T13337] netlink: 'syz.4.2509': attribute type 16 has an invalid length. [ 527.877100][T13337] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2509'. [ 528.318281][T13363] netlink: 'syz.2.2513': attribute type 3 has an invalid length. [ 528.342104][T13363] netlink: 'syz.2.2513': attribute type 1 has an invalid length. [ 528.361324][T13363] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2513'. [ 528.663242][T13380] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2521'. [ 528.725766][T13381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2518'. [ 528.805196][T13381] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2518'. [ 530.896104][T13437] netlink: 'syz.2.2538': attribute type 21 has an invalid length. [ 530.924636][T13437] IPv6: NLM_F_CREATE should be specified when creating new route [ 531.451423][T13460] netlink: 'syz.1.2541': attribute type 27 has an invalid length. [ 532.048795][T13469] can: request_module (can-proto-0) failed. [ 532.806518][T13471] netlink: 'syz.0.2543': attribute type 39 has an invalid length. [ 533.224385][T13485] netlink: 'syz.1.2546': attribute type 3 has an invalid length. [ 533.308225][T13485] netlink: 'syz.1.2546': attribute type 1 has an invalid length. [ 533.325389][T13494] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2550'. [ 533.340089][T13485] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2546'. [ 533.404659][T13496] netlink: 'syz.4.2551': attribute type 10 has an invalid length. [ 533.433923][T13496] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2551'. [ 533.865455][T13510] netlink: 'syz.3.2557': attribute type 27 has an invalid length. [ 535.893829][T13557] netlink: 'syz.0.2568': attribute type 21 has an invalid length. [ 537.232421][T13588] netlink: 'syz.1.2577': attribute type 10 has an invalid length. [ 537.410860][T13588] team0: Device hsr_slave_0 failed to register rx_handler [ 537.515353][T13591] netlink: 'syz.3.2579': attribute type 28 has an invalid length. [ 539.991054][T13641] netlink: 'syz.1.2593': attribute type 1 has an invalid length. [ 540.047358][T13641] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2593'. [ 540.326120][T13644] netlink: 'syz.0.2594': attribute type 2 has an invalid length. [ 540.409604][T13644] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2594'. [ 542.521694][T13687] netlink: 'syz.4.2605': attribute type 4 has an invalid length. [ 542.529939][T13687] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2605'. [ 542.866417][T13695] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2607'. [ 543.182705][T13712] bridge_slave_0: mtu less than device minimum [ 544.312470][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2618'. [ 544.481477][T13738] netlink: 'syz.1.2621': attribute type 39 has an invalid length. [ 544.734287][T13740] netlink: 'syz.3.2620': attribute type 3 has an invalid length. [ 544.747141][T13740] netlink: 'syz.3.2620': attribute type 1 has an invalid length. [ 544.756193][T13740] netlink: 120 bytes leftover after parsing attributes in process `syz.3.2620'. [ 545.574827][T13749] netlink: 'syz.3.2623': attribute type 21 has an invalid length. [ 546.714684][T13781] netlink: 'syz.0.2632': attribute type 2 has an invalid length. [ 546.761776][T13781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2632'. [ 546.860609][T13787] netlink: 65043 bytes leftover after parsing attributes in process `syz.4.2633'. [ 547.064243][T13783] device aaaaaaaaaaaaaaa entered promiscuous mode [ 548.335182][T13818] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2643'. [ 548.628521][T13827] netlink: 'syz.3.2647': attribute type 13 has an invalid length. [ 548.636524][T13827] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2647'. [ 548.714629][T13829] netlink: 'syz.4.2645': attribute type 10 has an invalid length. [ 548.736873][T13829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2645'. [ 549.033928][T13841] netlink: 'syz.3.2650': attribute type 9 has an invalid length. [ 549.051781][T13841] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2650'. [ 549.622306][T13854] device bond_slave_1 entered promiscuous mode [ 549.641948][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 549.892046][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 549.993128][T13860] delete_channel: no stack [ 550.015687][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.025317][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.034987][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.045937][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.055974][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.066402][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.076111][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.085654][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.095221][T13859] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 550.234858][T13867] device GPL entered promiscuous mode [ 552.732585][T13911] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2673'. [ 554.034401][T13949] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.2683'. [ 554.073454][T13951] netlink: 'syz.4.2685': attribute type 10 has an invalid length. [ 554.463921][T13955] netlink: 'syz.4.2685': attribute type 25 has an invalid length. [ 554.494873][T13955] netlink: 2418 bytes leftover after parsing attributes in process `syz.4.2685'. [ 554.577719][T13951] device geneve1 entered promiscuous mode [ 554.626704][T13951] team0: Port device geneve1 added [ 559.325681][T14010] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2699'. [ 560.131994][T14030] netlink: 'syz.3.2704': attribute type 3 has an invalid length. [ 560.211811][T14030] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2704'. [ 560.263455][T14038] netlink: 'syz.2.2705': attribute type 10 has an invalid length. [ 560.330730][T14038] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2705'. [ 560.498937][T14035] netlink: 'syz.1.2706': attribute type 10 has an invalid length. [ 560.554721][T14042] netlink: 'syz.1.2706': attribute type 25 has an invalid length. [ 560.590272][T14042] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.2706'. [ 560.941392][T14035] team0: Port device geneve1 added [ 561.914189][T14066] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2715'. [ 562.872469][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.878941][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.591428][T14088] netlink: 'syz.2.2717': attribute type 2 has an invalid length. [ 564.805258][T14092] netlink: 'syz.4.2719': attribute type 41 has an invalid length. [ 565.750977][T14097] netlink: 'syz.3.2721': attribute type 10 has an invalid length. [ 565.789004][T14097] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2721'. [ 565.841608][T14108] netlink: 'syz.2.2722': attribute type 10 has an invalid length. [ 566.085783][T14112] netlink: 'syz.2.2722': attribute type 25 has an invalid length. [ 566.105278][T14112] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.2722'. [ 566.560278][T14125] netlink: 'syz.4.2724': attribute type 3 has an invalid length. [ 566.607102][T14125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2724'. [ 566.754368][T14135] netlink: 'syz.3.2728': attribute type 10 has an invalid length. [ 566.783466][T14140] netlink: 'syz.2.2729': attribute type 3 has an invalid length. [ 566.827721][T14140] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2729'. [ 566.926380][T14135] device wg1 entered promiscuous mode [ 566.959213][T14135] team0: Device wg1 is of different type [ 567.153755][T14149] tap0: tun_chr_ioctl cmd 99999999 [ 567.476591][T14152] device syzkaller0 entered promiscuous mode [ 567.521587][T14161] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2737'. [ 570.846034][T14161] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2737'. [ 570.855471][T14163] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2736'. [ 571.086165][T14169] netlink: 'syz.3.2738': attribute type 10 has an invalid length. [ 571.162200][T14179] netlink: 'syz.4.2739': attribute type 3 has an invalid length. [ 571.243627][T14179] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2739'. [ 571.310044][T14169] netlink: 'syz.3.2738': attribute type 25 has an invalid length. [ 571.335217][T14169] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2738'. [ 571.405476][ T6317] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 572.255231][T14224] delete_channel: no stack [ 573.691870][T14256] netlink: 'syz.4.2761': attribute type 10 has an invalid length. [ 573.724528][T14256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2761'. [ 573.801620][T14256] bridge0: port 4(veth0_vlan) entered blocking state [ 573.841842][T14256] bridge0: port 4(veth0_vlan) entered disabled state [ 573.883828][T14256] net_ratelimit: 760 callbacks suppressed [ 573.883848][T14256] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 574.333378][T14279] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2768'. [ 575.054350][T14291] netlink: 'syz.4.2770': attribute type 17 has an invalid length. [ 575.066519][T14291] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2770'. [ 575.081044][T14291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.239510][T14295] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2772'. [ 575.367911][T14301] device veth1_macvtap left promiscuous mode [ 576.303063][T14339] netlink: 'syz.3.2784': attribute type 2 has an invalid length. [ 576.337267][T14340] netlink: 'syz.1.2782': attribute type 10 has an invalid length. [ 576.712185][T14339] device 0 entered promiscuous mode [ 576.732776][T14360] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2788'. [ 576.800512][T14365] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2789'. [ 576.986434][T14368] netlink: 'syz.3.2790': attribute type 6 has an invalid length. [ 577.052197][T14374] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 577.084886][T14368] netlink: 'syz.3.2790': attribute type 17 has an invalid length. [ 577.126464][T14368] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2790'. [ 577.159597][T14373] device syzkaller0 left promiscuous mode [ 577.441935][T14389] netlink: 'syz.0.2794': attribute type 10 has an invalid length. [ 577.460820][T14389] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2794'. [ 577.507386][T14389] device veth0_vlan left promiscuous mode [ 577.561867][T14389] device veth0_vlan entered promiscuous mode [ 578.478898][T14389] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 578.821990][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 578.941391][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 579.012806][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 580.946310][T14452] netlink: 'syz.3.2812': attribute type 2 has an invalid length. [ 580.986396][T14452] device .*! entered promiscuous mode [ 581.202201][T14458] netlink: 'syz.0.2816': attribute type 3 has an invalid length. [ 581.266838][T14458] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2816'. [ 581.352288][T14461] netlink: 'syz.0.2816': attribute type 3 has an invalid length. [ 581.481612][T14461] netlink: 149864 bytes leftover after parsing attributes in process `syz.0.2816'. [ 581.660194][T14465] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2817'. [ 581.819344][T14477] netlink: 'syz.1.2820': attribute type 39 has an invalid length. [ 581.835175][T14477] netlink: 'syz.1.2820': attribute type 21 has an invalid length. [ 581.872244][T14477] netlink: 'syz.1.2820': attribute type 15 has an invalid length. [ 582.132905][ T48] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 582.552503][T14514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2828'. [ 582.583129][T14514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.612366][T14516] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2828'. [ 582.654738][T14516] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 582.789353][T14524] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2832'. [ 583.276809][T14545] netlink: 'syz.1.2837': attribute type 7 has an invalid length. [ 583.305567][T14545] netlink: 'syz.1.2837': attribute type 7 has an invalid length. [ 583.333964][T14545] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.2837'. [ 583.731353][T14560] netlink: 'syz.1.2842': attribute type 2 has an invalid length. [ 583.767663][T14560] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2842'. [ 583.928966][T14575] FAULT_INJECTION: forcing a failure. [ 583.928966][T14575] name failslab, interval 1, probability 0, space 0, times 1 [ 584.000437][T14575] CPU: 0 PID: 14575 Comm: syz.3.2845 Not tainted syzkaller #0 [ 584.008176][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 584.018309][T14575] Call Trace: [ 584.021653][T14575] [ 584.024638][T14575] dump_stack_lvl+0x188/0x24e [ 584.029468][T14575] ? show_regs_print_info+0x12/0x12 [ 584.034743][T14575] ? load_image+0x400/0x400 [ 584.039327][T14575] ? __might_sleep+0xd0/0xd0 [ 584.044064][T14575] ? __lock_acquire+0x7d10/0x7d10 [ 584.049162][T14575] should_fail_ex+0x399/0x4d0 [ 584.053902][T14575] should_failslab+0x5/0x20 [ 584.058456][T14575] slab_pre_alloc_hook+0x59/0x310 [ 584.063543][T14575] ? sk_prot_alloc+0xe7/0x210 [ 584.068282][T14575] __kmem_cache_alloc_node+0x4f/0x260 [ 584.073732][T14575] ? sk_prot_alloc+0xe7/0x210 [ 584.078466][T14575] __kmalloc+0xa0/0x240 [ 584.082686][T14575] sk_prot_alloc+0xe7/0x210 [ 584.087257][T14575] ? sk_alloc+0x20/0x340 [ 584.091589][T14575] sk_alloc+0x36/0x340 [ 584.095718][T14575] ? bpf_ctx_init+0x163/0x1a0 [ 584.100456][T14575] ? bpf_prog_test_run_skb+0x275/0x1890 [ 584.106066][T14575] bpf_prog_test_run_skb+0x371/0x1890 [ 584.111538][T14575] ? __fget_files+0x28/0x4b0 [ 584.116195][T14575] ? cpu_online+0xa0/0xa0 [ 584.120570][T14575] bpf_prog_test_run+0x31e/0x390 [ 584.126199][T14575] __sys_bpf+0x62b/0x780 [ 584.130504][T14575] ? bpf_link_show_fdinfo+0x380/0x380 [ 584.135955][T14575] ? lock_chain_count+0x20/0x20 [ 584.146458][T14575] __x64_sys_bpf+0x78/0x90 [ 584.151130][T14575] do_syscall_64+0x4c/0xa0 [ 584.157125][T14575] ? clear_bhb_loop+0x60/0xb0 [ 584.162296][T14575] ? clear_bhb_loop+0x60/0xb0 [ 584.167064][T14575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.174483][T14575] RIP: 0033:0x7ffa6a99ce59 [ 584.179049][T14575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.198891][T14575] RSP: 002b:00007ffa6b87b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.207350][T14575] RAX: ffffffffffffffda RBX: 00007ffa6ac15fa0 RCX: 00007ffa6a99ce59 [ 584.215353][T14575] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 584.224022][T14575] RBP: 00007ffa6b87b090 R08: 0000000000000000 R09: 0000000000000000 [ 584.232091][T14575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.240813][T14575] R13: 00007ffa6ac16038 R14: 00007ffa6ac15fa0 R15: 00007ffdb30d3838 [ 584.249073][T14575] [ 584.662291][T14589] netlink: 'syz.3.2849': attribute type 29 has an invalid length. [ 584.708797][T14588] netlink: 'syz.4.2850': attribute type 21 has an invalid length. [ 584.727023][T14588] netlink: 'syz.4.2850': attribute type 1 has an invalid length. [ 584.761476][T14588] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.2850'. [ 584.880368][T14590] device syzkaller0 left promiscuous mode [ 584.897177][T14600] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2852'. [ 585.395755][T14614] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 585.417093][T14614] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 585.437090][T14614] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 585.473663][T14614] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 585.706218][T14620] FAULT_INJECTION: forcing a failure. [ 585.706218][T14620] name failslab, interval 1, probability 0, space 0, times 0 [ 585.766099][T14620] CPU: 0 PID: 14620 Comm: syz.4.2860 Not tainted syzkaller #0 [ 585.773833][T14620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 585.784030][T14620] Call Trace: [ 585.787358][T14620] [ 585.790331][T14620] dump_stack_lvl+0x188/0x24e [ 585.795095][T14620] ? show_regs_print_info+0x12/0x12 [ 585.800458][T14620] ? load_image+0x400/0x400 [ 585.805043][T14620] ? __might_sleep+0xd0/0xd0 [ 585.809714][T14620] ? __lock_acquire+0x7d10/0x7d10 [ 585.814937][T14620] should_fail_ex+0x399/0x4d0 [ 585.819718][T14620] should_failslab+0x5/0x20 [ 585.824280][T14620] slab_pre_alloc_hook+0x59/0x310 [ 585.829506][T14620] ? apparmor_sk_alloc_security+0x74/0x100 [ 585.835373][T14620] __kmem_cache_alloc_node+0x4f/0x260 [ 585.840908][T14620] ? apparmor_sk_alloc_security+0x74/0x100 [ 585.846778][T14620] kmalloc_trace+0x26/0xe0 [ 585.851268][T14620] apparmor_sk_alloc_security+0x74/0x100 [ 585.856967][T14620] security_sk_alloc+0x6a/0xa0 [ 585.861805][T14620] sk_prot_alloc+0x101/0x210 [ 585.866450][T14620] ? sk_alloc+0x20/0x340 [ 585.870778][T14620] sk_alloc+0x36/0x340 [ 585.874912][T14620] ? bpf_ctx_init+0x163/0x1a0 [ 585.879659][T14620] ? bpf_prog_test_run_skb+0x275/0x1890 [ 585.885280][T14620] bpf_prog_test_run_skb+0x371/0x1890 [ 585.890722][T14620] ? __fget_files+0x28/0x4b0 [ 585.895526][T14620] ? cpu_online+0xa0/0xa0 [ 585.900704][T14620] bpf_prog_test_run+0x31e/0x390 [ 585.905720][T14620] __sys_bpf+0x62b/0x780 [ 585.910034][T14620] ? bpf_link_show_fdinfo+0x380/0x380 [ 585.915485][T14620] ? lock_chain_count+0x20/0x20 [ 585.920412][T14620] __x64_sys_bpf+0x78/0x90 [ 585.924891][T14620] do_syscall_64+0x4c/0xa0 [ 585.929366][T14620] ? clear_bhb_loop+0x60/0xb0 [ 585.934207][T14620] ? clear_bhb_loop+0x60/0xb0 [ 585.938969][T14620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 585.944933][T14620] RIP: 0033:0x7fc93719ce59 [ 585.949412][T14620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.969072][T14620] RSP: 002b:00007fc937fdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.977562][T14620] RAX: ffffffffffffffda RBX: 00007fc937415fa0 RCX: 00007fc93719ce59 [ 585.985630][T14620] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 585.993749][T14620] RBP: 00007fc937fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 586.001784][T14620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.009917][T14620] R13: 00007fc937416038 R14: 00007fc937415fa0 R15: 00007ffc5dc97668 [ 586.017985][T14620] [ 586.548884][T14632] validate_nla: 4 callbacks suppressed [ 586.549050][T14632] netlink: 'syz.1.2863': attribute type 39 has an invalid length. [ 586.767139][ T4277] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 586.784161][ T4277] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 586.793816][ T4277] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 586.803445][ T4277] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 586.812203][ T4277] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 586.905809][ T4277] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 587.833328][ T6306] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.963408][T14661] netlink: 'syz.4.2872': attribute type 21 has an invalid length. [ 587.995374][ T6306] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.122686][ T6306] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.027219][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 591.106986][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 591.220663][ T6306] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.540435][T14687] netlink: 'syz.2.2877': attribute type 21 has an invalid length. [ 591.613906][T14687] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2877'. [ 591.861336][T14635] chnl_net:caif_netlink_parms(): no params data found [ 592.204529][T14635] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.272754][T14635] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.319764][T14635] device bridge_slave_0 entered promiscuous mode [ 592.375914][T14635] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.406384][T14635] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.432533][T14635] device bridge_slave_1 entered promiscuous mode [ 592.487506][T14635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.505275][T14635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.568653][T14635] team0: Port device team_slave_0 added [ 592.580766][T14635] team0: Port device team_slave_1 added [ 592.621396][T14635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.639107][T14635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.673069][T14635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.704070][T14635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.715252][T14635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 592.752905][T14635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.771275][T14703] : port 1(gretap0) entered blocking state [ 592.779181][T14703] : port 1(gretap0) entered disabled state [ 592.786536][T14703] device gretap0 entered promiscuous mode [ 593.034987][T14635] device hsr_slave_0 entered promiscuous mode [ 593.064169][T14635] device hsr_slave_1 entered promiscuous mode [ 593.088165][T14635] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 593.106793][T14635] Cannot create hsr debugfs directory [ 593.186930][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 593.896972][ T6306] device 0 left promiscuous mode [ 593.954523][T14718] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2885'. [ 594.025153][T14719] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2885'. [ 594.371788][ T48] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 594.655758][T14738] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2889'. [ 594.919833][T14741] netlink: 'syz.1.2890': attribute type 28 has an invalid length. [ 594.951672][T14748] netlink: 175 bytes leftover after parsing attributes in process `syz.2.2891'. [ 594.996418][T14748] netlink: 'syz.2.2891': attribute type 10 has an invalid length. [ 595.013704][T14748] device macvlan0 left promiscuous mode [ 595.267058][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 595.349049][T14635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 595.376174][T14635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 596.376705][T14635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 596.505624][T14635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 597.411340][T14635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.633662][T14313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 597.657826][T14313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 597.671871][T14635] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.439366][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 598.542677][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 598.665963][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.675315][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.166879][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 599.179518][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 599.217788][T14795] netlink: 'syz.4.2899': attribute type 2 has an invalid length. [ 599.234120][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 599.281226][T14795] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2899'. [ 599.301575][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.308831][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.829178][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 599.854543][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 599.869675][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 599.890005][T14803] netlink: 'syz.2.2902': attribute type 3 has an invalid length. [ 599.904544][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 599.923090][T14803] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2902'. [ 599.946238][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 599.993052][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 600.029218][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.955359][T14778] netlink: 'syz.3.2897': attribute type 10 has an invalid length. [ 601.481073][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.490781][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.519698][T14635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.587337][T14635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.703976][T14838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2909'. [ 601.719978][ T6306] device veth1_macvtap left promiscuous mode [ 601.737203][ T6306] device veth0_macvtap left promiscuous mode [ 602.562824][T14857] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.2913'. [ 603.015417][ T6306] team0 (unregistering): Port device team_slave_1 removed [ 603.065616][ T6306] team0 (unregistering): Port device team_slave_0 removed [ 603.546101][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 603.555231][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 603.569820][T14831] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.2908'. [ 603.580467][T14833] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2907'. [ 603.605347][T14847] netlink: 'syz.2.2911': attribute type 13 has an invalid length. [ 603.637004][T14847] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2911'. [ 603.711640][T14847] erspan0: refused to change device tx_queue_len [ 603.899823][T14857] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 604.881563][T14894] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2922'. [ 604.938740][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 604.960896][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 604.994626][T14635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.131298][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 605.171416][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 605.302819][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 605.325307][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 605.435356][T14635] device veth0_vlan entered promiscuous mode [ 605.486354][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 605.512985][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.587590][T14635] device veth1_vlan entered promiscuous mode [ 605.833845][T14908] netlink: 'syz.4.2926': attribute type 4 has an invalid length. [ 605.884918][T14908] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2926'. [ 605.906611][T14313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 605.915396][T14313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 606.038963][T14635] device veth0_macvtap entered promiscuous mode [ 606.110369][T14313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 606.159671][T14313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 606.219871][T14635] device veth1_macvtap entered promiscuous mode [ 606.257075][T14915] netlink: 'syz.1.2929': attribute type 22 has an invalid length. [ 606.315245][T14313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 606.347866][T14313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 606.470133][T14635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.494737][T14635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.516462][T14635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 606.580380][T14635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.593072][T14635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.604890][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 606.624800][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.645073][T14921] netlink: 'syz.4.2931': attribute type 13 has an invalid length. [ 606.657578][T14921] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2931'. [ 606.687324][T14635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.721436][T14635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.751742][T14635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.772606][T14635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.793279][T14635] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.814471][T14635] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.861832][T14635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.899084][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 606.908716][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 606.941248][T14635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.950418][T14635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.966336][T14635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.002014][T14635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.338313][T14316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.346310][T14316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.391950][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 607.436027][ T6306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.457433][ T6306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.471804][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 608.073667][T14966] netlink: 'syz.1.2944': attribute type 11 has an invalid length. [ 608.082055][T14966] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2944'. [ 608.095665][T14966] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2944'. [ 608.680493][T14957] delete_channel: no stack [ 610.562907][T14498] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.563298][ T6306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.581146][ T4277] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.589811][ T4277] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.607850][ T4277] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.615422][ T4277] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 610.624399][ T4277] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.673127][ T4277] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 610.740585][ T6306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.935119][ T6306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.002993][T15015] netlink: 'syz.2.2958': attribute type 7 has an invalid length. [ 611.065567][ T6306] bond0: (slave netdevsim0): Releasing backup interface [ 611.083115][ T6306] device netdevsim0 left promiscuous mode [ 611.100598][ T6306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.163998][T15028] netlink: 'syz.3.2960': attribute type 10 has an invalid length. [ 611.389246][T15036] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2961'. [ 611.426233][T15034] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2961'. [ 611.534815][T15034] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 611.616890][T15034] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 611.661345][T15034] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 612.142475][T15005] chnl_net:caif_netlink_parms(): no params data found [ 612.348202][T15070] netlink: 'syz.2.2969': attribute type 49 has an invalid length. [ 612.442795][T15070] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2969'. [ 612.707184][ T4277] Bluetooth: hci4: command 0x2016 tx timeout [ 612.713422][ T4277] Bluetooth: hci1: command 0x0409 tx timeout [ 612.952759][T15092] netlink: 'syz.0.2972': attribute type 21 has an invalid length. [ 612.987685][T15092] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2972'. [ 613.266160][T15101] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2974'. [ 613.291452][T15005] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.305392][T15005] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.371696][T15005] device bridge_slave_0 entered promiscuous mode [ 613.398823][T15005] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.438219][T15005] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.447731][T15005] device bridge_slave_1 entered promiscuous mode [ 613.472531][T15107] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 614.797153][ T4277] Bluetooth: hci1: command 0x041b tx timeout [ 616.359122][T15005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.388785][T15005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.584723][T15125] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.2979'. [ 616.693582][T15005] team0: Port device team_slave_0 added [ 616.713373][T15005] team0: Port device team_slave_1 added [ 616.866901][ T4277] Bluetooth: hci1: command 0x040f tx timeout [ 616.912775][T15133] netlink: 'syz.0.2982': attribute type 10 has an invalid length. [ 617.457132][T15133] team0 (unregistering): Port device team_slave_0 removed [ 617.602187][T15133] team0 (unregistering): Port device team_slave_1 removed [ 617.653831][T15005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.675088][T15005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.737860][T15005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.815140][T15005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.837495][T15005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.995561][T15005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.025282][T15162] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.2988'. [ 618.217594][T15005] device hsr_slave_0 entered promiscuous mode [ 618.282702][T15005] device hsr_slave_1 entered promiscuous mode [ 618.293852][T15005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.312151][T15005] Cannot create hsr debugfs directory [ 618.503664][T15184] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.2993'. [ 618.957087][ T4277] Bluetooth: hci1: command 0x0419 tx timeout [ 619.349162][T15202] netlink: 'syz.1.2999': attribute type 10 has an invalid length. [ 619.362886][T15202] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2999'. [ 619.395555][T15202] device dummy0 entered promiscuous mode [ 619.420768][T15202] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 619.550405][ T6306] device hsr_slave_0 left promiscuous mode [ 619.579493][ T6306] device hsr_slave_1 left promiscuous mode [ 619.593849][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.628501][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.697644][ T6306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.705158][ T6306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.753171][ T6306] bridge0: port 3(bond0) entered disabled state [ 619.783796][ T6306] device bridge_slave_1 left promiscuous mode [ 619.812097][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.844663][ T6306] device bridge_slave_0 left promiscuous mode [ 619.854830][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.943194][ T6306] device veth1_macvtap left promiscuous mode [ 619.952130][ T6306] device veth1_vlan left promiscuous mode [ 620.450429][ T6306] device geneve1 left promiscuous mode [ 620.472921][ T6306] team0 (unregistering): Port device geneve1 removed [ 621.388902][ T6306] device team_slave_1 left promiscuous mode [ 621.397234][ T6306] team0 (unregistering): Port device team_slave_1 removed [ 621.452022][ T6306] device team_slave_0 left promiscuous mode [ 621.459911][ T6306] team0 (unregistering): Port device team_slave_0 removed [ 621.512042][ T6306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.527730][ T6306] device bond_slave_1 left promiscuous mode [ 621.920763][ T6306] device bridge0 left promiscuous mode [ 621.931168][ T6306] team0 (unregistering): Port device bridge0 removed [ 621.968528][ T6306] bond0 (unregistering): Released all slaves [ 622.094961][T15234] netlink: 'syz.2.3006': attribute type 39 has an invalid length. [ 622.123367][T15234] device veth0_macvtap left promiscuous mode [ 622.417321][T15246] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.3007'. [ 623.047171][T15242] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3016'. [ 623.069242][T15242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.653174][T15005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 623.689951][T15005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 623.755399][T15005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 623.770007][T15005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 624.074607][T15287] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3017'. [ 624.135053][T15005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.150078][T15287] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3017'. [ 624.224171][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 624.247621][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 624.295976][T15005] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.314873][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.321310][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.351765][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 624.361153][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 624.380767][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.388102][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.414995][T15297] netlink: 'syz.3.3021': attribute type 21 has an invalid length. [ 624.425400][T15297] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3021'. [ 624.455283][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 624.471437][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 624.504995][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 624.529274][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 624.574014][T11679] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.581308][T11679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.630822][T15294] device syzkaller0 left promiscuous mode [ 624.681382][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 624.733185][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 624.786181][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 624.832638][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 624.872403][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 624.931888][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 624.957553][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 625.010343][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 625.024400][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 625.033642][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 625.048759][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 625.097193][T15005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 625.406450][T15319] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3025'. [ 625.753118][T15318] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3024'. [ 625.772698][T15318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.813208][T15322] netlink: 'syz.0.3025': attribute type 10 has an invalid length. [ 625.849374][T15327] netlink: 'syz.2.3027': attribute type 41 has an invalid length. [ 625.910403][T15329] netlink: 'syz.1.3026': attribute type 10 has an invalid length. [ 626.006843][T15329] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 626.106914][T15329] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 626.126232][T15329] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 626.139850][T15329] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 626.947519][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.955094][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 627.036851][T15005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.397195][T15361] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3035'. [ 627.440828][T15361] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3035'. [ 627.910675][T15378] netlink: 'syz.1.3036': attribute type 10 has an invalid length. [ 627.951264][T15378] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3036'. [ 629.297092][T15422] can: request_module (can-proto-0) failed. [ 629.303142][T15425] netlink: 'syz.2.3045': attribute type 10 has an invalid length. [ 629.446234][T15425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3045'. [ 629.586455][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 629.603430][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 629.672713][T15436] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.3048'. [ 629.984879][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 630.019399][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 630.056505][T15005] device veth0_vlan entered promiscuous mode [ 630.257400][T15433] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3046'. [ 630.320355][T15433] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 630.343125][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 630.363834][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 630.416167][T15005] device veth1_vlan entered promiscuous mode [ 630.545938][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 630.578494][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 630.621233][T15005] device veth0_macvtap entered promiscuous mode [ 630.681959][T15005] device veth1_macvtap entered promiscuous mode [ 630.785390][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.826905][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.867791][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.906164][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.936067][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 630.942675][T15475] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3056'. [ 630.966757][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.998578][T15005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.037310][T15475] netlink: 'syz.0.3056': attribute type 3 has an invalid length. [ 631.045168][T15475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3056'. [ 631.052863][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 631.076090][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 631.110214][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 631.153415][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 631.210192][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.256756][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.296679][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.326720][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.362251][T15005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.422453][T15005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.444674][T15005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.476940][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 631.485963][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 631.553214][T15005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.596067][T15005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.625846][T15005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.655035][T15005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.874355][T15485] netlink: 'syz.2.3057': attribute type 10 has an invalid length. [ 634.607359][ T6295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.615357][ T6295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.662323][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 634.756517][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.796844][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.804498][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 634.935577][T15522] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3064'. [ 635.515416][T15536] netlink: 'syz.0.3069': attribute type 7 has an invalid length. [ 635.552435][T15536] netlink: 'syz.0.3069': attribute type 6 has an invalid length. [ 635.791552][T15543] netlink: 'syz.2.3072': attribute type 10 has an invalid length. [ 636.020624][T14316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.225037][T14316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.464842][T14316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.509073][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 636.525957][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 636.537228][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 636.548221][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 636.557510][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 636.565259][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 636.726132][T14316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.192175][T15563] delete_channel: no stack [ 637.227714][T15563] delete_channel: no stack [ 637.445315][T14316] device 0 left promiscuous mode [ 637.585812][T15573] delete_channel: no stack [ 638.135215][T15555] chnl_net:caif_netlink_parms(): no params data found [ 638.620388][T15589] netlink: 'syz.4.3084': attribute type 10 has an invalid length. [ 638.637011][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 638.659239][T15589] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.669815][T15589] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.753301][T15589] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.766994][T15589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.779206][T15589] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.787153][T15589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.932947][T15589] team0: Port device bridge0 added [ 639.213268][T15604] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3086'. [ 639.569657][T15611] netlink: 'syz.2.3087': attribute type 3 has an invalid length. [ 639.600468][T15611] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3087'. [ 639.670385][T15555] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.714586][T15555] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.763966][T15555] device bridge_slave_0 entered promiscuous mode [ 639.865509][T15555] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.891089][T15555] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.952606][T15555] device bridge_slave_1 entered promiscuous mode [ 640.185918][T15629] netlink: 'syz.3.3089': attribute type 10 has an invalid length. [ 640.463403][T15555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.529489][T15555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.707226][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 640.997772][T15555] team0: Port device team_slave_0 added [ 641.019967][T15656] netlink: 'syz.3.3098': attribute type 10 has an invalid length. [ 641.141659][T15555] team0: Port device team_slave_1 added [ 641.407598][T15555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.414753][T15555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.441835][T15668] delete_channel: no stack [ 641.476212][T15668] delete_channel: no stack [ 641.571332][T15555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.779805][T15555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.810553][T15555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.971534][T15555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.342523][T15686] netlink: 'syz.3.3105': attribute type 10 has an invalid length. [ 642.797074][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 644.221277][T15686] device team_slave_0 left promiscuous mode [ 644.265153][T15686] team0 (unregistering): Port device team_slave_0 removed [ 644.281842][T15686] device team_slave_1 left promiscuous mode [ 644.316364][T15686] team0 (unregistering): Port device team_slave_1 removed [ 644.326471][T15686] device dummy0 left promiscuous mode [ 644.350107][T15686] team0 (unregistering): Port device dummy0 removed [ 644.364326][T15686] device geneve1 left promiscuous mode [ 644.398292][T15686] team0 (unregistering): Port device geneve1 removed [ 644.700433][T15716] netlink: 'syz.0.3110': attribute type 19 has an invalid length. [ 644.780347][T15555] device hsr_slave_0 entered promiscuous mode [ 644.827592][T15555] device hsr_slave_1 entered promiscuous mode [ 644.869790][T15555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 644.878161][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 644.915284][T15555] Cannot create hsr debugfs directory [ 645.383990][T15732] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 645.459631][T15732] netlink: 'syz.2.3114': attribute type 3 has an invalid length. [ 645.505048][T15732] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3114'. [ 646.782817][T14316] device hsr_slave_0 left promiscuous mode [ 646.841204][T15777] netlink: 'syz.4.3122': attribute type 2 has an invalid length. [ 646.880961][T15777] netlink: 16307 bytes leftover after parsing attributes in process `syz.4.3122'. [ 646.912349][T14316] device hsr_slave_1 left promiscuous mode [ 647.379368][T14316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.392383][T14316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.448986][T14316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.469398][T14316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.138880][T14316] team0 (unregistering): Port device geneve1 removed [ 650.166124][T14316] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 650.409551][T14316] team0 (unregistering): Port device team_slave_1 removed [ 650.455623][T14316] team0 (unregistering): Port device team_slave_0 removed [ 650.502900][T14316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 650.512373][T14316] device bond_slave_1 left promiscuous mode [ 650.834860][T14316] bond0 (unregistering): Released all slaves [ 650.879833][T15755] netlink: 'syz.2.3119': attribute type 10 has an invalid length. [ 650.887843][T15755] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3119'. [ 650.912590][T15765] netlink: 'syz.0.3121': attribute type 10 has an invalid length. [ 650.935657][T15765] batman_adv: batadv0: Adding interface: netdevsim0 [ 650.956789][T15765] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.996797][T15765] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 651.078120][T15777] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3122'. [ 651.107250][T15777] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3122'. [ 651.124001][T15777] bond0: (slave bond_slave_0): Releasing backup interface [ 651.175969][T15777] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 651.223701][T15783] device syzkaller0 entered promiscuous mode [ 651.419670][T15792] tipc: Started in network mode [ 651.425189][T15792] tipc: Node identity 9215a268, cluster identity 4711 [ 651.438390][T15792] tipc: Node number set to 2450891368 [ 651.490087][T15798] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3125'. [ 651.507228][T15797] netlink: 'syz.3.3127': attribute type 2 has an invalid length. [ 651.515208][T15797] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3127'. [ 651.928314][T15813] netlink: 'syz.4.3130': attribute type 4 has an invalid length. [ 652.305870][T15555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 652.475446][T15555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 652.545821][T15555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 652.777050][T15555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 653.066322][T15555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.118435][T15838] netlink: 'syz.2.3138': attribute type 4 has an invalid length. [ 653.133444][T15838] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3138'. [ 653.147472][T15838] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 653.181004][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 653.280035][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 653.327584][T15841] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3137'. [ 653.372693][T15555] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.412612][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 653.428461][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 653.448090][T14316] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.455343][T14316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.517027][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 653.541538][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 653.571708][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 653.601672][T14316] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.609121][T14316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.649831][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 653.728071][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 653.800882][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 653.829351][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 653.895971][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 653.920096][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 653.944973][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 654.000884][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.027917][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.060888][T15854] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3142'. [ 654.089011][T15854] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 654.119381][T15854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 654.144796][T15555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 654.178791][T15555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.192837][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.209358][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.093826][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 656.104100][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.126971][T15555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.265025][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 656.284195][T14316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 656.357519][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 656.373263][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 656.403318][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 656.413880][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 656.437050][T15555] device veth0_vlan entered promiscuous mode [ 656.483092][T15906] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3152'. [ 656.641986][T15555] device veth1_vlan entered promiscuous mode [ 656.813118][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 656.822370][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 656.853344][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 656.881598][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 656.920211][T15555] device veth0_macvtap entered promiscuous mode [ 656.961977][T15555] device veth1_macvtap entered promiscuous mode [ 657.027610][T15555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.077847][T15555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.122143][T15555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.158754][T15555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.181679][T15555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.204474][T15555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.261194][T15555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.285011][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 657.299674][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 657.332405][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 657.352604][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 657.377762][T15555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.400036][T15555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.418712][T15555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.434807][T15555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.446370][T15555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.462934][T15555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.475569][T15555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.526833][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 657.535788][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 657.583732][T15555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.615807][T15555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.633874][T15555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.656160][T15555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.975755][ T6297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.001304][ T6297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.039756][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 658.085041][T14317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.149746][T14317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.232469][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 658.358993][T15972] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3166'. [ 658.713892][T15977] netlink: 'syz.0.3167': attribute type 2 has an invalid length. [ 658.881792][T15977] device 0 entered promiscuous mode [ 658.994769][T15984] netlink: 'syz.4.3168': attribute type 25 has an invalid length. [ 659.033733][T15984] netlink: 'syz.4.3168': attribute type 29 has an invalid length. [ 659.089711][T15990] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3168'. [ 659.187933][T15989] netlink: 'syz.1.3172': attribute type 21 has an invalid length. [ 659.226189][T15988] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3170'. [ 659.774478][T16003] netlink: 'syz.4.3177': attribute type 2 has an invalid length. [ 659.846872][T16003] netlink: 'syz.4.3177': attribute type 8 has an invalid length. [ 659.854940][T16003] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3177'. [ 660.305747][ T5123] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.357979][ T4277] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 660.377393][ T4277] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 660.415974][ T4277] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 660.431666][ T4277] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 660.443906][ T4277] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 660.452014][ T4277] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 660.554149][T16011] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3178'. [ 660.693884][T16002] netlink: 'syz.1.3176': attribute type 2 has an invalid length. [ 660.748267][T16002] netlink: 'syz.1.3176': attribute type 1 has an invalid length. [ 660.817629][T16002] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.3176'. [ 660.862091][ T5123] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.069034][ T5123] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.348342][ T5123] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.839849][T16014] chnl_net:caif_netlink_parms(): no params data found [ 661.874147][T16053] netlink: 'syz.4.3185': attribute type 11 has an invalid length. [ 661.893881][T16053] netlink: 176 bytes leftover after parsing attributes in process `syz.4.3185'. [ 662.103911][T16014] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.122239][T16014] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.133084][T16014] device bridge_slave_0 entered promiscuous mode [ 662.144545][T16014] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.153024][T16014] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.162319][T16014] device bridge_slave_1 entered promiscuous mode [ 662.196534][T16014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.218021][T16014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.260288][T16014] team0: Port device team_slave_0 added [ 662.269888][T16014] team0: Port device team_slave_1 added [ 662.319013][T16014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.326291][T16014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.354015][T16014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.381475][T16014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.391941][T16014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 662.420118][T16014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.556933][ T4277] Bluetooth: hci2: command 0x0409 tx timeout [ 662.900239][T16014] device hsr_slave_0 entered promiscuous mode [ 663.002635][T16014] device hsr_slave_1 entered promiscuous mode [ 663.249150][ T6297] tipc: Subscription rejected, illegal request [ 663.288630][T16074] netlink: 'syz.0.3186': attribute type 3 has an invalid length. [ 663.336525][T16074] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3186'. [ 663.372533][ T5123] device 1 left promiscuous mode [ 663.590669][ T5123] tipc: Left network mode [ 664.637177][ T4277] Bluetooth: hci2: command 0x041b tx timeout [ 664.952907][T16098] delete_channel: no stack [ 664.979308][T16106] netlink: 'syz.0.3194': attribute type 28 has an invalid length. [ 665.981334][T16014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 666.707005][ T4277] Bluetooth: hci2: command 0x040f tx timeout [ 667.352600][T16144] tap0: tun_chr_ioctl cmd 1074025681 [ 667.382476][T16014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 667.461537][T16014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 667.504809][T16014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 667.894153][T16014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.984934][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 668.025706][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 668.189956][T16014] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.264373][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 668.313041][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 668.397073][ T6263] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.404261][ T6263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.645868][T16170] netlink: 'syz.0.3210': attribute type 17 has an invalid length. [ 668.695935][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 668.709538][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 668.730948][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 668.747829][ T6263] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.755408][ T6263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.767686][ T6263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 668.781865][T16173] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3211'. [ 668.804662][ T4277] Bluetooth: hci2: command 0x0419 tx timeout [ 668.884651][T11679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 669.084524][T16177] can: request_module (can-proto-0) failed. [ 669.338828][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 669.380967][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.406016][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 669.441410][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 669.478540][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 669.601866][ T5123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 669.626881][ T5123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 669.883132][ T5123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 669.898274][ T5123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 669.920335][ T5123] bridge0: port 4(dummy0) entered disabled state [ 669.939488][ T5123] device bridge_slave_1 left promiscuous mode [ 669.945976][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.976236][ T5123] device bridge_slave_0 left promiscuous mode [ 669.987125][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.110417][ T5123] device veth1_macvtap left promiscuous mode [ 670.126928][ T5123] device veth1_vlan left promiscuous mode [ 670.132941][ T5123] device veth0_vlan left promiscuous mode [ 674.174334][T16014] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 674.185275][T16014] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 674.200733][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 674.213508][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 674.223295][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 674.232809][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 674.242343][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 674.254412][T16195] netlink: 'syz.4.3218': attribute type 5 has an invalid length. [ 675.493516][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 675.523145][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 675.558580][T16014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.327115][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 676.344237][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 676.424778][T16014] device veth0_vlan entered promiscuous mode [ 676.449397][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 676.478147][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 676.521386][T16255] netlink: 'syz.0.3234': attribute type 29 has an invalid length. [ 676.534037][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 676.545104][T14317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 676.573486][T16014] device veth1_vlan entered promiscuous mode [ 676.603485][T16255] netlink: 'syz.0.3234': attribute type 29 has an invalid length. [ 676.627320][T16253] netlink: 'syz.0.3234': attribute type 29 has an invalid length. [ 676.724507][T16262] netlink: 126288 bytes leftover after parsing attributes in process `syz.4.3236'. [ 677.029954][T16256] netlink: 'syz.0.3234': attribute type 29 has an invalid length. [ 677.123342][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 677.148877][ T6306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 677.203539][T16014] device veth0_macvtap entered promiscuous mode [ 677.286295][T16014] device veth1_macvtap entered promiscuous mode [ 677.358994][T16014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.407242][T16014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.443385][T16014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.483755][T16014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.495222][T16014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.505846][T16014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.548889][T16014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.560057][T16014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.570934][T16014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.581042][T16014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.601551][T16014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.613258][T16014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 677.640892][T16014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.696101][T16014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.177381][T16291] ================================================================== [ 678.185521][T16291] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 678.193379][T16291] Write of size 56 at addr ffff888059767a10 by task syz.3.3242/16291 [ 678.201524][T16291] [ 678.203886][T16291] CPU: 0 PID: 16291 Comm: syz.3.3242 Not tainted syzkaller #0 [ 678.211385][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 678.221467][T16291] Call Trace: [ 678.224784][T16291] [ 678.227761][T16291] dump_stack_lvl+0x188/0x24e [ 678.232495][T16291] ? __lock_acquire+0x7d10/0x7d10 [ 678.237565][T16291] ? show_regs_print_info+0x12/0x12 [ 678.242807][T16291] ? load_image+0x400/0x400 [ 678.247367][T16291] ? __virt_addr_valid+0x465/0x540 [ 678.252528][T16291] ? __bpf_get_stackid+0x6c9/0x920 [ 678.257852][T16291] print_report+0xa8/0x210 [ 678.262302][T16291] kasan_report+0x10b/0x140 [ 678.266846][T16291] ? __bpf_get_stackid+0x6c9/0x920 [ 678.271993][T16291] kasan_check_range+0x235/0x290 [ 678.276990][T16291] ? __bpf_get_stackid+0x6c9/0x920 [ 678.282130][T16291] memcpy+0x3c/0x60 [ 678.285959][T16291] __bpf_get_stackid+0x6c9/0x920 [ 678.290948][T16291] bpf_get_stackid_pe+0x33f/0x400 [ 678.296005][T16291] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 678.301491][T16291] bpf_overflow_handler+0x522/0x7c0 [ 678.306718][T16291] ? bpf_overflow_handler+0xd9/0x7c0 [ 678.312060][T16291] ? perf_swevent_overflow+0x230/0x230 [ 678.317565][T16291] ? ct_irq_exit_irqson+0x113/0x170 [ 678.322788][T16291] ? __lock_acquire+0x13cf/0x7d10 [ 678.328024][T16291] ? __perf_event_account_interrupt+0x187/0x280 [ 678.334311][T16291] __perf_event_overflow+0x448/0x610 [ 678.339638][T16291] perf_swevent_event+0x315/0x570 [ 678.344693][T16291] ? perf_tp_event+0xc30/0xc30 [ 678.349490][T16291] ? verify_lock_unused+0x140/0x140 [ 678.354720][T16291] ___perf_sw_event+0x49e/0x6e0 [ 678.359604][T16291] ? ___perf_sw_event+0x180/0x6e0 [ 678.364658][T16291] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 678.371140][T16291] ? __lock_acquire+0x13cf/0x7d10 [ 678.376212][T16291] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 678.382227][T16291] ? lock_chain_count+0x20/0x20 [ 678.387105][T16291] ? mark_lock+0x94/0x320 [ 678.391471][T16291] __perf_sw_event+0x135/0x260 [ 678.396272][T16291] do_user_addr_fault+0xaea/0xb10 [ 678.401459][T16291] ? trace_hardirqs_off_finish+0x86/0x180 [ 678.407214][T16291] exc_page_fault+0x60/0x100 [ 678.411925][T16291] asm_exc_page_fault+0x22/0x30 [ 678.416811][T16291] RIP: 0010:strncpy_from_user+0x14b/0x350 [ 678.422578][T16291] Code: 4c 89 e6 e8 77 be 49 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 [ 678.442251][T16291] RSP: 0018:ffffc9000471fb50 EFLAGS: 00050246 [ 678.448385][T16291] RAX: ffffffff8438c109 RBX: ffffc9000471fc70 RCX: ffff88804ab01e00 [ 678.456393][T16291] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 678.464416][T16291] RBP: ffffc9000471fc70 R08: ffff88804ab01e00 R09: 0000000000000003 [ 678.472432][T16291] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 678.480431][T16291] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 678.488443][T16291] ? strncpy_from_user+0x129/0x350 [ 678.493606][T16291] bpf_prog_load+0x1f3/0x1560 [ 678.498328][T16291] ? map_freeze+0x390/0x390 [ 678.502864][T16291] ? __might_fault+0xa6/0x120 [ 678.507570][T16291] ? __might_fault+0xa6/0x120 [ 678.512274][T16291] ? __might_fault+0xc2/0x120 [ 678.516979][T16291] ? __might_fault+0xa6/0x120 [ 678.521696][T16291] ? bpf_lsm_bpf+0x5/0x10 [ 678.526072][T16291] ? security_bpf+0x7a/0xa0 [ 678.530618][T16291] __sys_bpf+0x5b8/0x780 [ 678.534903][T16291] ? bpf_link_show_fdinfo+0x380/0x380 [ 678.540330][T16291] ? lock_chain_count+0x20/0x20 [ 678.545306][T16291] __x64_sys_bpf+0x78/0x90 [ 678.549773][T16291] do_syscall_64+0x4c/0xa0 [ 678.554254][T16291] ? clear_bhb_loop+0x60/0xb0 [ 678.558964][T16291] ? clear_bhb_loop+0x60/0xb0 [ 678.563674][T16291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.569605][T16291] RIP: 0033:0x7ffa6a99ce59 [ 678.574045][T16291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.593774][T16291] RSP: 002b:00007ffa6b87b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 678.602226][T16291] RAX: ffffffffffffffda RBX: 00007ffa6ac15fa0 RCX: 00007ffa6a99ce59 [ 678.610238][T16291] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 678.618237][T16291] RBP: 00007ffa6aa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 678.626227][T16291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.634235][T16291] R13: 00007ffa6ac16038 R14: 00007ffa6ac15fa0 R15: 00007ffdb30d3838 [ 678.642274][T16291] [ 678.645315][T16291] [ 678.647709][T16291] Allocated by task 16291: [ 678.652180][T16291] kasan_set_track+0x4b/0x70 [ 678.656813][T16291] __kasan_kmalloc+0x8e/0xa0 [ 678.661431][T16291] __kmalloc_node+0xb0/0x240 [ 678.666049][T16291] bpf_map_area_alloc+0x47/0xe0 [ 678.670940][T16291] prealloc_elems_and_freelist+0x86/0x1c0 [ 678.676724][T16291] stack_map_alloc+0x390/0x520 [ 678.681527][T16291] map_create+0x534/0x1000 [ 678.685981][T16291] __sys_bpf+0x38b/0x780 [ 678.690262][T16291] __x64_sys_bpf+0x78/0x90 [ 678.694708][T16291] do_syscall_64+0x4c/0xa0 [ 678.699153][T16291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.705109][T16291] [ 678.707497][T16291] Last potentially related work creation: [ 678.713430][T16291] kasan_save_stack+0x3a/0x60 [ 678.718162][T16291] __kasan_record_aux_stack+0xb2/0xc0 [ 678.723575][T16291] call_rcu+0x14f/0x990 [ 678.727795][T16291] nf_unregister_net_hooks+0xc7/0x130 [ 678.733200][T16291] nf_defrag_ipv6_disable+0x91/0xe0 [ 678.738425][T16291] nf_ct_netns_put+0x371/0x510 [ 678.743216][T16291] nf_conncount_destroy+0x3d/0x150 [ 678.748351][T16291] ovs_ct_exit+0x98/0x200 [ 678.752706][T16291] ovs_exit_net+0xe9/0x7a0 [ 678.757148][T16291] cleanup_net+0x706/0xba0 [ 678.761591][T16291] process_one_work+0x8a2/0x1160 [ 678.766551][T16291] worker_thread+0xaa2/0x1270 [ 678.771262][T16291] kthread+0x29d/0x330 [ 678.775357][T16291] ret_from_fork+0x1f/0x30 [ 678.779825][T16291] [ 678.782181][T16291] The buggy address belongs to the object at ffff888059767a00 [ 678.782181][T16291] which belongs to the cache kmalloc-cg-64 of size 64 [ 678.796364][T16291] The buggy address is located 16 bytes inside of [ 678.796364][T16291] 64-byte region [ffff888059767a00, ffff888059767a40) [ 678.809501][T16291] [ 678.811847][T16291] The buggy address belongs to the physical page: [ 678.818287][T16291] page:ffffea000165d9c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59767 [ 678.828462][T16291] memcg:ffff8880755a2e01 [ 678.832718][T16291] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 678.840299][T16291] raw: 00fff00000000200 ffffea00016284c0 dead000000000004 ffff888017442780 [ 678.848932][T16291] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff8880755a2e01 [ 678.857526][T16291] page dumped because: kasan: bad access detected [ 678.863962][T16291] page_owner tracks the page as allocated [ 678.869706][T16291] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4285, tgid 4285 (syz-executor), ts 660833550919, free_ts 660832563404 [ 678.888138][T16291] post_alloc_hook+0x173/0x1a0 [ 678.892936][T16291] get_page_from_freelist+0x1a1e/0x1ab0 [ 678.898510][T16291] __alloc_pages+0x1ec/0x4f0 [ 678.903125][T16291] alloc_slab_page+0x5d/0x160 [ 678.907826][T16291] new_slab+0x87/0x2c0 [ 678.911915][T16291] ___slab_alloc+0xbc6/0x1240 [ 678.916613][T16291] __kmem_cache_alloc_node+0x1a0/0x260 [ 678.922100][T16291] kmalloc_trace+0x26/0xe0 [ 678.926568][T16291] alloc_fdtable+0xca/0x2c0 [ 678.931103][T16291] dup_fd+0x782/0xa50 [ 678.935118][T16291] copy_files+0x72/0xe0 [ 678.939292][T16291] copy_process+0x1835/0x4080 [ 678.943988][T16291] kernel_clone+0x24b/0x900 [ 678.948630][T16291] __x64_sys_clone+0x1a7/0x220 [ 678.953419][T16291] do_syscall_64+0x4c/0xa0 [ 678.957861][T16291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.963811][T16291] page last free stack trace: [ 678.968581][T16291] free_unref_page_prepare+0x8b4/0x9a0 [ 678.974072][T16291] free_unref_page+0x2e/0x3f0 [ 678.978776][T16291] __vunmap+0x856/0xa00 [ 678.983387][T16291] __do_replace+0x86d/0x980 [ 678.987923][T16291] do_ip6t_set_ctl+0xb44/0xe10 [ 678.992724][T16291] nf_setsockopt+0x25f/0x280 [ 678.997339][T16291] __sys_setsockopt+0x2bf/0x3d0 [ 679.002214][T16291] __x64_sys_setsockopt+0xb1/0xc0 [ 679.007260][T16291] do_syscall_64+0x4c/0xa0 [ 679.011693][T16291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.017616][T16291] [ 679.019979][T16291] Memory state around the buggy address: [ 679.025627][T16291] ffff888059767900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 679.033706][T16291] ffff888059767980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 679.041789][T16291] >ffff888059767a00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 679.049863][T16291] ^ [ 679.055260][T16291] ffff888059767a80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 679.063342][T16291] ffff888059767b00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 679.071418][T16291] ================================================================== [ 679.079497][T16291] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 679.086699][T16291] CPU: 0 PID: 16291 Comm: syz.3.3242 Not tainted syzkaller #0 [ 679.094180][T16291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 679.104254][T16291] Call Trace: [ 679.107550][T16291] [ 679.110500][T16291] dump_stack_lvl+0x188/0x24e [ 679.115223][T16291] ? memcpy+0x3c/0x60 [ 679.119248][T16291] ? show_regs_print_info+0x12/0x12 [ 679.124486][T16291] ? load_image+0x400/0x400 [ 679.129032][T16291] panic+0x2e5/0x730 [ 679.132956][T16291] ? bpf_jit_dump+0xd0/0xd0 [ 679.137487][T16291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 679.143437][T16291] ? _raw_spin_unlock+0x40/0x40 [ 679.148313][T16291] ? print_memory_metadata+0x314/0x400 [ 679.153802][T16291] check_panic_on_warn+0x80/0xa0 [ 679.158764][T16291] ? __bpf_get_stackid+0x6c9/0x920 [ 679.163901][T16291] end_report+0x66/0x110 [ 679.168173][T16291] kasan_report+0x118/0x140 [ 679.172705][T16291] ? __bpf_get_stackid+0x6c9/0x920 [ 679.177841][T16291] kasan_check_range+0x235/0x290 [ 679.182810][T16291] ? __bpf_get_stackid+0x6c9/0x920 [ 679.187947][T16291] memcpy+0x3c/0x60 [ 679.191775][T16291] __bpf_get_stackid+0x6c9/0x920 [ 679.196741][T16291] bpf_get_stackid_pe+0x33f/0x400 [ 679.201787][T16291] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 679.207279][T16291] bpf_overflow_handler+0x522/0x7c0 [ 679.212503][T16291] ? bpf_overflow_handler+0xd9/0x7c0 [ 679.217808][T16291] ? perf_swevent_overflow+0x230/0x230 [ 679.223286][T16291] ? ct_irq_exit_irqson+0x113/0x170 [ 679.228506][T16291] ? __lock_acquire+0x13cf/0x7d10 [ 679.233584][T16291] ? __perf_event_account_interrupt+0x187/0x280 [ 679.239855][T16291] __perf_event_overflow+0x448/0x610 [ 679.245174][T16291] perf_swevent_event+0x315/0x570 [ 679.250229][T16291] ? perf_tp_event+0xc30/0xc30 [ 679.255030][T16291] ? verify_lock_unused+0x140/0x140 [ 679.260267][T16291] ___perf_sw_event+0x49e/0x6e0 [ 679.265151][T16291] ? ___perf_sw_event+0x180/0x6e0 [ 679.270203][T16291] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 679.276657][T16291] ? __lock_acquire+0x13cf/0x7d10 [ 679.281724][T16291] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 679.287732][T16291] ? lock_chain_count+0x20/0x20 [ 679.292608][T16291] ? mark_lock+0x94/0x320 [ 679.296987][T16291] __perf_sw_event+0x135/0x260 [ 679.301786][T16291] do_user_addr_fault+0xaea/0xb10 [ 679.306845][T16291] ? trace_hardirqs_off_finish+0x86/0x180 [ 679.312590][T16291] exc_page_fault+0x60/0x100 [ 679.317214][T16291] asm_exc_page_fault+0x22/0x30 [ 679.322097][T16291] RIP: 0010:strncpy_from_user+0x14b/0x350 [ 679.327845][T16291] Code: 4c 89 e6 e8 77 be 49 fd 49 83 fc 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 ed 4c 89 3c 24 48 89 dd <4f> 8b 3c 2f 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4d 89 fe 49 [ 679.347472][T16291] RSP: 0018:ffffc9000471fb50 EFLAGS: 00050246 [ 679.353902][T16291] RAX: ffffffff8438c109 RBX: ffffc9000471fc70 RCX: ffff88804ab01e00 [ 679.361896][T16291] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 679.369888][T16291] RBP: ffffc9000471fc70 R08: ffff88804ab01e00 R09: 0000000000000003 [ 679.377883][T16291] R10: 0000000000000002 R11: 0000000000000002 R12: 000000000000007f [ 679.385879][T16291] R13: 0000000000000000 R14: 000000000000007f R15: 0000000000000000 [ 679.393882][T16291] ? strncpy_from_user+0x129/0x350 [ 679.399033][T16291] bpf_prog_load+0x1f3/0x1560 [ 679.403739][T16291] ? map_freeze+0x390/0x390 [ 679.408276][T16291] ? __might_fault+0xa6/0x120 [ 679.412978][T16291] ? __might_fault+0xa6/0x120 [ 679.417678][T16291] ? __might_fault+0xc2/0x120 [ 679.422378][T16291] ? __might_fault+0xa6/0x120 [ 679.427081][T16291] ? bpf_lsm_bpf+0x5/0x10 [ 679.431432][T16291] ? security_bpf+0x7a/0xa0 [ 679.435956][T16291] __sys_bpf+0x5b8/0x780 [ 679.440229][T16291] ? bpf_link_show_fdinfo+0x380/0x380 [ 679.445638][T16291] ? lock_chain_count+0x20/0x20 [ 679.450524][T16291] __x64_sys_bpf+0x78/0x90 [ 679.454967][T16291] do_syscall_64+0x4c/0xa0 [ 679.459406][T16291] ? clear_bhb_loop+0x60/0xb0 [ 679.464199][T16291] ? clear_bhb_loop+0x60/0xb0 [ 679.468909][T16291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 679.474920][T16291] RIP: 0033:0x7ffa6a99ce59 [ 679.479353][T16291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.498985][T16291] RSP: 002b:00007ffa6b87b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 679.507421][T16291] RAX: ffffffffffffffda RBX: 00007ffa6ac15fa0 RCX: 00007ffa6a99ce59 [ 679.515498][T16291] RDX: 0000000000000094 RSI: 0000200000000080 RDI: 0000000000000005 [ 679.523489][T16291] RBP: 00007ffa6aa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 679.531478][T16291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.539470][T16291] R13: 00007ffa6ac16038 R14: 00007ffa6ac15fa0 R15: 00007ffdb30d3838 [ 679.547483][T16291] [ 679.551120][T16291] Kernel Offset: disabled [ 679.555457][T16291] Rebooting in 86400 seconds..