last executing test programs: 50.247821136s ago: executing program 1 (id=4116): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180000004a0000000079e25abcde6f965985ba4b78735893b9fdee909bd0e999118d02585e9a2e14068771341a1f99eb1980add0519fcc51a8b957c0607c8ea1030e2aad070ffb43a268d1c8605b42d8f6322eb4c7c1ab92d5ad1953460b29dc0b10779ba07e8843e2ad872dc2de9fa0c3118858fd66883d732db8ebeb51fe39c767aa28f0a957ce61c0aceeaef5c7b2d0563d789a06f6d189f4942c09d4d8b6e81dbef9121008a7d9dde2725b44b5c5fd76c6c0251aabe32869f482", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007209200000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xff9, &(0x7f0000000800)=""/4089, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x90000, 0x0) 49.975753024s ago: executing program 1 (id=4119): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000009bb9ef7f75c9f12c0e000a000f000000", 0x28}, {&(0x7f0000000900)="63f48eeb93bf", 0x6}], 0x2}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x6d1b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x6, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x9}, 0x0, 0x10000006, 0xffffffffffffffff, 0x8) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f00000002c0)="468db75efeb4706248c730ad34a0b9216b4bafcd6e6eb260c830610e3d4db08b1d084dff56e4b0805a98006341bbe876a117af4a2a9e05dd9aa35d723ef2126a652ce3f663424b60e6f093fad4ff2e4df8aff6be77776a2348ec70eb4b69e4e6b894a490fb1e"}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = syz_clone(0xc0000, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000580)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2019e, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x2}, 0x154b8, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, r4, 0x1, r0, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4a, &(0x7f0000000280)=r5, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x9, 0x0, 0x0, 0x4, 0x749, 0x0, 0x8}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x422, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000440), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, r4, 0xe, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="180200002f000000000000000100000085100000010000009500000000000000180100002020732100000000002020207b1af8ff000000003fa100000000000007010000f8ffffffb702000008000000b703000000000028850000007600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57, 0x10, 0x0, 0x4a, 0x0, 0x0, 0xfffffffffffffd43}, 0x23) socket$kcm(0x10, 0x2, 0x10) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="27031c0016001400020000000000000006e1f0000000894f000f1102ee1680ca82973d2bd4b8", 0x26}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b39e5d175223317057", 0x24}, {&(0x7f0000000340)="551d389992c228e384254107", 0xc}], 0x3}, 0x24000008) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) 49.357414013s ago: executing program 1 (id=4126): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'netdevsim0\x00', @random="7157ffe02ef2"}) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000000c0)={r0}) r2 = socket$kcm(0x11, 0x2, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8919, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1, @perf_bp={0x0, 0xc}, 0x5000, 0xb44, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r5, 0xb) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, 0x0, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050005ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0xc4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xb) ioctl$TUNSETLINK(r8, 0x400454cd, 0x30a) ioctl$TUNGETVNETHDRSZ(r8, 0x800454d7, &(0x7f00000001c0)) 48.513963119s ago: executing program 3 (id=4132): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300", 0x3a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x21880}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008000200070002000600", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002c000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 48.50623821s ago: executing program 1 (id=4140): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000000050000000200000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x20000147, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000050000009500000000000000950000000000000095000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="05000000fffffeffffffffff00000000851000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb01001800000000000000d4000000d4000000070000000c00000000000011040000000000e8b3d0ec762900000a00000005000084000000000b00000004000000030000000600000000000000050000000900000001000000ff7f0000010000000500000002000000060000000200000000000000080080000000001105000000050000000200000000000002050000000c00000007000004800000000f0000000000000000020000030000000400000000000000050000000400000095000000fc06d8ce05000000040000000d00000001000000000000000a00000004000000010000000d00000000000000ff62000000612e2e5f6100"], &(0x7f0000000740)=""/253, 0xf3, 0xfd, 0x1, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ead600000000000007000000b7080000000000007b8af8ff00000000b7080000ab1000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000bf0500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x56, &(0x7f0000000280)=""/86, 0x40f00, 0x20, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000880)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x7, 0x2f8, 0x4}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000900)=[r1, r1, r1], &(0x7f0000000940)=[{0x5, 0x4, 0xa, 0x6}, {0x0, 0x3, 0xa}, {0x44, 0x2, 0x7, 0x4}, {0x0, 0x3, 0xe, 0xc}, {0x0, 0x2, 0x3, 0xa}, {0x0, 0x5, 0x7, 0xa}, {0x5, 0x3, 0xa, 0x6}, {0x1, 0x2, 0x0, 0xc}, {0x3, 0x2, 0xc, 0x6}, {0x1, 0x3, 0x2, 0xa}], 0x10, 0x401}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xffffffff, 0x0}, 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100000000000000000000ff000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x1a, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x0, 0x3, 0x2, 0x3, 0xa, 0x8, 0xffffffffffffffff}, @exit, @ldst={0x1, 0x3, 0x6, 0x0, 0x4, 0x100, 0x10}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x40, '\x00', r3, @cgroup_sock, r5, 0x8, &(0x7f0000000380)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x4, 0x8a48, 0x3}, 0x10, r6, 0xffffffffffffffff, 0x4, &(0x7f0000000640)=[r7, r8], &(0x7f0000000680)=[{0x1, 0x1, 0x6, 0x6}, {0x0, 0x5, 0x2, 0x6}, {0x4, 0x4, 0xf, 0xa}, {0x2, 0x5, 0xe}], 0x10, 0x2aa}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004ffffffff0000000003000000060000000000000003"], 0x0, 0x56}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r9, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="140000002d000b02d25a806f8c6394f9101a0400", 0x14}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 48.319792905s ago: executing program 3 (id=4133): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r1, 0x0, 0x0}, 0x10) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000018c0)={r4}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r5, &(0x7f0000000080)="a0", 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r5, &(0x7f0000000080)="a0", 0x0}, 0x20) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff01000000000000", 0x1e}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) (async) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff01000000000000", 0x1e}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x106) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40086602, &(0x7f0000000180)=0x20) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff000000007110bf0000000000950000000000000093609284a6304d0051031210a1ac6aeb329641381d486ac0aed88a2ab8e1d14faf9685fda5782db5a9272c9f88617ca58181077a9adbd84361379b843099ca8e959f183a8a799098bcf3"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) recvmsg$unix(r8, &(0x7f0000001780)={&(0x7f0000000100), 0x6e, 0x0, 0x0, &(0x7f0000001680)=[@rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x81) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, 0x0) (async) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40305839, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000760000004600000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r9}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r9, &(0x7f0000000300), 0x0}, 0x20) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a12fd4ab9d54a2b6a97a577ae18c8199", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 48.081365213s ago: executing program 1 (id=4135): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x9080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000240)='vlan0\x00') ioctl$TUNGETVNETLE(r1, 0x40047459, &(0x7f00000002c0)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2f9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$TUNSETFILTEREBPF(r9, 0xb702, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, 0xffffffffffffffff) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="2d6e65745f636c73202d68756765746c62202b622f591812fe33ec1e8a236c6b696f20"], 0x19) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 47.941806777s ago: executing program 3 (id=4136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x7, 0x0, 0x9, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x8201a, 0xb44, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x6, r2, 0xb) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', r0}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = gettid() write$cgroup_pid(r0, &(0x7f00000003c0)=r4, 0x12) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="6321fdffffff776d00"], 0x9) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000280)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000240)='\n', 0x1}], 0x1}, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000040012000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f00000002c0)={[{0x2d, 'memory'}, {0x2d, 'perf_event'}, {0x2d, 'devices'}]}, 0x1d) 47.045272334s ago: executing program 2 (id=4139): socket$kcm(0xf, 0x3, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000007000000030000000100000006000100", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000005000000030000000000000000000000004c9a9e", @ANYRES32, @ANYBLOB], 0x50) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x3, 0x4, 0x8000, 0x4410, r2, 0x0, '\x00', 0x0, r3, 0x5, 0x4, 0x2, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYRES64=r0], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000080)='cpu&20\t&&') r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa00, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) socketpair(0x10, 0x6, 0x1, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000300)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x7, 0xfffff020}, {0x6, 0x61, 0x0, 0x7}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0xfffffffffffff001, 0x5}, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) 46.341293676s ago: executing program 3 (id=4141): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c000cc00400020208000200032101001400000007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x2124, 0x6, 0x0, 0x8, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x31}, 0x81c0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f00000007c0)={0x1, &(0x7f0000000780)=[{0x7, 0x6b, 0xd, 0x2}]}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xfc, 0xfc, 0x8, [@struct={0xe, 0xa, 0x0, 0x4, 0x0, 0x7, [{0x6, 0x4, 0x6}, {0x9, 0x3, 0x10}, {0x2, 0x2, 0xadc4}, {0x7, 0x4, 0x1ff}, {0x4, 0x3, 0xfdfb}, {0x6, 0x2, 0x67}, {0xb, 0x4, 0x1ff}, {0x5, 0x5, 0xe}, {0x8, 0x4, 0x2}, {0x6, 0x4, 0xc02f}]}, @func={0xa, 0x0, 0x0, 0xc, 0x5}, @struct={0x5, 0x6, 0x0, 0x4, 0x1, 0x4, [{0x5, 0x2, 0x57}, {0xf, 0x2, 0x3a4d}, {0x0, 0x4, 0x9}, {0x4, 0x4, 0x5}, {0x3, 0x5, 0x274c}, {0x7, 0x3, 0x81}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x61, 0x0, 0x61, 0x2e, 0x2e]}}, &(0x7f00000009c0)=""/217, 0x11c, 0xd9, 0x0, 0xc122, 0x10000, @value=r3}, 0x28) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xfffffffc, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x50) unlink(&(0x7f00000005c0)='./file0\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000027c0)={0x10, 0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000350901000000000000000000b7020000000000007b9af8f700000000b509020000000400dbaa00000000000007080000f8ffffffbfa400000000000007090000f0ffffffc7820000080000001822000000000000c4e7e9bc82cc7ae3ade35c82e2e3a037dd7e8b15a487a8a740b060feafbe3e58762091791268a85aa334ee408f0f3e5d0362f4", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000800), 0x8800, 0x0) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x15, &(0x7f00000000c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0x9, 0x6, 0x8, 0x10, 0x4}], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x50, &(0x7f00000002c0)=""/80, 0x40f00, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x10, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000004c0)=r5, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@ifindex, 0xf, 0x1, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup(r3, &(0x7f0000000640)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@cgroup=r7, r3, 0x19, 0x2010, 0x0, @value=r3, @void, @void, @void, r6}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x4, 0x80, 0x6, 0x7, 0x10, 0x1, 0x0, 0x8f21, 0x80002, 0x8, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0xb, @perf_bp={0x0, 0x1}, 0x104204, 0x7e5, 0x9, 0x4, 0x8, 0xa1, 0x3, 0x0, 0x6, 0x0, 0x42f8}, r8, 0xa, r1, 0x2) 46.003802066s ago: executing program 0 (id=4142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xfc73, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081046a81f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000900feffff7f3626feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8dcef52a9d7c7c0b7a196e6f66112c88a6bbace80177ccbec4c2ee5a7cef4090000001f3c29643a5ee4ce1b14d6d930dfe1d9d322d4acd9b575730d0080000000000000b5675025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee28a0", 0xd8}], 0x1}, 0x48040) 45.936003488s ago: executing program 3 (id=4143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYRES16=0x0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18080000c0000000000400000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000061cd4d5d0a8a75424d4cc75d454b008500000004000000bc0908000080000035090100000000009500000000070000bf9800000000000056080000030000008500000007000000b7000000000000009500000000000000", @ANYRES16=r0, @ANYRES8=0x0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af36504000100381c1500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x15, 0x5, 0x0) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10400, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x27, 0xf, 0x0, 0x0, 0x0, 0x9, 0x640bd, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b03, 0x2, @perf_config_ext={0x4, 0x1000}, 0x8428, 0x4, 0x43a1bd76, 0x8, 0xa, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40002000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x10161) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x1, 0x106) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRES8=r3, @ANYRES8=r7], 0x12) r8 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c031a02000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 45.876640701s ago: executing program 0 (id=4144): perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x9, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x41110, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7fffffffffffffff, 0x5}, 0x4, 0xb5, 0x9, 0x5, 0x10000, 0x10001, 0x8, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e1208", 0x29}], 0x10000365}, 0x24000880) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x2082}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYRES16=r0, @ANYRES64=r2, @ANYBLOB="ca68ca8f9fa567a4da57644a155f063dac919f18f4a829d65b400ac0abc1f364c8e0ea22161b62d1fd525ba93558151358fd54b93edef71e553d6795e3e3a528c9a561e5e3d0ae999a72ccc6fa68627104f91aee1b83d9d91f121003291f7e5d37bcd0768a098e10b4cc48e73db15621c9b2c0768c0e8d4b558d7d356a6bfe96fce9dfd945f497648886a9b42a973278d5e2e83a8ced9908d570519396cec4efb14eee09a980de34d9bd84bc113d37e4c2cab194c0bcb96e1e8193f48ab919698449740e14db170193a3471a585192bf9db60708ec1c44c9708addcde5086556a9f0d464018c300c1205"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r1], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r6}, 0xc) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = gettid() sendmsg$unix(r7, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38, 0x800}, 0x40800) r9 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)="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", 0xff37}], 0x3}, 0x40e4804) 44.800988043s ago: executing program 2 (id=4145): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x62, 0x62, 0x3, [@struct={0xb, 0x1, 0x0, 0x4, 0x1, 0x4, [{0xa, 0x4, 0x101}]}, @fwd={0xd}, @datasec={0xa, 0x4, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x881a}, {0x1, 0x0, 0x8}, {0x1, 0x3, 0x8}, {0x5, 0xffffff1e, 0x10}], "c3c8"}]}, {0x0, [0x30]}}, &(0x7f0000000800)=""/47, 0x7f, 0x2f, 0x1, 0x95a, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1546], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r0, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', r1, 0x4000, r1}, 0x18) 44.800255503s ago: executing program 1 (id=4146): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={&(0x7f0000000180)}, 0x8000, 0x3, 0x9, 0x1, 0x9, 0x6, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x3efd7ab4c41335d9, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x21, 0x2, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r3 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x404f444) r5 = socket$kcm(0x21, 0x2, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507818231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e726aef83d9ff9281ab79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df0000000010c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd19953603000000adeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016be64dc097982e23462392a0cd05afb2e060fd6424a942ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5d81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b1495213060000000000000049584655c4fce8c5bb7c54664aef6d780100358aa54bcb49926c4be9ee4659153d9fa95d07cc4efdab2c355efe8e8d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6122f572047ccf3c8edd82660e5d74c52be71d780c30000000000fd00000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f2def52394db3e9d8318bbb9baff3db95bfd69e08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d05b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0a832f5194ddfce51e5aff28f621bb2fd2a5ab719df823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c3348329b0ee77d93596e3f1287552e0c8cdb326c5118d2e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e26aa90c571fa3c07238697b13c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170e42f28cea4105541e11c8605628b9ca935bc252fee8b596a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babb8fa16f3182c5b98493a5aa943aa3a777a751f56e0c7a74f7f63d83ff119561acd5fe560563b051dc29ac586b21148ad5a5498369ac347d19660c132b1df58d65418bc824d8b88b699462c2ce6524eaf0905445413033f041a26b189f2553ef218eba22152a4dc979a0e37396ae1a2883b1e4d44c8af7973d5c1f286c26459209db5a9a51dc69d0ba3fb6c884e50be3598ac53295137c97dabe52d98fed0b352c0b68b7e75ed59931ef57bb5fc28d5b1f914fc8abbb444637a5dfbac5035eb0713efb823360a8da80e4265e599f76952a8082b8c5f7890275a922cd2ccaaf75dcca6849e89e1bab32fe9b598c61d7565dc6ab0a6d43b60f8d08ddf27a286807692d18973edaa6d5401c79b3cafaab4a8d6c946cbe5de350000000022e16a5f72c6d41dc9de8517fdcfa0c0efca880257443cfc3057c353569ffb1588b4bb261a6e99c5936e1b4339d87ec84db99e797f44451fc6b5da1950d24b3d4118f2288804740e605500c1f493c7dc42164cc6c1b01a329ce95272a07a355d4ba705b5e71ce5e1042a0c638e565881e5eedbc62f79407b73ae787c9cdb752eda44aeef962c93ab245f61e8ca5c0d41cc56124840f1b2b30be599fea0afaf905f90dd3e55fef0b94afbfd7144b7"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @local, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b", @ANYRES64=r6, @ANYRES32=r1], 0x28}, 0xfc40) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB="fdfbfeff00000000000000000000000000050000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) r7 = perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x1, 0x6, 0xc0, 0xfc, 0x0, 0x4, 0x600a9, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x2100, 0x7, 0x7, 0x6, 0x1, 0xb, 0xffff, 0x0, 0x125b00, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r7) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) 44.791622834s ago: executing program 0 (id=4147): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x27) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x20000000000000, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xffb8}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f80)={r9, 0xe0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000cc0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x4a, &(0x7f0000000d40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000dc0), &(0x7f0000000e00), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000e40)}}, 0x10) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000fc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@decl_tag={0xe, 0x0, 0x0, 0x11, 0x3, 0x7}, @struct={0xd, 0x2, 0x0, 0x4, 0x0, 0x9, [{0xd, 0x3, 0x5c}, {0xc, 0x2, 0x5}]}, @func={0x6, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x61, 0x30, 0x2e, 0x5f, 0x5f, 0x0, 0x2e]}}, &(0x7f0000001080)=""/153, 0x61, 0x99}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={0xffffffffffffffff, 0x20, &(0x7f0000001300)={&(0x7f00000011c0)=""/157, 0x9d, 0x0, &(0x7f0000001280)=""/98, 0x62}}, 0x10) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x18, &(0x7f0000001380)=ANY=[@ANYBLOB="180000004d0500000000000008000000b7080000000000007b8af8ff00000000b70800007f0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="000000000000000085000000a5001700850000005200000018ee0f000a00"/39, @ANYRES32=r8, @ANYBLOB="000000000000000018000000ffffffff00000000050000009500000000000000"], &(0x7f0000001440)='syzkaller\x00', 0x290, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000014c0)={0x5, 0xc, 0x800, 0x400}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001500), &(0x7f0000001540)=[{0x0, 0x2, 0x4}, {0x0, 0x5, 0xf}, {0x5, 0x1, 0x1, 0x4}, {0x1, 0x2, 0x4, 0x1}, {0x2, 0x2, 0x7}, {0x3, 0x5, 0xf, 0xb}], 0x10, 0x5}, 0x94) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x2, 0x0, r6, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1b, 0x1d, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0xa, 0x1, 0x0, r6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x8c3, 0x39, &(0x7f0000000c40)=""/57, 0x41000, 0x38, '\x00', r10, @fallback=0x31, r11, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001180)={0x2, 0x6, 0x8001, 0x7}, 0x10, r12, r13, 0x0, &(0x7f0000001740)=[r14, r8, r8], &(0x7f0000001780), 0x10, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x4, 0x17, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf588, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x5}, @jmp={0x5, 0x0, 0x4, 0x8, 0x0, 0x20, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x42, &(0x7f0000000280)=""/66, 0x41100, 0x0, '\x00', r5, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x3, 0x8, 0x1, 0x7}, 0x10, r12, r4, 0x3, &(0x7f0000000580)=[r4, r1, r0, r0, r1, r1, r1, r1], &(0x7f0000000680)=[{0x1, 0x1, 0xa, 0x4}, {0x4, 0x4, 0x10, 0x4}, {0x4, 0x5, 0x8, 0xc}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000000)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.790562794s ago: executing program 2 (id=4148): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\x00\x00\x00\x00\x00\x00N'], 0x20) r0 = perf_event_open(&(0x7f0000001c40)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0x1, &(0x7f0000000200)="d25117463fb1ecc6aa32fa357d74afe85de47b712573d3cf22056b", &(0x7f0000000440)=""/29, 0x4}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1e000000ffffff7f02000000001a000000000000", @ANYRES32, @ANYBLOB="fc02000000000000002200"/24, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000005000000000000000e000000000000200000000000000000"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/136, 0x88}], 0x1, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x10001) r7 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040)=r6, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="9d7e049e7b310ab5224f0200"/30], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f3, &(0x7f0000000080)) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b90900000a0b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9ecbee5de6ccd4", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x854b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd, 0x1, @perf_bp={0x0}, 0x1129b, 0x4, 0x98, 0x3, 0x0, 0xfffff271, 0x400, 0x0, 0x2, 0x0, 0x20}, 0x0, 0xe, r0, 0x1) r8 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r8, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x4008040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) 44.788946484s ago: executing program 3 (id=4149): bpf$LINK_DETACH(0x22, &(0x7f0000001000), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_clone(0x10eb22f000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x4b, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040) sendmsg$inet(r5, 0x0, 0x8040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) recvmsg$unix(r1, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) setsockopt$sock_attach_bpf(r7, 0x1, 0x41, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x9, 0x8, 0x1, 0xf, 0x0, 0xfffffffffffffffa, 0xcc00, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x80000, 0x1, @perf_bp={&(0x7f0000000000), 0x5f4637a6b8bf78d9}, 0x8, 0x4, 0x95, 0x0, 0x0, 0xffffc4c0, 0xb, 0x0, 0x4, 0x0, 0xd}) sendmsg$kcm(r7, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40002063) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r9}, 0xc) 44.788410134s ago: executing program 0 (id=4150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a4"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r1}, 0x38) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f00000002c0)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a", 0x76}], 0x1, 0x0, 0x0, 0x6000}, 0x0) socketpair(0x5, 0x4, 0x0, &(0x7f0000000580)) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x300, 0x403d87c21de2ff3f, &(0x7f0000000040)="b90103606989068c3c270040f0002f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7"}, 0x28) 44.392969096s ago: executing program 2 (id=4151): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x6, 0x7, 0x0, 0x0, 0x4, 0x10000, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x1, 0xfffffffffffffffd, 0xf, 0x1, 0x50, 0x7, 0x8, 0x0, 0x9, 0x0, 0xa}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0x37, &(0x7f0000000440)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="f915a327f6b897041dd6895d1389e341e16b3e17f55ce3e32ab243a684dec4a19f9d01c70ea4", 0x26}, {&(0x7f0000000180)="1a44e812cc5c1cdf4cee9599fd6cd2b846128f02f3df0d034b4b5896ada878236f46f03429", 0x25}, {&(0x7f00000001c0)="0745dfa1d560d4a3acf2b5c925a8ad0b975aa20c9634cc2b737afdf8d6bd494bf4fdf8b995538dbdadb6f5daedd23fe8ca4e31f1d0ca893084bd50dbf87659af1638f548ee31058d2cc410b7c4973a6e1487549865db48c78d8176d81483531beb65b620c2e37ed5c9b4fd5abafca8dd02fc818ec8402614dc86b2e8a5d448f28580fc198396086b788d976725fdc20ff203be7686e939ebd7b9441f792b358d3ca08de624dd", 0xa6}], 0x3, &(0x7f0000000680)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x84, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xb5, [@loopback, @rand_addr=0x64010100, @loopback, @empty]}, @rr={0x7, 0x7, 0xb9, [@remote]}, @lsrr={0x83, 0x3, 0x5f}, @noop, @generic={0x44, 0xa, "4f4a56e54baef6b1"}, @cipso={0x86, 0x22, 0x3, [{0x1, 0x12, "e8573309eb9d28d12ccab1ac9601f517"}, {0x6, 0xa, "0644521afce0014c"}]}, @noop, @cipso={0x86, 0x28, 0x2, [{0x5, 0xb, "4e39bf452d4d01cb4b"}, {0x7, 0xd, "595662eb3da5377ebf4fb9"}, {0x2, 0xa, "0741d6f28cffc74d"}]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ra={0x94, 0x4}, @generic={0x7, 0x4, "9bc2"}, @end, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0x9, [{@multicast1, 0x4}, {@local, 0x2993a12b}, {@remote}, {@multicast1, 0x9}, {@loopback, 0x5}, {@private=0xa010102, 0xa40}, {@private=0xa010102, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @lsrr={0x83, 0x7, 0x81, [@local]}, @noop]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@end, @ssrr={0x89, 0x3, 0x44}, @lsrr={0x83, 0x13, 0x72, [@loopback, @broadcast, @remote, @private=0xa010102]}, @end, @rr={0x7, 0x1b, 0x3b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, @rand_addr=0x64010101]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}], 0x1b8}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x58, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@bloom_filter={0x1e, 0x3, 0x8, 0x4, 0x20f40, 0x1, 0xfffffff8, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x5}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d00)={0x1b, 0x0, 0x0, 0x1e434037, 0x0, 0x1, 0x9, '\x00', r3, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%ps \x00'}, 0x20) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x11, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x3, 0x1, 0x0, 0xe, 0x100, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5}, @exit]}, &(0x7f0000000940)='GPL\x00', 0x9, 0xc0, &(0x7f0000000980)=""/192, 0x41100, 0x18, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0x7abb, 0xc0e4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[r6, r7, r8, r9, r10], 0x0, 0x10, 0x6}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000f40)={r1, 0x9, 0x18}, 0xc) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x5, &(0x7f0000000f80)=@raw=[@call={0x85, 0x0, 0x0, 0x8a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r12}}], &(0x7f0000000fc0)='GPL\x00', 0xfffff70d, 0x1c, &(0x7f0000001000)=""/28, 0x41100, 0x24, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x0, 0x6b7, 0x6}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000010c0)=[{0x0, 0x3, 0xf, 0x4}, {0x2, 0x5, 0xd}, {0x3, 0x1, 0xb, 0x3}, {0x5, 0x2, 0xb, 0x2}, {0x2, 0x2, 0x4}, {0x3, 0x2, 0x8, 0x8}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001300)={@ifindex=r5, 0xa, 0x0, 0x0, &(0x7f0000001200)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000001240)=[0x0, 0x0], &(0x7f0000001280)=[0x0], &(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)={@ifindex=r5, r11, 0x11, 0x0, r13, @void, @value=r11, @void, @void, r14}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r7, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)=r11}, 0x20) r16 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000014c0)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x5, &(0x7f0000001440)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r15}}], &(0x7f0000001480)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x8, '\x00', r2, 0x25, r16, 0x8, &(0x7f0000001500)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001540)={0x3, 0xe, 0xe0f, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r13, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000001700)=[0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000001780)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000017c0), &(0x7f0000001800), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000001840)}}, 0x10) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x5, 0x0, r6, 0x2, '\x00', r5, r16, 0x5, 0x0, 0x5}, 0x50) r20 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x5, &(0x7f0000001640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1b}, [@generic={0x6, 0x8, 0x2, 0x5, 0x80000000}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000001680)='syzkaller\x00', 0x54, 0x0, 0x0, 0x40f00, 0x4, '\x00', r17, 0x25, r16, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001a40)=[r12, r8, r19], &(0x7f0000001a80)=[{0x3, 0x5, 0x7}, {0x5, 0x5, 0xc, 0x8}, {0x4, 0x3, 0x1}, {0x1, 0x5, 0x2, 0x4}, {0x0, 0x4, 0x3, 0xc}, {0x4, 0x1, 0xd, 0x6}, {0x0, 0x5, 0x8, 0x5}, {0x1, 0x4, 0xe, 0x3}, {0x3, 0x1, 0x2, 0x5}], 0x10, 0xfd}, 0x94) r21 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001d80)=r18, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x19, 0x10, &(0x7f0000001c00)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}], &(0x7f0000001c80)='syzkaller\x00', 0x10000, 0xab, &(0x7f0000001cc0)=""/171, 0x40f00, 0x10, '\x00', r17, @fallback=0x8, r21, 0x8, &(0x7f0000001dc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000001e00)={0x0, 0x6, 0xd8, 0x3}, 0x10, r18, r11, 0x7, 0x0, &(0x7f0000001e40)=[{0x4, 0x5, 0x5, 0xa}, {0x0, 0x2, 0xc, 0x8}, {0x5, 0x5, 0x8, 0x6}, {0x2, 0x2, 0x3, 0xc}, {0x0, 0x5, 0x1, 0x7}, {0x1, 0x1, 0xb, 0xb}, {0x5, 0x4, 0x6, 0xc}], 0x10, 0x7fffffff}, 0x94) r22 = bpf$ITER_CREATE(0x21, &(0x7f0000001f80), 0x8) sendmsg$inet(r22, &(0x7f0000002240)={&(0x7f0000001fc0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000002000)="7485af9f57867eae197181f8492528df35e36d715876d50d8614c53e96fc9e98c023f81b117e2760", 0x28}, {&(0x7f0000002040)="90ba0c008e69a357d29c4eee700a843e45479ca5e619b89f4e3afe06f5421597d9cec8d5157561dffeaa389e4041da7bad8d543c92a651daba22bf9e4981f99a182c2a47fccbd55408a386ac43a9a7457ca8242a53a3eefeb38a855ba0f863af4e8a4810484bdb36828846cbe28e74a0a457509f6dba39707e389f993ba625c121fffd23a914cf86390913b6b4526f87a7ad1683b72586a4aa8d63828f69ea8b6d023aac58c16bc130ec9024a7c2c85f2e2e5ba55830b9291effff7e042be128c165cdc5916930735d98bca7748fe1a60ef9bb141757922f5d2291f582daca4fb54303bd07f2bd3252adee0a7959", 0xee}, {&(0x7f0000002140)="40f6c12e5b8ed72b4cbcf45f60fcdd706e4f9b2fe8003d01c5af13e85399e600ec6139e2b2212cd77b291afe00872d98f1b4f25d3dd59709a70e725944f80f7ad1f830f8c7464ec3afc95eb425413ff377d5ad6e", 0x54}], 0x3, &(0x7f0000002200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3c}}], 0x30}, 0x20004081) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002300)={{r22}, &(0x7f0000002280), &(0x7f00000022c0)=r20}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=@base={0x19, 0xdd, 0x9, 0x0, 0x80, r19, 0x470b, '\x00', r3, r16, 0x4, 0x2}, 0x50) ioctl$TUNSETIFF(r22, 0x400454ca, &(0x7f00000023c0)={'bridge_slave_0\x00', 0x1000}) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x9) 44.138601324s ago: executing program 0 (id=4152): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000b"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r1}, &(0x7f0000000700), &(0x7f0000000880)=r2}, 0x20) r4 = syz_clone(0x2820200, &(0x7f0000000900)="6cc5a91d20c70f81249aaff3280ced85f69c2c5f532b3c3f668cb1e3bf6703bcf392511e01f3ce0165622e95db4971f3614eca5425921fa60bc91e48652f392569577a7f339b4b93e8c536324ea0f77651a09cb6efea3bf154b6c2d2b1e151373357eb992745", 0x66, &(0x7f0000000980), &(0x7f0000000a00), &(0x7f0000000a40)="0165ff5b7fa70bd449fc55aacd4672ccbf78dc74cb5198a71c0cc6adbd06aef76d83987044175a0b18fd6ca2b119a1639704fb42f10ca3d738f62888503e353a4dd1a7d4ca20822be5266d5a7651") sendmsg$unix(r3, &(0x7f0000000b40)={&(0x7f0000000800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, &(0x7f0000000ac0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, r0]}}], 0x60, 0x24008044}, 0x4000000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r2}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff6}, 0x10080, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x40, 0x0, 0x8001}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10420, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x88) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r5, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYRES32=r9], &(0x7f0000000140)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 44.137934084s ago: executing program 2 (id=4153): bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x1dac3ecfc31f927a, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000002c0), 0x8, 0x6c, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e7}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4070300", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 43.886512161s ago: executing program 0 (id=4154): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$inet(r4, &(0x7f0000000b80)={&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a0101010a0101010000000008010000000000000000000007000000071389ac1414bbac1414aa7f0000016401010244047443861200000002050c90dc83c62a7fedb572bc4424e091ac1414bb00000004e000000200000002ac1e000100000009ac14143400000005070baae0000002ffffffdf863b00000001010a1e89a947476dad880206e4c7db13000e0f4eed94dcf6f167fc3fccb88506851a66860105fa03a2000cac0ed7fac1f3b75026c68917dbac1414aae00000018ce2a759a46195f9cfc1ac1414bbe0000001ac1e0001444c0c03e000000200000008e000000100800000ac14142c00000009ac1414aa00000005ffffffff0000000dac14143200000001ac1414aa00010001e0000001000000ffac1e0101000000000000140000000000000000000000010000004f3a2640000000f0170f49f111b24200000000000200000035000000000000001400000000000000000000000200000001000000000000002c00000000000000000000000700000000004414a770762df2c90000009f0000000100000005"], 0x1a0}, 0x40040c0) (async) sendmsg$inet(r4, &(0x7f0000000b80)={&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}, 0x40040c0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)=""/4098, 0x1002}], 0x1}, 0x10182) r6 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r6, 0x0, 0xfdef) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x190, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 42.912524661s ago: executing program 2 (id=4155): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x9, 0x7c, &(0x7f0000000480)=""/124}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {&(0x7f0000000180)=""/217, 0xd9}, {&(0x7f0000003ac0)=""/4108, 0x100c}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x7}, 0x20) write$cgroup_subtree(r4, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000005c0)=r2, 0x12) r6 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x18, &(0x7f0000000000), 0x8) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000340)=r6, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x9) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a00200000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r11 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r11, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000000c00)}, 0x0) 0s ago: executing program 32 (id=4154): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) (async) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) (async) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0xfdef) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$inet(r4, &(0x7f0000000b80)={&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0a0101010a0101010000000008010000000000000000000007000000071389ac1414bbac1414aa7f0000016401010244047443861200000002050c90dc83c62a7fedb572bc4424e091ac1414bb00000004e000000200000002ac1e000100000009ac14143400000005070baae0000002ffffffdf863b00000001010a1e89a947476dad880206e4c7db13000e0f4eed94dcf6f167fc3fccb88506851a66860105fa03a2000cac0ed7fac1f3b75026c68917dbac1414aae00000018ce2a759a46195f9cfc1ac1414bbe0000001ac1e0001444c0c03e000000200000008e000000100800000ac14142c00000009ac1414aa00000005ffffffff0000000dac14143200000001ac1414aa00010001e0000001000000ffac1e0101000000000000140000000000000000000000010000004f3a2640000000f0170f49f111b24200000000000200000035000000000000001400000000000000000000000200000001000000000000002c00000000000000000000000700000000004414a770762df2c90000009f0000000100000005"], 0x1a0}, 0x40040c0) (async) sendmsg$inet(r4, &(0x7f0000000b80)={&(0x7f0000000400)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1a0}, 0x40040c0) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002780)=""/4098, 0x1002}], 0x1}, 0x10182) r6 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r6, 0x0, 0xfdef) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xfdef) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x190, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): miscuous mode [ 515.224244][T14392] veth1_macvtap: entered promiscuous mode [ 515.258767][T14392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.270132][T14392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.281523][T14392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.293998][T14392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.306356][T14392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.318591][T14392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.336591][T14392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 515.353767][T14392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.366351][T14392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.409568][T14392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.427871][T14392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.445094][T14392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 515.455640][T14392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.473799][T14392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 515.485594][T14392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.499983][T14392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.519892][T14392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.540149][T14392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.569962][T14392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.591150][T14392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.604934][T14392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.623816][T14392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.883898][ T6903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.900889][ T6903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.955995][ T6919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.986329][ T6919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.103150][T14556] netlink: 'syz.3.2342': attribute type 10 has an invalid length. [ 516.437672][T14394] Bluetooth: hci0: command tx timeout [ 517.011801][T14556] team0: Port device wlan1 added [ 517.026382][T14566] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2298'. [ 517.305315][T14575] netlink: 'syz.3.2348': attribute type 33 has an invalid length. [ 517.337125][T14575] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2348'. [ 518.362693][T14572] delete_channel: no stack [ 518.889203][T14394] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 519.160721][ T6919] wlan1: Trigger new scan to find an IBSS to join [ 519.446593][T14628] netlink: 'syz.1.2362': attribute type 21 has an invalid length. [ 519.464417][T14628] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2362'. [ 521.326530][T14639] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2363'. [ 521.362682][T14639] bridge_slave_1: default FDB implementation only supports local addresses [ 521.490521][T14647] netlink: 'syz.3.2364': attribute type 3 has an invalid length. [ 521.537025][T14647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2364'. [ 521.598855][T14651] netlink: 'syz.0.2366': attribute type 21 has an invalid length. [ 521.619597][T14651] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2366'. [ 522.423937][T14669] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2367'. [ 522.465141][T14669] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2367'. [ 522.541805][T14657] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2367'. [ 522.561747][T14670] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2367'. [ 522.952817][T14678] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2373'. [ 523.000893][T14678] netlink: del zone limit has 8 unknown bytes [ 523.594331][T14720] netlink: 'syz.1.2380': attribute type 29 has an invalid length. [ 523.651227][T14720] netlink: 'syz.1.2380': attribute type 29 has an invalid length. [ 523.666020][T14723] netlink: 'syz.1.2380': attribute type 29 has an invalid length. [ 523.738931][T14720] netlink: 'syz.1.2380': attribute type 29 has an invalid length. [ 523.761445][T14723] netlink: 'syz.1.2380': attribute type 29 has an invalid length. [ 523.869583][T14729] netlink: 'syz.0.2383': attribute type 4 has an invalid length. [ 523.929538][T14729] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2383'. [ 524.010309][T14733] netlink: 'syz.1.2385': attribute type 33 has an invalid length. [ 524.038666][T14733] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2385'. [ 524.464459][T14746] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2389'. [ 524.672108][T14753] netlink: 'syz.0.2391': attribute type 21 has an invalid length. [ 524.680233][T14753] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2391'. [ 524.689519][T14753] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2391'. [ 524.963429][T14758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.160017][ T6901] wlan1: Trigger new scan to find an IBSS to join [ 526.293111][T14802] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 526.329283][T14802] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.376660][T14802] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 526.574026][ T6909] wlan1: Creating new IBSS network, BSSID 8a:c2:bd:3a:a3:45 [ 526.804604][T14823] bridge_slave_1: default FDB implementation only supports local addresses [ 527.066390][T14833] validate_nla: 4 callbacks suppressed [ 527.066410][T14833] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 527.780170][T14828] netlink: 'syz.1.2411': attribute type 3 has an invalid length. [ 527.788436][T14828] __nla_validate_parse: 8 callbacks suppressed [ 527.788454][T14828] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2411'. [ 528.401678][T14849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2416'. [ 529.081722][T14877] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2423'. [ 531.077309][ T968] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 531.436164][T14905] netlink: 'syz.2.2430': attribute type 10 has an invalid length. [ 531.447385][T14901] netlink: 'syz.1.2429': attribute type 2 has an invalid length. [ 531.455164][T14901] netlink: 'syz.1.2429': attribute type 8 has an invalid length. [ 531.486626][T14901] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2429'. [ 531.642936][T14914] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2431'. [ 531.677655][T14915] netlink: 'syz.2.2432': attribute type 2 has an invalid length. [ 532.178380][T14922] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2432'. [ 532.188258][T14915] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2432'. [ 532.651439][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'. [ 532.980224][T14928] netlink: 'syz.0.2437': attribute type 7 has an invalid length. [ 532.988650][T14928] netlink: 'syz.0.2437': attribute type 1 has an invalid length. [ 533.003830][T14928] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2437'. [ 533.021881][T14943] netlink: 177388 bytes leftover after parsing attributes in process `syz.2.2439'. [ 534.254729][ T5087] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.265471][ T5087] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.274095][ T5087] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.285772][ T5087] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.296783][ T5087] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 534.304286][ T5087] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 534.351647][T14968] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2449'. [ 534.532333][T14976] netlink: 'syz.0.2451': attribute type 2 has an invalid length. [ 534.541038][T14976] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.2451'. [ 534.583004][T14977] netlink: 'syz.3.2450': attribute type 10 has an invalid length. [ 534.880574][T14970] chnl_net:caif_netlink_parms(): no params data found [ 535.015964][ T6901] team0: Port device netdevsim3 removed [ 535.027579][ T6901] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.081827][T14970] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.102983][T14970] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.115835][T14970] bridge_slave_0: entered allmulticast mode [ 535.124036][T14970] bridge_slave_0: entered promiscuous mode [ 535.173561][ T6901] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.192113][T14970] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.205407][T14970] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.214789][T14970] bridge_slave_1: entered allmulticast mode [ 535.223681][T14970] bridge_slave_1: entered promiscuous mode [ 535.271285][ T6901] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.291411][T14970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.305105][T14970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.353893][ T6901] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.375225][T14970] team0: Port device team_slave_0 added [ 535.399736][T14970] team0: Port device team_slave_1 added [ 535.451492][T14970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.478051][T14970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.522808][T14999] netlink: 'syz.0.2456': attribute type 7 has an invalid length. [ 535.530011][T14970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.544654][T14999] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 535.560058][T14999] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2456'. [ 535.563123][T14970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.602501][T14970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.630181][T14970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.712922][T15007] netlink: 'syz.0.2458': attribute type 29 has an invalid length. [ 535.812862][T15007] netlink: 'syz.0.2458': attribute type 29 has an invalid length. [ 535.825408][T15009] netlink: 'syz.0.2458': attribute type 29 has an invalid length. [ 535.845922][T14970] hsr_slave_0: entered promiscuous mode [ 535.860593][T14970] hsr_slave_1: entered promiscuous mode [ 535.869479][T14970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.878147][T14970] Cannot create hsr debugfs directory [ 535.902519][T15007] netlink: 'syz.0.2458': attribute type 29 has an invalid length. [ 536.253459][ T6901] ip6gretap0 (unregistering): left allmulticast mode [ 536.264904][ T6901] ip6gretap0 (unregistering): left promiscuous mode [ 536.279392][ T6901] Ÿë: port 1(ip6gretap0) entered disabled state [ 536.358267][ T5087] Bluetooth: hci5: command tx timeout [ 536.441239][T15015] team0: Device hsr_slave_0 failed to register rx_handler [ 537.133713][T15031] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2463'. [ 537.199980][T15036] netlink: 'syz.3.2464': attribute type 11 has an invalid length. [ 537.219529][T15036] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.2464'. [ 537.460552][ T6901] gretap0 (unregistering): left allmulticast mode [ 537.477311][ T6901] gretap0 (unregistering): left promiscuous mode [ 537.494074][ T6901] bridge0: port 2(gretap0) entered disabled state [ 537.585578][T15037] team0: Device wg1 is of different type [ 538.087990][T15047] delete_channel: no stack [ 538.440773][ T5087] Bluetooth: hci5: command tx timeout [ 538.835170][T14970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 538.869229][T14970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 538.915832][T14970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 538.964779][T14970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 539.380709][T15081] validate_nla: 6 callbacks suppressed [ 539.380797][T15081] netlink: 'syz.3.2475': attribute type 21 has an invalid length. [ 539.437622][T15081] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2475'. [ 539.784744][T14970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.114685][T14970] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.180578][T14684] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.187815][T14684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.230338][T14684] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.237626][T14684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.521479][ T5087] Bluetooth: hci5: command tx timeout [ 540.539348][ T6901] hsr_slave_0: left promiscuous mode [ 540.565181][ T6901] hsr_slave_1: left promiscuous mode [ 540.599674][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.646103][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.668945][ T6901] batman_adv: batadv0: Interface deactivated: €Â0 [ 540.693939][ T6901] batman_adv: batadv0: Removing interface: €Â0 [ 540.718385][ T6901] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 540.741444][ T6901] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 540.775972][ T6901] hsr0: left allmulticast mode [ 540.804124][ T6901] bridge0: port 3(hsr0) entered disabled state [ 540.814300][ T6901] bridge_slave_0: left promiscuous mode [ 540.827507][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.146939][ T6901] veth1_macvtap: left promiscuous mode [ 541.153478][ T6901] veth0_macvtap: left promiscuous mode [ 541.172616][ T6901] veth1_vlan: left promiscuous mode [ 541.186351][ T6901] ªªªªªª: left promiscuous mode [ 542.091950][T15139] netlink: 'syz.2.2486': attribute type 29 has an invalid length. [ 542.362998][ T6901] team0 (unregistering): Port device team_slave_1 removed [ 542.605119][ T5087] Bluetooth: hci5: command tx timeout [ 542.884998][T15139] netlink: 'syz.2.2486': attribute type 29 has an invalid length. [ 543.143411][T15144] netlink: 'syz.0.2487': attribute type 21 has an invalid length. [ 543.168418][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.193488][T15144] netlink: 'syz.0.2487': attribute type 21 has an invalid length. [ 543.203943][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.256321][T15144] netlink: 'syz.0.2487': attribute type 21 has an invalid length. [ 543.276781][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.341316][T15144] netlink: 'syz.0.2487': attribute type 21 has an invalid length. [ 543.360436][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.394476][T15144] netlink: 'syz.0.2487': attribute type 21 has an invalid length. [ 543.414054][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.455241][T15144] netlink: 'syz.0.2487': attribute type 21 has an invalid length. [ 543.468778][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.486685][T15144] netlink: 'syz.0.2487': attribute type 21 has an invalid length. [ 543.497586][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.546107][T14970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.578020][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.607457][T15144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2487'. [ 543.843587][T14970] veth0_vlan: entered promiscuous mode [ 543.895045][T14970] veth1_vlan: entered promiscuous mode [ 544.124471][T15175] Ÿë: port 1(ip6gretap0) entered blocking state [ 544.131318][T15175] Ÿë: port 1(ip6gretap0) entered disabled state [ 544.138034][T15175] ip6gretap0: entered allmulticast mode [ 544.145193][T15175] ip6gretap0: entered promiscuous mode [ 544.223398][T14970] veth0_macvtap: entered promiscuous mode [ 544.321308][T14970] veth1_macvtap: entered promiscuous mode [ 544.414509][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.443416][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.454398][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.465462][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.487084][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.507118][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.518637][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 544.535504][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.549300][T14970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.587992][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.616964][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.626840][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 544.639425][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.650889][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.661682][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.672004][T14970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 544.697284][T14970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 544.713338][T14970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.736466][T14970] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.746699][T14970] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.756033][T14970] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.765356][T14970] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.996342][ T6923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.023675][ T6923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.141093][T14684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.150094][T15196] sit0: entered allmulticast mode [ 545.165893][T14684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.242202][T15196] sit0: entered promiscuous mode [ 545.421551][T15213] validate_nla: 58 callbacks suppressed [ 545.421589][T15213] netlink: 'syz.2.2496': attribute type 28 has an invalid length. [ 545.468002][T15213] netlink: 'syz.2.2496': attribute type 4 has an invalid length. [ 545.494556][T15213] __nla_validate_parse: 56 callbacks suppressed [ 545.494606][T15213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2496'. [ 546.512422][T15238] netlink: 'syz.3.2504': attribute type 3 has an invalid length. [ 546.530445][T15238] netlink: 'syz.3.2504': attribute type 4 has an invalid length. [ 546.546461][T15238] netlink: 'syz.3.2504': attribute type 7 has an invalid length. [ 546.580666][T15238] netlink: 'syz.3.2504': attribute type 8 has an invalid length. [ 546.618175][T15238] netlink: 'syz.3.2504': attribute type 7 has an invalid length. [ 546.648156][T15238] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.2504'. [ 547.137564][T15255] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2511'. [ 547.934640][T15261] netlink: 'syz.0.2513': attribute type 11 has an invalid length. [ 549.983275][T15324] netlink: 'syz.2.2529': attribute type 10 has an invalid length. [ 550.005312][T15324] hsr0: left allmulticast mode [ 550.011006][T15324] hsr_slave_0: left allmulticast mode [ 550.016564][T15324] hsr_slave_1: left allmulticast mode [ 550.022748][T15324] hsr0: left promiscuous mode [ 550.028250][T15324] bridge0: port 2(hsr0) entered disabled state [ 550.426368][T15332] netlink: 14556 bytes leftover after parsing attributes in process `syz.2.2530'. [ 550.463165][T15340] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2532'. [ 550.495138][T15338] delete_channel: no stack [ 552.595340][T15415] geneve1: entered promiscuous mode [ 552.614934][T15415] geneve1: entered allmulticast mode [ 552.673962][T15418] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2550'. [ 553.063969][T15431] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2554'. [ 553.077159][T15431] openvswitch: netlink: Key type 29 is not supported [ 553.260844][T15427] netlink: 'syz.1.2553': attribute type 9 has an invalid length. [ 553.277582][T15427] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2553'. [ 553.360676][T15437] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2555'. [ 553.555744][T15442] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2557'. [ 553.592603][T15442] netlink: get zone limit has 4 unknown bytes [ 553.791398][T15451] syz.2.2558[15451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.791544][T15451] syz.2.2558[15451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.849039][T15505] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.2574'. [ 556.125803][T15513] netlink: 'syz.0.2575': attribute type 13 has an invalid length. [ 556.164648][T15513] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2575'. [ 556.285024][T15513] erspan0: refused to change device tx_queue_len [ 556.295127][T15513] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 556.350518][T15516] IPv6: Can't replace route, no match found [ 556.399262][T15522] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2577'. [ 556.427388][T15526] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2579'. [ 556.462468][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2577'. [ 556.597320][ T6917] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 556.812859][T15539] netlink: 'syz.3.2581': attribute type 17 has an invalid length. [ 558.834555][T15576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2589'. [ 559.508899][T15590] netlink: 'syz.2.2593': attribute type 21 has an invalid length. [ 559.573209][T15590] netlink: 'syz.2.2593': attribute type 4 has an invalid length. [ 559.624369][T15590] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2593'. [ 559.767176][T15599] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2595'. [ 560.799272][T14394] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.809326][T14394] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.817743][T14394] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.827036][T14394] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.849500][T14394] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 560.858263][T14394] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 561.332787][T15553] bond0: (slave syz_tun): Releasing backup interface [ 561.377719][T15624] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2602'. [ 562.522584][T15614] chnl_net:caif_netlink_parms(): no params data found [ 562.927410][T14394] Bluetooth: hci2: command tx timeout [ 563.035450][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.044924][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.052328][T15614] bridge_slave_0: entered allmulticast mode [ 563.068707][T15614] bridge_slave_0: entered promiscuous mode [ 563.081783][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.089104][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.096352][T15614] bridge_slave_1: entered allmulticast mode [ 563.103629][T15614] bridge_slave_1: entered promiscuous mode [ 563.171431][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.177960][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.382823][T15614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.403197][T15614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 563.589113][T15614] team0: Port device team_slave_0 added [ 563.621766][T15614] team0: Port device team_slave_1 added [ 564.121202][T15614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.138939][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.213309][T15614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.233824][T15614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.240897][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.304317][T15614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.384012][T15614] hsr_slave_0: entered promiscuous mode [ 564.454836][T15614] hsr_slave_1: entered promiscuous mode [ 564.495369][T15614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.511186][T15614] Cannot create hsr debugfs directory [ 564.999656][T14394] Bluetooth: hci2: command tx timeout [ 565.121765][ T6901] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.289841][ T6901] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.435813][ T6901] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.568321][ T6901] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.359873][ T6901] ip6gretap0 (unregistering): left allmulticast mode [ 566.366627][ T6901] ip6gretap0 (unregistering): left promiscuous mode [ 566.397571][ T6901] Ÿë: port 1(ip6gretap0) entered disabled state [ 567.017354][T15614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 567.033080][T15614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 567.043999][T15614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 567.055885][T15614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 567.077659][T14394] Bluetooth: hci2: command tx timeout [ 567.380417][T15687] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2611'. [ 567.390951][T15687] openvswitch: netlink: Message has 20476 unknown bytes. [ 568.325529][T15687] netlink: 'syz.3.2611': attribute type 5 has an invalid length. [ 568.469449][T15706] netlink: 'syz.0.2612': attribute type 27 has an invalid length. [ 568.495367][T15706] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2612'. [ 568.526290][T15706] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 569.168379][T14394] Bluetooth: hci2: command tx timeout [ 569.404653][T15614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.701889][T15614] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.719963][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.727270][T14691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.747485][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.754677][ T6909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.800096][ T6901] hsr_slave_0: left promiscuous mode [ 569.810211][ T6901] hsr_slave_1: left promiscuous mode [ 569.816220][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.830657][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.839943][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.847673][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.855435][ T6901] bridge_slave_0: left promiscuous mode [ 569.861501][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.882174][ T6901] veth0_vlan: left promiscuous mode [ 570.552801][ T6901] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 570.653903][ T6901] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 570.952034][ T6901] bond0 (unregistering): Released all slaves [ 571.354421][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.473765][T15734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2619'. [ 571.508200][T15614] veth0_vlan: entered promiscuous mode [ 571.618035][T15614] veth1_vlan: entered promiscuous mode [ 571.720722][T15614] veth0_macvtap: entered promiscuous mode [ 571.770735][T15614] veth1_macvtap: entered promiscuous mode [ 571.872871][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.911149][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.954005][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.981121][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.992525][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.003959][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.014343][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.024910][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.036235][T15614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.052606][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 572.062752][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.073081][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.083674][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.093693][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.104402][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.114412][T15614] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.126367][T15614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.152052][T15614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 572.224288][T15614] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.241438][T15614] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.259288][T15614] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.268291][T15614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.852924][ T6909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.867053][ T6909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.052685][T14689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.075598][T14689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.469029][T15774] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2627'. [ 573.677031][T15775] netlink: 'syz.2.2598': attribute type 21 has an invalid length. [ 573.717379][T15775] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2598'. [ 573.772548][T15775] netlink: 'syz.2.2598': attribute type 4 has an invalid length. [ 573.827808][T15775] netlink: 'syz.2.2598': attribute type 5 has an invalid length. [ 573.845934][T15775] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2598'. [ 580.107828][T15842] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 580.133300][T15842] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2650'. [ 580.219334][T15818] syzkaller0: entered promiscuous mode [ 580.226778][T15818] syzkaller0: entered allmulticast mode [ 580.280857][T15843] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2642'. [ 580.301454][T15843] hsr_slave_0: left promiscuous mode [ 580.346494][T15843] hsr_slave_1: left promiscuous mode [ 580.422965][T15837] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2642'. [ 582.814311][T15853] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2645'. [ 582.837665][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 583.054315][T15867] sit0: left promiscuous mode [ 583.220130][T15871] sit0: entered promiscuous mode [ 583.782858][T15890] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2655'. [ 583.910600][T15897] syz.3.2659: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 583.926527][T15897] CPU: 0 PID: 15897 Comm: syz.3.2659 Not tainted syzkaller #0 [ 583.934065][T15897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.944180][T15897] Call Trace: [ 583.947500][T15897] [ 583.950496][T15897] dump_stack_lvl+0x18c/0x250 [ 583.955245][T15897] ? show_regs_print_info+0x20/0x20 [ 583.960508][T15897] ? load_image+0x420/0x420 [ 583.965114][T15897] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 583.971615][T15897] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 583.974718][T15895] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2658'. [ 583.978166][T15897] warn_alloc+0x246/0x340 [ 583.978282][T15897] ? stack_trace_save+0xaa/0x100 [ 583.978331][T15897] ? zone_watermark_ok_safe+0x230/0x230 [ 583.978402][T15897] ? kasan_set_track+0x5f/0x70 [ 583.978441][T15897] ? kasan_set_track+0x4e/0x70 [ 583.978462][T15897] ? __kasan_kmalloc+0x8f/0xa0 [ 583.978487][T15897] ? xsk_init_queue+0xad/0x100 [ 583.978520][T15897] ? xsk_setsockopt+0x4e5/0x760 [ 583.978539][T15897] ? do_sock_setsockopt+0x175/0x1a0 [ 583.978570][T15897] ? __x64_sys_setsockopt+0x182/0x200 [ 583.978622][T15897] __vmalloc_node_range+0x126/0x1330 [ 583.978742][T15897] ? free_vm_area+0x50/0x50 [ 583.978811][T15897] vmalloc_user+0x74/0x80 [ 583.978858][T15897] ? xskq_create+0xbf/0x170 [ 583.978882][T15897] xskq_create+0xbf/0x170 [ 583.978920][T15897] xsk_init_queue+0xad/0x100 [ 583.978969][T15897] xsk_setsockopt+0x4e5/0x760 [ 583.979006][T15897] ? xsk_poll+0x680/0x680 [ 583.979043][T15897] ? __fget_files+0x28/0x4b0 [ 583.979089][T15897] ? __fget_files+0x28/0x4b0 [ 583.979133][T15897] ? aa_sock_opt_perm+0x74/0x100 [ 583.979174][T15897] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 584.094301][T15897] ? security_socket_setsockopt+0x7e/0xa0 [ 584.100078][T15897] ? xsk_poll+0x680/0x680 [ 584.104506][T15897] do_sock_setsockopt+0x175/0x1a0 [ 584.109611][T15897] ? __fdget+0x180/0x210 [ 584.113917][T15897] __x64_sys_setsockopt+0x182/0x200 [ 584.119195][T15897] do_syscall_64+0x55/0xb0 [ 584.123689][T15897] ? clear_bhb_loop+0x40/0x90 [ 584.128413][T15897] ? clear_bhb_loop+0x40/0x90 [ 584.133149][T15897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.139117][T15897] RIP: 0033:0x7f3e2c19ce59 [ 584.143590][T15897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.163256][T15897] RSP: 002b:00007f3e2d107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 584.171768][T15897] RAX: ffffffffffffffda RBX: 00007f3e2c415fa0 RCX: 00007f3e2c19ce59 [ 584.179801][T15897] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 584.188018][T15897] RBP: 00007f3e2c232d6f R08: 0000000000000004 R09: 0000000000000000 [ 584.196043][T15897] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 584.204111][T15897] R13: 00007f3e2c416038 R14: 00007f3e2c415fa0 R15: 00007ffc91f90cd8 [ 584.212302][T15897] [ 584.291159][T15897] Mem-Info: [ 584.308118][T15897] active_anon:18213 inactive_anon:0 isolated_anon:0 [ 584.308118][T15897] active_file:18540 inactive_file:40159 isolated_file:0 [ 584.308118][T15897] unevictable:768 dirty:155 writeback:0 [ 584.308118][T15897] slab_reclaimable:10938 slab_unreclaimable:97841 [ 584.308118][T15897] mapped:29300 shmem:1361 pagetables:633 [ 584.308118][T15897] sec_pagetables:0 bounce:0 [ 584.308118][T15897] kernel_misc_reclaimable:0 [ 584.308118][T15897] free:1311687 free_pcp:10971 free_cma:0 [ 584.373786][T15897] Node 0 active_anon:72852kB inactive_anon:0kB active_file:74160kB inactive_file:160436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117200kB dirty:620kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11068kB pagetables:2532kB sec_pagetables:0kB all_unreclaimable? no [ 584.411370][T15897] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 584.445830][T15897] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.507667][T15901] netlink: 'syz.2.2660': attribute type 2 has an invalid length. [ 584.515478][T15901] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2660'. [ 584.536993][T15897] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 584.546260][T15897] Node 0 DMA32 free:1342340kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:72816kB inactive_anon:0kB active_file:74160kB inactive_file:159612kB unevictable:1536kB writepending:620kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:17272kB local_pcp:5268kB free_cma:0kB [ 584.627327][T15897] lowmem_reserve[]: 0 0 0 0 0 [ 584.637249][T15897] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 584.687493][T15897] lowmem_reserve[]: 0 0 0 0 0 [ 584.697287][T15897] Node 1 Normal free:3889048kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:27080kB local_pcp:9612kB free_cma:0kB [ 584.767668][T15897] lowmem_reserve[]: 0 0 0 0 0 [ 584.785507][T15897] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 584.829094][T15897] Node 0 DMA32: 657*4kB (UME) 1040*8kB (UME) 786*16kB (UME) 767*32kB (UME) 468*64kB (UME) 988*128kB (UM) 467*256kB (UME) 245*512kB (UM) 134*1024kB (UME) 11*2048kB (UME) 179*4096kB (UM) = 1342404kB [ 584.875866][T15908] netlink: 'syz.0.2661': attribute type 3 has an invalid length. [ 584.884219][T15897] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 584.906022][T15908] netlink: 'syz.0.2661': attribute type 6 has an invalid length. [ 584.914049][T15897] Node 1 Normal: 4*4kB (ME) 7*8kB (ME) 3*16kB (ME) 25*32kB (UME) 4*64kB (UE) 4*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3889048kB [ 584.937883][T15908] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2661'. [ 584.966796][T15897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.067181][T15897] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.101837][T15897] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 585.131647][T15897] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 585.141224][T15897] 60060 total pagecache pages [ 585.145927][T15897] 0 pages in swap cache [ 585.158312][T15897] Free swap = 124996kB [ 585.162535][T15897] Total swap = 124996kB [ 585.166801][T15897] 2097051 pages RAM [ 585.171267][T15897] 0 pages HighMem/MovableOnly [ 585.175996][T15897] 416933 pages reserved [ 585.180269][T15897] 0 pages cma reserved [ 585.214341][T15916] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2663'. [ 585.227553][T15916] openvswitch: netlink: Flow actions attr not present in new flow. [ 585.352472][T15923] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2666'. [ 585.818164][T15938] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2673'. [ 586.129312][T15945] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.2674'. [ 586.198889][T15945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'. [ 587.052207][T15967] netlink: 'syz.2.2680': attribute type 10 has an invalid length. [ 587.270369][T15970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2679'. [ 587.296089][T15970] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2679'. [ 587.557548][T15969] delete_channel: no stack [ 587.730211][T15993] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2684'. [ 587.742860][T15992] netlink: 'syz.1.2685': attribute type 3 has an invalid length. [ 587.765545][T15992] netlink: 192312 bytes leftover after parsing attributes in process `syz.1.2685'. [ 587.766819][T15985] can: request_module (can-proto-3) failed. [ 587.819169][ T6901] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 588.085192][T16000] netlink: 'syz.1.2687': attribute type 9 has an invalid length. [ 588.169270][T16000] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2687'. [ 588.519739][T16003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.590509][T16003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 588.649660][T16003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.685489][T16003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.741494][T16003] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 588.767324][T16003] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 588.995353][T16006] netlink: 'syz.0.2688': attribute type 21 has an invalid length. [ 590.521113][T16036] netlink: 'syz.1.2700': attribute type 21 has an invalid length. [ 590.529678][T16036] __nla_validate_parse: 4 callbacks suppressed [ 590.529695][T16036] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2700'. [ 591.701325][T16043] netlink: 'syz.3.2703': attribute type 2 has an invalid length. [ 591.722211][T16043] netlink: 'syz.3.2703': attribute type 1 has an invalid length. [ 591.740694][T16043] netlink: 'syz.3.2703': attribute type 8 has an invalid length. [ 591.758250][T16043] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2703'. [ 592.538221][T16067] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2705'. [ 592.598265][T16061] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2707'. [ 592.633659][T16073] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2710'. [ 592.683460][T16073] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.2710'. [ 593.453379][T16096] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2719'. [ 593.719106][T16107] netlink: 'syz.1.2721': attribute type 9 has an invalid length. [ 593.737629][T16107] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2721'. [ 594.187374][T16109] netlink: 'syz.1.2721': attribute type 9 has an invalid length. [ 594.220270][T16109] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2721'. [ 594.712803][T16120] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2725'. [ 594.743089][T16120] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 594.776422][T16120] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 595.222901][T16138] netlink: 'syz.3.2731': attribute type 1 has an invalid length. [ 595.513220][T16147] sit0: entered promiscuous mode [ 596.758464][T16181] wg2: entered promiscuous mode [ 596.764014][T16181] wg2: entered allmulticast mode [ 597.070702][T16194] mac80211_hwsim hwsim43 .3ãc¤±: renamed from wlan1 (while UP) [ 597.138765][T16181] pim6reg1: entered promiscuous mode [ 597.144258][T16181] pim6reg1: entered allmulticast mode [ 597.158296][T16191] syzkaller0: entered promiscuous mode [ 597.174247][T16191] syzkaller0: entered allmulticast mode [ 597.338944][T16199] netlink: 'syz.0.2746': attribute type 11 has an invalid length. [ 597.374712][T16199] __nla_validate_parse: 1 callbacks suppressed [ 597.374727][T16199] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2746'. [ 597.570203][T16207] netlink: 'syz.2.2747': attribute type 9 has an invalid length. [ 597.596985][T16207] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2747'. [ 601.670002][T16243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2759'. [ 601.680439][T16243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2759'. [ 601.695556][T16243] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2759'. [ 602.854002][T16266] netlink: 'syz.3.2766': attribute type 7 has an invalid length. [ 604.470473][T16293] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.2776'. [ 604.557920][T16298] netlink: 'syz.0.2776': attribute type 2 has an invalid length. [ 604.597531][T16298] netlink: 'syz.0.2776': attribute type 8 has an invalid length. [ 604.626371][T16298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2776'. [ 604.664901][T16295] netlink: 'syz.2.2777': attribute type 39 has an invalid length. [ 606.091579][T16330] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2789'. [ 606.117684][T16330] tc_dump_action: action bad kind [ 606.133792][T16330] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2789'. [ 606.146545][T16330] tc_dump_action: action bad kind [ 606.467802][T16333] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2788'. [ 606.805265][T16362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2798'. [ 606.835022][T16362] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2798'. [ 606.891353][T16363] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2798'. [ 606.913681][T16365] sctp: [Deprecated]: syz.3.2799 (pid 16365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.913681][T16365] Use struct sctp_sack_info instead [ 607.683362][T16380] netlink: 'syz.0.2804': attribute type 21 has an invalid length. [ 607.693598][T16380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2804'. [ 607.769134][T16383] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.2802'. [ 609.335872][T16395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 609.407028][T16395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 609.440706][T16395] bond0 (unregistering): Released all slaves [ 609.624931][T16406] netlink: 'syz.0.2809': attribute type 10 has an invalid length. [ 609.653320][T16406] team0: Device ipvlan1 failed to register rx_handler [ 609.871611][T16411] netlink: 'syz.2.2811': attribute type 41 has an invalid length. [ 610.149326][T16424] __nla_validate_parse: 2 callbacks suppressed [ 610.149361][T16424] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.2816'. [ 610.263229][T16424] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 612.271343][T16461] netlink: 'syz.0.2825': attribute type 3 has an invalid length. [ 612.450228][T16455] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2823'. [ 613.675753][T16476] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2829'. [ 616.639415][T16539] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2842'. [ 618.198087][T16581] netlink: 'syz.1.2852': attribute type 3 has an invalid length. [ 618.205986][T16581] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2852'. [ 618.625274][T16591] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2854'. [ 618.846098][T14691] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 619.387896][T16605] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2858'. [ 619.405776][T16607] netlink: 'syz.1.2859': attribute type 2 has an invalid length. [ 619.421387][T16607] netlink: 'syz.1.2859': attribute type 11 has an invalid length. [ 619.436986][T16607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2859'. [ 619.651363][T16615] netlink: 'syz.1.2862': attribute type 33 has an invalid length. [ 619.663497][T16615] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2862'. [ 619.863323][T16626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2864'. [ 619.965590][T16630] netlink: 'syz.3.2866': attribute type 21 has an invalid length. [ 619.990962][T16630] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2866'. [ 620.010752][T16630] netlink: 'syz.3.2866': attribute type 4 has an invalid length. [ 620.245416][T16640] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.2869'. [ 620.665814][T16658] netlink: 'syz.3.2876': attribute type 1 has an invalid length. [ 620.677241][T16652] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2874'. [ 620.733049][T16652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 621.044324][T16665] netlink: 'syz.3.2878': attribute type 21 has an invalid length. [ 621.202085][T16667] mac80211_hwsim hwsim41 ..ãc¤±: renamed from wlan1 (while UP) [ 621.557138][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 622.087428][T16687] __nla_validate_parse: 3 callbacks suppressed [ 622.087449][T16687] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2884'. [ 622.156438][T16689] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2884'. [ 622.391964][T16691] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2885'. [ 622.409209][T16691] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2885'. [ 622.692618][T16699] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2888'. [ 623.089523][T16726] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2895'. [ 623.115783][T16726] netlink: del zone limit has 4 unknown bytes [ 623.250964][T16733] sock: sock_set_timeout: `syz.0.2898' (pid 16733) tries to set negative timeout [ 623.282474][T16729] netlink: 'syz.1.2897': attribute type 10 has an invalid length. [ 623.291432][T16729] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2897'. [ 623.309541][T16729] batman_adv: batadv0: Adding interface: vlan1 [ 623.316576][T16729] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.369459][T16729] batman_adv: batadv0: Interface activated: vlan1 [ 623.524732][T16742] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2896'. [ 623.544270][T16744] : renamed from bond_slave_0 (while UP) [ 623.611553][T16744] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2900'. [ 623.633524][T16744] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 623.653199][T16742] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2896'. [ 624.650234][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.656726][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.720098][T16774] netlink: 'syz.2.2906': attribute type 11 has an invalid length. [ 625.688396][T16787] netlink: 'syz.0.2910': attribute type 2 has an invalid length. [ 625.795446][T16786] netlink: 'syz.1.2911': attribute type 10 has an invalid length. [ 625.875025][T16786] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 625.894395][T16786] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.965139][T16786] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 626.044581][T16786] netlink: 'syz.1.2911': attribute type 10 has an invalid length. [ 626.327756][T16786] netlink: 'syz.1.2911': attribute type 10 has an invalid length. [ 626.362110][T16795] netlink: 'syz.2.2912': attribute type 10 has an invalid length. [ 626.506804][T16786] netlink: 'syz.1.2911': attribute type 10 has an invalid length. [ 626.558695][T16809] netlink: 'syz.3.2918': attribute type 10 has an invalid length. [ 626.583995][T16809] netlink: 'syz.3.2918': attribute type 10 has an invalid length. [ 626.768764][T16815] syzkaller0: entered promiscuous mode [ 626.774832][T16815] syzkaller0: entered allmulticast mode [ 626.812500][T16820] netlink: 'syz.1.2922': attribute type 2 has an invalid length. [ 627.403812][T16845] __nla_validate_parse: 18 callbacks suppressed [ 627.403832][T16845] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2926'. [ 627.491599][T16845] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2926'. [ 627.540932][T16846] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2926'. [ 627.719535][T16848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2928'. [ 627.819507][T16855] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2929'. [ 628.096738][T16859] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2932'. [ 629.046973][T16888] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2941'. [ 629.409879][T16899] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2943'. [ 629.427072][T16899] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2943'. [ 629.475737][T16893] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2943'. [ 630.235092][T16930] validate_nla: 9 callbacks suppressed [ 630.235126][T16930] netlink: 'syz.1.2952': attribute type 153 has an invalid length. [ 630.269088][T16931] netlink: 'syz.3.2953': attribute type 21 has an invalid length. [ 630.438036][ T5087] Bluetooth: hci5: ISO packet for unknown connection handle 2563 [ 631.309708][T16967] netlink: 'syz.3.2963': attribute type 21 has an invalid length. [ 631.758120][T16978] mac80211_hwsim hwsim44 wlan0: entered promiscuous mode [ 631.787341][T16978] mac80211_hwsim hwsim44 wlan0: entered allmulticast mode [ 631.800296][ T5087] Bluetooth: hci0: command 0x0406 tx timeout [ 631.894559][T16960] delete_channel: no stack [ 633.225506][T17008] __nla_validate_parse: 3 callbacks suppressed [ 633.225525][T17008] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2974'. [ 633.507840][T17020] netlink: 'syz.2.2977': attribute type 39 has an invalid length. [ 634.404728][T17049] netlink: 'syz.2.2985': attribute type 10 has an invalid length. [ 634.565813][T17049] geneve0: entered promiscuous mode [ 634.715204][T17049] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 634.760736][T17050] netlink: 'syz.2.2985': attribute type 10 has an invalid length. [ 635.013816][T17064] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.2989'. [ 635.997270][T17088] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2993'. [ 636.276840][T17090] netlink: 'syz.1.2995': attribute type 9 has an invalid length. [ 636.285506][T17090] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2995'. [ 636.355292][T17092] netlink: 'syz.1.2995': attribute type 9 has an invalid length. [ 636.371479][T17092] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2995'. [ 636.658425][T17105] netlink: 'syz.0.3000': attribute type 29 has an invalid length. [ 636.668594][T17105] netlink: 'syz.0.3000': attribute type 29 has an invalid length. [ 636.727016][T17106] netlink: 'syz.0.3000': attribute type 29 has an invalid length. [ 636.890578][T17117] netlink: 'syz.3.3002': attribute type 21 has an invalid length. [ 636.917359][T17117] IPv6: NLM_F_CREATE should be specified when creating new route [ 636.936526][T17117] IPv6: Can't replace route, no match found [ 637.574523][T17142] netlink: 'syz.1.3008': attribute type 21 has an invalid length. [ 637.624670][T17142] netlink: 'syz.1.3008': attribute type 30 has an invalid length. [ 638.095750][T17165] netlink: 'syz.1.3013': attribute type 1 has an invalid length. [ 638.148176][T17165] netlink: 'syz.1.3013': attribute type 2 has an invalid length. [ 638.156506][T17165] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.3013'. [ 638.737090][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3018'. [ 638.797325][T17186] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3017'. [ 639.007742][T17194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3019'. [ 643.557413][T17268] validate_nla: 11 callbacks suppressed [ 643.557433][T17268] netlink: 'syz.0.3037': attribute type 4 has an invalid length. [ 643.581331][T17268] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3037'. [ 643.609813][T17268] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 644.689037][T17294] IPv6: Can't replace route, no match found [ 646.015689][T17325] C: renamed from team_slave_0 (while UP) [ 646.190193][T17325] netlink: 'syz.3.3052': attribute type 1 has an invalid length. [ 646.237005][T17325] netlink: 116 bytes leftover after parsing attributes in process `syz.3.3052'. [ 646.777546][T17335] IPv6: NLM_F_CREATE should be specified when creating new route [ 647.186752][T17342] netlink: 'syz.3.3056': attribute type 10 has an invalid length. [ 647.211575][T17342] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.230444][T17342] bridge_slave_1: left allmulticast mode [ 647.242373][T17342] bridge_slave_1: left promiscuous mode [ 647.251159][T17342] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.786608][T17387] netlink: 'syz.0.3067': attribute type 29 has an invalid length. [ 648.828773][T17387] netlink: 'syz.0.3067': attribute type 29 has an invalid length. [ 649.846512][T17406] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3073'. [ 649.877183][ T6923] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 649.903493][T17410] netlink: 'syz.1.3074': attribute type 58 has an invalid length. [ 649.922766][T17410] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3074'. [ 650.006401][T17406] netlink: 'syz.2.3073': attribute type 10 has an invalid length. [ 650.024957][T17406] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3073'. [ 650.801245][T17432] netlink: 'syz.2.3079': attribute type 28 has an invalid length. [ 650.821245][T17432] netlink: 'syz.2.3079': attribute type 4 has an invalid length. [ 650.830333][T17432] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3079'. [ 651.393492][T17444] netlink: 'syz.1.3082': attribute type 3 has an invalid length. [ 651.402265][T17444] netlink: 16062 bytes leftover after parsing attributes in process `syz.1.3082'. [ 651.547733][T17444] bridge_slave_1: left allmulticast mode [ 651.564898][T17444] bridge_slave_1: left promiscuous mode [ 651.587051][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.608097][T17444] bridge_slave_0: left allmulticast mode [ 651.614138][T17444] bridge_slave_0: left promiscuous mode [ 651.627304][T17444] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.145378][T17456] pimreg: tun_chr_ioctl cmd 1074025681 [ 652.867423][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 654.848667][T17511] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 655.655268][T17568] bridge_slave_1: left allmulticast mode [ 655.669882][T17568] bridge_slave_1: left promiscuous mode [ 655.675790][T17568] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.692984][T17568] bridge_slave_0: left allmulticast mode [ 655.699964][T17568] bridge_slave_0: left promiscuous mode [ 655.712784][T17568] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.820300][T17577] netlink: 'syz.3.3120': attribute type 3 has an invalid length. [ 655.845783][T17580] netlink: 'syz.3.3120': attribute type 3 has an invalid length. [ 655.857032][T17577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3120'. [ 655.862995][T17580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3120'. [ 656.078914][T17588] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3122'. [ 656.097525][T17588] bridge_slave_1: entered promiscuous mode [ 656.154951][T17592] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3123'. [ 656.279192][T17598] netlink: 'syz.1.3125': attribute type 9 has an invalid length. [ 656.337005][T17598] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3125'. [ 656.531763][T17619] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3126'. [ 656.546808][T17619] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3126'. [ 656.565178][T17609] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3126'. [ 656.576491][T17619] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3126'. [ 656.613963][T17609] netlink: 'syz.2.3126': attribute type 10 has an invalid length. [ 656.632396][T17609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3126'. [ 656.662813][T17609] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 656.670668][T17609] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.697790][T17609] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 656.707946][T17621] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 656.715294][T17621] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 656.943600][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3134'. [ 657.095584][T17639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3137'. [ 657.157999][ T6901] wlan1: Trigger new scan to find an IBSS to join [ 657.397589][ T5087] Bluetooth: hci5: command 0x0406 tx timeout [ 660.730504][T17664] netlink: 'syz.0.3144': attribute type 10 has an invalid length. [ 660.774255][T17664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.795094][T17664] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 660.822962][T17663] netlink: 'syz.0.3144': attribute type 10 has an invalid length. [ 660.858094][T17666] netlink: 'syz.2.3145': attribute type 9 has an invalid length. [ 661.094817][T17677] netlink: 'syz.0.3154': attribute type 10 has an invalid length. [ 661.141401][T17676] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3146'. [ 661.415452][T17683] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3150'. [ 661.447106][T17683] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 661.462010][T17683] openvswitch: netlink: Message has 1 unknown bytes. [ 661.738716][T14394] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 661.902102][T17711] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.3158'. [ 662.126458][T14691] wlan1: Trigger new scan to find an IBSS to join [ 662.603576][T17718] netlink: 'syz.2.3160': attribute type 27 has an invalid length. [ 662.612403][T17718] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3160'. [ 663.082204][ T6909] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 663.713400][T17743] netlink: 'syz.0.3167': attribute type 3 has an invalid length. [ 663.726149][T17747] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3169'. [ 663.777396][T17743] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3167'. [ 664.183606][T17764] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3175'. [ 664.217131][T17764] openvswitch: netlink: Key type 4112 is out of range max 32 [ 664.307308][T14394] Bluetooth: hci5: ISO packet for unknown connection handle 2 [ 664.350800][T17772] netlink: 'syz.2.3178': attribute type 33 has an invalid length. [ 664.359125][T17772] netlink: 'syz.2.3178': attribute type 3 has an invalid length. [ 664.367005][T17772] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.3178'. [ 664.509979][T17775] netlink: 'syz.1.3179': attribute type 9 has an invalid length. [ 664.534138][T17775] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.3179'. [ 664.917534][T17782] netlink: 'syz.2.3181': attribute type 10 has an invalid length. [ 665.079848][T17782] team0: Port device hsr_slave_0 added [ 665.316902][T17796] netlink: 'syz.2.3187': attribute type 10 has an invalid length. [ 665.531161][T17799] netlink: 'syz.2.3187': attribute type 64 has an invalid length. [ 665.589475][T17796] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3187'. [ 666.414791][T17815] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3189'. [ 667.502389][T17838] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3197'. [ 667.512278][T17838] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 667.571336][T17842] validate_nla: 2 callbacks suppressed [ 667.571351][T17842] netlink: 'syz.2.3195': attribute type 10 has an invalid length. [ 667.606941][T17842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3195'. [ 668.583966][T17864] netlink: 'syz.2.3200': attribute type 39 has an invalid length. [ 672.953284][T17889] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3210'. [ 672.962640][T17889] bridge_slave_1: default FDB implementation only supports local addresses [ 672.986077][T17912] netlink: 'syz.2.3215': attribute type 10 has an invalid length. [ 673.168925][T17920] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3217'. [ 673.573640][T17934] netlink: 'syz.0.3222': attribute type 27 has an invalid length. [ 673.610452][T17937] netlink: 'syz.1.3229': attribute type 21 has an invalid length. [ 673.961289][T17955] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3230'. [ 674.373926][T17969] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3234'. [ 674.444896][T17969] netlink: 'syz.1.3234': attribute type 29 has an invalid length. [ 674.545921][T17969] netlink: 'syz.1.3234': attribute type 29 has an invalid length. [ 674.672941][T17971] netlink: 'syz.1.3234': attribute type 29 has an invalid length. [ 674.772330][T17974] netlink: 'syz.1.3234': attribute type 29 has an invalid length. [ 675.417859][T17984] netlink: 'syz.3.3236': attribute type 2 has an invalid length. [ 675.459526][T17983] netlink: 'syz.1.3243': attribute type 1 has an invalid length. [ 675.476429][T17983] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3243'. [ 675.542233][T17984] netlink: 'syz.3.3236': attribute type 10 has an invalid length. [ 675.633023][T17984] team0: Port device macvlan0 added [ 675.952338][T17999] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3239'. [ 675.990149][T17999] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3239'. [ 676.149154][T17999] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3239'. [ 676.300867][T18007] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3244'. [ 676.865284][T18022] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3248'. [ 677.026647][T18027] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 679.712053][T18077] validate_nla: 6 callbacks suppressed [ 679.712088][T18077] netlink: 'syz.1.3266': attribute type 13 has an invalid length. [ 679.738430][T18077] __nla_validate_parse: 2 callbacks suppressed [ 679.738465][T18077] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3266'. [ 679.766253][T18084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3266'. [ 679.793264][T18077] erspan0: refused to change device tx_queue_len [ 679.810702][T18084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3266'. [ 679.867161][T18077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3266'. [ 679.968270][T18077] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3266'. [ 680.540777][T18103] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3275'. [ 680.909407][ T6901] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.493869][T18129] netlink: 'syz.3.3284': attribute type 39 has an invalid length. [ 681.624376][T18127] IPv6: Can't replace route, no match found [ 681.839583][T18136] netlink: 'syz.2.3286': attribute type 3 has an invalid length. [ 681.850694][T18136] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3286'. [ 682.891381][T18163] netlink: 'syz.0.3294': attribute type 2 has an invalid length. [ 682.934236][T18163] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.3294'. [ 683.008757][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 685.901318][T18191] netlink: 'syz.0.3298': attribute type 1 has an invalid length. [ 685.929079][T18191] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3298'. [ 686.056264][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.062875][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.361403][T18171] netlink: 'syz.3.3296': attribute type 10 has an invalid length. [ 687.379381][T18171] team0: Device nlmon0 is of different type [ 687.564114][T18203] netlink: 'syz.3.3301': attribute type 5 has an invalid length. [ 687.585037][T18203] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3301'. [ 689.257932][T18237] netlink: 'syz.1.3308': attribute type 9 has an invalid length. [ 689.277208][T18237] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.3308'. [ 689.304899][T18237] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3308'. [ 689.320927][T18237] netlink: get zone limit has 4 unknown bytes [ 689.616604][T18243] netlink: 'syz.2.3311': attribute type 10 has an invalid length. [ 689.633366][T18243] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3311'. [ 690.017165][T18271] syz.2.3325 (18271) used obsolete PPPIOCDETACH ioctl [ 694.340295][T18329] netlink: 'syz.0.3333': attribute type 11 has an invalid length. [ 694.846121][T18347] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3338'. [ 694.870677][T18348] netlink: 'syz.2.3338': attribute type 8 has an invalid length. [ 694.880884][T18348] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3338'. [ 695.431476][T18366] netlink: 'syz.1.3344': attribute type 11 has an invalid length. [ 695.454946][T18365] netlink: 'syz.1.3344': attribute type 11 has an invalid length. [ 695.648405][ T6917] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 695.677729][T18372] netlink: 'syz.0.3345': attribute type 21 has an invalid length. [ 696.621992][T18391] syzkaller0: entered promiscuous mode [ 696.630851][T18391] syzkaller0: entered allmulticast mode [ 696.854205][T18405] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3353'. [ 697.438504][T18415] netlink: 'syz.2.3357': attribute type 9 has an invalid length. [ 697.446489][T18415] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3357'. [ 698.837442][T15751] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 699.491776][T18418] syzkaller0: entered promiscuous mode [ 699.497769][T18418] syzkaller0: entered allmulticast mode [ 699.862028][T18435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3361'. [ 701.695105][T18435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3361'. [ 701.777279][T18438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3362'. [ 701.851774][T18438] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3362'. [ 701.863850][T18440] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3363'. [ 701.907765][T18442] netlink: 15842 bytes leftover after parsing attributes in process `syz.0.3363'. [ 702.372658][T18456] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3368'. [ 702.383110][T18456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 702.557139][T18468] netlink: 'syz.2.3372': attribute type 39 has an invalid length. [ 703.437474][T18487] netlink: 'syz.0.3378': attribute type 1 has an invalid length. [ 703.465097][T18487] netlink: 'syz.0.3378': attribute type 4 has an invalid length. [ 703.487470][T18487] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3378'. [ 703.867710][T18499] IPv6: NLM_F_CREATE should be specified when creating new route [ 704.105798][T18508] netlink: 'syz.2.3383': attribute type 9 has an invalid length. [ 704.117964][T18508] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3383'. [ 705.483506][T18541] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3392'. [ 705.532512][T18541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 705.637761][T18543] netlink: 'syz.3.3393': attribute type 33 has an invalid length. [ 705.676276][T18543] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3393'. [ 705.775599][T18549] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3393'. [ 706.019065][T18554] netlink: 'syz.1.3397': attribute type 10 has an invalid length. [ 706.077157][T18554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3397'. [ 706.237521][T18558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3398'. [ 706.346277][T18558] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3398'. [ 706.568787][T18568] netlink: 'syz.1.3400': attribute type 1 has an invalid length. [ 706.576772][T18568] netlink: 'syz.1.3400': attribute type 3 has an invalid length. [ 706.620952][T18568] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3400'. [ 706.749338][T18570] netlink: 'syz.3.3402': attribute type 2 has an invalid length. [ 706.757616][T18570] netlink: 'syz.3.3402': attribute type 8 has an invalid length. [ 706.779022][T18570] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3402'. [ 706.878886][T18576] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.3403'. [ 706.914092][T18578] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3405'. [ 706.929349][T18578] bridge_slave_0: entered allmulticast mode [ 708.900336][T18615] validate_nla: 1 callbacks suppressed [ 708.900354][T18615] netlink: 'syz.3.3414': attribute type 29 has an invalid length. [ 709.076974][T18615] netlink: 'syz.3.3414': attribute type 29 has an invalid length. [ 709.115465][T18618] netlink: 'syz.3.3414': attribute type 29 has an invalid length. [ 709.157991][T18621] netlink: 'syz.3.3414': attribute type 29 has an invalid length. [ 709.206457][T18615] netlink: 'syz.3.3414': attribute type 29 has an invalid length. [ 710.552773][T18645] netlink: 'syz.1.3421': attribute type 29 has an invalid length. [ 710.583722][T18645] netlink: 'syz.1.3421': attribute type 29 has an invalid length. [ 710.617632][T18648] netlink: 'syz.1.3421': attribute type 29 has an invalid length. [ 710.658088][T18645] netlink: 'syz.1.3421': attribute type 29 has an invalid length. [ 710.694800][T18655] __nla_validate_parse: 3 callbacks suppressed [ 710.694817][T18655] netlink: 21 bytes leftover after parsing attributes in process `syz.2.3424'. [ 710.715990][T18655] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 710.733588][T18655] netlink: 'syz.2.3424': attribute type 2 has an invalid length. [ 710.741948][T18655] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3424'. [ 710.758490][T18655] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3424'. [ 710.832349][T18655] team0: Port device team_slave_0 removed [ 711.058347][T18649] syzkaller0: entered promiscuous mode [ 711.063959][T18649] syzkaller0: entered allmulticast mode [ 711.935009][T14686] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 713.667343][T18679] netlink: 2842 bytes leftover after parsing attributes in process `syz.1.3430'. [ 714.009332][T18688] validate_nla: 3 callbacks suppressed [ 714.009397][T18688] netlink: 'syz.1.3432': attribute type 2 has an invalid length. [ 714.027457][T18688] netlink: 'syz.1.3432': attribute type 8 has an invalid length. [ 714.035725][T18688] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3432'. [ 714.075942][T18687] netlink: 'syz.1.3432': attribute type 2 has an invalid length. [ 714.114286][T18687] netlink: 'syz.1.3432': attribute type 8 has an invalid length. [ 714.128608][T18687] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3432'. [ 714.296370][T18698] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3435'. [ 715.057278][T18724] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 715.064956][T18724] IPv6: NLM_F_CREATE should be set when creating new route [ 715.072660][T18724] IPv6: NLM_F_CREATE should be set when creating new route [ 715.080295][T18724] IPv6: NLM_F_CREATE should be set when creating new route [ 716.913169][T18752] syzkaller0: entered promiscuous mode [ 716.979213][T18752] syzkaller0: entered allmulticast mode [ 717.125069][T18756] netlink: 'syz.2.3449': attribute type 4 has an invalid length. [ 717.148576][T18756] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3449'. [ 717.187598][T18752] bridge_slave_0: mtu greater than device maximum [ 722.016344][T18799] netlink: 'syz.0.3460': attribute type 10 has an invalid length. [ 722.030014][T18799] netlink: 209280 bytes leftover after parsing attributes in process `syz.0.3460'. [ 722.042414][T18799] openvswitch: netlink: Flow key attr not present in new flow. [ 722.399917][T18807] netlink: 'syz.0.3463': attribute type 10 has an invalid length. [ 722.436173][T18807] hsr_slave_0: left promiscuous mode [ 722.484990][T18807] hsr_slave_1: left promiscuous mode [ 723.259928][T18811] syzkaller0: entered promiscuous mode [ 723.265451][T18811] syzkaller0: entered allmulticast mode [ 725.796103][T18821] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3465'. [ 725.826130][T18825] pim6reg1: entered promiscuous mode [ 725.838873][T18825] pim6reg1: entered allmulticast mode [ 725.938603][T18829] syzkaller0: entered promiscuous mode [ 725.944144][T18829] syzkaller0: entered allmulticast mode [ 726.819309][T18865] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3475'. [ 728.773040][T18852] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3472'. [ 728.784840][T18852] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3472'. [ 729.024592][T18874] netlink: 'syz.1.3478': attribute type 3 has an invalid length. [ 729.033417][T18874] netlink: 'syz.1.3478': attribute type 1 has an invalid length. [ 729.043542][T18874] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3478'. [ 729.078528][T18876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3479'. [ 729.231335][T18886] netlink: 'syz.3.3483': attribute type 21 has an invalid length. [ 729.272304][T18886] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3483'. [ 730.487382][T18902] pim6reg1: entered promiscuous mode [ 730.500326][T18902] pim6reg1: entered allmulticast mode [ 730.592342][T18910] netlink: 'syz.1.3489': attribute type 11 has an invalid length. [ 730.627007][T18910] netlink: 'syz.1.3489': attribute type 1 has an invalid length. [ 730.634795][T18910] netlink: 'syz.1.3489': attribute type 1 has an invalid length. [ 730.655104][T18902] syzkaller0: entered promiscuous mode [ 730.661977][T18910] netlink: 'syz.1.3489': attribute type 2 has an invalid length. [ 730.670842][T18902] syzkaller0: entered allmulticast mode [ 730.676581][T18910] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.3489'. [ 730.738976][T18916] netlink: 'syz.0.3491': attribute type 13 has an invalid length. [ 730.747131][T18916] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.3491'. [ 730.891710][T18918] netlink: 668 bytes leftover after parsing attributes in process `syz.1.3492'. [ 730.907203][T18918] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 730.925063][T18918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 734.148175][T18949] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.3499'. [ 734.720267][T18964] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3505'. [ 734.803435][T18964] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 735.254846][T18972] pim6reg1: entered promiscuous mode [ 735.267199][T18972] pim6reg1: entered allmulticast mode [ 735.374684][T18972] syzkaller0: entered promiscuous mode [ 735.383654][T18972] syzkaller0: entered allmulticast mode [ 735.455923][T18985] netlink: 'syz.2.3511': attribute type 9 has an invalid length. [ 735.477044][T18985] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3511'. [ 735.617805][T18988] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3512'. [ 739.414648][T19001] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.3516'. [ 739.425731][T19004] tap0: tun_chr_ioctl cmd 2147767517 [ 739.778671][T19021] netlink: 'syz.3.3522': attribute type 3 has an invalid length. [ 739.825282][T19021] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3522'. [ 740.634921][T19041] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3526'. [ 740.657169][T19041] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 741.113450][T19054] netlink: 'syz.2.3529': attribute type 11 has an invalid length. [ 741.137146][T19054] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3529'. [ 741.581476][T19053] netlink: 'syz.2.3529': attribute type 11 has an invalid length. [ 741.597342][T19053] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.3529'. [ 741.685347][T19053] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 741.712878][T19053] CPU: 0 PID: 19053 Comm: syz.2.3529 Not tainted syzkaller #0 [ 741.720479][T19053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.730641][T19053] Call Trace: [ 741.734010][T19053] [ 741.737036][T19053] dump_stack_lvl+0x18c/0x250 [ 741.741857][T19053] ? show_regs_print_info+0x20/0x20 [ 741.747174][T19053] ? load_image+0x420/0x420 [ 741.751921][T19053] sysfs_warn_dup+0x8e/0xa0 [ 741.756540][T19053] sysfs_do_create_link_sd+0xc0/0x110 [ 741.762036][T19053] device_add_class_symlinks+0x1cf/0x240 [ 741.767819][T19053] device_add+0x507/0xc50 [ 741.772322][T19053] wiphy_register+0x1dad/0x2ae0 [ 741.777445][T19053] ? cfg80211_event_work+0x40/0x40 [ 741.782649][T19053] ? minstrel_ht_alloc+0x88a/0x990 [ 741.787960][T19053] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 741.794179][T19053] ieee80211_register_hw+0x3464/0x4250 [ 741.799939][T19053] ? ieee80211_tasklet_handler+0x20/0x20 [ 741.805664][T19053] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 741.811692][T19053] ? __debug_object_init+0xec/0x450 [ 741.817035][T19053] ? __asan_memset+0x22/0x40 [ 741.821741][T19053] ? __hrtimer_init+0x186/0x270 [ 741.826736][T19053] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 741.832759][T19053] ? mac80211_hwsim_free+0x220/0x220 [ 741.838156][T19053] ? rcu_is_watching+0x15/0xb0 [ 741.843047][T19053] ? kstrndup+0xbd/0x140 [ 741.847486][T19053] hwsim_new_radio_nl+0xdc9/0x1a90 [ 741.853802][T19053] ? __nla_validate+0x50/0x50 [ 741.858704][T19053] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 741.865250][T19053] ? __nla_parse+0x40/0x50 [ 741.869846][T19053] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 741.876352][T19053] genl_family_rcv_msg_doit+0x211/0x310 [ 741.882020][T19053] ? end_current_label_crit_section+0x170/0x170 [ 741.888414][T19053] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 741.894498][T19053] ? bpf_lsm_capable+0x9/0x10 [ 741.899287][T19053] ? security_capable+0x89/0xb0 [ 741.904321][T19053] genl_rcv_msg+0x619/0x7a0 [ 741.909002][T19053] ? genl_bind+0x360/0x360 [ 741.913537][T19053] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 741.920012][T19053] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 741.926815][T19053] netlink_rcv_skb+0x241/0x4d0 [ 741.931715][T19053] ? genl_bind+0x360/0x360 [ 741.936280][T19053] ? netlink_ack+0x1180/0x1180 [ 741.941286][T19053] ? __lock_acquire+0x7d40/0x7d40 [ 741.946514][T19053] ? down_read+0x1ac/0x2e0 [ 741.951224][T19053] genl_rcv+0x28/0x40 [ 741.955317][T19053] netlink_unicast+0x751/0x8d0 [ 741.960302][T19053] netlink_sendmsg+0x8d0/0xbf0 [ 741.965265][T19053] ? netlink_getsockopt+0x590/0x590 [ 741.970618][T19053] ? aa_sock_msg_perm+0x94/0x150 [ 741.975707][T19053] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 741.981101][T19053] ? security_socket_sendmsg+0x80/0xa0 [ 741.986656][T19053] ? netlink_getsockopt+0x590/0x590 [ 741.992001][T19053] ____sys_sendmsg+0x5ba/0x960 [ 741.996935][T19053] ? __asan_memset+0x22/0x40 [ 742.001647][T19053] ? __sys_sendmsg_sock+0x30/0x30 [ 742.006809][T19053] ? __import_iovec+0x5f2/0x850 [ 742.011864][T19053] ? import_iovec+0x73/0xa0 [ 742.016511][T19053] ___sys_sendmsg+0x2a6/0x360 [ 742.021368][T19053] ? __sys_sendmsg+0x2a0/0x2a0 [ 742.026687][T19053] __se_sys_sendmsg+0x1c2/0x2b0 [ 742.031684][T19053] ? __x64_sys_sendmsg+0x80/0x80 [ 742.036934][T19053] ? lockdep_hardirqs_on+0x98/0x150 [ 742.042298][T19053] do_syscall_64+0x55/0xb0 [ 742.046813][T19053] ? clear_bhb_loop+0x40/0x90 [ 742.051596][T19053] ? clear_bhb_loop+0x40/0x90 [ 742.056397][T19053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 742.062404][T19053] RIP: 0033:0x7f2b8459ce59 [ 742.066927][T19053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.086989][T19053] RSP: 002b:00007f2b853bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.095625][T19053] RAX: ffffffffffffffda RBX: 00007f2b84815fa0 RCX: 00007f2b8459ce59 [ 742.103710][T19053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 742.111793][T19053] RBP: 00007f2b84632d6f R08: 0000000000000000 R09: 0000000000000000 [ 742.119895][T19053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.127978][T19053] R13: 00007f2b84816038 R14: 00007f2b84815fa0 R15: 00007ffffb696478 [ 742.136196][T19053] [ 742.959104][ T6915] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 744.236332][T19081] netlink: 'syz.3.3538': attribute type 29 has an invalid length. [ 744.448679][T19081] netlink: 'syz.3.3538': attribute type 29 has an invalid length. [ 744.859516][T19092] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3539'. [ 744.891796][T19092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 745.104165][T19103] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.3544'. [ 745.170408][T19103] netlink: 'syz.0.3544': attribute type 21 has an invalid length. [ 746.594104][T19142] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3552'. [ 746.948078][T19154] netlink: 'syz.3.3554': attribute type 10 has an invalid length. [ 746.956310][T19154] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3554'. [ 746.966950][T19154] hsr0: entered promiscuous mode [ 746.972223][T19154] bridge0: port 2(hsr0) entered blocking state [ 746.979235][T19154] bridge0: port 2(hsr0) entered disabled state [ 746.985586][T19154] hsr0: entered allmulticast mode [ 746.991557][T19154] hsr_slave_0: entered allmulticast mode [ 746.999386][T19154] hsr_slave_1: entered allmulticast mode [ 747.009074][T19154] bridge0: port 2(hsr0) entered blocking state [ 747.015420][T19154] bridge0: port 2(hsr0) entered forwarding state [ 747.380823][T19161] delete_channel: no stack [ 747.483605][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.490143][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.729365][T19178] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.3562'. [ 747.987522][T19190] netlink: 'syz.1.3565': attribute type 11 has an invalid length. [ 748.612273][T19206] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3569'. [ 749.514085][T19244] netlink: 'syz.2.3576': attribute type 10 has an invalid length. [ 750.294073][T19255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.591876][T19268] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3586'. [ 750.607168][T19268] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.3586'. [ 751.301712][T19287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 751.335812][T19287] .@ÿ: renamed from bond_slave_0 (while UP) [ 752.221167][T19313] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3597'. [ 753.578243][T19344] netlink: 'syz.1.3603': attribute type 20 has an invalid length. [ 753.994497][T19353] syzkaller0: entered promiscuous mode [ 754.002591][T19353] syzkaller0: entered allmulticast mode [ 754.025233][T19359] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 754.312844][T19372] netlink: 'syz.1.3612': attribute type 10 has an invalid length. [ 754.357316][T19372] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 754.370319][T19377] netlink: 'syz.0.3613': attribute type 29 has an invalid length. [ 754.441645][T19377] netlink: 'syz.0.3613': attribute type 29 has an invalid length. [ 755.789336][T19402] veth1_to_bond: entered allmulticast mode [ 757.323193][T19443] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3625'. [ 757.413152][T19443] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3625'. [ 757.429933][T19446] netlink: 'syz.1.3625': attribute type 19 has an invalid length. [ 757.523112][T19446] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3625'. [ 758.119566][T19446] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3625'. [ 759.541210][T19476] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 760.813709][T19521] netlink: 'syz.3.3644': attribute type 3 has an invalid length. [ 760.834220][T19521] netlink: 16062 bytes leftover after parsing attributes in process `syz.3.3644'. [ 761.279841][T19533] netlink: 'syz.2.3647': attribute type 21 has an invalid length. [ 761.294771][T19533] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3647'. [ 761.334877][T19537] netlink: 'syz.3.3649': attribute type 3 has an invalid length. [ 761.356659][T19537] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3649'. [ 761.558028][T19543] netlink: 'syz.1.3651': attribute type 29 has an invalid length. [ 761.582305][T19543] netlink: 'syz.1.3651': attribute type 29 has an invalid length. [ 761.668769][T19543] netlink: 'syz.1.3651': attribute type 29 has an invalid length. [ 761.708867][T19543] netlink: 'syz.1.3651': attribute type 29 has an invalid length. [ 761.726421][T19550] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3654'. [ 761.742574][T19543] netlink: 'syz.1.3651': attribute type 29 has an invalid length. [ 761.773130][T19554] netlink: 763 bytes leftover after parsing attributes in process `syz.3.3656'. [ 761.932384][T14394] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 762.903357][T19577] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3663'. [ 762.977942][T19582] netlink: 'syz.1.3663': attribute type 23 has an invalid length. [ 763.033842][T19589] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3663'. [ 763.145469][T19589] bond0 (unregistering): (slave 1.@ÿ): Releasing backup interface [ 763.160321][T19589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.180141][T19589] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 763.205887][T19589] bond0 (unregistering): Released all slaves [ 763.264671][T19591] netlink: 'syz.3.3665': attribute type 27 has an invalid length. [ 763.273908][T19591] netlink: 'syz.3.3665': attribute type 25 has an invalid length. [ 765.172841][T19634] bridge0: port 2(hsr0) entered disabled state [ 765.179274][T19634] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.188262][T19634] bridge0: entered allmulticast mode [ 765.741896][T19647] syzkaller0: entered promiscuous mode [ 765.752913][T19647] syzkaller0: entered allmulticast mode [ 765.853738][T19653] netlink: 'syz.2.3679': attribute type 1 has an invalid length. [ 765.869897][T19653] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.3679'. [ 765.944852][T19655] syz.3.3680[19655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 765.945444][T19655] syz.3.3680[19655] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 767.009755][T19687] netlink: 'syz.2.3688': attribute type 21 has an invalid length. [ 767.029925][T19687] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.3688'. [ 767.063588][T19693] netlink: set zone limit has 8 unknown bytes [ 767.182693][T19695] netlink: 'syz.0.3690': attribute type 3 has an invalid length. [ 767.226350][T19695] netlink: 'syz.0.3690': attribute type 6 has an invalid length. [ 767.257137][T19695] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.3690'. [ 767.585845][T19714] netlink: 'syz.0.3694': attribute type 2 has an invalid length. [ 767.594016][T19714] netlink: 'syz.0.3694': attribute type 8 has an invalid length. [ 767.610213][T19714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3694'. [ 768.140181][T19737] delete_channel: no stack [ 768.265662][T14394] Bluetooth: hci5: Malformed LE Event: 0x0d [ 769.990767][T19773] netlink: 'syz.0.3709': attribute type 3 has an invalid length. [ 770.017677][T19773] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3709'. [ 770.248590][T19780] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3710'. [ 770.648437][T19782] netlink: 'syz.0.3711': attribute type 10 has an invalid length. [ 770.661928][T19782] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3711'. [ 770.961327][T19794] netlink: 'syz.3.3714': attribute type 46 has an invalid length. [ 771.118435][T19794] netlink: 'syz.3.3714': attribute type 46 has an invalid length. [ 771.275616][T19806] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3717'. [ 771.697848][T19820] netlink: 'syz.1.3722': attribute type 22 has an invalid length. [ 771.718270][T19820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3722'. [ 771.843678][T19823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3723'. [ 771.853718][T19823] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3723'. [ 771.864510][T19820] netlink: 'syz.1.3722': attribute type 5 has an invalid length. [ 771.877225][T19820] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3722'. [ 772.044486][T19830] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3725'. [ 772.975396][T19875] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3737'. [ 773.009539][T19875] ksmbd: Unknown IPC event: 0, ignore. [ 773.378820][T19894] team0: Port device team_slave_0 removed [ 773.393526][T19894] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 774.706509][T19946] netlink: 'syz.1.3755': attribute type 28 has an invalid length. [ 774.731882][T19946] netlink: 'syz.1.3755': attribute type 29 has an invalid length. [ 775.557991][T19964] __nla_validate_parse: 7 callbacks suppressed [ 775.558007][T19964] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3760'. [ 775.607774][T19961] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3757'. [ 776.003635][T19969] netlink: 'syz.0.3761': attribute type 20 has an invalid length. [ 776.557874][T19989] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3767'. [ 776.813970][T19995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3769'. [ 777.241288][T20013] netlink: 64923 bytes leftover after parsing attributes in process `syz.2.3775'. [ 777.261038][T20015] netlink: 'syz.3.3776': attribute type 27 has an invalid length. [ 777.278189][T20015] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3776'. [ 777.596482][T20019] netlink: 'syz.1.3777': attribute type 3 has an invalid length. [ 779.095886][T14394] Bluetooth: hci5: unexpected event 0x09 length: 15 > 3 [ 779.317406][T20088] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3795'. [ 779.342659][T20088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 779.367046][T20086] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3794'. [ 779.398880][T20086] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3794'. [ 779.505714][T20094] syzkaller0: entered promiscuous mode [ 779.514709][T20094] syzkaller0: entered allmulticast mode [ 784.789782][T20182] netlink: 763 bytes leftover after parsing attributes in process `syz.0.3819'. [ 790.370233][T20303] sctp: [Deprecated]: syz.3.3847 (pid 20303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 790.370233][T20303] Use struct sctp_sack_info instead [ 791.155022][T20341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3857'. [ 792.235688][T20396] netlink: 'syz.1.3866': attribute type 10 has an invalid length. [ 792.357812][T20396] veth0_macvtap: left promiscuous mode [ 792.505202][T20406] netlink: 'syz.2.3870': attribute type 3 has an invalid length. [ 792.549538][T20406] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3870'. [ 792.996489][T20420] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3873'. [ 793.205509][T20415] syzkaller0: entered promiscuous mode [ 793.223062][T20415] syzkaller0: entered allmulticast mode [ 793.484384][T20427] netlink: 'syz.1.3875': attribute type 9 has an invalid length. [ 793.510069][T20427] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3875'. [ 796.502767][T20428] netlink: 'syz.1.3875': attribute type 9 has an invalid length. [ 796.517627][T20428] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3875'. [ 796.612233][T20434] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.3876'. [ 797.695614][T20439] netlink: 'syz.0.3878': attribute type 29 has an invalid length. [ 797.774444][T20439] netlink: 'syz.0.3878': attribute type 29 has an invalid length. [ 797.785206][T20455] netlink: 'syz.0.3878': attribute type 29 has an invalid length. [ 798.041527][T20439] netlink: 'syz.0.3878': attribute type 29 has an invalid length. [ 798.107068][T20438] netlink: 'syz.0.3878': attribute type 29 has an invalid length. [ 798.181694][T20459] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3881'. [ 798.213770][T20459] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3881'. [ 798.226495][T20461] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3881'. [ 798.282190][T20465] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3881'. [ 798.716109][T20477] syzkaller0: entered promiscuous mode [ 798.731854][T20477] syzkaller0: entered allmulticast mode [ 801.186577][T20506] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3892'. [ 802.514415][T20545] netlink: 'syz.1.3903': attribute type 2 has an invalid length. [ 802.552127][T20545] netlink: 'syz.1.3903': attribute type 1 has an invalid length. [ 802.609192][T20545] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3903'. [ 803.576639][T20564] netlink: 'syz.3.3911': attribute type 29 has an invalid length. [ 803.620601][T20564] netlink: 'syz.3.3911': attribute type 29 has an invalid length. [ 803.629749][T20565] netlink: 'syz.3.3911': attribute type 29 has an invalid length. [ 803.638789][T20564] netlink: 'syz.3.3911': attribute type 29 has an invalid length. [ 803.650105][T20565] netlink: 'syz.3.3911': attribute type 29 has an invalid length. [ 804.096595][T20578] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3915'. [ 805.639246][T20562] netlink: 'syz.2.3912': attribute type 29 has an invalid length. [ 805.702106][T20562] netlink: 'syz.2.3912': attribute type 29 has an invalid length. [ 805.723501][T20571] netlink: 'syz.2.3912': attribute type 29 has an invalid length. [ 805.865345][T20571] netlink: 'syz.2.3912': attribute type 29 has an invalid length. [ 805.945835][T20571] netlink: 'syz.2.3912': attribute type 29 has an invalid length. [ 806.128213][T20615] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.3923'. [ 806.145933][T20615] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3923'. [ 806.156286][T20618] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3924'. [ 806.190236][T20618] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3924'. [ 806.524362][T20630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 806.938320][T20640] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3930'. [ 806.979169][T20639] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3929'. [ 806.989835][T20639] `: renamed from syz_tun (while UP) [ 807.306464][T20646] syzkaller1: entered promiscuous mode [ 807.336959][T20646] syzkaller1: entered allmulticast mode [ 807.807625][T20652] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3933'. [ 808.264448][T20664] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.3936'. [ 808.595495][T20675] validate_nla: 13 callbacks suppressed [ 808.595510][T20675] netlink: 'syz.1.3934': attribute type 29 has an invalid length. [ 808.631722][T20675] netlink: 'syz.1.3934': attribute type 29 has an invalid length. [ 808.641653][T20660] netlink: 'syz.1.3934': attribute type 29 has an invalid length. [ 808.725134][T20675] netlink: 'syz.1.3934': attribute type 29 has an invalid length. [ 808.913965][T20683] netlink: 'syz.3.3939': attribute type 4 has an invalid length. [ 808.928797][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.935327][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.945890][T20683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3939'. [ 808.978824][T20683] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 809.325716][T20704] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 809.487524][T20708] netlink: 'syz.2.3948': attribute type 46 has an invalid length. [ 809.502876][T20708] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3948'. [ 809.673803][T20712] netlink: 'syz.2.3950': attribute type 21 has an invalid length. [ 809.682241][T20712] netlink: 'syz.2.3950': attribute type 6 has an invalid length. [ 809.690558][T20712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3950'. [ 809.701928][T20712] netlink: 'syz.2.3950': attribute type 21 has an invalid length. [ 809.711590][T20712] netlink: 'syz.2.3950': attribute type 6 has an invalid length. [ 809.721676][T20712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3950'. [ 809.823520][T20716] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.3951'. [ 809.986536][T20720] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.3952'. [ 810.040498][T20720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3952'. [ 810.243697][T20739] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3958'. [ 814.335310][T20821] __nla_validate_parse: 2 callbacks suppressed [ 814.335326][T20821] netlink: 206092 bytes leftover after parsing attributes in process `syz.0.3987'. [ 814.471252][T20821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3987'. [ 815.217109][T20847] validate_nla: 3 callbacks suppressed [ 815.217146][T20847] netlink: 'syz.2.3984': attribute type 29 has an invalid length. [ 815.302935][T20846] netlink: 'syz.0.3983': attribute type 21 has an invalid length. [ 815.420575][T20847] netlink: 'syz.2.3984': attribute type 29 has an invalid length. [ 815.484728][T20848] netlink: 'syz.2.3984': attribute type 29 has an invalid length. [ 815.712283][T20850] netlink: 'syz.2.3984': attribute type 29 has an invalid length. [ 815.849334][T20852] netlink: 'syz.2.3984': attribute type 29 has an invalid length. [ 815.867601][T20847] netlink: 'syz.2.3984': attribute type 29 has an invalid length. [ 819.102233][T20907] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4001'. [ 819.128494][T20910] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4001'. [ 819.518616][T20919] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4005'. [ 820.206570][T20941] netlink: 'syz.3.4010': attribute type 10 has an invalid length. [ 820.207856][T20943] netlink: 'syz.1.4011': attribute type 41 has an invalid length. [ 820.227827][T20941] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4010'. [ 820.249111][T20941] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 820.268278][T20939] netlink: 'syz.3.4010': attribute type 10 has an invalid length. [ 820.276296][T20939] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4010'. [ 820.289774][T20939] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 820.320465][T20943] netlink: 'syz.1.4011': attribute type 41 has an invalid length. [ 821.038861][T20959] netlink: 'syz.0.4017': attribute type 33 has an invalid length. [ 821.458211][T20965] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4019'. [ 821.490021][T20965] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 821.508954][T20965] CPU: 0 PID: 20965 Comm: syz.2.4019 Not tainted syzkaller #0 [ 821.516485][T20965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 821.526573][T20965] Call Trace: [ 821.529884][T20965] [ 821.532836][T20965] dump_stack_lvl+0x18c/0x250 [ 821.537557][T20965] ? show_regs_print_info+0x20/0x20 [ 821.542808][T20965] ? load_image+0x420/0x420 [ 821.547363][T20965] sysfs_warn_dup+0x8e/0xa0 [ 821.551878][T20965] sysfs_do_create_link_sd+0xc0/0x110 [ 821.557260][T20965] device_add_class_symlinks+0x1cf/0x240 [ 821.562913][T20965] device_add+0x507/0xc50 [ 821.567263][T20965] wiphy_register+0x1dad/0x2ae0 [ 821.572145][T20965] ? cfg80211_event_work+0x40/0x40 [ 821.577288][T20965] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 821.583464][T20965] ieee80211_register_hw+0x3464/0x4250 [ 821.589037][T20965] ? ieee80211_tasklet_handler+0x20/0x20 [ 821.594673][T20965] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 821.600571][T20965] ? __debug_object_init+0xec/0x450 [ 821.605782][T20965] ? __asan_memset+0x22/0x40 [ 821.610387][T20965] ? __hrtimer_init+0x186/0x270 [ 821.615328][T20965] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 821.621068][T20965] ? mac80211_hwsim_free+0x220/0x220 [ 821.626357][T20965] ? rcu_is_watching+0x15/0xb0 [ 821.631155][T20965] ? kstrndup+0xbd/0x140 [ 821.635443][T20965] hwsim_new_radio_nl+0xdc9/0x1a90 [ 821.640585][T20965] ? __nla_validate+0x50/0x50 [ 821.645286][T20965] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 821.651668][T20965] ? __nla_parse+0x40/0x50 [ 821.656088][T20965] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 821.662519][T20965] genl_family_rcv_msg_doit+0x211/0x310 [ 821.668069][T20965] ? end_current_label_crit_section+0x170/0x170 [ 821.674319][T20965] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 821.680221][T20965] ? bpf_lsm_capable+0x9/0x10 [ 821.684901][T20965] ? security_capable+0x89/0xb0 [ 821.689765][T20965] genl_rcv_msg+0x619/0x7a0 [ 821.694323][T20965] ? genl_bind+0x360/0x360 [ 821.698758][T20965] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 821.705104][T20965] netlink_rcv_skb+0x241/0x4d0 [ 821.709878][T20965] ? genl_bind+0x360/0x360 [ 821.714309][T20965] ? netlink_ack+0x1180/0x1180 [ 821.719094][T20965] ? __lock_acquire+0x7d40/0x7d40 [ 821.724147][T20965] ? down_read+0x1ac/0x2e0 [ 821.728751][T20965] genl_rcv+0x28/0x40 [ 821.732743][T20965] netlink_unicast+0x751/0x8d0 [ 821.737516][T20965] netlink_sendmsg+0x8d0/0xbf0 [ 821.742284][T20965] ? lockdep_hardirqs_on+0x98/0x150 [ 821.747489][T20965] ? netlink_getsockopt+0x590/0x590 [ 821.752694][T20965] ? netlink_getsockopt+0x590/0x590 [ 821.758014][T20965] ? netlink_getsockopt+0x590/0x590 [ 821.763215][T20965] ____sys_sendmsg+0x5ba/0x960 [ 821.767993][T20965] ? __asan_memset+0x22/0x40 [ 821.772607][T20965] ? __sys_sendmsg_sock+0x30/0x30 [ 821.777631][T20965] ? __import_iovec+0x5f2/0x850 [ 821.782490][T20965] ? import_iovec+0x73/0xa0 [ 821.786994][T20965] ___sys_sendmsg+0x2a6/0x360 [ 821.791680][T20965] ? __sys_sendmsg+0x2a0/0x2a0 [ 821.796493][T20965] __se_sys_sendmsg+0x1c2/0x2b0 [ 821.801349][T20965] ? __x64_sys_sendmsg+0x80/0x80 [ 821.806301][T20965] ? lockdep_hardirqs_on+0x98/0x150 [ 821.811594][T20965] do_syscall_64+0x55/0xb0 [ 821.816040][T20965] ? clear_bhb_loop+0x40/0x90 [ 821.820713][T20965] ? clear_bhb_loop+0x40/0x90 [ 821.825388][T20965] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.831285][T20965] RIP: 0033:0x7f2b8459ce59 [ 821.835700][T20965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.855314][T20965] RSP: 002b:00007f2b853bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.863734][T20965] RAX: ffffffffffffffda RBX: 00007f2b84815fa0 RCX: 00007f2b8459ce59 [ 821.871706][T20965] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 821.879673][T20965] RBP: 00007f2b84632d6f R08: 0000000000000000 R09: 0000000000000000 [ 821.887646][T20965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.895618][T20965] R13: 00007f2b84816038 R14: 00007f2b84815fa0 R15: 00007ffffb696478 [ 821.903618][T20965] [ 822.155128][T20977] netlink: 'syz.1.4024': attribute type 10 has an invalid length. [ 822.350955][T20977] team0: Port device wlan1 added [ 822.757350][T20992] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4035'. [ 824.198034][T21023] netlink: 'syz.0.4036': attribute type 46 has an invalid length. [ 824.211240][T21023] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4036'. [ 826.220843][T21056] netlink: 'syz.0.4046': attribute type 1 has an invalid length. [ 826.256930][T21056] netlink: 186044 bytes leftover after parsing attributes in process `syz.0.4046'. [ 826.448931][T21066] netlink: 'syz.2.4048': attribute type 21 has an invalid length. [ 826.481910][T21066] netlink: 'syz.2.4048': attribute type 4 has an invalid length. [ 826.527290][T21066] netlink: 'syz.2.4048': attribute type 23 has an invalid length. [ 826.535172][T21066] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4048'. [ 826.619237][T21065] netlink: 'syz.2.4048': attribute type 21 has an invalid length. [ 826.647368][T21065] netlink: 'syz.2.4048': attribute type 4 has an invalid length. [ 826.691776][T21065] netlink: 'syz.2.4048': attribute type 23 has an invalid length. [ 826.716918][T21065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4048'. [ 826.769931][T21068] virt_wifi0: entered promiscuous mode [ 826.791189][T21068] virt_wifi0: entered allmulticast mode [ 827.691978][T21094] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4053'. [ 828.359055][T21115] netlink: 'syz.2.4059': attribute type 1 has an invalid length. [ 828.409116][T21115] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4059'. [ 828.459285][T21115] netlink: 'syz.2.4059': attribute type 1 has an invalid length. [ 828.564744][T21115] netlink: 'syz.2.4059': attribute type 9 has an invalid length. [ 828.582616][T21122] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.618896][T21115] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4059'. [ 829.283460][T21140] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.4066'. [ 829.599485][T21150] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4067'. [ 830.574682][T21175] netlink: 196 bytes leftover after parsing attributes in process `syz.0.4074'. [ 830.697290][T21181] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4075'. [ 834.058432][T21246] validate_nla: 1 callbacks suppressed [ 834.058449][T21246] netlink: 'syz.1.4092': attribute type 21 has an invalid length. [ 834.075512][T21246] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.4092'. [ 834.088735][T21246] netlink: 'syz.1.4092': attribute type 17 has an invalid length. [ 834.097528][T21246] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4092'. [ 834.116617][T21246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 835.676884][T21285] netlink: 'syz.1.4110': attribute type 10 has an invalid length. [ 835.810491][T21285] team0: Device wg1 is of different type [ 837.183362][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4108'. [ 838.050142][T21331] netlink: 'syz.3.4112': attribute type 10 has an invalid length. [ 838.058209][T21331] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4112'. [ 838.419033][T21331] team0: Port device macvlan0 removed [ 838.917340][T21363] netlink: 'syz.2.4118': attribute type 17 has an invalid length. [ 838.926919][T21363] netlink: 'syz.2.4118': attribute type 16 has an invalid length. [ 838.935177][T21363] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4118'. [ 838.965771][T21363] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.4118'. [ 838.975245][T21364] netlink: 'syz.1.4119': attribute type 10 has an invalid length. [ 839.244014][T21371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4122'. [ 839.403292][T21376] netlink: 'syz.2.4124': attribute type 10 has an invalid length. [ 839.416622][T21376] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.4124'. [ 839.439277][T21374] netlink: 'syz.0.4123': attribute type 3 has an invalid length. [ 839.461619][T21374] netlink: 'syz.0.4123': attribute type 16 has an invalid length. [ 839.486427][T21374] netlink: 'syz.0.4123': attribute type 18 has an invalid length. [ 839.504829][T21374] netlink: 'syz.0.4123': attribute type 20 has an invalid length. [ 839.547113][T21374] netlink: 120940 bytes leftover after parsing attributes in process `syz.0.4123'. [ 839.706362][T21383] netlink: 'syz.2.4127': attribute type 3 has an invalid length. [ 839.756840][T21383] netlink: 'syz.2.4127': attribute type 4 has an invalid length. [ 839.762789][T21385] netlink: 'syz.2.4127': attribute type 3 has an invalid length. [ 839.774276][T21383] netlink: 'syz.2.4127': attribute type 7 has an invalid length. [ 839.779779][T21385] netlink: 'syz.2.4127': attribute type 7 has an invalid length. [ 839.799409][T21385] netlink: 197792 bytes leftover after parsing attributes in process `syz.2.4127'. [ 839.813901][T21380] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4125'. [ 839.824906][T21383] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.4127'. [ 839.852900][T21380] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4125'. [ 839.910270][T21384] tap0: tun_chr_ioctl cmd 1074025677 [ 839.922923][T21384] tap0: linktype set to 778 [ 839.932349][T21392] tap0: tun_chr_ioctl cmd 2147767511 [ 840.419311][T21407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4132'. [ 841.368405][T21434] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.4137'. [ 842.341581][T21433] ªªªªªª: renamed from vlan0 (while UP) [ 842.827486][T21443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4141'. [ 842.895622][T21449] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 843.212526][T14394] Bluetooth: hci4: ISO packet for unknown connection handle 3857 [ 844.898728][T21488] netlink: 'syz.2.4153': attribute type 11 has an invalid length. [ 844.956990][T21488] __nla_validate_parse: 3 callbacks suppressed [ 844.957006][T21488] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.4153'. [ 845.080374][T21488] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 845.118827][T21488] CPU: 1 PID: 21488 Comm: syz.2.4153 Not tainted syzkaller #0 [ 845.126391][T21488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.136493][T21488] Call Trace: [ 845.139808][T21488] [ 845.142766][T21488] dump_stack_lvl+0x18c/0x250 [ 845.147485][T21488] ? show_regs_print_info+0x20/0x20 [ 845.152808][T21488] ? load_image+0x420/0x420 [ 845.157366][T21488] sysfs_warn_dup+0x8e/0xa0 [ 845.161898][T21488] sysfs_do_create_link_sd+0xc0/0x110 [ 845.167300][T21488] device_add_class_symlinks+0x1cf/0x240 [ 845.172974][T21488] device_add+0x507/0xc50 [ 845.177439][T21488] wiphy_register+0x1dad/0x2ae0 [ 845.182350][T21488] ? cfg80211_event_work+0x40/0x40 [ 845.187496][T21488] ? minstrel_ht_alloc+0x88a/0x990 [ 845.192650][T21488] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 845.198776][T21488] ieee80211_register_hw+0x3464/0x4250 [ 845.204340][T21488] ? ieee80211_tasklet_handler+0x20/0x20 [ 845.210014][T21488] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 845.215939][T21488] ? __debug_object_init+0xec/0x450 [ 845.221174][T21488] ? __asan_memset+0x22/0x40 [ 845.225792][T21488] ? __hrtimer_init+0x186/0x270 [ 845.230668][T21488] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 845.236430][T21488] ? mac80211_hwsim_free+0x220/0x220 [ 845.241728][T21488] ? rcu_is_watching+0x15/0xb0 [ 845.246945][T21488] ? kstrndup+0xbd/0x140 [ 845.251300][T21488] hwsim_new_radio_nl+0xdc9/0x1a90 [ 845.256439][T21488] ? __nla_validate+0x50/0x50 [ 845.261149][T21488] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 845.267518][T21488] ? __nla_parse+0x40/0x50 [ 845.271965][T21488] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 845.278325][T21488] genl_family_rcv_msg_doit+0x211/0x310 [ 845.283905][T21488] ? end_current_label_crit_section+0x170/0x170 [ 845.290190][T21488] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 845.296117][T21488] ? bpf_lsm_capable+0x9/0x10 [ 845.300824][T21488] ? security_capable+0x89/0xb0 [ 845.305705][T21488] genl_rcv_msg+0x619/0x7a0 [ 845.310269][T21488] ? genl_bind+0x360/0x360 [ 845.314703][T21488] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 845.321048][T21488] ? ref_tracker_free+0x690/0x840 [ 845.326107][T21488] netlink_rcv_skb+0x241/0x4d0 [ 845.330889][T21488] ? genl_bind+0x360/0x360 [ 845.335321][T21488] ? netlink_ack+0x1180/0x1180 [ 845.340111][T21488] ? __lock_acquire+0x7d40/0x7d40 [ 845.345171][T21488] ? down_read+0x1ac/0x2e0 [ 845.349623][T21488] genl_rcv+0x28/0x40 [ 845.353644][T21488] netlink_unicast+0x751/0x8d0 [ 845.358451][T21488] netlink_sendmsg+0x8d0/0xbf0 [ 845.363252][T21488] ? netlink_getsockopt+0x590/0x590 [ 845.368469][T21488] ? aa_sock_msg_perm+0x94/0x150 [ 845.373433][T21488] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 845.378739][T21488] ? security_socket_sendmsg+0x80/0xa0 [ 845.384215][T21488] ? netlink_getsockopt+0x590/0x590 [ 845.389442][T21488] ____sys_sendmsg+0x5ba/0x960 [ 845.394234][T21488] ? __asan_memset+0x22/0x40 [ 845.398852][T21488] ? __sys_sendmsg_sock+0x30/0x30 [ 845.403889][T21488] ? __import_iovec+0x5f2/0x850 [ 845.408760][T21488] ? import_iovec+0x73/0xa0 [ 845.413281][T21488] ___sys_sendmsg+0x2a6/0x360 [ 845.417993][T21488] ? __sys_sendmsg+0x2a0/0x2a0 [ 845.422852][T21488] __se_sys_sendmsg+0x1c2/0x2b0 [ 845.427747][T21488] ? __x64_sys_sendmsg+0x80/0x80 [ 845.432734][T21488] ? lockdep_hardirqs_on+0x98/0x150 [ 845.437989][T21488] do_syscall_64+0x55/0xb0 [ 845.442447][T21488] ? clear_bhb_loop+0x40/0x90 [ 845.447132][T21488] ? clear_bhb_loop+0x40/0x90 [ 845.451821][T21488] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 845.457737][T21488] RIP: 0033:0x7f2b8459ce59 [ 845.462164][T21488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.481814][T21488] RSP: 002b:00007f2b853bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.490259][T21488] RAX: ffffffffffffffda RBX: 00007f2b84815fa0 RCX: 00007f2b8459ce59 [ 845.498252][T21488] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 845.506245][T21488] RBP: 00007f2b84632d6f R08: 0000000000000000 R09: 0000000000000000 [ 845.514237][T21488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 845.522315][T21488] R13: 00007f2b84816038 R14: 00007f2b84815fa0 R15: 00007ffffb696478 [ 845.530324][T21488] [ 846.023495][T21496] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4155'. [ 950.906740][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 950.913518][ C1] rcu: 1-....: (1 GPs behind) idle=0e2c/1/0x4000000000000000 softirq=93509/93510 fqs=2200 [ 950.924572][ C1] rcu: hardirqs softirqs csw/system [ 950.930982][ C1] rcu: number: 1418485 0 0 [ 950.937382][ C1] rcu: cputime: 13812 38666 39 ==> 52480(ms) [ 950.945210][ C1] rcu: (t=10500 jiffies g=117085 q=710 ncpus=2) [ 950.951540][ C1] CPU: 1 PID: 21492 Comm: syz.0.4154 Not tainted syzkaller #0 [ 950.958993][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 950.969055][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x81/0x120 [ 950.975660][ C1] Code: 00 00 00 b9 01 00 00 00 48 85 c0 0f 84 ae 00 00 00 41 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 05 74 85 7c 7e 45 31 c9 eb 08 <49> ff c1 4c 39 c8 74 77 4e 8b 54 ce 10 65 44 8b 1d 62 85 7c 7e 41 [ 950.995302][ C1] RSP: 0018:ffffc900001eefd0 EFLAGS: 00000246 [ 951.001434][ C1] RAX: 0000000000000008 RBX: 0000000000000000 RCX: 0000000000000003 [ 951.009656][ C1] RDX: ffffffff813b3f02 RSI: ffffffff8cfa0820 RDI: 0000000000000005 [ 951.017623][ C1] RBP: ffffc900001ef118 R08: ffff88802e983c00 R09: 0000000000000002 [ 951.025582][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffffc900001ef0c8 [ 951.033542][ C1] R13: dffffc0000000000 R14: 0000000000000005 R15: ffffffff8f926d92 [ 951.041501][ C1] FS: 00007f30ca6416c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 951.050431][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 951.056999][ C1] CR2: 0000000000000000 CR3: 000000006b1f9000 CR4: 00000000003506e0 [ 951.064953][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 951.072912][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 951.080863][ C1] Call Trace: [ 951.084127][ C1] [ 951.086962][ C1] unwind_next_frame+0x742/0x2970 [ 951.091984][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 951.097599][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 951.103215][ C1] ? stack_trace_save+0x100/0x100 [ 951.108220][ C1] arch_stack_walk+0x144/0x190 [ 951.112986][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 951.118604][ C1] stack_trace_save+0xaa/0x100 [ 951.123354][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 951.128466][ C1] ? mark_lock+0x94/0x320 [ 951.132789][ C1] kasan_set_track+0x4e/0x70 [ 951.137387][ C1] ? kasan_set_track+0x4e/0x70 [ 951.142134][ C1] ? kasan_save_free_info+0x2e/0x50 [ 951.147342][ C1] ? ____kasan_slab_free+0x126/0x1e0 [ 951.152698][ C1] ? slab_free_freelist_hook+0x130/0x1a0 [ 951.158312][ C1] ? kmem_cache_free+0xf8/0x270 [ 951.163147][ C1] ? packet_rcv+0x16b/0x13d0 [ 951.167717][ C1] ? dev_queue_xmit_nit+0xb16/0xbb0 [ 951.172915][ C1] ? dev_hard_start_xmit+0x148/0x740 [ 951.178198][ C1] ? sch_direct_xmit+0x25e/0x4c0 [ 951.183123][ C1] ? __dev_queue_xmit+0x165d/0x3660 [ 951.188313][ C1] ? ip_finish_output2+0xd3a/0x11e0 [ 951.193598][ C1] ? ip_output+0x2a1/0x3b0 [ 951.198000][ C1] ? __ip_queue_xmit+0x1049/0x1950 [ 951.203094][ C1] ? __tcp_transmit_skb+0x1d6d/0x33f0 [ 951.208452][ C1] ? tcp_rcv_established+0x1307/0x1d20 [ 951.213897][ C1] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 951.218643][ C1] ? tcp_v4_rcv+0x23bf/0x2af0 [ 951.223324][ C1] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 951.229002][ C1] ? kmem_cache_free+0xf8/0x270 [ 951.233874][ C1] kasan_save_free_info+0x2e/0x50 [ 951.238911][ C1] ____kasan_slab_free+0x126/0x1e0 [ 951.244018][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 951.249480][ C1] ? packet_rcv+0x16b/0x13d0 [ 951.254053][ C1] kmem_cache_free+0xf8/0x270 [ 951.258730][ C1] packet_rcv+0x16b/0x13d0 [ 951.263150][ C1] ? packet_sock_destruct+0x160/0x160 [ 951.268528][ C1] dev_queue_xmit_nit+0xb16/0xbb0 [ 951.273568][ C1] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 951.278672][ C1] dev_hard_start_xmit+0x148/0x740 [ 951.283778][ C1] sch_direct_xmit+0x25e/0x4c0 [ 951.288533][ C1] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 951.294511][ C1] __dev_queue_xmit+0x165d/0x3660 [ 951.299532][ C1] ? __dev_queue_xmit+0x265/0x3660 [ 951.304638][ C1] ? kasan_check_range+0x89/0x290 [ 951.309655][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 951.315015][ C1] ? __asan_memcpy+0x40/0x70 [ 951.319594][ C1] ? eth_header+0x11b/0x200 [ 951.324177][ C1] ? llc_sysctl_exit+0x70/0x70 [ 951.328925][ C1] ? neigh_resolve_output+0x618/0x730 [ 951.334312][ C1] ? ip_finish_output2+0x457/0x11e0 [ 951.339499][ C1] ip_finish_output2+0xd3a/0x11e0 [ 951.344517][ C1] ? ip_fragment+0x210/0x210 [ 951.349092][ C1] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 951.353926][ C1] ? ip_finish_output+0x3ef/0x4c0 [ 951.358934][ C1] ip_output+0x2a1/0x3b0 [ 951.363160][ C1] ? ip_output+0x60/0x3b0 [ 951.367473][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 951.372414][ C1] __ip_queue_xmit+0x1049/0x1950 [ 951.377381][ C1] ? __ip_queue_xmit+0x5d/0x1950 [ 951.382398][ C1] __tcp_transmit_skb+0x1d6d/0x33f0 [ 951.387616][ C1] ? __tcp_send_ack+0x5a0/0x5a0 [ 951.392478][ C1] ? __tcp_send_ack+0x176/0x5a0 [ 951.397314][ C1] tcp_rcv_established+0x1307/0x1d20 [ 951.402672][ C1] ? rt_is_expired+0x1c/0x2d0 [ 951.407339][ C1] ? tcp_check_space+0xad0/0xad0 [ 951.412364][ C1] ? rt_is_expired+0x1c/0x2d0 [ 951.417024][ C1] ? rt_is_expired+0x250/0x2d0 [ 951.421770][ C1] tcp_v4_do_rcv+0x4ed/0xb80 [ 951.426348][ C1] tcp_v4_rcv+0x23bf/0x2af0 [ 951.430860][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 951.435912][ C1] ? tcp_filter+0x90/0x90 [ 951.440298][ C1] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 951.445775][ C1] ? ip_local_deliver_finish+0x1cb/0x510 [ 951.451433][ C1] ip_local_deliver_finish+0x2ca/0x510 [ 951.456900][ C1] NF_HOOK+0x32d/0x3b0 [ 951.461035][ C1] ? fib_multipath_hash+0x1b10/0x1b10 [ 951.466429][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 951.470663][ C1] ? NF_HOOK+0x9f/0x3b0 [ 951.474803][ C1] ? ip_local_deliver+0x1b0/0x1b0 [ 951.479813][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 951.484068][ C1] ? ip_rcv_finish_core+0xd92/0x1bd0 [ 951.489379][ C1] ? ip_local_deliver+0x122/0x1b0 [ 951.494405][ C1] ip_sublist_rcv+0xa4c/0xd70 [ 951.499080][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 951.504277][ C1] ? ip_list_rcv+0x440/0x440 [ 951.508854][ C1] ? ip_rcv_core+0xdb0/0xdb0 [ 951.513476][ C1] ip_list_rcv+0x3f2/0x440 [ 951.517901][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.524134][ C1] ? ip_rcv_finish+0x250/0x250 [ 951.528919][ C1] ? __netif_receive_skb_list_core+0x2cd/0x750 [ 951.535093][ C1] ? ip_rcv_finish+0x250/0x250 [ 951.539895][ C1] __netif_receive_skb_list_core+0x2da/0x750 [ 951.545902][ C1] ? set_rps_cpu+0x6a0/0x6a0 [ 951.550489][ C1] ? read_tsc+0x9/0x20 [ 951.554576][ C1] netif_receive_skb_list_internal+0x943/0xca0 [ 951.560740][ C1] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 951.567077][ C1] ? dev_gro_receive+0x10ce/0x22c0 [ 951.572176][ C1] ? netif_receive_skb_core+0x230/0x230 [ 951.577738][ C1] napi_gro_receive+0x565/0xb00 [ 951.582607][ C1] receive_buf+0x2203/0x3820 [ 951.587202][ C1] ? virtnet_poll_tx+0x530/0x530 [ 951.592146][ C1] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 951.597603][ C1] virtnet_poll+0x5dd/0x1280 [ 951.602210][ C1] ? refill_work+0x220/0x220 [ 951.606792][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.612979][ C1] __napi_poll+0xc0/0x460 [ 951.617326][ C1] net_rx_action+0x616/0xc40 [ 951.621918][ C1] ? net_tx_action+0x980/0x980 [ 951.626667][ C1] ? detach_timer+0x2b0/0x2b0 [ 951.631340][ C1] handle_softirqs+0x280/0x820 [ 951.636093][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 951.640852][ C1] ? do_softirq+0x1a0/0x1a0 [ 951.645346][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 951.650620][ C1] __irq_exit_rcu+0xd3/0x190 [ 951.655196][ C1] ? irq_exit_rcu+0x20/0x20 [ 951.659686][ C1] irq_exit_rcu+0x9/0x20 [ 951.663910][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 951.669536][ C1] [ 951.672456][ C1] [ 951.675374][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.681347][ C1] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 951.687224][ C1] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 a1 ea cb f6 e8 4c fd fc f6 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 951.707303][ C1] RSP: 0018:ffffc900043d7840 EFLAGS: 00000286 [ 951.713406][ C1] RAX: ecc624c03e646b00 RBX: 0000000000000000 RCX: ecc624c03e646b00 [ 951.721370][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 951.729346][ C1] RBP: ffffc900043d78e0 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 951.737303][ C1] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: 0000000000000000 [ 951.745263][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200087af08 [ 951.753233][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 951.758966][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 951.764756][ C1] irqentry_exit+0x67/0x70 [ 951.769157][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.775121][ C1] RIP: 0010:lock_release+0xae/0x8c0 [ 951.780337][ C1] Code: 9b 7e 83 f8 08 0f 83 3c 05 00 00 89 c3 c1 e8 06 48 8d 3c c5 68 66 8b 8e be 08 00 00 00 e8 ca ba 76 00 48 0f a3 1d ba b3 22 0d <73> 0d e8 2b 37 08 00 84 c0 0f 84 44 05 00 00 48 c7 c0 1c 9b 8b 8e [ 951.799933][ C1] RSP: 0018:ffffc900043d79a0 EFLAGS: 00000257 [ 951.805985][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8168b2a6 [ 951.813963][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e8b6668 [ 951.821925][ C1] RBP: ffffc900043d7ab0 R08: ffffffff8e8b666f R09: 1ffffffff1d16ccd [ 951.829898][ C1] R10: dffffc0000000000 R11: fffffbfff1d16cce R12: ffffffff815e733d [ 951.837855][ C1] R13: dffffc0000000000 R14: ffff88802e98517c R15: 1ffff9200087af40 [ 951.845817][ C1] ? task_mm_cid_work+0x31d/0x770 [ 951.850932][ C1] ? lock_release+0xa6/0x8c0 [ 951.855516][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.861663][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 951.866870][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 951.871882][ C1] ? task_mm_cid_work+0x31d/0x770 [ 951.876986][ C1] ? task_mm_cid_work+0x31d/0x770 [ 951.881998][ C1] task_mm_cid_work+0x226/0x770 [ 951.886836][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 951.892998][ C1] ? init_sched_mm_cid+0x130/0x130 [ 951.898101][ C1] task_work_run+0x1d4/0x260 [ 951.902681][ C1] ? task_work_cancel+0x220/0x220 [ 951.907703][ C1] get_signal+0x1235/0x13f0 [ 951.912210][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 951.917921][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 951.924210][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 951.929841][ C1] ? lock_chain_count+0x20/0x20 [ 951.934704][ C1] ? get_sigframe_size+0x20/0x20 [ 951.939657][ C1] exit_to_user_mode_loop+0x70/0x110 [ 951.944941][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 951.950485][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 951.955951][ C1] do_syscall_64+0x61/0xb0 [ 951.960382][ C1] ? clear_bhb_loop+0x40/0x90 [ 951.965065][ C1] ? clear_bhb_loop+0x40/0x90 [ 951.969732][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 951.975638][ C1] RIP: 0033:0x7f30c979ce59 [ 951.980076][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.000360][ C1] RSP: 002b:00007f30ca641028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 952.008769][ C1] RAX: 0000000000000017 RBX: 00007f30c9a16180 RCX: 00007f30c979ce59 [ 952.016726][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 952.024694][ C1] RBP: 00007f30c9832d6f R08: 0000000000000002 R09: 0000000000000000 [ 952.032776][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 952.040745][ C1] R13: 00007f30c9a16218 R14: 00007f30c9a16180 R15: 00007ffe4a670188 [ 952.048734][ C1]