last executing test programs: 19.799359161s ago: executing program 1 (id=1943): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x400000000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) sendmsg$tipc(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000580)=""/247, 0x0, 0xf7, 0x0, 0x4, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x3b7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 19.460864118s ago: executing program 0 (id=1947): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x4}, 0x18) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = gettid() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0x1, 0x5, 0x9, 0x0, 0x5, 0x12408, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x90, 0xb, 0x9, 0x9, 0x0, 0x1, 0x8, 0x0, 0x5, 0x0, 0x2}, r2, 0xf, 0xffffffffffffffff, 0x2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_macvtap\x00', @random="11068eab2d9d"}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x4}, 0x18) (async) close(r0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) (async) gettid() (async) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0x1, 0x5, 0x9, 0x0, 0x5, 0x12408, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x4}, 0x90, 0xb, 0x9, 0x9, 0x0, 0x1, 0x8, 0x0, 0x5, 0x0, 0x2}, r2, 0xf, 0xffffffffffffffff, 0x2) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x7}]}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_macvtap\x00', @random="11068eab2d9d"}) (async) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) (async) 19.214312475s ago: executing program 0 (id=1948): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x100000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0x4}, {0x6, 0x1, 0x0, 0x1}]}) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x17, 0x0, 0x0) ioctl$TUNGETVNETLE(r1, 0x40107447, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)="b8949f404b4437fc65cb9305f5930b5ccaa9f587ba8a2016a251d641d99a103375fd9118bc135d9f61b6aee81101b730c6b1e4c1b45fe250cee1a8f982243e40a0c4a808b449a9158f68c1919c496035d6521f9a39fe2833947bb9f44ecbcd59ef620e7b4c52ca20cda8b1f9a363e7f32752857b750db73d2a44d3b0e4fb469b18d9d847", 0x84}, {&(0x7f0000000200)="17f4eacda952799453ac8705fa416106825a7ff400159f8c27afa75bbe0b93e0482642c0195f0d37db5e67c277e37b8f6a02b76f814a5d8a629686aeb9536021ee1644ee228abdf49f3b7aa318442688923209feb8603f", 0x57}, {&(0x7f00000003c0)="7a9fe6f3b72f2236234f1790d439c6926b84910f265e31efd71d8d465570122b292cfff5aaaca00d26807384d4deea794b741233b1be18a9b2ef76a9af65d0e882b1", 0x42}, {&(0x7f0000000440)="51a5d07922363333c1e54404d1035d1e665dac9e65", 0x15}, {&(0x7f0000000580)="4bc46ea12ac8fe580ec157b1e908c32146ec4f638919f4c88362ffec069b20d31db20aca74031ef720d92816b285be9e668db9e0537963e833ea47a7c1134ad741107ecce412f955d02cf804dc6240e0efbb1f56666e73073a51b02560", 0x5d}], 0x5, 0x0, 0x0, 0x10000000}, 0x52cc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) 18.817707084s ago: executing program 0 (id=1951): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x0, 0x1c, 0x0, 0x1, 0x2a34}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={&(0x7f0000000140)}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180900000000000000000000002020204c124924b74fd67b1af8ff00000006000000000000000007010000f8ffffffb702000008000000b7030000fdffffff8500"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000380)="e0b9547e", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000}, 0x10008, 0x9, 0x0, 0x7, 0x4, 0x7, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8=r1], &(0x7f00000003c0)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x6, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280), 0xc) syz_clone(0x20040000, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1f, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000050000000000002006d6048140110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000fdffffff0000000000000000180000000e000000000000000a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000006500000018270000", @ANYRES32=r0, @ANYBLOB="0000000007000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.708595847s ago: executing program 3 (id=1952): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000040)="89c97593dc8989bfabb799efc0448d007056f2259e0a2a8df5266124374e954ccccabeb4739008cad112ed2ccbe9e2fa9c98031ac809dbb6fd2f99cb648722954efb3dad7dc52c7868e4ac7601eea4bbb4af516d1b87b24a572d", 0x5a}, {&(0x7f00000000c0)="92bc945fab5993a628e21262fa03ba16e7f8ce", 0x13}, {&(0x7f0000000100)="43296e83aa6838b59f40e51fb8", 0xd}, {&(0x7f00000001c0)}, {&(0x7f0000000200)="fa9fee7003c225f8c24465e92ef152560cd6f355d46d9e595cbee6bbd9ab372e576faaa7ba6958c96115fd7c2f4e5e6dfbe16ba69cbabfb718c91bc26d43d443373e59c0caaca20bc43e051dfbffcedc37a774de749549943b3eaa81e6a54ee3276809ff921fe1da5cc053b373c1d67f25014f4bc67ec7d13213f8922a4d695165d4d69b9d928c95713cc5c9a4429838edfdfd2f3662014d2f592ab94368ae665e89b4883d33fc4b2027111ad46fbce81faaec56690b8956bd1201cb9ca4a9e2be375afc46f8ab2a8458bda41bddf1812ea56959153a2c91b27666478d1d5b43a243d92e574457a170328c26f4a1", 0xee}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="71a59d7fb53d0644063eaed45d6d40a2a8e2925b8797aaecbc26b6ccf8b7dbb88f3f1ddd8d482270058ce2565029b59730d576d3f5e14b384cfe662fc251aae7241f7426b3f4ca0f19f82fc2a46a49f03956c49712809ea23ff54a3f6e362ca81afb65e6cd5341b16a087b7a22ba1273cde04be7d8f50c33e93fb7019e2ae77bcb36782aac379b73d7be47c08fd7c144d25f174080f6ba3fd0b47d26781c8e9549bb5c02c42ae1b94e9d49c013dba6d4beb95442a3201d5a6700ddc88b3307331eb72955ce741ab517a772", 0xcb}], 0x7}, 0x404c080) 18.639868378s ago: executing program 1 (id=1953): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x108, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb8, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffefffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0)=r3, 0x4) socket$kcm(0x1e, 0x4, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x89, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}, 0x16608, 0x3020, 0x4, 0x9, 0x5, 0x3}, 0x0, 0x8, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500000000000000c7c145b80a2a4364872e72e7e9ecc64a6c9ff98c7c53d8"], 0x0}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="4e480c4e9ead4abec5e5fed28a0100002b"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000000000181200", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004001000040122000b00000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.337201036s ago: executing program 1 (id=1955): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffea4}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b12d25a80648c2594f90324fc601000084002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b20d25a80648c2594f90124fc60100c031a02000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) 17.920515716s ago: executing program 3 (id=1956): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001240)={r0, 0x58, &(0x7f00000011c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001340)={r3, 0x9, 0x30}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001480)={@cgroup=r0, 0x3, 0x1, 0x3, &(0x7f0000001380)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0], &(0x7f0000001440)=[0x0, 0x0]}, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x5, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x8, 0x1, 0x0, 0x6, 0x3, 0x2, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="fcf01db81e4427bb2d09ecf385b753868808f091d2a8a82322a6912302ede345d4a370d6de4905954290aec998b00043dff595d19389ddb240ca8831bd84f41d02b748c9b9e8117ccad18fadb2cd6628c1d8932d4d5e74c72a6da008b5f29ddac87823864c82f53ac75eff328aec2d6a2e85d2393eefbc68553062ac2a96454fac5c32b4ad71590efc8727551c8e70af1d615f9fa0480304da988502eda17cbc0b372059a7b060015ff3199f79f80c7134252278d49e71e0530973004a72467507", @ANYRESOCT=r5, @ANYRESOCT=0x0, @ANYRES8=r5, @ANYBLOB="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", @ANYRES64=r0, @ANYRES8=r5], 0x32600) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0x100000001) 17.792498929s ago: executing program 0 (id=1957): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f00000000c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa000000000000791008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf03000000000000850000000c000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x16efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, &(0x7f0000000000), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x894b, &(0x7f0000000140)) r3 = socket$kcm(0xf, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="01000500"}) r4 = socket$kcm(0xa, 0x6, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000180)={r4}) sendmsg(r4, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x4040040) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000001491117a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 17.34480054s ago: executing program 3 (id=1959): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80643d66b7d80df2e2ff", 0x14}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) (async) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000}, 0x600) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) socketpair(0x22, 0x5, 0x25, &(0x7f00000000c0)) (async) socketpair(0x22, 0x5, 0x25, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230000) close(r5) 17.231923983s ago: executing program 2 (id=1960): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r5, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x2400c000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$sock(r7, &(0x7f0000000440)={&(0x7f0000000180)=@can={0x1d, r9}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)="d93b7e6b06527f6694ed09669a1c0e3f3e226b516fb8d1c2ea5f00662cd00f24bb35de3f7d9110e6e98440ce132e3edb746ec7086073ac0df4e6e5aac20f00ddd777", 0x42}, {&(0x7f0000000280)="951a2f7cdae7bc5ec277246a959f2af505a82bf2fa79f1666843155e506fbd740590a67eb6036c692698d7c1ea5bb8d76f3e50b467a126f9a6b21e302268807dddba3a9f932ff6205258bb2d69ff36543c4d313d1b868bda4b8f0f434bf12ab8a3d0709930dda72dd7b7843d02a2d561bbc623b8d2d35493c99941d419ee89c78bedef9791668e", 0x87}, {&(0x7f0000000340)="d945e7273d6a27b643089b8f8da243096a7c8091927b0644ccbc675ca1ee146000b77eb16f4ce9d42f80d0efac1c8fc9ec7a14ad66bd0d23e3e9a62d2ba13352424c9f61774163c135a2a19a041567885ac79f0303c36080fbbce4f37d6e8ad5b2f4be671578cb37d411c2c06a4f685ee87a85fa86d8b7657770a2bc6b597674b6b17ecc5221f2cedd7868e4b56a9091e459a5046de070156477f084859d1e03c74b7728fc761a9ac5084a783c00a7f615e523e3ee", 0xb5}], 0x3}, 0x20040010) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0xfffffffffffffcce, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4074, 0xfea}, 0x40000061) socket$kcm(0x1e, 0x4, 0x0) 16.868945012s ago: executing program 0 (id=1961): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x400000000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x10122) sendmsg$tipc(r4, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000580)=""/247, 0x0, 0xf7, 0x0, 0x4, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'veth1_to_bridge\x00', @random="02000400ac14"}) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x3b7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 16.867763772s ago: executing program 1 (id=1962): r0 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0x20, &(0x7f0000001600)={&(0x7f00000001c0)=""/15, 0xf, 0x0, &(0x7f0000001580)=""/98, 0x62}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0x20, &(0x7f0000001600)={&(0x7f00000001c0)=""/15, 0xf, 0x0, &(0x7f0000001580)=""/98, 0x62}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1d, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000001000000000000f1ec", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f99e43000000004000000040000001200000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000440)='./cgroup\x00', r3}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000040000000400000000000000", @ANYRES32, @ANYBLOB="000000000000f4ff000000000016000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x14, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000000000000000000801200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000000000000000000801200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7fffff, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) r6 = socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) recvmsg(r6, 0x0, 0x0) (async) recvmsg(r6, 0x0, 0x0) r7 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x16, 0x0, 0x4) sendmsg$kcm(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)}], 0x1}, 0x8000) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) (async) socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) 16.867507812s ago: executing program 2 (id=1963): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000000)="91"}, 0x20) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000070000000000000000000000020100000000002e"], 0x0, 0x34}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001280)={0xffffffffffffffff, 0x58, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000012c0)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7, '\x00', r4, r2, 0x2, 0x0, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0b0000000600000004000000a303000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000100"], 0x50) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async, rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000001000000010000005c"], 0x70, 0x240040c0}, 0x4000000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)="458600dedf", 0x5}, {&(0x7f0000000100)="5e62ad657ddd26069e462ebcbea9dfede4fa26f950f234b67a42667b34155c86bd7d41a2605e45286f4bdfddaaccc5f5e43f161809a297e4d2fc1100c353c4b5743f33e24de544307e60bfbd5f3fdfdc949fc64633382271503fb5af3e4072659ba0194c47300558af1af21eea6ec8c33aebc5922bbf222a7c649c99108765e367463321b1dcb877ff077b91a7b8258c333f5c89", 0x94}], 0x2}, 0x40000) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) (async) r7 = socket$kcm(0x2b, 0x1, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x12, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async) r9 = openat$cgroup_ro(r3, &(0x7f0000001340)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) (async, rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="12000000080000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000140)=r10}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r12}, &(0x7f0000000040)=0x2, 0x0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r11, &(0x7f0000000040)}, 0x20) (async) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001380)={r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=@base={0x1d, 0x1, 0x2, 0x1000, 0x200, r9, 0x9, '\x00', r4, r13, 0x4, 0x2, 0x1}, 0x50) (async) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r14}, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000e3f913ff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r14, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002740)={&(0x7f0000001440)="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", &(0x7f0000002440)=""/223, &(0x7f0000002540)="51400450c56248cb32e6d8fb5f2f079d06031f2fc719ddae2930ebd784322d75a5ee027fa1d68b2208bc0a23df043afec31f7d376cfa48ab0d4a7b8c3d8cd615c57b39c5b99786b79e300abe767b62e427726345f7459f4f52ea60155e51f6d9c3914a4c4bc1f8a29f5b68df4fc8cb1726bad288e56568bbc39b79a86986b70d8e16f18fdd5f7441b221d0d6d481567373a86d863b8e392485d169438d1f2a3296bcf4f06902f1d4096b078f5dd43f2ed93fe7087374c2f5ac2b5d192cd93af85aa01bbdc64de70d146fe6c72c276f1057e391d79a31a3c4680e66b085", &(0x7f0000002640)="f80fab19121eba36b4dadfdcf4451b94249296b1d4ee81e7c5daf672465a7ff2dc2b3ec712e8b68e00d56cf3c1e1571fda267b702f8d325616e47ce4466e5bb057c0fc92259884c560b252690535323250a002bfe8ad2f02583a06e6c79f0115459718348c22765105cc66a5d9409b851e2d105899d922007c9f626108395ee3a436ac8e1c437d33ecb5882429f40f229c85b2993d29f3084528e9a007c28590a48a6f4576ba68375c09c31c680651f266ce1f9fb691c8ddf76ee6209fd3f50851e706daa230dc8835a6a95357e1", 0xbf60, r14, 0x4}, 0x38) setsockopt$sock_attach_bpf(r7, 0x0, 0x61, 0x0, 0xa4d4) 16.644747227s ago: executing program 3 (id=1964): ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f00000000c0)=0x1) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) (async) r0 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000180)='cpu.pressure\x00', 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="b9fe0307681f4c8c989a14f088a8650186dda8c6e96fd9d5a77080d1016acfeb01579fc3d2549014", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) write$cgroup_pressure(r5, &(0x7f0000000040)={'full', 0x25, 0x2, 0x20, 0x800008}, 0x2f) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async) r7 = socket$kcm(0x2, 0x1, 0x84) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) (async) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./cgroup/../file0\x00', 0x0, 0x4000, r11}, 0x18) sendmsg$inet(r7, &(0x7f00000001c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 16.570060198s ago: executing program 1 (id=1965): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="22ff475889bf6f6f23b65fc30eef7591c270c4151d0d5742a1e885b9104e25b4cc680abb4c85bd7cd0d83a1c82164559c214ad9b6a0d5d196bbc7720c30de4083c32dde8066927"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xa4, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x43, 0xfffffff1, 0x8, 0x24003, r0, 0x4, '\x00', 0x0, r3, 0x4, 0x1, 0x2, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x3, 0x2) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r7}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0xffffffff, [{0x1000a, 0x0, 0x80003}]}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x2e]}}, 0x0, 0x37, 0x0, 0x7, 0x6}, 0x28) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000", 0x0, 0x104, 0x6000000000000000, 0xc1, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab30", 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) 16.403216232s ago: executing program 3 (id=1966): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYRES16], 0x0, 0x1c, 0x0, 0x1, 0x2a34}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={&(0x7f0000000140)}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfffffffe, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180900000000000000000000002020204c124924b74fd67b1af8ff00000006000000000000000007010000f8ffffffb702000008000000b7030000fdffffff8500"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000380)="e0b9547e", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x400000000}, 0x10008, 0x9, 0x0, 0x7, 0x4, 0x7, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYRES8=r1], &(0x7f00000003c0)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x6, '\x00', 0x0, @sock_ops}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280), 0xc) syz_clone(0x20040000, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1f, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000050000000000002006d6048140110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000fdffffff0000000000000000180000000e000000000000000a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000080007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000006500000018270000", @ANYRES32=r0, @ANYBLOB="0000000007000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.168337918s ago: executing program 2 (id=1967): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x3, 0x0, 0x4, {0xa, 0x4e23, 0x5, @mcast2, 0x3d4d42d6}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="80b0810789a6c3a0", 0x8}, {&(0x7f0000000280)="27e58b1878740495a04c9d68", 0xc}], 0x2, &(0x7f0000000300)=[{0x10, 0x114, 0x9}, {0xa8, 0x131, 0x800, "13ea766856edc442dd9d36f042b23958c1b86d13a39dfcbc8d4505d7904d8c320c15f94bbb1fb07377c7a03fb72871a18477f0254f7e6591b52cbd78950356c502880073410e02e3988f4719a76520c02efbea2dc3883ec385e504c0c213e3912aff2839836cb120543bde989a9f42d9df8bb1f183160a726b8779ddbf74ab526a7e291c2303836d95a4683c54827595502c93744df02c28"}, {0x110, 0x103, 0xfffffffc, "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"}], 0x1c8}, 0x40000) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 15.783131978s ago: executing program 2 (id=1968): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) 15.487168265s ago: executing program 2 (id=1969): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x200}) r1 = socket$kcm(0x29, 0xc0340fb364f6cd81, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) socketpair(0x5, 0x1, 0x6, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r1}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r4}, 0x8) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000240)=0x1) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback=r2, 0x21, 0x0, 0x7ff, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)}, 0x40) write$cgroup_type(r6, &(0x7f00000003c0), 0x9) socketpair(0x2b, 0x5, 0x5, &(0x7f0000000400)) sendmsg$sock(r2, &(0x7f0000000940)={&(0x7f0000000440)=@generic={0x3, "c217b4eab857e72d71d9da38f90301672fe061ef29db9fa3ef3e56d54fbcce747a2479b64d1c20ee1574b4d980bfd2adbf0a19f1632bfc6ab005fa24a633cd2ba34edad56ec5a6013ed8d31f53949001b6f11a286cf2a011e3bb654e24fd601f09a681d49c49a31e624e1dcc7da24d2bb43ca49ee6f356e85d025ae99337"}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)="aecb57b08ecabddf87cd1238c9f0ee246ae589e4fafacd43ccc8ab8ec9d0072c15ee8e1e00dfa61a77b564f56723e9b4ea760254cdb7c4c02990a9cab5cba38ba4bb75a3d60653a11299650e2f178f41540a3eb87a5931918c7ef8061a2985eb3147fabd305567cc4830ac7723255671", 0x70}, {&(0x7f0000000540)="384987f0a1c3866502f779ecdc6cf94354", 0x11}, {&(0x7f0000000580)="b0f7f570cefcf5649eb4ee68dc9a8c17918add816737e4e65722bb4b5048bf530366a071dacdbeb82d75acbfcc9f3c7ccd980a805f8bdb616e952d87d734383b67dd14f678f00f247aabf088635b975f88c8451cbc73eb6c32cda696b77076a97e346a4b5384efb35f78af7468d2b225259a2c30851fc5bbf0d5118719769b2279e60568", 0x84}, {&(0x7f0000000640)="650c22d52d91977484fa9aaa0c8fa847287d46b1146516cfbf3dfbee8a6c8e08024c80d619b3c8f84c236d35077aa065851c552c1428753bfb34a30b5b701374e19087fa0fe096670195182cd75f6b2eec6833e2aaf0c15c3c9a5f0ae306eda158dcd59d7618cd2e10c37d4b746db4d508a8a338d72b47f54d3c92", 0x7b}, {&(0x7f00000006c0)="dfa31fd36e2e1a72eaa10e5a789c03d94ce0f8aada9418b9265408bcac0d53ff9451f87d3cebdff37873b87e2a004544f1bb9dfd5924af2ace47ff1ba951cddcbe7c3d0e9eec8e23142d5c8a3c183fd33a07c30e32", 0x55}, {&(0x7f0000000740)="d535719882cc4784ec544c5b5ca8453aa6aecd7ecdf038c0cda86969ac95cf637e4667fea659fede4529deac53010ef1ca7c9546201ad2943bd9553a7be77b2ecf7047a44e2e3b0e459a6250e938512648d2350d62f94eaa75348ad7e9ca793815161618a01083322fdc0a24034883fd867895e5c8da3b866ba9e4905bdfab9eaa544789632b64a14f5953564dbdc6a4eb8f9f08620b99acd6f5cd6ecb63bb77f774498879e240db919e8af31fa58da4e30bb576cc3b", 0xb6}, {&(0x7f0000000800)="832ec38ee4d2f0793d4221f4deaa33f1dc224cb4184c921357e6953ba4146d28", 0x20}], 0x7, &(0x7f00000008c0)=[@txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0x48}, 0x0) perf_event_open$cgroup(&(0x7f0000000980)={0x2, 0x80, 0xf, 0x0, 0x9, 0x6a, 0x0, 0x8000000000000001, 0x100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x0, 0x1}, 0x24, 0xff, 0xbaf, 0x9, 0x8, 0x1, 0x6, 0x0, 0x2, 0x0, 0x7fffffffffffffff}, r0, 0xd, r5, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x6, &(0x7f0000000a00)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x82}, @map_val={0x18, 0x0, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xfffffffb}, @call={0x85, 0x0, 0x0, 0x20}], &(0x7f0000000a40)='GPL\x00', 0x8, 0x39, &(0x7f0000000a80)=""/57, 0x40e00, 0x2, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x3, 0x0, 0xa4, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[0xffffffffffffffff], 0x0, 0x10, 0xf}, 0x94) r7 = getpid() write$cgroup_pid(r5, &(0x7f0000000c00)=r7, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={r0, 0x0, 0x39, 0x9b, &(0x7f0000000c40)="0cacab12ce69f588e73599b7770f3e0efe9958a8675daee0e4171e372be30d8a14200206e35141b228b4acceee04ee415d9b60bf49efa063b9", &(0x7f0000000c80)=""/155, 0xfffffffd, 0x0, 0x79, 0x2b, &(0x7f0000000d40)="57864eda10cd71d6b46c70de6b21e277fc0cd2343e7f11af57aab0b423d0d0cbb390239e905d26b6eda151e3a8adfac560ada7524309c4cf6982644a71fcba86a63258a14a282980680df459373438b87d70ac6bbd08fb1e77b1757abf3fc11c255d00142fdee1183015f04236894b090768d737a2085ee3ab", &(0x7f0000000dc0)="71488b9cc9fd6df2ae3aa685b1e98326f9f806ac4e9f0c8038a640bf5503464e3cf435d2789f69294f40c8", 0x0, 0x0, 0x1}, 0x50) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000e80)=0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r6, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000011c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001200), &(0x7f0000001240), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001280)}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001400), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x11, 0x1b, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @generic={0xf, 0x5, 0xc, 0x4, 0xff6}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10001}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000fc0)='syzkaller\x00', 0xfffffffc, 0xd2, &(0x7f0000001000)=""/210, 0x41100, 0x0, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000001440)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001480)={0x4, 0xd, 0x8, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f00000014c0)=[r5, r6], &(0x7f0000001500)=[{0x0, 0x3, 0x9, 0x2}, {0x4, 0x2, 0x7, 0xa}, {0x5, 0x5, 0xf, 0x4}, {0x4, 0x2, 0xe, 0x4}, {0x4, 0x1, 0xa, 0x9}, {0x1, 0x2, 0xf, 0x6}, {0x2, 0x1, 0x9, 0x1}, {0x1, 0x1, 0x2, 0xa}, {0x3, 0x4, 0x5, 0xa}, {0x1, 0x4, 0x0, 0x8}], 0x10, 0x2}, 0x94) r10 = openat$cgroup(r6, &(0x7f00000017c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001780)={@cgroup=r10, 0x8, 0x0, 0xb1, &(0x7f0000001680)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0]}, 0x40) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0x7ff, 0x0, r5, 0x7, '\x00', r8, r0, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001880)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x7, '\x00', r8, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) 15.458436946s ago: executing program 0 (id=1970): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x1173, 0xa2, 0x100, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'dummy0\x00'}) 15.439818266s ago: executing program 1 (id=1971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a600e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a1a5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x10, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0xfffe) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x25, 0x0, 0x0, 0x8}, {0x1d}, {0x6, 0xda}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000", @ANYRES32=0x0, @ANYRES16, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x8, 0xc3, &(0x7f00000003c0)=""/195, 0x41100, 0x10, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 15.26586838s ago: executing program 3 (id=1972): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7c3, 0x1, 0x4, 0x3040, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0xb}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0xf1, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0xee, 0x0}, 0x8) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000810000000800000002"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r6, &(0x7f00000001c0)}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff89"], 0xffbf) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1c, 0x4, 0x0, 0x3, 0x9084, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x23, &(0x7f0000000000)=r13, 0x8) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0xb, &(0x7f00000000c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}], &(0x7f0000000140)='GPL\x00', 0x9, 0x72, &(0x7f00000001c0)=""/114, 0x41000, 0x5c, '\x00', r3, @fallback=0x33, r4, 0x8, &(0x7f0000000600)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0x2, 0xfff, 0x7f854261}, 0x10, r5, r0, 0x0, &(0x7f0000000800)=[0x1, r6, r9, 0xffffffffffffffff, r10, r13, r14], 0x0, 0x10, 0xb1}, 0x94) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r15) setsockopt$sock_attach_bpf(r16, 0x10f, 0x87, &(0x7f0000000180), 0x127) 15.26513266s ago: executing program 2 (id=1973): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a40)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44c}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r3, &(0x7f0000000dc0), &(0x7f0000001dc0)=""/4096}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xc}, {0x10000002}]}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x76, &(0x7f0000000000)=r8, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 213.344444ms ago: executing program 32 (id=1970): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0xb, 0x1173, 0xa2, 0x100, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000000000)={'dummy0\x00'}) 0s ago: executing program 33 (id=1971): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a600e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x8a1a5, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x10, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0xfffe) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x82000000}, {0x61}, {0x25, 0x0, 0x0, 0x8}, {0x1d}, {0x6, 0xda}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000", @ANYRES32=0x0, @ANYRES16, @ANYRES16], &(0x7f00000001c0)='GPL\x00', 0x8, 0xc3, &(0x7f00000003c0)=""/195, 0x41100, 0x10, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) kernel console output (not intermixed with test programs): changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.405265][ T5949] warning: `syz.0.31' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.875335][ T5955] netlink: 'syz.0.33': attribute type 21 has an invalid length. [ 93.901292][ T5955] netlink: 'syz.0.33': attribute type 11 has an invalid length. [ 94.090973][ T5964] netlink: 'syz.2.36': attribute type 4 has an invalid length. [ 94.190554][ T5963] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 94.218348][ T5964] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.36'. [ 94.239255][ T5963] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 94.484532][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 94.533498][ T5980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.541175][ T5980] IPv6: NLM_F_CREATE should be set when creating new route [ 94.548601][ T5980] IPv6: NLM_F_CREATE should be set when creating new route [ 94.556037][ T5980] IPv6: NLM_F_CREATE should be set when creating new route [ 94.597510][ T5978] netlink: 'syz.1.39': attribute type 9 has an invalid length. [ 94.612203][ T5978] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.39'. [ 94.739474][ T5980] netlink: 'syz.1.39': attribute type 9 has an invalid length. [ 94.786932][ T5980] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.39'. [ 95.981321][ T6016] netlink: 'syz.2.51': attribute type 21 has an invalid length. [ 97.010381][ T6044] syzkaller0: entered promiscuous mode [ 97.019032][ T6045] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.55'. [ 98.450591][ T6059] delete_channel: no stack [ 99.175683][ T6073] syzkaller0: entered promiscuous mode [ 99.182072][ T6073] syzkaller0: entered allmulticast mode [ 99.554711][ T6090] netlink: 'syz.2.66': attribute type 3 has an invalid length. [ 99.566932][ T6090] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.66'. [ 101.053813][ T6084] netlink: 164 bytes leftover after parsing attributes in process `syz.3.64'. [ 103.349075][ T6151] netlink: 'syz.1.82': attribute type 29 has an invalid length. [ 103.372606][ T6151] netlink: 'syz.1.82': attribute type 29 has an invalid length. [ 103.796415][ T6154] Zero length message leads to an empty skb [ 104.182136][ T6150] delete_channel: no stack [ 105.251819][ T6170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.87'. [ 105.275573][ T6170] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 105.289093][ T6170] team0: Port device virt_wifi0 added [ 105.442295][ T6162] netlink: 'syz.1.85': attribute type 10 has an invalid length. [ 105.499846][ T6162] netlink: 2 bytes leftover after parsing attributes in process `syz.1.85'. [ 105.533705][ T6162] hsr0: entered promiscuous mode [ 105.556619][ T6162] bridge0: port 3(hsr0) entered blocking state [ 105.593425][ T6162] bridge0: port 3(hsr0) entered disabled state [ 105.600478][ T6162] hsr0: entered allmulticast mode [ 105.629141][ T6162] hsr_slave_0: entered allmulticast mode [ 105.667385][ T6179] netlink: 'syz.0.90': attribute type 2 has an invalid length. [ 105.677364][ T6179] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.90'. [ 105.689269][ T6162] hsr_slave_1: entered allmulticast mode [ 105.776958][ T6162] bridge0: port 3(hsr0) entered blocking state [ 105.783863][ T6162] bridge0: port 3(hsr0) entered forwarding state [ 105.880296][ T6182] netlink: 'syz.3.91': attribute type 2 has an invalid length. [ 105.980976][ T6186] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.91'. [ 106.394602][ T6190] netlink: 'syz.2.93': attribute type 29 has an invalid length. [ 106.403007][ T6190] netlink: 'syz.2.93': attribute type 29 has an invalid length. [ 106.603887][ T6195] netlink: 10 bytes leftover after parsing attributes in process `syz.1.101'. [ 106.717145][ T6189] delete_channel: no stack [ 106.797075][ T6201] netlink: 'syz.3.95': attribute type 21 has an invalid length. [ 106.816665][ T6201] netlink: 132 bytes leftover after parsing attributes in process `syz.3.95'. [ 107.054828][ T6211] netlink: 14 bytes leftover after parsing attributes in process `syz.0.97'. [ 107.064603][ T6211] netlink: get zone limit has 4 unknown bytes [ 107.883000][ T6219] netlink: 'syz.3.103': attribute type 29 has an invalid length. [ 110.718902][ T6231] netlink: 148 bytes leftover after parsing attributes in process `syz.0.105'. [ 110.812541][ T6231] Driver unsupported XDP return value 0 on prog (id 88) dev N/A, expect packet loss! [ 110.864674][ T6239] validate_nla: 1 callbacks suppressed [ 110.864690][ T6239] netlink: 'syz.1.106': attribute type 10 has an invalid length. [ 110.933079][ T6240] netlink: 'syz.3.107': attribute type 29 has an invalid length. [ 110.975435][ T6239] batman_adv: batadv0: Adding interface: netdevsim0 [ 111.001498][ T6239] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.027609][ T6239] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 111.040223][ T6240] netlink: 'syz.3.107': attribute type 29 has an invalid length. [ 111.165872][ T6237] delete_channel: no stack [ 111.313828][ T6257] netlink: 'syz.2.110': attribute type 16 has an invalid length. [ 111.340114][ T6257] netlink: 'syz.2.110': attribute type 3 has an invalid length. [ 111.352226][ T6257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.110'. [ 111.402778][ T6259] netlink: 'syz.2.110': attribute type 16 has an invalid length. [ 111.448143][ T6259] netlink: 'syz.2.110': attribute type 3 has an invalid length. [ 111.472012][ T6259] netlink: 132 bytes leftover after parsing attributes in process `syz.2.110'. [ 111.642906][ T6265] netlink: 'syz.1.114': attribute type 9 has an invalid length. [ 111.656605][ T6265] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.114'. [ 111.685770][ T6265] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.114'. [ 111.695394][ T6265] openvswitch: netlink: Key type 29 is not supported [ 112.029203][ T6274] IPv6: NLM_F_CREATE should be specified when creating new route [ 112.042877][ T6274] netlink: 1 bytes leftover after parsing attributes in process `syz.0.117'. [ 112.362179][ T6285] netlink: 'syz.0.121': attribute type 29 has an invalid length. [ 112.370335][ T6285] netlink: 'syz.0.121': attribute type 29 has an invalid length. [ 112.602292][ T6282] delete_channel: no stack [ 112.857624][ T6295] hsr0: entered promiscuous mode [ 112.877373][ T6295] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 113.391487][ T6307] netlink: 22 bytes leftover after parsing attributes in process `syz.2.128'. [ 114.190845][ T6313] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.130'. [ 115.287923][ T6311] netlink: 152 bytes leftover after parsing attributes in process `syz.3.129'. [ 115.587210][ T6323] netlink: 144 bytes leftover after parsing attributes in process `syz.1.140'. [ 116.450488][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 117.046826][ T6345] validate_nla: 8 callbacks suppressed [ 117.069564][ T6345] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 117.132236][ T6345] netlink: 'syz.1.141': attribute type 29 has an invalid length. [ 117.284774][ T6353] netlink: 'syz.1.141': attribute type 39 has an invalid length. [ 117.304395][ T6355] syz.2.144 uses obsolete (PF_INET,SOCK_PACKET) [ 117.369285][ T6351] netlink: 'syz.0.143': attribute type 10 has an invalid length. [ 117.467173][ T6351] team0: Device nlmon0 is of different type [ 117.783952][ T6363] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.145'. [ 117.793482][ T6363] openvswitch: netlink: Duplicate key (type 0). [ 118.530280][ T6372] netlink: 'syz.3.146': attribute type 2 has an invalid length. [ 118.682038][ T6373] netlink: 132 bytes leftover after parsing attributes in process `syz.3.146'. [ 119.771676][ T6395] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 120.140015][ T6409] netlink: 76 bytes leftover after parsing attributes in process `syz.2.158'. [ 120.331068][ T6412] netlink: 14 bytes leftover after parsing attributes in process `syz.0.159'. [ 120.601692][ T6413] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.160'. [ 120.854969][ T6412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.044254][ T6412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.122350][ T6412] bond0 (unregistering): Released all slaves [ 122.028252][ T1002] wlan1: Trigger new scan to find an IBSS to join [ 122.072023][ T6442] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 122.073627][ T6441] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.165'. [ 123.416935][ T6458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.169'. [ 124.350240][ T6482] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.176'. [ 124.559036][ T6489] syzkaller0: entered promiscuous mode [ 124.565196][ T6489] syzkaller0: entered allmulticast mode [ 125.043444][ T60] wlan1: Trigger new scan to find an IBSS to join [ 127.486590][ T63] wlan1: Creating new IBSS network, BSSID aa:ed:9d:37:78:a0 [ 130.900609][ T6568] netlink: 'syz.2.194': attribute type 1 has an invalid length. [ 130.921413][ T6568] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.194'. [ 131.683977][ T6580] netlink: 128 bytes leftover after parsing attributes in process `syz.0.196'. [ 131.715214][ T6580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.734645][ T6575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.196'. [ 131.927982][ T6580] syz.0.196 (6580) used greatest stack depth: 18408 bytes left [ 132.158826][ T6586] raw_sendmsg: syz.1.199 forgot to set AF_INET. Fix it! [ 132.966986][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.978697][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.265965][ T6638] netlink: 'syz.2.213': attribute type 4 has an invalid length. [ 134.308378][ T6638] netlink: 'syz.2.213': attribute type 7 has an invalid length. [ 134.778591][ T6647] netlink: 128 bytes leftover after parsing attributes in process `syz.2.214'. [ 134.900149][ T6647] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.372437][ T6665] netlink: 'syz.3.219': attribute type 27 has an invalid length. [ 135.838472][ T6665] syzkaller0: entered promiscuous mode [ 135.845077][ T6665] syzkaller0: entered allmulticast mode [ 137.184134][ T6672] netlink: 'syz.1.221': attribute type 12 has an invalid length. [ 137.192501][ T6672] netlink: 132 bytes leftover after parsing attributes in process `syz.1.221'. [ 137.520595][ T6685] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.224'. [ 138.325896][ T6701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.230'. [ 138.415744][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.682350][ T6701] bridge_slave_0 (unregistering): left allmulticast mode [ 138.689740][ T6701] bridge_slave_0 (unregistering): left promiscuous mode [ 138.700808][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.088448][ T6716] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.235'. [ 139.204745][ T6718] netlink: 135056 bytes leftover after parsing attributes in process `syz.0.234'. [ 139.241342][ T6718] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 139.698406][ T6725] syzkaller0: entered promiscuous mode [ 139.762887][ T6725] syzkaller0: entered allmulticast mode [ 141.086785][ T6763] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.248'. [ 141.096438][ T6763] netlink: 'syz.3.248': attribute type 2 has an invalid length. [ 141.797567][ T6727] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 141.814614][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.830702][ T6727] bridge_slave_1: left allmulticast mode [ 141.837605][ T6727] bridge_slave_1: left promiscuous mode [ 141.848374][ T6727] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.860212][ T6727] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 141.870757][ T6729] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 141.896014][ T6749] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.245'. [ 142.146126][ T6773] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 142.895092][ T6793] netlink: 'syz.3.254': attribute type 39 has an invalid length. [ 143.103505][ T6793] hsr_slave_1 (unregistering): left promiscuous mode [ 143.156336][ T6795] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.257'. [ 143.177462][ T6797] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.258'. [ 143.443778][ T6805] netlink: 'syz.1.261': attribute type 3 has an invalid length. [ 143.452273][ T6805] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.261'. [ 143.608993][ T6808] bridge_slave_1: left allmulticast mode [ 143.622146][ T6808] bridge_slave_1: left promiscuous mode [ 143.628296][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.501594][ T6821] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.264'. [ 145.641270][ T6821] netlink: 'syz.0.264': attribute type 21 has an invalid length. [ 145.650506][ T6821] netlink: 7477 bytes leftover after parsing attributes in process `syz.0.264'. [ 145.662256][ T6824] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.266'. [ 146.050763][ T6841] netlink: 'syz.0.271': attribute type 3 has an invalid length. [ 146.081943][ T6841] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.271'. [ 147.210956][ T6867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 147.218638][ T6867] IPv6: NLM_F_CREATE should be set when creating new route [ 147.226771][ T6867] IPv6: NLM_F_CREATE should be set when creating new route [ 147.234455][ T6867] IPv6: NLM_F_CREATE should be set when creating new route [ 147.281004][ T6868] netlink: 'syz.0.276': attribute type 9 has an invalid length. [ 147.296756][ T6868] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.276'. [ 151.469308][ T6927] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.291'. [ 151.672994][ T6931] netlink: 'syz.0.292': attribute type 7 has an invalid length. [ 152.511710][ T5085] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 152.845372][ T6955] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.298'. [ 154.550986][ T6962] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 154.564262][ T6962] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 156.940050][ T7033] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.327'. [ 156.953848][ T7033] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.327'. [ 156.988259][ T7038] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.327'. [ 156.998227][ T7038] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.327'. [ 157.370290][ T7050] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.320'. [ 158.730666][ T7045] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 158.736874][ T7045] syzkaller1: linktype set to 769 [ 158.750052][ T7051] netlink: 62903 bytes leftover after parsing attributes in process `syz.3.322'. [ 158.940384][ T7065] syzkaller0: entered promiscuous mode [ 158.952971][ T7065] syzkaller0: entered allmulticast mode [ 159.117404][ T7074] netlink: 'syz.1.330': attribute type 3 has an invalid length. [ 159.135806][ T7074] netlink: 'syz.1.330': attribute type 6 has an invalid length. [ 159.164804][ T7074] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.330'. [ 159.188105][ T7071] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.329'. [ 159.197840][ T7071] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 159.443330][ T7080] netlink: 'syz.1.333': attribute type 33 has an invalid length. [ 159.488994][ T7080] netlink: 152 bytes leftover after parsing attributes in process `syz.1.333'. [ 161.538586][ T7147] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 161.546155][ T7147] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 161.561208][ T7146] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 161.568938][ T7146] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 161.593104][ T7145] netlink: 'syz.0.340': attribute type 3 has an invalid length. [ 161.641304][ T7145] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.340'. [ 161.918501][ T7163] netlink: 'syz.3.343': attribute type 64 has an invalid length. [ 162.823166][ T7176] netlink: 14 bytes leftover after parsing attributes in process `syz.1.349'. [ 162.842940][ T7176] hsr_slave_0: left promiscuous mode [ 162.896769][ T7176] hsr_slave_1: left promiscuous mode [ 162.970461][ T7176] bridge0: port 3(hsr0) entered disabled state [ 162.999440][ T7180] netlink: 'syz.0.350': attribute type 1 has an invalid length. [ 163.011303][ T7180] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.350'. [ 163.192231][ T7176] hsr0 (unregistering): left allmulticast mode [ 163.201078][ T7176] bridge0: port 3(hsr0) entered disabled state [ 164.163876][ T7206] syzkaller0: entered promiscuous mode [ 164.169517][ T7206] syzkaller0: entered allmulticast mode [ 164.210124][ T7207] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 167.053637][ T6515] wlan1: Trigger new scan to find an IBSS to join [ 167.199825][ T7211] netlink: 132 bytes leftover after parsing attributes in process `syz.2.356'. [ 167.248099][ T7225] netlink: 'syz.3.358': attribute type 3 has an invalid length. [ 167.261678][ T7225] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.358'. [ 172.398859][ T7256] netlink: 'syz.2.367': attribute type 9 has an invalid length. [ 172.414574][ T7256] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.367'. [ 173.042032][ T6522] wlan1: Trigger new scan to find an IBSS to join [ 173.860927][ T7279] netlink: 'syz.2.374': attribute type 7 has an invalid length. [ 173.882110][ T7279] netlink: 140 bytes leftover after parsing attributes in process `syz.2.374'. [ 173.974885][ T7279] netlink: 128 bytes leftover after parsing attributes in process `syz.2.374'. [ 174.127020][ T7279] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.227809][ T6514] wlan1: Creating new IBSS network, BSSID ea:08:9b:b5:a4:f3 [ 174.889777][ T7299] netlink: 'syz.0.379': attribute type 2 has an invalid length. [ 174.908256][ T7299] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.379'. [ 175.329636][ T7303] netlink: 'syz.0.381': attribute type 9 has an invalid length. [ 175.356823][ T7303] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.381'. [ 177.657922][ T7338] netlink: 'syz.3.389': attribute type 21 has an invalid length. [ 178.332589][ T7350] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.393'. [ 178.386352][ T7350] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.393'. [ 179.835994][ T7379] netlink: 'syz.0.400': attribute type 13 has an invalid length. [ 179.878771][ T7379] netlink: 152 bytes leftover after parsing attributes in process `syz.0.400'. [ 179.912920][ T7379] syz_tun: refused to change device tx_queue_len [ 179.926514][ T7379] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 179.959867][ T7382] netlink: 'syz.1.402': attribute type 21 has an invalid length. [ 180.027778][ T7382] netlink: 164 bytes leftover after parsing attributes in process `syz.1.402'. [ 180.281523][ T7387] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 180.289350][ T7387] netlink: 132 bytes leftover after parsing attributes in process `syz.0.403'. [ 180.645579][ T7399] netlink: 'syz.3.407': attribute type 21 has an invalid length. [ 180.681719][ T7399] netlink: 'syz.3.407': attribute type 10 has an invalid length. [ 180.692135][ T7400] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.405'. [ 180.703050][ T7399] netlink: 'syz.3.407': attribute type 12 has an invalid length. [ 180.710825][ T7399] netlink: 'syz.3.407': attribute type 13 has an invalid length. [ 180.749471][ T7399] netlink: 'syz.3.407': attribute type 14 has an invalid length. [ 180.813665][ T7403] netlink: 'syz.3.407': attribute type 29 has an invalid length. [ 180.829842][ T7399] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.407'. [ 180.865991][ T7404] netlink: 152 bytes leftover after parsing attributes in process `syz.1.405'. [ 180.919653][ T7404] bond0: (slave bond_slave_0): Releasing backup interface [ 180.997314][ T7404] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 182.910640][ T7442] validate_nla: 7 callbacks suppressed [ 182.910659][ T7442] netlink: 'syz.3.419': attribute type 29 has an invalid length. [ 182.998324][ T7442] netlink: 'syz.3.419': attribute type 29 has an invalid length. [ 183.037307][ T7445] netlink: 'syz.3.419': attribute type 29 has an invalid length. [ 183.241757][ T7446] netlink: 'syz.3.419': attribute type 29 has an invalid length. [ 183.260468][ T7442] netlink: 'syz.3.419': attribute type 29 has an invalid length. [ 184.056601][ T7459] netlink: 'syz.3.424': attribute type 3 has an invalid length. [ 184.088130][ T7459] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.424'. [ 184.373379][ T7460] delete_channel: no stack [ 184.654471][ T7466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.722982][ T7472] netlink: 'syz.2.429': attribute type 29 has an invalid length. [ 184.756973][ T7472] netlink: 'syz.2.429': attribute type 29 has an invalid length. [ 184.925478][ T5781] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 184.997808][ T7483] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.433'. [ 185.061400][ T7477] netlink: 'syz.3.431': attribute type 21 has an invalid length. [ 185.069215][ T7477] netlink: 128 bytes leftover after parsing attributes in process `syz.3.431'. [ 185.106408][ T7477] netlink: 'syz.3.431': attribute type 4 has an invalid length. [ 185.577628][ T7503] netlink: 36 bytes leftover after parsing attributes in process `syz.0.440'. [ 188.963302][ T7530] sctp: [Deprecated]: syz.1.444 (pid 7530) Use of int in maxseg socket option. [ 188.963302][ T7530] Use struct sctp_assoc_value instead [ 190.026051][ T7551] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.449'. [ 190.152020][ T7550] delete_channel: no stack [ 191.209294][ T7578] validate_nla: 1 callbacks suppressed [ 191.209337][ T7578] netlink: 'syz.2.452': attribute type 39 has an invalid length. [ 191.404928][ T7578] hsr_slave_1 (unregistering): left promiscuous mode [ 192.261733][ T7590] sit0: entered allmulticast mode [ 192.376665][ T7595] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.457'. [ 192.431404][ T7597] netlink: 'syz.3.458': attribute type 29 has an invalid length. [ 192.459746][ T7595] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 192.500897][ T7597] netlink: 'syz.3.458': attribute type 29 has an invalid length. [ 192.560249][ T7592] netlink: 'syz.3.458': attribute type 29 has an invalid length. [ 192.577920][ T7592] netlink: 'syz.3.458': attribute type 29 has an invalid length. [ 192.830596][ T7606] netlink: 'syz.0.461': attribute type 9 has an invalid length. [ 192.887231][ T7606] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.461'. [ 193.110272][ T7592] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 194.020012][ T7625] netlink: 14 bytes leftover after parsing attributes in process `syz.1.465'. [ 194.074968][ T7625] netlink: get zone limit has 4 unknown bytes [ 194.422659][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.429669][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.102000][ T60] wlan1: Trigger new scan to find an IBSS to join [ 198.417213][ T7623] netlink: 'syz.1.465': attribute type 39 has an invalid length. [ 198.555526][ T7627] netlink: 'syz.0.467': attribute type 46 has an invalid length. [ 198.567320][ T7627] netlink: 36 bytes leftover after parsing attributes in process `syz.0.467'. [ 200.093481][ T60] wlan1: Trigger new scan to find an IBSS to join [ 200.165589][ T49] wlan1: Creating new IBSS network, BSSID 26:d3:3c:52:c5:92 [ 200.390151][ T7661] netlink: 'syz.1.477': attribute type 153 has an invalid length. [ 200.436662][ T7661] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.477'. [ 202.579200][ T7687] netlink: 'syz.1.480': attribute type 29 has an invalid length. [ 203.524854][ T7687] netlink: 'syz.1.480': attribute type 29 has an invalid length. [ 203.539536][ T7693] netlink: 830 bytes leftover after parsing attributes in process `syz.1.480'. [ 203.561482][ T7695] netlink: 'syz.1.480': attribute type 10 has an invalid length. [ 203.576925][ T7695] batman_adv: batadv0: Removing interface: netdevsim0 [ 203.606823][ T7695] team0: Port device netdevsim0 added [ 203.819960][ T7698] ip6_vti0: entered allmulticast mode [ 206.370724][ T7720] netlink: 'syz.3.486': attribute type 4 has an invalid length. [ 206.426738][ T7720] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.486'. [ 206.721256][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 207.211492][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.669197][ T7745] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.493'. [ 208.511513][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 208.513248][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 208.521480][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 212.391038][ T7768] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.500'. [ 214.762667][ T7811] netlink: 'syz.2.508': attribute type 27 has an invalid length. [ 214.770684][ T7811] netlink: 'syz.2.508': attribute type 3 has an invalid length. [ 214.784292][ T7811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.508'. [ 216.299267][ T7838] syzkaller0: entered promiscuous mode [ 216.324743][ T7838] syzkaller0: entered allmulticast mode [ 220.298411][ T7863] netlink: 14 bytes leftover after parsing attributes in process `syz.3.522'. [ 220.351988][ T7863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.371580][ T7863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.388801][ T7863] bond0 (unregistering): Released all slaves [ 220.837138][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.893368][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.934641][ T7873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.972347][ T7873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.344220][ T7874] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.524'. [ 221.512036][ T7880] netlink: 144 bytes leftover after parsing attributes in process `syz.3.528'. [ 221.527142][ T7889] netlink: 144 bytes leftover after parsing attributes in process `syz.3.528'. [ 222.017228][ T7906] netlink: 'syz.3.533': attribute type 13 has an invalid length. [ 222.061136][ T7906] netlink: 'syz.3.533': attribute type 58 has an invalid length. [ 222.110224][ T7906] netlink: 152 bytes leftover after parsing attributes in process `syz.3.533'. [ 222.203289][ T7906] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.533'. [ 222.819770][ T7908] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.533'. [ 222.859986][ T7906] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.533'. [ 223.289493][ T7923] netlink: 'syz.3.538': attribute type 10 has an invalid length. [ 226.047124][ T7923] team0: Device veth1_vlan failed to register rx_handler [ 226.844892][ T5786] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 227.839313][ T7954] netlink: 830 bytes leftover after parsing attributes in process `syz.3.547'. [ 227.978743][ T7957] netlink: 'syz.3.547': attribute type 10 has an invalid length. [ 228.058198][ T7957] team0: Device hsr_slave_0 failed to register rx_handler [ 228.287350][ T7958] netlink: 'syz.0.548': attribute type 10 has an invalid length. [ 228.343153][ T7958] team0: Device ipvlan1 failed to register rx_handler [ 228.537203][ T7961] netlink: 'syz.2.546': attribute type 1 has an invalid length. [ 228.721193][ T7961] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.546'. [ 228.973310][ T7967] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.549'. [ 230.650827][ T7992] syz.2.554 (7992) used obsolete PPPIOCDETACH ioctl [ 231.501120][ T8007] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 231.757438][ T8007] team0: Device wg1 is of different type [ 233.327874][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.565'. [ 233.361528][ T8043] netlink: 152 bytes leftover after parsing attributes in process `syz.0.565'. [ 233.727764][ T8049] syzkaller0: entered promiscuous mode [ 233.741174][ T8049] syzkaller0: entered allmulticast mode [ 233.903413][ T8057] netlink: 'syz.3.568': attribute type 4 has an invalid length. [ 233.972080][ T8057] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.568'. [ 235.052750][ T6516] wlan1: Trigger new scan to find an IBSS to join [ 236.398699][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.411771][ T8067] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.579'. [ 236.447479][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.526864][ T8075] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.587696][ T8075] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.797435][ T8067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'. [ 236.856222][ T8080] netlink: 'syz.0.574': attribute type 1 has an invalid length. [ 236.865878][ T8080] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.574'. [ 237.228941][ T8100] netlink: 160 bytes leftover after parsing attributes in process `syz.0.577'. [ 238.174118][ T8110] tap0: tun_chr_ioctl cmd 2147767519 [ 240.013655][ T6514] wlan1: Trigger new scan to find an IBSS to join [ 240.043155][ T8123] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.586'. [ 240.069711][ T8123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 241.450899][ T6516] wlan1: Creating new IBSS network, BSSID ca:5a:5b:12:d0:4d [ 242.142646][ T8163] netlink: 'syz.0.594': attribute type 21 has an invalid length. [ 242.165073][ T8163] netlink: 'syz.0.594': attribute type 4 has an invalid length. [ 242.489365][ T8172] netlink: 'syz.2.597': attribute type 3 has an invalid length. [ 242.510707][ T8172] netlink: 'syz.2.597': attribute type 1 has an invalid length. [ 242.518537][ T8172] netlink: 198800 bytes leftover after parsing attributes in process `syz.2.597'. [ 242.770735][ T8176] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.599'. [ 242.849908][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'. [ 243.199136][ T8200] netlink: 'syz.3.605': attribute type 7 has an invalid length. [ 243.231609][ T8200] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 243.239485][ T8200] netlink: 196432 bytes leftover after parsing attributes in process `syz.3.605'. [ 243.747614][ T8215] netlink: 'syz.1.607': attribute type 21 has an invalid length. [ 243.777400][ T8215] netlink: 'syz.1.607': attribute type 4 has an invalid length. [ 244.536599][ T8221] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.609'. [ 244.572403][ T8221] netlink: zone id is out of range [ 245.189524][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.619'. [ 245.234998][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.619'. [ 245.265758][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.619'. [ 245.303351][ T8247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.619'. [ 245.354782][ T8247] netlink: 'syz.1.619': attribute type 6 has an invalid length. [ 245.388608][ T8247] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.619'. [ 247.569379][ T8261] netlink: 'syz.3.622': attribute type 10 has an invalid length. [ 247.833343][ T8294] netlink: 188 bytes leftover after parsing attributes in process `syz.2.626'. [ 248.882315][ T8332] netlink: 'syz.2.633': attribute type 10 has an invalid length. [ 248.912090][ T8332] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.633'. [ 249.911446][ T8353] netlink: 'syz.0.637': attribute type 21 has an invalid length. [ 253.027261][ T8372] syzkaller0: entered promiscuous mode [ 253.087626][ T8372] syzkaller0: entered allmulticast mode [ 255.234772][ T8402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.852628][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.859026][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.982718][ T8423] netlink: 168 bytes leftover after parsing attributes in process `syz.3.654'. [ 256.032801][ T8427] sctp: [Deprecated]: syz.1.652 (pid 8427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.032801][ T8427] Use struct sctp_sack_info instead [ 256.054984][ T8429] netlink: 168 bytes leftover after parsing attributes in process `syz.3.654'. [ 256.086591][ T8431] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 256.131656][ T8431] netlink: 'syz.1.652': attribute type 29 has an invalid length. [ 256.610020][ T8446] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 256.626736][ T8446] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 256.665110][ T8450] netlink: 'syz.2.660': attribute type 29 has an invalid length. [ 256.919752][ T8460] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 257.005406][ T8470] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.665'. [ 257.142142][ T8458] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.663'. [ 257.555528][ T8479] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.668'. [ 257.635446][ T8478] netlink: 'syz.2.668': attribute type 10 has an invalid length. [ 257.734344][ T8483] netlink: 'syz.3.669': attribute type 5 has an invalid length. [ 257.813654][ T8483] netlink: 'syz.3.669': attribute type 1 has an invalid length. [ 257.847788][ T8478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.860153][ T8483] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.669'. [ 257.918803][ T8478] team0: Port device bond0 added [ 258.798800][ T8498] netlink: 'syz.1.675': attribute type 13 has an invalid length. [ 258.817170][ T8498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.675'. [ 258.844411][ T8498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.675'. [ 259.280631][ T8498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.675'. [ 259.321651][ T8498] netlink: 152 bytes leftover after parsing attributes in process `syz.1.675'. [ 261.146715][ T8556] validate_nla: 72 callbacks suppressed [ 261.146734][ T8556] netlink: 'syz.2.690': attribute type 10 has an invalid length. [ 262.127151][ T8576] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 262.305629][ T8588] __nla_validate_parse: 30 callbacks suppressed [ 262.305645][ T8588] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.698'. [ 262.803468][ T8601] sctp: [Deprecated]: syz.0.704 (pid 8601) Use of int in max_burst socket option deprecated. [ 262.803468][ T8601] Use struct sctp_assoc_value instead [ 263.120466][ T8607] sctp: [Deprecated]: syz.0.704 (pid 8607) Use of int in max_burst socket option deprecated. [ 263.120466][ T8607] Use struct sctp_assoc_value instead [ 263.566692][ T8615] netlink: 10 bytes leftover after parsing attributes in process `syz.1.706'. [ 263.921883][ T8618] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.707'. [ 264.290152][ T8616] delete_channel: no stack [ 264.696780][ T8636] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 264.718892][ T8635] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 264.746677][ T8636] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.711'. [ 264.798254][ T8635] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.711'. [ 265.378680][ T8656] netlink: 830 bytes leftover after parsing attributes in process `syz.3.717'. [ 265.509817][ T8656] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.717'. [ 265.524810][ T8660] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.717'. [ 265.569684][ T8656] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.717'. [ 266.103573][ T8663] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.720'. [ 266.164070][ T8667] netlink: set zone limit has 8 unknown bytes [ 266.248638][ T8669] netlink: 'syz.0.722': attribute type 10 has an invalid length. [ 266.313531][ T8669] team0: Device nlmon0 is of different type [ 268.547221][ T8725] __nla_validate_parse: 1 callbacks suppressed [ 268.547261][ T8725] netlink: 10 bytes leftover after parsing attributes in process `syz.0.738'. [ 268.744153][ T8735] syzkaller0: create flow: hash 671240064 index 2 [ 268.752751][ T49] syzkaller0: tun_net_xmit 76 [ 268.767069][ T49] syzkaller0: tun_net_xmit 48 [ 268.781651][ T5816] syzkaller0: tun_net_xmit 76 [ 268.918056][ T8732] netlink: 'syz.2.739': attribute type 10 has an invalid length. [ 268.955382][ T7117] syzkaller0: tun_net_xmit 76 [ 269.008510][ T8732] team0: Port device bond0 removed [ 269.020360][ T8735] syzkaller0: delete flow: hash 671240064 index 2 [ 269.059048][ T8739] netlink: 'syz.3.741': attribute type 3 has an invalid length. [ 269.100354][ T8739] netlink: 'syz.3.741': attribute type 1 has an invalid length. [ 269.108554][ T8739] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.741'. [ 270.647416][ T8772] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.747'. [ 271.824340][ T8770] netlink: 10 bytes leftover after parsing attributes in process `syz.3.747'. [ 271.835541][ T8768] netlink: 10 bytes leftover after parsing attributes in process `syz.3.747'. [ 271.845861][ T8772] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.747'. [ 271.858245][ T8775] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 271.866921][ T8775] netlink: 40 bytes leftover after parsing attributes in process `syz.3.747'. [ 271.878471][ T8775] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 271.895345][ T8774] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 271.904371][ T8774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.747'. [ 271.914933][ T8774] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 272.133727][ T8780] netlink: 'syz.3.749': attribute type 29 has an invalid length. [ 272.189585][ T8780] netlink: 'syz.3.749': attribute type 29 has an invalid length. [ 272.234282][ T8780] netlink: 132 bytes leftover after parsing attributes in process `syz.3.749'. [ 272.244965][ T8780] netlink: 196 bytes leftover after parsing attributes in process `syz.3.749'. [ 272.257560][ T8780] netlink: 'syz.3.749': attribute type 10 has an invalid length. [ 272.324606][ T8786] netlink: 'syz.3.749': attribute type 29 has an invalid length. [ 272.497582][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.506258][ T8793] bridge0: entered allmulticast mode [ 273.169038][ T8837] netlink: 'syz.2.759': attribute type 41 has an invalid length. [ 273.779753][ T8833] netlink: 'syz.3.757': attribute type 27 has an invalid length. [ 273.822192][ T8833] __nla_validate_parse: 1 callbacks suppressed [ 273.822212][ T8833] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.757'. [ 274.386466][ T8859] žÿ: renamed from team_slave_1 (while UP) [ 275.115595][ T8879] bridge_slave_1: left allmulticast mode [ 275.165816][ T8879] bridge_slave_1: left promiscuous mode [ 275.191846][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.244192][ T8879] bridge_slave_0: left allmulticast mode [ 275.274470][ T8879] bridge_slave_0: left promiscuous mode [ 275.331665][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.633387][ T8885] netlink: 160 bytes leftover after parsing attributes in process `syz.3.772'. [ 278.394744][ T8931] netlink: 'syz.3.780': attribute type 3 has an invalid length. [ 278.416887][ T8931] netlink: 132 bytes leftover after parsing attributes in process `syz.3.780'. [ 279.045654][ T8940] netlink: 'syz.3.782': attribute type 1 has an invalid length. [ 279.059632][ T8940] netlink: 'syz.3.782': attribute type 3 has an invalid length. [ 279.070109][ T8940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.782'. [ 279.350586][ T8906] syzkaller0: entered promiscuous mode [ 279.356298][ T8906] syzkaller0: entered allmulticast mode [ 280.007769][ T8956] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.784'. [ 281.001561][ T8940] netlink: 'syz.3.782': attribute type 10 has an invalid length. [ 281.009788][ T8940] netlink: 168 bytes leftover after parsing attributes in process `syz.3.782'. [ 281.152918][ T8949] syzkaller0: entered promiscuous mode [ 281.168760][ T8949] syzkaller0: entered allmulticast mode [ 281.233256][ T8955] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.413687][ T8966] netlink: 10 bytes leftover after parsing attributes in process `syz.2.786'. [ 284.327008][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.794'. [ 284.346232][ T8999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.794'. [ 284.407431][ T9006] netlink: 'syz.0.795': attribute type 10 has an invalid length. [ 284.416792][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.795'. [ 284.447871][ T9006] netlink: 'syz.0.795': attribute type 10 has an invalid length. [ 284.461191][ T9006] netlink: 40 bytes leftover after parsing attributes in process `syz.0.795'. [ 284.550276][ T9012] netlink: 156 bytes leftover after parsing attributes in process `syz.3.797'. [ 284.979645][ T9017] netlink: 'syz.2.799': attribute type 3 has an invalid length. [ 284.999722][ T9017] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 285.051206][ T9017] netlink: 128 bytes leftover after parsing attributes in process `syz.2.799'. [ 285.664159][ T9038] netlink: 'syz.3.806': attribute type 3 has an invalid length. [ 285.673909][ T9038] netlink: 'syz.3.806': attribute type 8 has an invalid length. [ 285.694852][ T9038] netlink: 197324 bytes leftover after parsing attributes in process `syz.3.806'. [ 286.798040][ T9056] netlink: 'syz.0.811': attribute type 29 has an invalid length. [ 286.829841][ T9056] netlink: 'syz.0.811': attribute type 29 has an invalid length. [ 286.858147][ T9061] netlink: 'syz.0.811': attribute type 29 has an invalid length. [ 286.883717][ T9056] netlink: 'syz.0.811': attribute type 29 has an invalid length. [ 287.137038][ T9071] netlink: 14 bytes leftover after parsing attributes in process `syz.2.812'. [ 287.234274][ T9071] netlink: get zone limit has 4 unknown bytes [ 290.395935][ T9097] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.821'. [ 290.461589][ T5786] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 290.484981][ T5786] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 291.337151][ T9113] validate_nla: 1 callbacks suppressed [ 291.337165][ T9113] netlink: 'syz.2.825': attribute type 10 has an invalid length. [ 291.372075][ T9113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.825'. [ 291.381998][ T9113] ipvlan1: entered promiscuous mode [ 291.387433][ T9113] ipvlan1: entered allmulticast mode [ 291.393147][ T9113] veth0_vlan: entered allmulticast mode [ 291.403520][ T9113] bridge0: port 2(ipvlan1) entered blocking state [ 291.410514][ T9113] bridge0: port 2(ipvlan1) entered disabled state [ 291.426636][ T9113] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 292.481221][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 292.713306][ T5786] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 292.779178][ T9140] netlink: 'syz.2.832': attribute type 15 has an invalid length. [ 292.809506][ T9140] netlink: 'syz.2.832': attribute type 7 has an invalid length. [ 292.837272][ T9140] netlink: 52 bytes leftover after parsing attributes in process `syz.2.832'. [ 293.839974][ T9164] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.839'. [ 293.955200][ T9161] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.839'. [ 294.011738][ T9167] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.839'. [ 294.120863][ T9170] : renamed from bond_slave_0 [ 294.618883][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 294.801152][ T5786] Bluetooth: hci2: command 0x0406 tx timeout [ 294.997369][ T5786] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 295.061665][ T9188] netlink: 'syz.2.844': attribute type 3 has an invalid length. [ 295.069451][ T9188] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.844'. [ 295.216744][ T9192] netlink: 'syz.1.845': attribute type 9 has an invalid length. [ 295.225639][ T9191] netlink: 'syz.1.845': attribute type 9 has an invalid length. [ 295.235800][ T9191] netlink: 399 bytes leftover after parsing attributes in process `syz.1.845'. [ 295.242444][ T9192] netlink: 399 bytes leftover after parsing attributes in process `syz.1.845'. [ 295.601789][ T9200] netlink: 156 bytes leftover after parsing attributes in process `syz.3.847'. [ 296.311627][ T9212] netlink: 'syz.1.850': attribute type 7 has an invalid length. [ 296.319957][ T9212] netlink: 'syz.1.850': attribute type 6 has an invalid length. [ 296.452808][ T9219] netlink: 14 bytes leftover after parsing attributes in process `syz.2.854'. [ 296.578903][ T9216] syzkaller0: entered promiscuous mode [ 296.585348][ T9216] syzkaller0: entered allmulticast mode [ 297.057930][ T9238] IPv6: Can't replace route, no match found [ 297.100775][ T9237] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 297.145491][ T9237] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.179510][ T9237] bond0: (slave team0): Enslaving as an active interface with an up link [ 297.191656][ T9238] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 297.994707][ T9253] -1: renamed from syzkaller0 [ 298.052924][ T9259] netlink: 'syz.0.868': attribute type 1 has an invalid length. [ 298.067059][ T9259] netlink: 'syz.0.868': attribute type 4 has an invalid length. [ 298.076567][ T9259] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.868'. [ 298.233620][ T9265] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 298.242669][ T9265] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.869'. [ 298.520543][ T9273] netlink: 'syz.0.873': attribute type 9 has an invalid length. [ 300.095722][ T5786] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 300.223601][ T9294] nr0: port 1(hsr0) entered blocking state [ 300.229898][ T9294] nr0: port 1(hsr0) entered disabled state [ 300.283843][ T9294] hsr0: entered allmulticast mode [ 300.288944][ T9294] hsr_slave_0: entered allmulticast mode [ 300.302905][ T9294] hsr0: entered promiscuous mode [ 300.465983][ T9303] netlink: 'syz.0.883': attribute type 64 has an invalid length. [ 300.561255][ T8826] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 301.405098][ T9320] netlink: 132 bytes leftover after parsing attributes in process `syz.0.887'. [ 301.483422][ T9325] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.888'. [ 301.495318][ T9325] openvswitch: netlink: Key type 8208 is out of range max 32 [ 301.520209][ T9330] wg1: entered promiscuous mode [ 301.529398][ T9330] wg1: entered allmulticast mode [ 301.762448][ T9341] netlink: 64 bytes leftover after parsing attributes in process `syz.3.891'. [ 301.880503][ T9344] netlink: 'syz.2.893': attribute type 39 has an invalid length. [ 301.892910][ T9344] macvlan0: entered promiscuous mode [ 301.898501][ T9344] macvlan0: entered allmulticast mode [ 302.127624][ T9347] netlink: 14 bytes leftover after parsing attributes in process `syz.1.894'. [ 302.404805][ T9353] can: request_module (can-proto-0) failed. [ 302.690585][ T9359] netlink: 10 bytes leftover after parsing attributes in process `syz.2.897'. [ 302.725063][ T9363] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 302.830677][ T9367] ±ÿ: renamed from veth0_vlan (while UP) [ 303.246651][ T9373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.901'. [ 303.309973][ T9375] syzkaller0: entered promiscuous mode [ 303.315605][ T9375] syzkaller0: entered allmulticast mode [ 303.423380][ T9373] netlink: 'syz.0.901': attribute type 29 has an invalid length. [ 305.418996][ T9373] netlink: 'syz.0.901': attribute type 29 has an invalid length. [ 306.658385][ T5815] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 307.255933][ T9394] netlink: 'syz.3.907': attribute type 4 has an invalid length. [ 307.264481][ T9394] netlink: 152 bytes leftover after parsing attributes in process `syz.3.907'. [ 307.436389][ T9407] netlink: 60 bytes leftover after parsing attributes in process `syz.2.912'. [ 310.925212][ T9449] netlink: 'syz.1.922': attribute type 2 has an invalid length. [ 310.972336][ T9454] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 (while UP) [ 310.975936][ T9449] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 311.001313][ T9449] netlink: 198036 bytes leftover after parsing attributes in process `syz.1.922'. [ 311.089819][ T9456] syzkaller0: entered promiscuous mode [ 311.096758][ T9456] syzkaller0: entered allmulticast mode [ 313.469630][ T9479] netlink: 'syz.1.928': attribute type 9 has an invalid length. [ 313.478710][ T9479] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.928'. [ 313.515759][ T9481] netlink: 'syz.0.929': attribute type 3 has an invalid length. [ 313.532437][ T9481] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 313.550497][ T9481] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 313.570722][ T9481] netlink: 'syz.0.929': attribute type 2 has an invalid length. [ 313.592502][ T9481] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.929'. [ 313.670224][ T9485] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.930'. [ 314.501837][ T9505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.509145][ T9505] IPv6: NLM_F_CREATE should be set when creating new route [ 314.516546][ T9505] IPv6: NLM_F_CREATE should be set when creating new route [ 314.523873][ T9505] IPv6: NLM_F_CREATE should be set when creating new route [ 314.571274][ T9508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 314.594999][ T9504] netlink: 'syz.2.934': attribute type 9 has an invalid length. [ 314.621386][ T9504] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.934'. [ 314.994048][ T9508] netlink: 'syz.2.934': attribute type 9 has an invalid length. [ 315.026678][ T9508] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.934'. [ 315.065415][ T9505] netlink: 'syz.2.934': attribute type 9 has an invalid length. [ 315.079886][ T9505] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.934'. [ 315.356085][ T9518] netlink: zone id is out of range [ 315.376246][ T9518] netlink: set zone limit has 8 unknown bytes [ 315.624321][ T9527] netlink: 148 bytes leftover after parsing attributes in process `syz.3.941'. [ 315.663028][ T9531] pim6reg1: entered promiscuous mode [ 315.668419][ T9531] pim6reg1: entered allmulticast mode [ 315.691480][ T9522] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.940'. [ 315.706369][ T9522] bridge_slave_1: default FDB implementation only supports local addresses [ 315.814986][ T9522] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.026343][ T9536] syzkaller0: entered promiscuous mode [ 316.032738][ T9536] syzkaller0: entered allmulticast mode [ 317.296774][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.303449][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.597470][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'. [ 318.628524][ T9562] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.949'. [ 318.846860][ T9567] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.952'. [ 319.633817][ T9591] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.957'. [ 320.085981][ T9608] validate_nla: 1 callbacks suppressed [ 320.085999][ T9608] netlink: 'syz.3.963': attribute type 12 has an invalid length. [ 320.100051][ T9608] netlink: 132 bytes leftover after parsing attributes in process `syz.3.963'. [ 320.246863][ T9612] nr0: port 1(hsr0) entered blocking state [ 320.257267][ T9612] nr0: port 1(hsr0) entered disabled state [ 320.267457][ T9612] hsr0: entered allmulticast mode [ 320.275759][ T9612] hsr_slave_0: entered allmulticast mode [ 320.283821][ T9612] hsr_slave_1: entered allmulticast mode [ 320.304568][ T9612] nr0: port 1(hsr0) entered blocking state [ 320.310610][ T9612] nr0: port 1(hsr0) entered forwarding state [ 320.652205][ T9619] netlink: 156 bytes leftover after parsing attributes in process `syz.0.968'. [ 320.732912][ T9620] netlink: 'syz.1.967': attribute type 21 has an invalid length. [ 321.897879][ T9647] netlink: 132 bytes leftover after parsing attributes in process `syz.2.975'. [ 322.092033][ T9648] netlink: 'syz.2.975': attribute type 13 has an invalid length. [ 322.103541][ T9648] netlink: 172 bytes leftover after parsing attributes in process `syz.2.975'. [ 322.760895][ T9648] erspan0: refused to change device tx_queue_len [ 322.787135][ T9655] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 322.917392][ T9655] team0: Device hsr_slave_0 failed to register rx_handler [ 323.439314][ T9674] netlink: 'syz.3.982': attribute type 3 has an invalid length. [ 323.490216][ T9674] netlink: 'syz.3.982': attribute type 1 has an invalid length. [ 323.506449][ T9674] netlink: 'syz.3.982': attribute type 6 has an invalid length. [ 323.515313][ T9674] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.982'. [ 323.549865][ T9678] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.981'. [ 323.559714][ T9678] tipc: Started in network mode [ 323.570865][ T9678] tipc: Node identity b, cluster identity 73 [ 323.590921][ T9678] tipc: Node number set to 11 [ 323.947963][ T9681] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 (while UP) [ 324.947183][ T9715] netlink: 'syz.0.995': attribute type 2 has an invalid length. [ 324.974809][ T9715] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 324.986908][ T9715] __nla_validate_parse: 1 callbacks suppressed [ 324.986926][ T9715] netlink: 9 bytes leftover after parsing attributes in process `syz.0.995'. [ 325.129350][ T9714] netlink: 'syz.2.994': attribute type 9 has an invalid length. [ 325.170134][ T9714] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.994'. [ 325.699039][ T9734] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1001'. [ 325.723486][ T9734] bridge_slave_1: default FDB implementation only supports local addresses [ 325.828315][ T9741] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1004'. [ 327.565919][ T9808] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1021'. [ 327.579902][ T9808] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 328.793351][ T9819] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 329.709116][ T9836] syzkaller0: entered promiscuous mode [ 329.742115][ T9836] syzkaller0: entered allmulticast mode [ 331.761938][ T9849] netlink: 'syz.2.1033': attribute type 21 has an invalid length. [ 332.143457][ T9879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1040'. [ 332.254203][ T9894] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1042'. [ 332.325325][ T9885] syzkaller0: entered promiscuous mode [ 332.351243][ T9885] syzkaller0: entered allmulticast mode [ 332.977145][ T9908] netlink: 'syz.0.1046': attribute type 17 has an invalid length. [ 334.382704][ T9908] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 334.390601][ T9908] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1046'. [ 334.421492][ T9908] ipvlan1: entered promiscuous mode [ 334.426832][ T9908] ipvlan1: entered allmulticast mode [ 334.435295][ T9908] veth0_vlan: entered allmulticast mode [ 334.449031][ T9908] bridge0: port 1(ipvlan1) entered blocking state [ 334.465103][ T9908] bridge0: port 1(ipvlan1) entered disabled state [ 334.484268][ T9908] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 334.745861][ T9943] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.1053'. [ 334.797950][ T9943] openvswitch: netlink: IP tunnel dst address not specified [ 335.775840][ T9977] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 335.788223][ T9977] dvmrp1: persist disabled [ 337.292307][T10001] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.1064'. [ 338.995593][T10047] netlink: 'syz.1.1080': attribute type 17 has an invalid length. [ 339.015094][T10048] netlink: 'syz.1.1080': attribute type 17 has an invalid length. [ 339.537445][T10062] netlink: 'syz.1.1085': attribute type 3 has an invalid length. [ 339.557307][T10062] netlink: 'syz.1.1085': attribute type 6 has an invalid length. [ 339.583944][T10062] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1085'. [ 340.626430][T10090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 345.318678][T10127] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 345.471368][T10127] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1101'. [ 346.617203][T10133] netlink: 'syz.3.1103': attribute type 29 has an invalid length. [ 346.634110][T10133] netlink: 'syz.3.1103': attribute type 29 has an invalid length. [ 346.692357][T10133] netlink: 'syz.3.1103': attribute type 29 has an invalid length. [ 346.740611][T10133] netlink: 'syz.3.1103': attribute type 29 has an invalid length. [ 347.281327][T10149] netlink: 'syz.2.1107': attribute type 10 has an invalid length. [ 347.303009][T10149] syz_tun: entered promiscuous mode [ 347.400367][T10149] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 348.343594][T10169] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 348.371759][T10167] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 348.378079][T10167] syzkaller1: linktype set to 823 [ 348.388457][T10168] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 348.410107][T10168] syzkaller1: linktype set to 823 [ 348.427223][T10167] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1113'. [ 349.628249][T10196] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1120'. [ 350.076391][T10210] netlink: 'syz.0.1124': attribute type 29 has an invalid length. [ 350.118602][T10210] netlink: 'syz.0.1124': attribute type 29 has an invalid length. [ 350.469321][T10223] syzkaller0: entered promiscuous mode [ 350.496483][T10223] syzkaller0: entered allmulticast mode [ 353.141185][T10282] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1144'. [ 353.175288][T10285] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1144'. [ 353.486975][T10292] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1146'. [ 353.525533][T10292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 353.588908][T10298] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1147'. [ 353.608275][T10294] Ÿë: port 1(veth0_to_team) entered blocking state [ 353.616811][T10298] netlink: 'syz.1.1147': attribute type 2 has an invalid length. [ 353.625521][T10294] Ÿë: port 1(veth0_to_team) entered disabled state [ 353.636693][T10294] veth0_to_team: entered allmulticast mode [ 353.644301][T10294] veth0_to_team: entered promiscuous mode [ 354.215120][T10332] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1153'. [ 354.321763][T10332] tc_dump_action: action bad kind [ 357.187576][T10363] ªªªªªª: renamed from vlan0 (while UP) [ 357.325102][T10367] netlink: 'syz.1.1161': attribute type 3 has an invalid length. [ 357.361251][T10367] netlink: 'syz.1.1161': attribute type 5 has an invalid length. [ 357.377713][T10367] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1161'. [ 357.413109][T10370] netlink: 'syz.0.1162': attribute type 29 has an invalid length. [ 357.440731][T10370] netlink: 'syz.0.1162': attribute type 29 has an invalid length. [ 357.466771][T10371] netlink: 'syz.0.1162': attribute type 29 has an invalid length. [ 357.482334][T10370] netlink: 'syz.0.1162': attribute type 29 has an invalid length. [ 357.495645][T10371] netlink: 'syz.0.1162': attribute type 29 has an invalid length. [ 357.541296][T10371] netlink: 'syz.0.1162': attribute type 29 has an invalid length. [ 357.550994][T10370] netlink: 'syz.0.1162': attribute type 29 has an invalid length. [ 357.868515][T10388] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1166'. [ 358.387973][T10402] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 358.414057][T10402] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 358.422081][T10401] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1171'. [ 358.576011][T10410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1173'. [ 358.678471][T10422] validate_nla: 4 callbacks suppressed [ 358.678490][T10422] netlink: 'syz.1.1173': attribute type 9 has an invalid length. [ 358.692698][T10422] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1173'. [ 358.990258][T10417] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 359.007094][T10417] mac80211_hwsim hwsim3 ..ãc¤±: left promiscuous mode [ 359.015365][T10417] mac80211_hwsim hwsim3 ..ãc¤±: left allmulticast mode [ 359.025752][T10410] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.042153][T10415] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1175'. [ 359.070814][T10415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.121459][T10424] netlink: 'syz.1.1173': attribute type 9 has an invalid length. [ 359.130533][T10424] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1173'. [ 359.379189][T10435] netlink: 'syz.0.1178': attribute type 2 has an invalid length. [ 359.387093][T10435] netlink: 'syz.0.1178': attribute type 1 has an invalid length. [ 359.395499][T10435] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1178'. [ 359.517384][T10445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.618591][T10445] netlink: 'syz.3.1180': attribute type 3 has an invalid length. [ 359.641671][T10445] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1180'. [ 359.735131][T10427] delete_channel: no stack [ 359.928545][T10452] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1182'. [ 360.343905][T10466] netlink: 'syz.0.1186': attribute type 3 has an invalid length. [ 360.352018][T10466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1186'. [ 360.362025][T10458] netlink: 'syz.1.1181': attribute type 10 has an invalid length. [ 360.763907][T10458] team0: Port device wlan1 added [ 361.513297][T10483] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1191'. [ 362.225158][T10503] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 362.312905][T10509] netlink: 'syz.0.1200': attribute type 21 has an invalid length. [ 362.322881][T10509] IPv6: NLM_F_CREATE should be specified when creating new route [ 362.332426][T10509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 362.340029][T10509] IPv6: NLM_F_CREATE should be set when creating new route [ 362.347862][T10509] IPv6: NLM_F_CREATE should be set when creating new route [ 362.355511][T10509] IPv6: NLM_F_CREATE should be set when creating new route [ 362.609048][T10515] openvswitch: netlink: IP tunnel dst address not specified [ 362.829369][T10529] netlink: 'syz.3.1205': attribute type 1 has an invalid length. [ 362.962260][ T8814] wlan1: Trigger new scan to find an IBSS to join [ 363.226408][T10543] pim6reg1: entered promiscuous mode [ 363.245429][T10543] pim6reg1: entered allmulticast mode [ 363.749793][T10562] syzkaller0: entered promiscuous mode [ 363.761138][T10562] syzkaller0: entered allmulticast mode [ 365.046111][ T8811] wlan1: Trigger new scan to find an IBSS to join [ 365.806245][T10588] validate_nla: 1 callbacks suppressed [ 365.806261][T10588] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 365.895561][T10588] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 365.977984][T10595] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 366.002183][T10596] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 366.021928][T10599] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 366.390474][T10612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.605864][T10619] __nla_validate_parse: 6 callbacks suppressed [ 366.605881][T10619] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1230'. [ 367.748706][T10665] Â: renamed from ip6gretap0 (while UP) [ 368.976326][ T6503] wlan1: Trigger new scan to find an IBSS to join [ 369.062765][ T6503] wlan1: Creating new IBSS network, BSSID c2:fd:df:fd:ff:cd [ 369.095936][T10674] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1242'. [ 369.244044][T10678] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1243'. [ 369.499403][T10696] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1246'. [ 369.807562][T10705] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1248'. [ 370.713177][T10708] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1249'. [ 370.745929][T10687] syzkaller0: entered promiscuous mode [ 370.752513][T10687] syzkaller0: entered allmulticast mode [ 370.781445][T10703] netlink: 6783 bytes leftover after parsing attributes in process `syz.2.1246'. [ 370.890334][T10708] netlink: 4091 bytes leftover after parsing attributes in process `syz.3.1249'. [ 370.962707][T10709] netlink: 4091 bytes leftover after parsing attributes in process `syz.3.1249'. [ 371.261869][T10716] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1252'. [ 373.122082][T10723] netlink: 'syz.1.1254': attribute type 22 has an invalid length. [ 373.129965][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1254'. [ 374.673469][T10755] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 374.682318][T10755] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1260'. [ 374.691812][T10755] netlink: 'syz.1.1260': attribute type 1 has an invalid length. [ 374.744302][T10762] netlink: 'syz.0.1262': attribute type 2 has an invalid length. [ 375.182102][T10775] netlink: 'syz.1.1263': attribute type 2 has an invalid length. [ 375.190095][T10775] netlink: 'syz.1.1263': attribute type 8 has an invalid length. [ 375.198594][T10775] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1263'. [ 375.645708][T10791] netlink: 'syz.1.1268': attribute type 6 has an invalid length. [ 375.665375][T10791] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1268'. [ 375.691993][T10792] netlink: 'syz.1.1268': attribute type 6 has an invalid length. [ 375.699974][T10792] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1268'. [ 376.090145][T10789] syzkaller0: entered promiscuous mode [ 376.161772][T10789] syzkaller0: entered allmulticast mode [ 376.309247][T10797] delete_channel: no stack [ 376.987304][T10820] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1276'. [ 377.260555][T10831] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1278'. [ 377.270317][T10831] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 377.282707][T10831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 378.780424][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.788833][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.778449][T10846] netlink: 'syz.2.1279': attribute type 1 has an invalid length. [ 381.825213][T10846] netlink: 170344 bytes leftover after parsing attributes in process `syz.2.1279'. [ 386.446484][T10887] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 386.461064][T10887] pim6reg0: persist enabled [ 386.467419][T10885] pim6reg0: tun_chr_ioctl cmd 2148553947 [ 386.478331][T10886] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 386.485428][T10893] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1292'. [ 386.528368][T10894] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1292'. [ 387.315513][T10908] delete_channel: no stack [ 387.627347][T10918] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.1301'. [ 387.647150][T10921] netlink: 'syz.0.1302': attribute type 1 has an invalid length. [ 387.656771][T10921] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1302'. [ 388.471934][T10941] netlink: 'syz.0.1308': attribute type 10 has an invalid length. [ 388.854596][T10941] team0: Port device netdevsim0 added [ 388.882601][T10946] netlink: 'syz.0.1308': attribute type 10 has an invalid length. [ 390.014083][T10946] team0: Port device netdevsim0 removed [ 391.275204][T10962] netlink: 'syz.3.1313': attribute type 9 has an invalid length. [ 391.309537][T10958] can: request_module (can-proto-3) failed. [ 391.318864][T10962] netlink: 199 bytes leftover after parsing attributes in process `syz.3.1313'. [ 393.251169][T10973] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 393.259225][T10973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1315'. [ 393.282279][T10973] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 393.289368][T10973] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.325407][T10973] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 393.334752][T10974] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 393.342696][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1315'. [ 396.619729][T11019] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1327'. [ 396.685050][T11020] netlink: 'syz.2.1327': attribute type 10 has an invalid length. [ 396.701139][T11020] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1327'. [ 396.726459][T11020] dummy0: entered promiscuous mode [ 396.752896][T11020] dummy0: entered allmulticast mode [ 396.765254][T11020] bridge0: port 2(dummy0) entered blocking state [ 396.781994][T11020] bridge0: port 2(dummy0) entered disabled state [ 396.802709][T11021] bridge0: port 2(dummy0) entered disabled state [ 396.831775][T11021] bridge_slave_0: left promiscuous mode [ 396.846790][T11021] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.671472][T11028] netlink: 'syz.0.1329': attribute type 11 has an invalid length. [ 399.633892][T11042] delete_channel: no stack [ 400.102313][T11077] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1343'. [ 400.145111][T11077] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 400.431325][T11082] Ÿë: port 1(hsr_slave_0) entered blocking state [ 400.477340][T11082] Ÿë: port 1(hsr_slave_0) entered disabled state [ 400.766672][T11097] netlink: 'syz.2.1348': attribute type 10 has an invalid length. [ 400.810870][T11094] netlink: 'syz.1.1349': attribute type 9 has an invalid length. [ 400.846026][T11094] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1349'. [ 400.866930][T11103] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1350'. [ 400.895509][T11103] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 400.907267][T11097] team0: Device hsr_slave_0 failed to register rx_handler [ 407.615057][T11113] syzkaller0: entered promiscuous mode [ 407.628200][T11113] syzkaller0: entered allmulticast mode [ 411.143783][T11158] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 411.151361][T11158] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 411.696204][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 411.720044][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 411.748097][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 411.818808][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 411.859907][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 411.885833][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 411.915453][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 411.959570][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 411.983844][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 412.024399][T11177] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1368'. [ 412.786705][T11199] netlink: 'syz.1.1381': attribute type 29 has an invalid length. [ 412.811381][T11199] netlink: 'syz.1.1381': attribute type 29 has an invalid length. [ 412.921427][T11203] netlink: 'syz.1.1381': attribute type 29 has an invalid length. [ 412.988987][T11203] netlink: 'syz.1.1381': attribute type 29 has an invalid length. [ 413.435080][T11227] netlink: 'syz.3.1377': attribute type 21 has an invalid length. [ 413.462791][T11228] netlink: 'syz.3.1377': attribute type 21 has an invalid length. [ 414.333394][T11242] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 415.364217][T11268] netlink: 'syz.1.1387': attribute type 39 has an invalid length. [ 416.814944][T11314] __nla_validate_parse: 26 callbacks suppressed [ 416.814964][T11314] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1400'. [ 417.086087][T11320] syzkaller0: entered promiscuous mode [ 417.101183][T11320] syzkaller0: entered allmulticast mode [ 417.438991][T11336] netlink: 'syz.0.1407': attribute type 10 has an invalid length. [ 417.543664][T11336] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1407'. [ 419.368462][T11376] netlink: 'syz.3.1416': attribute type 21 has an invalid length. [ 419.379078][T11376] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1416'. [ 419.437680][T11379] netlink: 'syz.3.1416': attribute type 3 has an invalid length. [ 419.448002][T11379] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1416'. [ 419.463239][T11374] netlink: 'syz.2.1415': attribute type 3 has an invalid length. [ 419.474519][T11374] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1415'. [ 421.197913][T11425] sctp: [Deprecated]: syz.0.1427 (pid 11425) Use of int in maxseg socket option. [ 421.197913][T11425] Use struct sctp_assoc_value instead [ 421.241918][T11422] netlink: 'syz.3.1428': attribute type 3 has an invalid length. [ 421.250678][T11422] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1428'. [ 422.622861][T11459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1438'. [ 422.639540][T11459] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1438'. [ 422.667374][T11461] netlink: 'syz.1.1439': attribute type 3 has an invalid length. [ 422.677834][T11461] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1439'. [ 422.986261][T11471] netlink: 'syz.2.1443': attribute type 41 has an invalid length. [ 423.028584][T11473] netlink: 'syz.0.1444': attribute type 15 has an invalid length. [ 423.037578][T11473] netlink: 'syz.0.1444': attribute type 7 has an invalid length. [ 423.047447][T11473] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1444'. [ 423.394919][T11482] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1445'. [ 423.882729][T11493] netlink: 'syz.0.1449': attribute type 3 has an invalid length. [ 423.895405][T11493] netlink: 'syz.0.1449': attribute type 1 has an invalid length. [ 423.909886][T11493] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.1449'. [ 424.005104][T11495] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1449'. [ 424.026685][T11497] Â: renamed from ip6gretap0 (while UP) [ 424.042101][T11492] delete_channel: no stack [ 424.087579][T11497] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1450'. [ 424.110332][T11497] hsr0: left allmulticast mode [ 424.125453][T11497] hsr_slave_0: left allmulticast mode [ 424.138093][T11497] nr0: port 1(hsr0) entered disabled state [ 424.257719][T11500] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1452'. [ 424.282818][T11500] openvswitch: netlink: Tunnel attr 0 has unexpected len 123 expected 8 [ 424.789892][T11517] validate_nla: 2 callbacks suppressed [ 424.789935][T11517] netlink: 'syz.2.1456': attribute type 21 has an invalid length. [ 424.824664][T11517] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1456'. [ 424.996207][T11524] netlink: 'syz.0.1457': attribute type 33 has an invalid length. [ 425.935100][ T5786] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 425.939391][ T5786] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 426.111167][T11566] netlink: 'syz.1.1466': attribute type 10 has an invalid length. [ 426.933007][T11594] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 427.478965][T11610] netlink: 'syz.1.1479': attribute type 49 has an invalid length. [ 427.563649][T11615] netlink: 'syz.3.1480': attribute type 2 has an invalid length. [ 428.001887][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 430.091577][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 433.444366][T11646] netlink: 'syz.1.1491': attribute type 2 has an invalid length. [ 433.470462][T11646] __nla_validate_parse: 7 callbacks suppressed [ 433.470479][T11646] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1491'. [ 435.141682][T11670] netlink: 'syz.2.1495': attribute type 21 has an invalid length. [ 435.159932][T11670] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1495'. [ 435.264358][T11670] netlink: 'syz.2.1495': attribute type 10 has an invalid length. [ 435.284909][T11673] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1496'. [ 435.312819][T11672] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1496'. [ 436.696044][T11715] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1506'. [ 437.267336][T11734] netlink: 'syz.0.1509': attribute type 9 has an invalid length. [ 437.275504][T11734] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1509'. [ 437.276307][T11736] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 437.295895][T11736] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 437.337728][T11736] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 437.387187][T11736] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 437.601735][T11742] syzkaller0: entered allmulticast mode [ 437.776159][T11747] syz.2.1514: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 437.797801][T11747] CPU: 0 PID: 11747 Comm: syz.2.1514 Not tainted syzkaller #0 [ 437.805350][T11747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.815475][T11747] Call Trace: [ 437.818795][T11747] [ 437.821781][T11747] dump_stack_lvl+0x18c/0x250 [ 437.826519][T11747] ? show_regs_print_info+0x20/0x20 [ 437.831767][T11747] ? load_image+0x420/0x420 [ 437.836329][T11747] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 437.842798][T11747] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 437.849355][T11747] warn_alloc+0x246/0x340 [ 437.853730][T11747] ? stack_trace_save+0xaa/0x100 [ 437.858728][T11747] ? zone_watermark_ok_safe+0x230/0x230 [ 437.864354][T11747] ? kasan_set_track+0x5f/0x70 [ 437.869175][T11747] ? kasan_set_track+0x4e/0x70 [ 437.873997][T11747] ? __kasan_kmalloc+0x8f/0xa0 [ 437.878911][T11747] ? xsk_init_queue+0xad/0x100 [ 437.883724][T11747] ? xsk_setsockopt+0x4c9/0x750 [ 437.888621][T11747] ? do_sock_setsockopt+0x175/0x1a0 [ 437.893864][T11747] ? __x64_sys_setsockopt+0x182/0x200 [ 437.899281][T11747] __vmalloc_node_range+0x129/0x1320 [ 437.904631][T11747] ? free_vm_area+0x50/0x50 [ 437.909188][T11747] vmalloc_user+0x74/0x80 [ 437.913559][T11747] ? xskq_create+0xbf/0x170 [ 437.918108][T11747] xskq_create+0xbf/0x170 [ 437.922488][T11747] xsk_init_queue+0xad/0x100 [ 437.927139][T11747] xsk_setsockopt+0x4c9/0x750 [ 437.931873][T11747] ? xsk_poll+0x670/0x670 [ 437.936258][T11747] ? __fget_files+0x28/0x460 [ 437.940911][T11747] ? aa_sock_opt_perm+0x74/0x100 [ 437.945907][T11747] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 437.951508][T11747] ? security_socket_setsockopt+0x7e/0xa0 [ 437.957276][T11747] ? xsk_poll+0x670/0x670 [ 437.961664][T11747] do_sock_setsockopt+0x175/0x1a0 [ 437.966754][T11747] ? __fdget+0x180/0x210 [ 437.971070][T11747] __x64_sys_setsockopt+0x182/0x200 [ 437.976335][T11747] do_syscall_64+0x55/0xb0 [ 437.980805][T11747] ? clear_bhb_loop+0x40/0x90 [ 437.985539][T11747] ? clear_bhb_loop+0x40/0x90 [ 437.990269][T11747] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.996262][T11747] RIP: 0033:0x7f21de59e159 [ 438.000724][T11747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.020466][T11747] RSP: 002b:00007f21df40a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.029012][T11747] RAX: ffffffffffffffda RBX: 00007f21de825fa0 RCX: 00007f21de59e159 [ 438.037027][T11747] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 438.045047][T11747] RBP: 00007f21de635024 R08: 0000000000000004 R09: 0000000000000000 [ 438.053069][T11747] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 438.061089][T11747] R13: 00007f21de826038 R14: 00007f21de825fa0 R15: 00007ffc58ebe7c8 [ 438.069128][T11747] [ 438.120005][T11747] Mem-Info: [ 438.145247][T11747] active_anon:6743 inactive_anon:0 isolated_anon:0 [ 438.145247][T11747] active_file:15831 inactive_file:40084 isolated_file:0 [ 438.145247][T11747] unevictable:768 dirty:92 writeback:0 [ 438.145247][T11747] slab_reclaimable:10879 slab_unreclaimable:97448 [ 438.145247][T11747] mapped:24040 shmem:1361 pagetables:520 [ 438.145247][T11747] sec_pagetables:0 bounce:0 [ 438.145247][T11747] kernel_misc_reclaimable:0 [ 438.145247][T11747] free:1340212 free_pcp:10640 free_cma:0 [ 438.238375][T11747] Node 0 active_anon:26872kB inactive_anon:0kB active_file:63324kB inactive_file:160136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96260kB dirty:368kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12768kB pagetables:2080kB sec_pagetables:0kB all_unreclaimable? no [ 438.350029][T11747] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 438.418533][T11750] syzkaller0: entered promiscuous mode [ 438.441308][T11750] syzkaller0: entered allmulticast mode [ 438.456537][T11747] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.659154][T11747] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 438.687099][T11747] Node 0 DMA32 free:1446220kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:27036kB inactive_anon:0kB active_file:63324kB inactive_file:159312kB unevictable:1536kB writepending:368kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:22152kB local_pcp:18692kB free_cma:0kB [ 438.861420][T11747] lowmem_reserve[]: 0 0 0 0 0 [ 438.881013][T11747] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 438.939585][T11747] lowmem_reserve[]: 0 0 0 0 0 [ 438.966701][T11747] Node 1 Normal free:3891428kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20088kB local_pcp:10680kB free_cma:0kB [ 439.030742][T11747] lowmem_reserve[]: 0 0 0 0 0 [ 439.050023][T11747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 439.087789][T11747] Node 0 DMA32: 1871*4kB (UME) 1220*8kB (UME) 1109*16kB (UME) 479*32kB (ME) 733*64kB (UME) 345*128kB (UME) 257*256kB (UM) 176*512kB (UME) 116*1024kB (UM) 9*2048kB (UM) 247*4096kB (UM) = 1446220kB [ 439.113964][T11747] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 439.139161][T11747] Node 1 Normal: 171*4kB (UME) 57*8kB (UME) 41*16kB (UME) 41*32kB (UME) 25*64kB (UE) 7*128kB (UME) 1*256kB (E) 1*512kB (M) 0*1024kB 1*2048kB (E) 948*4096kB (UM) = 3891428kB [ 439.189871][T11747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.203878][T11747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.231607][T11747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 439.245219][T11747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 439.288126][T11747] 57276 total pagecache pages [ 439.298330][T11747] 0 pages in swap cache [ 439.307124][T11747] Free swap = 124996kB [ 439.314665][T11747] Total swap = 124996kB [ 439.318887][T11747] 2097051 pages RAM [ 439.331118][T11747] 0 pages HighMem/MovableOnly [ 439.336042][T11747] 416959 pages reserved [ 439.340424][T11747] 0 pages cma reserved [ 440.168409][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.175327][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.204840][T11819] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1532'. [ 445.393031][T11831] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1535'. [ 445.596949][T11844] netlink: 'syz.1.1537': attribute type 29 has an invalid length. [ 445.646243][T11844] netlink: 'syz.1.1537': attribute type 29 has an invalid length. [ 445.930029][T11855] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1540'. [ 446.052695][T11848] delete_channel: no stack [ 446.689417][T11875] netlink: 'syz.0.1546': attribute type 29 has an invalid length. [ 446.776727][T11875] netlink: 'syz.0.1546': attribute type 29 has an invalid length. [ 446.912837][T11878] netlink: 'syz.0.1546': attribute type 29 has an invalid length. [ 446.994513][T11880] netlink: 'syz.0.1546': attribute type 29 has an invalid length. [ 448.901670][T11919] netlink: 'syz.0.1557': attribute type 10 has an invalid length. [ 448.948809][T11919] syz_tun: entered promiscuous mode [ 449.858846][T11931] netlink: 'syz.2.1560': attribute type 39 has an invalid length. [ 451.483093][T11944] netlink: 'syz.2.1563': attribute type 10 has an invalid length. [ 451.573098][T11944] hsr0: entered promiscuous mode [ 451.579074][T11944] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 451.886463][T11928] netlink: 'syz.0.1557': attribute type 10 has an invalid length. [ 452.152399][T11953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1565'. [ 452.249051][T11958] netlink: 'syz.2.1566': attribute type 6 has an invalid length. [ 452.267226][T11958] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1566'. [ 452.325888][T11968] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1569'. [ 453.125610][T11989] netlink: 'syz.1.1573': attribute type 21 has an invalid length. [ 453.147483][T11989] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1573'. [ 456.354426][T12007] netlink: 'syz.0.1574': attribute type 21 has an invalid length. [ 456.370936][T12007] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1574'. [ 456.383799][T12011] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.1576'. [ 456.606766][T12016] netlink: 'syz.3.1577': attribute type 10 has an invalid length. [ 456.818353][T12026] sctp: [Deprecated]: syz.3.1577 (pid 12026) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.818353][T12026] Use struct sctp_sack_info instead [ 456.873302][T12016] team0 (unregistering): Port device team_slave_0 removed [ 456.940359][T12016] team0 (unregistering): Port device team_slave_1 removed [ 457.029827][T12034] netlink: 'syz.2.1581': attribute type 39 has an invalid length. [ 457.705860][T12045] netlink: 'syz.2.1585': attribute type 10 has an invalid length. [ 458.113541][T12045] team0: Port device geneve1 added [ 458.366218][T12060] netlink: 105 bytes leftover after parsing attributes in process `syz.1.1588'. [ 458.421308][T12060] netlink: 105 bytes leftover after parsing attributes in process `syz.1.1588'. [ 460.777683][T12079] netlink: 'syz.2.1595': attribute type 10 has an invalid length. [ 460.892357][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1596'. [ 460.905827][T12084] .76žÿ: renamed from team_slave_1 [ 460.968530][T12089] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1600'. [ 461.849237][T12104] netlink: 'syz.1.1603': attribute type 4 has an invalid length. [ 462.032705][T12110] netlink: 'syz.1.1603': attribute type 39 has an invalid length. [ 464.502184][T12125] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1609'. [ 465.525215][T12135] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1610'. [ 465.589781][T12122] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1608'. [ 465.628421][T12122] bridge_slave_1: default FDB implementation only supports local addresses [ 465.690405][T12135] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 466.738970][T12127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 466.978178][T12159] netlink: 'syz.2.1616': attribute type 10 has an invalid length. [ 467.015373][T12159] team0: Device wg1 is of different type [ 467.099063][T12167] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 467.156468][T12170] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 467.183686][T12167] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1618'. [ 467.214281][T12170] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1618'. [ 467.251829][T12174] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1620'. [ 467.293233][T12152] syzkaller0: entered promiscuous mode [ 467.344075][T12152] syzkaller0: entered allmulticast mode [ 467.401895][T12172] netlink: 153060 bytes leftover after parsing attributes in process `syz.3.1618'. [ 470.288968][T12172] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 470.554536][T12205] netlink: 'syz.3.1627': attribute type 3 has an invalid length. [ 470.574252][T12205] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1627'. [ 471.040017][T12210] netlink: 'syz.2.1629': attribute type 10 has an invalid length. [ 471.057294][T12210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1629'. [ 471.125635][T12210] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 471.492118][T12225] syzkaller0: entered promiscuous mode [ 471.501535][T12225] syzkaller0: entered allmulticast mode [ 476.460140][T12250] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.1640'. [ 476.493820][T12256] netlink: 'syz.1.1641': attribute type 39 has an invalid length. [ 477.031278][T12271] netlink: 'syz.3.1645': attribute type 21 has an invalid length. [ 477.039749][T12271] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1645'. [ 477.329229][T12281] netlink: 'syz.3.1648': attribute type 20 has an invalid length. [ 477.880362][T12284] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 477.898948][T12287] netlink: 'syz.3.1650': attribute type 29 has an invalid length. [ 478.186127][T12284] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 478.200241][T12287] netlink: 'syz.3.1650': attribute type 29 has an invalid length. [ 478.225537][T12290] netlink: 'syz.3.1650': attribute type 39 has an invalid length. [ 481.378726][T12319] netlink: 'syz.0.1658': attribute type 21 has an invalid length. [ 481.636751][T12325] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1660'. [ 481.673403][T12333] netlink: 'syz.1.1660': attribute type 2 has an invalid length. [ 481.789713][T12331] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1662'. [ 482.094473][T12325] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 482.106957][T12325] CPU: 1 PID: 12325 Comm: syz.1.1660 Not tainted syzkaller #0 [ 482.114583][T12325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.124714][T12325] Call Trace: [ 482.128070][T12325] [ 482.131075][T12325] dump_stack_lvl+0x18c/0x250 [ 482.135872][T12325] ? show_regs_print_info+0x20/0x20 [ 482.141192][T12325] ? load_image+0x420/0x420 [ 482.145977][T12325] sysfs_warn_dup+0x8e/0xa0 [ 482.150627][T12325] sysfs_do_create_link_sd+0xc0/0x110 [ 482.156122][T12325] device_add_class_symlinks+0x1cf/0x240 [ 482.161961][T12325] device_add+0x4f9/0xc40 [ 482.166404][T12325] wiphy_register+0x1d99/0x2ac0 [ 482.171423][T12325] ? cfg80211_event_work+0x40/0x40 [ 482.176625][T12325] ? minstrel_ht_alloc+0x88a/0x990 [ 482.181878][T12325] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 482.188086][T12325] ieee80211_register_hw+0x2dd8/0x3b30 [ 482.193731][T12325] ? ieee80211_register_hw+0xf11/0x3b30 [ 482.199437][T12325] ? ieee80211_tasklet_handler+0x20/0x20 [ 482.205152][T12325] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 482.211162][T12325] ? __debug_object_init+0xec/0x450 [ 482.216486][T12325] ? __asan_memset+0x22/0x40 [ 482.221168][T12325] ? __hrtimer_init+0x189/0x270 [ 482.226145][T12325] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 482.232122][T12325] ? mac80211_hwsim_free+0x220/0x220 [ 482.237577][T12325] ? hwsim_new_radio_nl+0xd9d/0x1a70 [ 482.243014][T12325] hwsim_new_radio_nl+0xdad/0x1a70 [ 482.248250][T12325] ? __nla_validate+0x50/0x50 [ 482.253077][T12325] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 482.259552][T12325] ? __nla_parse+0x40/0x50 [ 482.264091][T12325] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 482.270546][T12325] genl_family_rcv_msg_doit+0x21a/0x310 [ 482.276210][T12325] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 482.282243][T12325] ? bpf_lsm_capable+0x9/0x10 [ 482.287024][T12325] ? security_capable+0x89/0xb0 [ 482.291998][T12325] genl_rcv_msg+0x611/0x7a0 [ 482.296631][T12325] ? genl_bind+0x360/0x360 [ 482.301135][T12325] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 482.307251][T12325] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 482.313729][T12325] ? ref_tracker_free+0x686/0x830 [ 482.318956][T12325] netlink_rcv_skb+0x235/0x4c0 [ 482.323865][T12325] ? genl_bind+0x360/0x360 [ 482.328411][T12325] ? netlink_ack+0x1160/0x1160 [ 482.333327][T12325] ? __lock_acquire+0x7d80/0x7d80 [ 482.338472][T12325] ? down_read+0x1ac/0x2e0 [ 482.343000][T12325] genl_rcv+0x28/0x40 [ 482.347100][T12325] netlink_unicast+0x7b1/0x930 [ 482.351999][T12325] netlink_sendmsg+0x8d0/0xbf0 [ 482.356907][T12325] ? netlink_getsockopt+0x590/0x590 [ 482.362329][T12325] ? apparmor_socket_sendmsg+0x8e/0x330 [ 482.368003][T12325] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 482.373389][T12325] ? security_socket_sendmsg+0x80/0xa0 [ 482.378933][T12325] ? netlink_getsockopt+0x590/0x590 [ 482.384251][T12325] ____sys_sendmsg+0x61b/0x980 [ 482.389141][T12325] ? __asan_memset+0x22/0x40 [ 482.393832][T12325] ? __sys_sendmsg_sock+0x30/0x30 [ 482.398941][T12325] ? __import_iovec+0x5f2/0x850 [ 482.403966][T12325] ? import_iovec+0x73/0xa0 [ 482.408608][T12325] ___sys_sendmsg+0x2a6/0x360 [ 482.413405][T12325] ? __sys_sendmsg+0x2b0/0x2b0 [ 482.418476][T12325] __se_sys_sendmsg+0x1d0/0x2c0 [ 482.423441][T12325] ? __x64_sys_sendmsg+0x80/0x80 [ 482.428539][T12325] ? syscall_enter_from_user_mode+0x2e/0x80 [ 482.434540][T12325] do_syscall_64+0x55/0xb0 [ 482.439039][T12325] ? clear_bhb_loop+0x40/0x90 [ 482.443799][T12325] ? clear_bhb_loop+0x40/0x90 [ 482.448582][T12325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 482.454654][T12325] RIP: 0033:0x7f6c0219e159 [ 482.459143][T12325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.478854][T12325] RSP: 002b:00007f6c02f83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.487410][T12325] RAX: ffffffffffffffda RBX: 00007f6c02425fa0 RCX: 00007f6c0219e159 [ 482.495500][T12325] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 482.503591][T12325] RBP: 00007f6c02235024 R08: 0000000000000000 R09: 0000000000000000 [ 482.511693][T12325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.519739][T12325] R13: 00007f6c02426038 R14: 00007f6c02425fa0 R15: 00007fffcf8801e8 [ 482.527863][T12325] [ 483.745143][T12347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 484.677863][T12358] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1675'. [ 485.344898][T12371] netlink: 'syz.2.1671': attribute type 10 has an invalid length. [ 485.549778][T12371] team0: Device wg1 is of different type [ 486.603397][T12403] netlink: 'syz.2.1681': attribute type 1 has an invalid length. [ 486.632573][T12403] netlink: 'syz.2.1681': attribute type 4 has an invalid length. [ 486.645968][T12403] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1681'. [ 486.726016][T12405] netlink: 'syz.0.1677': attribute type 3 has an invalid length. [ 486.822139][T12405] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1677'. [ 487.229461][T12417] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1685'. [ 491.965347][T12465] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1696'. [ 492.118680][T12467] sock: sock_timestamping_bind_phc: sock not bind to device [ 492.155919][T12467] netlink: 'syz.2.1697': attribute type 11 has an invalid length. [ 492.170470][T12467] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1697'. [ 494.220376][T12507] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1710'. [ 495.286662][T12525] netlink: 'syz.2.1714': attribute type 19 has an invalid length. [ 495.381260][T12525] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1714'. [ 497.126869][T12551] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.1722'. [ 499.275854][T12625] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1744'. [ 499.292909][T12625] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1744'. [ 499.302753][T12627] netlink: 'syz.1.1745': attribute type 29 has an invalid length. [ 499.526081][T12635] netlink: 'syz.2.1747': attribute type 29 has an invalid length. [ 499.537023][T12635] netlink: 'syz.2.1747': attribute type 3 has an invalid length. [ 499.546377][T12635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1747'. [ 499.588784][T12621] syzkaller0: entered promiscuous mode [ 499.614180][T12627] netlink: 'syz.1.1745': attribute type 29 has an invalid length. [ 499.622898][T12628] netlink: 'syz.1.1745': attribute type 29 has an invalid length. [ 499.651100][T12631] syzkaller0: left promiscuous mode [ 499.691726][T12637] netlink: 'syz.2.1748': attribute type 4 has an invalid length. [ 499.699733][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1748'. [ 499.709504][T12633] netlink: 'syz.0.1746': attribute type 39 has an invalid length. [ 499.740662][T12637] netlink: 'syz.2.1748': attribute type 4 has an invalid length. [ 499.779922][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1748'. [ 500.256606][T12655] netlink: 'syz.0.1753': attribute type 29 has an invalid length. [ 501.342151][T12666] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 501.350295][T12666] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1756'. [ 501.365574][T12666] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1756'. [ 501.616633][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.623154][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.859220][T12665] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1756'. [ 502.068916][T12671] netlink: 'syz.2.1758': attribute type 11 has an invalid length. [ 502.081847][T12671] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1758'. [ 502.097737][T12671] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 502.231521][T12676] netlink: 'syz.2.1758': attribute type 11 has an invalid length. [ 502.261723][T12676] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1758'. [ 502.306565][T12676] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 502.341539][T12676] CPU: 1 PID: 12676 Comm: syz.2.1758 Not tainted syzkaller #0 [ 502.349084][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 502.359195][T12676] Call Trace: [ 502.362517][T12676] [ 502.365490][T12676] dump_stack_lvl+0x18c/0x250 [ 502.370266][T12676] ? show_regs_print_info+0x20/0x20 [ 502.375523][T12676] ? load_image+0x420/0x420 [ 502.380095][T12676] sysfs_warn_dup+0x8e/0xa0 [ 502.384681][T12676] sysfs_do_create_link_sd+0xc0/0x110 [ 502.390112][T12676] device_add_class_symlinks+0x1cf/0x240 [ 502.395804][T12676] device_add+0x4f9/0xc40 [ 502.400191][T12676] wiphy_register+0x1d99/0x2ac0 [ 502.405129][T12676] ? cfg80211_event_work+0x40/0x40 [ 502.410290][T12676] ? minstrel_ht_alloc+0x88a/0x990 [ 502.415454][T12676] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 502.421565][T12676] ieee80211_register_hw+0x2dd8/0x3b30 [ 502.427070][T12676] ? ieee80211_register_hw+0xf11/0x3b30 [ 502.432655][T12676] ? ieee80211_tasklet_handler+0x20/0x20 [ 502.438327][T12676] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 502.444263][T12676] ? __debug_object_init+0xec/0x450 [ 502.449529][T12676] ? __asan_memset+0x22/0x40 [ 502.454163][T12676] ? __hrtimer_init+0x189/0x270 [ 502.459047][T12676] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 502.464908][T12676] ? mac80211_hwsim_free+0x220/0x220 [ 502.470230][T12676] ? rcu_is_watching+0x15/0xb0 [ 502.475111][T12676] ? kstrndup+0xbd/0x140 [ 502.479393][T12676] hwsim_new_radio_nl+0xdad/0x1a70 [ 502.484542][T12676] ? __nla_validate+0x50/0x50 [ 502.489268][T12676] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 502.495641][T12676] ? __nla_parse+0x40/0x50 [ 502.500107][T12676] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 502.506479][T12676] genl_family_rcv_msg_doit+0x21a/0x310 [ 502.512076][T12676] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 502.518018][T12676] ? bpf_lsm_capable+0x9/0x10 [ 502.522764][T12676] ? security_capable+0x89/0xb0 [ 502.527653][T12676] genl_rcv_msg+0x611/0x7a0 [ 502.532189][T12676] ? genl_bind+0x360/0x360 [ 502.536633][T12676] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 502.542988][T12676] ? perf_trace_lock+0xfc/0x3b0 [ 502.547877][T12676] netlink_rcv_skb+0x235/0x4c0 [ 502.552681][T12676] ? genl_bind+0x360/0x360 [ 502.557142][T12676] ? netlink_ack+0x1160/0x1160 [ 502.561956][T12676] ? __lock_acquire+0x7d80/0x7d80 [ 502.567027][T12676] ? down_read+0x1ac/0x2e0 [ 502.571489][T12676] genl_rcv+0x28/0x40 [ 502.575510][T12676] netlink_unicast+0x7b1/0x930 [ 502.580318][T12676] netlink_sendmsg+0x8d0/0xbf0 [ 502.585124][T12676] ? netlink_getsockopt+0x590/0x590 [ 502.590366][T12676] ? apparmor_socket_sendmsg+0x8e/0x330 [ 502.595970][T12676] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 502.601293][T12676] ? security_socket_sendmsg+0x80/0xa0 [ 502.606796][T12676] ? netlink_getsockopt+0x590/0x590 [ 502.612024][T12676] ____sys_sendmsg+0x61b/0x980 [ 502.616839][T12676] ? __asan_memset+0x22/0x40 [ 502.621461][T12676] ? __sys_sendmsg_sock+0x30/0x30 [ 502.626515][T12676] ? __import_iovec+0x5f2/0x850 [ 502.631410][T12676] ? import_iovec+0x73/0xa0 [ 502.635947][T12676] ___sys_sendmsg+0x2a6/0x360 [ 502.640660][T12676] ? __sys_sendmsg+0x2b0/0x2b0 [ 502.645523][T12676] __se_sys_sendmsg+0x1d0/0x2c0 [ 502.650413][T12676] ? perf_trace_preemptirq_template+0x269/0x330 [ 502.656695][T12676] ? __x64_sys_sendmsg+0x80/0x80 [ 502.661682][T12676] ? lockdep_hardirqs_on+0x98/0x150 [ 502.666948][T12676] do_syscall_64+0x55/0xb0 [ 502.671404][T12676] ? clear_bhb_loop+0x40/0x90 [ 502.676123][T12676] ? clear_bhb_loop+0x40/0x90 [ 502.680838][T12676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.686768][T12676] RIP: 0033:0x7f21de59e159 [ 502.691214][T12676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.710873][T12676] RSP: 002b:00007f21df3c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.719328][T12676] RAX: ffffffffffffffda RBX: 00007f21de826180 RCX: 00007f21de59e159 [ 502.727351][T12676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 502.735355][T12676] RBP: 00007f21de635024 R08: 0000000000000000 R09: 0000000000000000 [ 502.743350][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 502.751374][T12676] R13: 00007f21de826218 R14: 00007f21de826180 R15: 00007ffc58ebe7c8 [ 502.759406][T12676] [ 503.148442][T12691] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1764'. [ 503.223235][T12691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.551644][T12711] syzkaller0: entered promiscuous mode [ 503.561124][T12711] syzkaller0: entered allmulticast mode [ 503.868512][T12715] delete_channel: no stack [ 508.669295][T12767] delete_channel: no stack [ 508.678778][T12767] delete_channel: no stack [ 508.694715][T12767] delete_channel: no stack [ 508.710551][T12767] delete_channel: no stack [ 509.096188][T12773] delete_channel: no stack [ 509.346645][T12783] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1788'. [ 509.394874][T12783] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1788'. [ 509.405317][T12791] validate_nla: 1 callbacks suppressed [ 509.405334][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.466368][T12783] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1788'. [ 509.476737][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1789'. [ 509.492433][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.537275][T12783] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1788'. [ 509.555357][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1789'. [ 509.605737][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.640013][T12783] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1788'. [ 509.678299][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1789'. [ 509.711708][T12783] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1788'. [ 509.727405][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.757433][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1789'. [ 509.833426][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.841804][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.860443][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.877812][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.901423][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 509.918942][T12791] netlink: 'syz.3.1789': attribute type 10 has an invalid length. [ 511.115178][T12827] delete_channel: no stack [ 511.130206][T12827] delete_channel: no stack [ 515.518019][T12897] __nla_validate_parse: 160 callbacks suppressed [ 515.518036][T12897] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1815'. [ 516.914757][T12927] Ÿë: port 1(5Â) entered blocking state [ 516.929555][T12927] Ÿë: port 1(5Â) entered disabled state [ 516.991052][T12927] Â: entered allmulticast mode [ 517.104414][T12927] Â: entered promiscuous mode [ 517.441950][T12948] validate_nla: 125 callbacks suppressed [ 517.441992][T12948] netlink: 'syz.1.1830': attribute type 21 has an invalid length. [ 517.469373][T12948] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1830'. [ 517.531453][T12948] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1830'. [ 518.155235][T12963] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1833'. [ 519.853488][T12985] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1841'. [ 519.890394][T12985] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1841'. [ 520.458177][T13000] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1844'. [ 520.529895][T12997] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1844'. [ 520.740465][T13006] netlink: 'syz.1.1848': attribute type 10 has an invalid length. [ 520.748858][T13006] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered promiscuous mode [ 520.770520][T13006] team0: Port device ÿÿÿÿÿÿ removed [ 520.779808][T13006] bond0: (slave ÿÿÿÿÿÿ): Enslaving as an active interface with an up link [ 521.364634][T13016] netlink: 'syz.3.1852': attribute type 9 has an invalid length. [ 523.385158][T13047] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1867'. [ 523.422891][T13047] openvswitch: netlink: Flow actions attr not present in new flow. [ 523.582303][T13046] netlink: 'syz.1.1867': attribute type 3 has an invalid length. [ 523.707215][T13046] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1867'. [ 524.728711][T13059] netlink: 184912 bytes leftover after parsing attributes in process `syz.1.1862'. [ 525.002589][T13066] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1864'. [ 525.079772][T13068] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1865'. [ 525.705676][T13091] netlink: 'syz.0.1873': attribute type 10 has an invalid length. [ 525.749112][T13091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1873'. [ 528.415411][T13091] team0: Port device virt_wifi0 removed [ 528.474943][T13091] batman_adv: batadv0: Adding interface: virt_wifi0 [ 528.483313][T13091] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.522496][T13091] batman_adv: batadv0: Not using interface virt_wifi0 (retrying later): interface not active [ 528.931418][T13113] netlink: 'syz.0.1876': attribute type 16 has an invalid length. [ 528.939474][T13113] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1876'. [ 529.061118][T13117] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1879'. [ 529.081089][T13117] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 529.261745][T13123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1882'. [ 529.394416][T13130] cgroup: fork rejected by pids controller in /syz3 [ 530.685786][ T60] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.838788][ T60] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.996924][ T60] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.114104][ T60] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.601714][T13187] netlink: 'syz.0.1900': attribute type 1 has an invalid length. [ 531.609963][T13187] netlink: 'syz.0.1900': attribute type 3 has an invalid length. [ 531.621200][T13187] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1900'. [ 531.714543][T13190] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 531.725907][T13190] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 531.743930][T13190] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 531.766824][T13190] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 531.775633][T13190] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 531.790256][T13190] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 532.341942][T13221] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1906'. [ 532.472838][T13221] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1906'. [ 532.779867][T13227] delete_channel: no stack [ 532.855916][T13230] netlink: 'syz.1.1908': attribute type 7 has an invalid length. [ 532.887921][T13233] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1909'. [ 533.038892][T13234] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1908'. [ 533.263384][T13189] chnl_net:caif_netlink_parms(): no params data found [ 533.841584][ T5786] Bluetooth: hci2: command tx timeout [ 534.479946][T13189] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.511765][T13189] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.520806][T13189] bridge_slave_0: entered allmulticast mode [ 534.544114][T13189] bridge_slave_0: entered promiscuous mode [ 534.586890][T13189] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.616253][T13189] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.623710][T13189] bridge_slave_1: entered allmulticast mode [ 534.644556][T13189] bridge_slave_1: entered promiscuous mode [ 535.042802][T13189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.095196][T13189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.339016][T13189] team0: Port device team_slave_0 added [ 535.386828][T13285] netlink: 'syz.1.1918': attribute type 12 has an invalid length. [ 535.395335][T13285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1918'. [ 535.412222][T13189] team0: Port device team_slave_1 added [ 535.466516][T13189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.507584][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.566493][T13189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.601338][ T60] hsr_slave_0: left promiscuous mode [ 535.630399][ T60] veth1_macvtap: left promiscuous mode [ 535.638444][ T60] veth0_macvtap: left promiscuous mode [ 535.645246][ T60] veth0_vlan: left promiscuous mode [ 535.922608][ T5786] Bluetooth: hci2: command tx timeout [ 536.105762][T13298] netlink: 'syz.0.1920': attribute type 2 has an invalid length. [ 536.118541][T13298] netlink: 'syz.0.1920': attribute type 1 has an invalid length. [ 536.126883][T13298] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.1920'. [ 536.823647][T13189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.830691][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.865475][T13189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.882346][T13284] netlink: 'syz.1.1918': attribute type 10 has an invalid length. [ 536.890241][T13284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1918'. [ 536.909657][T13284] batman_adv: batadv0: Adding interface: virt_wifi0 [ 536.917351][T13284] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.959000][T13284] batman_adv: batadv0: Interface activated: virt_wifi0 [ 536.967894][T13291] netlink: 'syz.0.1920': attribute type 29 has an invalid length. [ 537.129309][T13189] hsr_slave_0: entered promiscuous mode [ 537.268212][T13189] hsr_slave_1: entered promiscuous mode [ 537.444058][T13306] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1923'. [ 537.784589][T13316] netlink: 'syz.2.1925': attribute type 17 has an invalid length. [ 537.838753][T13316] netlink: 'syz.2.1925': attribute type 16 has an invalid length. [ 537.858359][T13316] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1925'. [ 537.869030][T13322] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 538.001434][ T5786] Bluetooth: hci2: command tx timeout [ 538.810680][T13189] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.828484][T13189] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.846888][T13189] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 538.858352][T13189] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 539.082612][T13189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.139411][T13189] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.168149][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.175405][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.213515][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.220754][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.243470][T13362] netlink: 'syz.1.1932': attribute type 3 has an invalid length. [ 539.254202][T13362] netlink: 'syz.1.1932': attribute type 1 has an invalid length. [ 539.280026][T13362] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1932'. [ 539.348721][T13189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.082916][ T5786] Bluetooth: hci2: command tx timeout [ 540.247929][T13189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.556763][T13189] veth0_vlan: entered promiscuous mode [ 540.604016][T13189] veth1_vlan: entered promiscuous mode [ 540.857273][T13189] veth0_macvtap: entered promiscuous mode [ 540.887503][T13189] veth1_macvtap: entered promiscuous mode [ 540.948940][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.991205][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.009396][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 541.020662][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.035361][T13189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.120676][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.149563][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.160467][T13189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.174478][T13189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.186546][T13189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.201423][T13396] ¥: port 1(team0) entered blocking state [ 541.207782][T13396] ¥: port 1(team0) entered disabled state [ 541.219491][T13396] team0: entered allmulticast mode [ 541.231315][T13396] team_slave_0: entered allmulticast mode [ 541.240842][T13396] žÿ: entered allmulticast mode [ 541.253735][T13396] team0: entered promiscuous mode [ 541.268329][T13396] team_slave_0: entered promiscuous mode [ 541.275797][T13396] žÿ: entered promiscuous mode [ 541.319233][T13189] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.342846][T13189] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.366559][T13189] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.390658][T13189] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.409113][T13395] team0: left allmulticast mode [ 541.433611][T13395] team_slave_0: left allmulticast mode [ 541.439893][T13395] žÿ: left allmulticast mode [ 541.449406][T13395] team0: left promiscuous mode [ 541.463783][T13395] team_slave_0: left promiscuous mode [ 541.478719][T13395] žÿ: left promiscuous mode [ 541.489565][T13395] ¥: port 1(team0) entered disabled state [ 544.576859][ T6523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.599896][ T6523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.687051][ T6511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.723354][ T6511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.476901][T13468] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1950'. [ 545.585046][T13473] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1952'. [ 545.769933][T13473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.848508][T13473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.920394][T13473] bond0 (unregistering): Released all slaves [ 546.235144][T13492] netlink: 194488 bytes leftover after parsing attributes in process `syz.1.1955'. [ 546.341233][T13492] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1955'. [ 548.261730][T13546] netlink: 'syz.2.1967': attribute type 2 has an invalid length. [ 548.284490][T13546] netlink: 'syz.2.1967': attribute type 8 has an invalid length. [ 548.315237][T13546] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1967'. [ 548.924409][T13557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1971'. [ 563.049817][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.056356][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.488991][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.495596][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 653.980952][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 653.987716][ C1] rcu: 1-....: (10499 ticks this GP) idle=eaa4/1/0x4000000000000000 softirq=47958/47962 fqs=5246 [ 653.999424][ C1] rcu: hardirqs softirqs csw/system [ 654.005844][ C1] rcu: number: 1310165 0 0 [ 654.012261][ C1] rcu: cputime: 15879 36610 67 ==> 52500(ms) [ 654.020088][ C1] rcu: (t=10501 jiffies g=65233 q=1249 ncpus=2) [ 654.026452][ C1] CPU: 1 PID: 13557 Comm: syz.1.1971 Not tainted syzkaller #0 [ 654.033969][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.044055][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 654.050954][ C1] Code: 00 4d 85 e4 75 16 e8 05 ca 0f 00 eb 15 e8 fe c9 0f 00 e8 09 f2 17 09 4d 85 e4 74 ea e8 ef c9 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 654.070602][ C1] RSP: 0018:ffffc900001ef180 EFLAGS: 00000246 [ 654.076714][ C1] RAX: ffffffff8177a881 RBX: 0000000000000000 RCX: ffff888024945a00 [ 654.084739][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 654.092737][ C1] RBP: ffffc900001ef238 R08: ffffffff911ef58f R09: 1ffffffff223deb1 [ 654.100747][ C1] R10: dffffc0000000000 R11: fffffbfff223deb2 R12: 0000000000000200 [ 654.108749][ C1] R13: 000001fb63109b96 R14: 1ffff9200003de30 R15: dffffc0000000000 [ 654.116752][ C1] FS: 00007f6c02f836c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 654.125726][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.132333][ C1] CR2: 00007f77eb2a7ff8 CR3: 000000005e170000 CR4: 00000000003506e0 [ 654.140359][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 654.148350][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 654.156434][ C1] Call Trace: [ 654.159739][ C1] [ 654.162610][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 654.167931][ C1] ? eth_type_trans+0x6f/0x770 [ 654.172741][ C1] ktime_get_with_offset+0x94/0x330 [ 654.178016][ C1] netif_rx_internal+0x33d/0x4e0 [ 654.182987][ C1] ? read_lock_is_recursive+0x20/0x20 [ 654.188390][ C1] ? dev_forward_skb+0x50/0x50 [ 654.193196][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 654.199202][ C1] ? rcu_is_watching+0x15/0xb0 [ 654.204001][ C1] __netif_rx+0x78/0xc0 [ 654.208204][ C1] veth_xmit+0x57a/0xa30 [ 654.212482][ C1] ? veth_xmit+0x61/0xa30 [ 654.216838][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 654.222073][ C1] dev_hard_start_xmit+0x269/0x790 [ 654.227222][ C1] ? __dev_queue_xmit+0x275/0x3640 [ 654.232366][ C1] __dev_queue_xmit+0x198c/0x3640 [ 654.237427][ C1] ? __dev_queue_xmit+0x275/0x3640 [ 654.242593][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 654.247657][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 654.252996][ C1] ? ebt_do_table+0x26ca/0x2890 [ 654.257876][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.264055][ C1] ? ebt_do_table+0x26ca/0x2890 [ 654.268947][ C1] br_dev_queue_push_xmit+0x6b7/0x880 [ 654.274356][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 654.279427][ C1] ? nla_nest_cancel+0x90/0x90 [ 654.284226][ C1] ? nf_hook_slow+0x1b2/0x200 [ 654.288934][ C1] ? nla_nest_cancel+0x90/0x90 [ 654.293739][ C1] ? nla_nest_cancel+0x90/0x90 [ 654.298528][ C1] NF_HOOK+0x351/0x3e0 [ 654.302649][ C1] ? NF_HOOK+0xa3/0x3e0 [ 654.306836][ C1] ? br_forward_finish+0x130/0x130 [ 654.311977][ C1] ? nla_nest_cancel+0x90/0x90 [ 654.316781][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 654.321835][ C1] br_forward_finish+0xd3/0x130 [ 654.326756][ C1] ? nla_nest_cancel+0x90/0x90 [ 654.331549][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 654.337137][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 654.342734][ C1] NF_HOOK+0x351/0x3e0 [ 654.346852][ C1] ? NF_HOOK+0xa3/0x3e0 [ 654.351043][ C1] ? br_forward_finish+0x130/0x130 [ 654.356185][ C1] ? br_multicast_count+0xef/0xd10 [ 654.361328][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 654.366908][ C1] ? br_handle_vlan+0x5e/0x530 [ 654.371710][ C1] __br_forward+0x433/0x610 [ 654.376241][ C1] ? br_dev_queue_push_xmit+0x880/0x880 [ 654.381816][ C1] ? maybe_deliver+0xfe/0x150 [ 654.386524][ C1] ? should_deliver+0x390/0x390 [ 654.391439][ C1] br_dev_xmit+0xa94/0x18a0 [ 654.395982][ C1] ? skb_crc32c_csum_help+0x510/0x510 [ 654.401391][ C1] ? br_dev_xmit+0x1a6/0x18a0 [ 654.406104][ C1] ? br_net_exit_batch+0x210/0x210 [ 654.411432][ C1] ? validate_xmit_xfrm+0xbb/0x1340 [ 654.416683][ C1] ? netdev_get_name+0x160/0x2f0 [ 654.421666][ C1] dev_hard_start_xmit+0x269/0x790 [ 654.426949][ C1] ? __dev_queue_xmit+0x275/0x3640 [ 654.432110][ C1] __dev_queue_xmit+0x198c/0x3640 [ 654.437179][ C1] ? __dev_queue_xmit+0x275/0x3640 [ 654.442353][ C1] ? arpt_do_table+0x24d/0x2040 [ 654.447244][ C1] ? netdev_core_pick_tx+0x370/0x370 [ 654.452587][ C1] ? NF_HOOK+0xa3/0x3b0 [ 654.456822][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 654.461883][ C1] ? __asan_memcpy+0x40/0x70 [ 654.466503][ C1] ? nf_hook_slow+0x1b2/0x200 [ 654.471212][ C1] NF_HOOK+0x331/0x3b0 [ 654.475310][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 654.479580][ C1] ? NF_HOOK+0xa3/0x3b0 [ 654.483777][ C1] ? arp_xmit+0x270/0x270 [ 654.488136][ C1] ? NF_HOOK+0x3b0/0x3b0 [ 654.492404][ C1] ? arp_solicit+0x12c/0xe10 [ 654.497021][ C1] arp_xmit+0x16c/0x270 [ 654.501197][ C1] ? arp_xmit+0x23/0x270 [ 654.505464][ C1] arp_solicit+0xbf3/0xe10 [ 654.509906][ C1] ? arp_solicit+0x12c/0xe10 [ 654.514526][ C1] ? arp_ifdown+0x20/0x20 [ 654.518881][ C1] ? __neigh_event_send+0xe7b/0x1480 [ 654.524196][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 654.529253][ C1] ? arp_ifdown+0x20/0x20 [ 654.533605][ C1] __neigh_event_send+0xedd/0x1480 [ 654.538760][ C1] neigh_resolve_output+0x1a4/0x710 [ 654.544004][ C1] ? ip_finish_output2+0x1260/0x1260 [ 654.549341][ C1] ? ip_finish_output2+0x45a/0x1260 [ 654.554581][ C1] ? ip_finish_output2+0x45a/0x1260 [ 654.559831][ C1] ip_finish_output2+0xd97/0x1260 [ 654.564907][ C1] ? nf_hook+0x314/0x390 [ 654.569190][ C1] ? ip_fragment+0x210/0x210 [ 654.573811][ C1] ? ip_skb_dst_mtu+0x586/0x9c0 [ 654.578692][ C1] ? ip_finish_output+0x3ec/0x4c0 [ 654.583761][ C1] ip_output+0x2a5/0x3a0 [ 654.588030][ C1] ? ip_output+0x5a/0x3a0 [ 654.592389][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 654.597358][ C1] __ip_queue_xmit+0x1056/0x1960 [ 654.602338][ C1] ? __ip_queue_xmit+0x5d/0x1960 [ 654.607304][ C1] __tcp_transmit_skb+0x1dd6/0x3470 [ 654.612547][ C1] ? ipv4_mtu+0x313/0x430 [ 654.616922][ C1] ? __tcp_send_ack+0x5f0/0x5f0 [ 654.621816][ C1] __tcp_retransmit_skb+0x9d8/0x1410 [ 654.627138][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.633323][ C1] ? tcp_write_xmit+0x6700/0x6700 [ 654.638377][ C1] ? cubictcp_state+0x49/0x220 [ 654.643169][ C1] ? cubictcp_recalc_ssthresh+0x170/0x170 [ 654.648921][ C1] tcp_retransmit_skb+0x32/0x360 [ 654.653894][ C1] tcp_retransmit_timer+0x18e7/0x3030 [ 654.659305][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 654.664539][ C1] ? tcp_delack_timer_handler+0x4c0/0x4c0 [ 654.670294][ C1] ? read_tsc+0x9/0x20 [ 654.674397][ C1] ? ktime_get+0x24b/0x280 [ 654.678849][ C1] ? tcp_write_timer_handler+0x2f4/0x910 [ 654.684514][ C1] ? tcp_write_timer+0x122/0x280 [ 654.689499][ C1] tcp_write_timer+0x12a/0x280 [ 654.694306][ C1] call_timer_fn+0x189/0x540 [ 654.698925][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 654.704154][ C1] ? call_timer_fn+0xd2/0x540 [ 654.708879][ C1] ? __run_timers+0x810/0x810 [ 654.713594][ C1] ? tcp_init_xmit_timers+0xb0/0xb0 [ 654.718826][ C1] __run_timers+0x570/0x810 [ 654.723367][ C1] ? detach_timer+0x2b0/0x2b0 [ 654.728082][ C1] run_timer_softirq+0x67/0xf0 [ 654.732884][ C1] handle_softirqs+0x27d/0x820 [ 654.737667][ C1] ? read_tsc+0x9/0x20 [ 654.741763][ C1] ? ktime_get+0x24b/0x280 [ 654.746207][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 654.751001][ C1] ? do_softirq+0x1a0/0x1a0 [ 654.755526][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 654.760755][ C1] __irq_exit_rcu+0xd3/0x190 [ 654.765366][ C1] ? irq_exit_rcu+0x20/0x20 [ 654.769894][ C1] irq_exit_rcu+0x9/0x20 [ 654.774154][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 654.779813][ C1] [ 654.782770][ C1] [ 654.785727][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.791734][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 654.797565][ C1] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 73 87 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 654.817193][ C1] RSP: 0018:ffffc90005197760 EFLAGS: 00000286 [ 654.823287][ C1] RAX: 33fa0be1c225f100 RBX: 0000000000000000 RCX: 33fa0be1c225f100 [ 654.831279][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 [ 654.839281][ C1] RBP: ffffc900051977b0 R08: ffffffff911ef5ff R09: 1ffffffff223debf [ 654.847274][ C1] R10: dffffc0000000000 R11: fffffbfff223dec0 R12: ffff888024945a00 [ 654.855270][ C1] R13: 1ffff110171e79a1 R14: dffffc0000000000 R15: ffff8880b8f3cd08 [ 654.863301][ C1] __schedule+0x15b6/0x4660 [ 654.867870][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 654.875117][ C1] ? lock_chain_count+0x20/0x20 [ 654.880001][ C1] ? asan.module_dtor+0x20/0x20 [ 654.884884][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.891098][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 654.896339][ C1] ? preempt_schedule+0xc0/0xd0 [ 654.901220][ C1] preempt_schedule_common+0x82/0xc0 [ 654.906532][ C1] preempt_schedule+0xc0/0xd0 [ 654.911238][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 654.916897][ C1] ? event_function+0x300/0x300 [ 654.921780][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 654.927526][ C1] ? percpu_counter_add_batch+0x252/0x2a0 [ 654.933278][ C1] preempt_schedule_thunk+0x1a/0x30 [ 654.938505][ C1] ? smp_call_function_single+0x488/0x5a0 [ 654.944260][ C1] smp_call_function_single+0x48d/0x5a0 [ 654.949834][ C1] ? event_function+0x300/0x300 [ 654.954726][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 654.960935][ C1] ? event_function+0x300/0x300 [ 654.965830][ C1] perf_install_in_context+0x5bb/0x920 [ 654.971323][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 654.976462][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 654.982472][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 654.987751][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 654.992995][ C1] ? perf_event__header_size+0x165/0x220 [ 654.998678][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 655.004468][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 655.010136][ C1] ? lock_chain_count+0x20/0x20 [ 655.015028][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 655.021043][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 655.026273][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 655.031951][ C1] do_syscall_64+0x55/0xb0 [ 655.036390][ C1] ? clear_bhb_loop+0x40/0x90 [ 655.041097][ C1] ? clear_bhb_loop+0x40/0x90 [ 655.045802][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 655.051719][ C1] RIP: 0033:0x7f6c0219e159 [ 655.056254][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.075895][ C1] RSP: 002b:00007f6c02f83028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 655.084362][ C1] RAX: ffffffffffffffda RBX: 00007f6c02425fa0 RCX: 00007f6c0219e159 [ 655.092358][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 655.100357][ C1] RBP: 00007f6c02235024 R08: 0000000000000002 R09: 0000000000000000 [ 655.108358][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 655.116350][ C1] R13: 00007f6c02426038 R14: 00007f6c02425fa0 R15: 00007fffcf8801e8 [ 655.124376][ C1] [ 657.284089][ T5786] Bluetooth: hci2: command 0x0406 tx timeout