last executing test programs: 5.807133097s ago: executing program 0 (id=1693): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5, 0x4, 0x9, 0x0, 0x0, 0x7, 0x100, 0xc, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x1, @perf_bp={&(0x7f00000000c0)}, 0x800, 0x7fffffff, 0x3, 0x5, 0xf, 0x6, 0x8, 0x0, 0x10, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x5, 0x5ba, 0x0, 0x201}, 0x0, 0x1, r0, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, &(0x7f0000000940)=[{&(0x7f0000001040)="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", 0x595}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000002000000080300000008000e37493eaf133b2af4e9d2891e62424c17de0d7c76cc21970000000000000000c3fc3b57ed0663a9d592c88bc15374e6d155a1990b7a40c17b1961352cc952826daf9720b009723d34930ba51ce08d1a041031d0b4a175cc063dd58e47284dd11210daf6f82a4985939e6a21913bab89ee1a7139ab53152373723d9fd4e6552782660bece70e1f83ae92b996ed6cd4dc2a6caeae999fb5", @ANYRES32=0x0, @ANYBLOB="ac1414147f00000100000000e4000000000000000000000007000000443c0d617f00000100000003ac14142b000000057f000001000000e2ac1e000100000003ac1e00017fffffff7f000001000000077f0000010000000c442c8a010a01010100000006ac1414bb000000047f000001000000007f00000100000004640101000000ffff9404fd7b441ca76000000009000000020000ffff0000000200000006fffffff8441ca3d1ac1414aa00000004ac14142a00010001e000000100000000862f0000000102126b6ca68714af7996ba387cf0002fde3b070d8d29b0925c96e2589dac010604d1640506168fd5240000000000"], 0x108}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000}, 0x100904, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60640c034002a10100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000280)=ANY=[@ANYBLOB="0506000000000000000000d6c5136f00000000000000000000000040"]) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0x67, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) close(r5) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x3a}, @empty}}}], 0x20}, 0x48000) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETVNETBE(r7, 0x400454de, &(0x7f0000000200)=0x1) socket$kcm(0x11, 0x200000000000002, 0x300) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x3e}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r10, 0x20, &(0x7f0000000140)={0x0, 0xffffff7e, 0x0, 0x0}}, 0x10) write$cgroup_int(r9, &(0x7f00000003c0)=0x4000000000001000, 0x12) 5.066771575s ago: executing program 0 (id=1696): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x104101, 0x4, 0x0, 0x5, 0x5ba, 0x0, 0x201}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) (async) socket$kcm(0x2, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x922000000001, 0x106) (async) socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 4.88980993s ago: executing program 3 (id=1697): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.753329733s ago: executing program 1 (id=1699): socket$kcm(0x2, 0x200000000000001, 0x106) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000806"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd50, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x33000000}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async, rerun: 32) socket$kcm(0xa, 0x922000000003, 0x11) (async) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x10009, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="97eb01001800000000000000500000005000000002000000090000000000000e03000000010000000a0000000000000203000000000000000500000d0000fa8c99dc00000100000000000000000000000000000000000000090000000000000001000000030010"], 0x0, 0x6a, 0x0, 0x0, 0x7fffffff}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (rerun: 64) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 4.646593025s ago: executing program 2 (id=1700): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2}, 0x20) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r2) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2}, 0x20) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async) close(r2) (async) openat$cgroup_devices(r2, 0x0, 0x2, 0x0) (async) perf_event_open(0x0, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$MAP_CREATE(0x2100000000000000, &(0x7f0000000840)=@base={0xa, 0x101, 0x7ffb, 0xcc, 0x8, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x1c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) 4.589866477s ago: executing program 3 (id=1701): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES64], 0x50) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f00000000c0), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 4.521755368s ago: executing program 0 (id=1702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000500)="b9ff03076804268cb89e14f086dd47e0ffff20002f0000000000ac141416e000000129a130112b92121f9ae0dd972fa104edcce40d8d", 0x0, 0x2800, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f7", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a5000000000000184900"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) 4.47825098s ago: executing program 1 (id=1703): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002400000008000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, 0x0, 0x8001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7c, &(0x7f0000000000), 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86"], 0xfe1b) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x4, 0xc8}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4b08, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff8f4c, 0x4}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000ff070000800000000800000000100000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="040000000100000001000000000000000000000000000000000000003bb1c9bf98fc"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x58, &(0x7f0000000100)}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33) r8 = socket$kcm(0xa, 0x5, 0x0) socketpair(0x25, 0x3, 0xdec0, &(0x7f0000000000)) sendmsg$kcm(r8, &(0x7f0000000680)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)='P', 0x1}], 0x1, &(0x7f0000000b00)=[{0x10, 0x10d}], 0x10}, 0x0) 4.289822054s ago: executing program 2 (id=1704): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="170000006a00f96b1324", 0x18}], 0x1}, 0x4080) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7030000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.981435702s ago: executing program 3 (id=1705): r0 = socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000440)='syz0\x00', 0x1ff) r2 = socket$kcm(0xa, 0x3, 0x3a) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r2}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000100000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1f, 0x805, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89b0, &(0x7f0000000080)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x5, 0x1, 0x0, 0x40, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x3fff8000}, 0xf056, 0x32, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r6 = perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x2, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x6, 0x0, 0x100000, 0xfffb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x5c441, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x1}, 0x2098, 0x6, 0x9, 0x0, 0x10, 0x2, 0x4007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r6, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/145, 0x91}], 0x1, 0xfffffffffffffffe}, 0x4000) close(r8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) openat$cgroup_int(r1, &(0x7f0000000480)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000003640)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES16=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f00000001c0)=[{0x20, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0x4bef}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) 3.897247814s ago: executing program 2 (id=1706): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x4000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8942, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0xff, 0x0, 0x0, 0x0, 0x3, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x10000000005, 0x35f}, 0x108828, 0x6, 0x200, 0x5, 0x9, 0xd, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0xff, 0x0, 0x0, 0x0, 0x3, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x10000000005, 0x35f}, 0x108828, 0x6, 0x200, 0x5, 0x9, 0xd, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000034c0)={r1, 0x0, 0xf5c, 0x0, &(0x7f00000022c0)="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", 0x0, 0x6aaa, 0x0, 0x46, 0x55, &(0x7f0000003340)="4619dbe27eab996b77653c7e00b67ba5c17a65dfeecd323408add2f858a4658cf23db8e1686bab0b9aee90220242a9acf9e96bc2373d59491139674051eb025b571034a27a82", &(0x7f0000003400)="e44867694a9faec830b697827083d4df2ae9ddfdb5144b8962532c0f0c1055511bfdd80f6d1890474115a1f26734518325ec22d1cd29a1d7f858f9a2082639b74eedf7b921012ad640a6552ff2a818d90c3d34689e", 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRESOCT=r3, @ANYRES8=r2, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES8=r1, @ANYRESOCT=r3, @ANYRES8=r2, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x541b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40) (async) recvmsg(0xffffffffffffffff, 0x0, 0x40) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0xffffffff, @local}, 0x80, &(0x7f0000000680)}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) (async) r12 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r12, 0x0, 0x4040010) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r8) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r8) socket$kcm(0x10, 0x2, 0x0) (async) r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) (async) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) 3.489972534s ago: executing program 2 (id=1707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x27, 0xfe123, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, &(0x7f0000000000)={'bond_slave_1\x00', @random="0100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x13, &(0x7f0000000200)=r7, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000100)=ANY=[@ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES64=r3, @ANYBLOB='/', @ANYRESOCT=r7, @ANYBLOB="ab0c3deabea436b2d7a9048df7c5f7a5d0b671734ccf91063269dac2d467e7c0bb91653e", @ANYRES8=r6, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='/{-@%*v\x00') ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x30, 0xfa, 0x3, 0xfffff030}, {0x6, 0x5, 0xe, 0x1}]}) 1.256687879s ago: executing program 0 (id=1708): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000, 0x1, @perf_config_ext={0x1, 0xdbfb}, 0x804, 0x0, 0x0, 0x4, 0x3, 0x0, 0x6722, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000, 0x1, @perf_config_ext={0x1, 0xdbfb}, 0x804, 0x0, 0x0, 0x4, 0x3, 0x0, 0x6722, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) close(r4) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x9, [@datasec={0x4, 0x7, 0x0, 0xf, 0x1, [{0x3, 0xb, 0x1}, {0x4, 0x6, 0x5}, {0x5, 0x7, 0x8}, {0x3, 0x0, 0x7}, {0x2, 0x7, 0xd93}, {0x1, 0x200, 0xffffffba}, {0x2, 0x9, 0x8}], "ab"}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x5f, 0x61, 0x5f, 0x2e, 0x30, 0x5f, 0x61]}}, &(0x7f0000000640)=""/127, 0x91, 0x7f, 0x1, 0xb}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000340)=""/81, 0x26, 0x51, 0x1, 0x5}, 0x28) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[], 0x27) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x10}, 0x18) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7, 0x7, 0x9, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) r6 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xf, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7, 0x7, 0x9, 0x3, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0xb, 0x5, 0xb, 0x7, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18a62, 0x5, 0x7ffffffc, 0x3, 0x7, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, r6, 0x3) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYRES32], 0x9a) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) 1.249760059s ago: executing program 1 (id=1709): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000007b0cebec0000000000000000000000000000000009000000626ad3546df4a61873096cc103fe4d16c5716f57cc67aa9a51568d3b679b71262f180f8ab412d2be65f169d019400cf0ce98d3cccc06ef6a532dbf70811bc6e3966b83b0a23063cc6e3bda97b36c2f20f66483cc8b33b85882b97758963e14a383791307a38b053ed5740073e64b4ab30261df811f57897ed81ab2ff884368b683a9940200699672de2eb7d5357d66de31bb8fc591e379fafd04b9a328345a266baa73"], 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3, 0x6, 0xc, 0x1, 0x0, 0xfffffffffffffffe, 0x3, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0xa4}, 0x4182, 0x9, 0x4, 0x3, 0x8000000000000000, 0x2c5a, 0x2, 0x0, 0xd11, 0x0, 0x24cc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xb, r2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r4 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async, rerun: 32) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) (rerun: 32) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0xa}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x9, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x7, 0x0, 0x0, 0xff, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x4000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async) r7 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x7, 0x7, 0x9, 0x0, 0x2, 0x0, 0x0, 0x3ff}, 0x0, 0xe, r6, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0xe6335bd0dc095d24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r3, r1}, 0xc) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0xffffffffffffff90, &(0x7f0000000380)}, 0x22) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r7, 0x0, 0x4, &(0x7f0000000400)='GPL\x00'}, 0x30) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) 1.009968285s ago: executing program 1 (id=1710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x5, 0xe, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x9, '\x00', r3, r4, 0x0, 0x4, 0x3}, 0x50) 912.976748ms ago: executing program 1 (id=1711): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, &(0x7f00000002c0)=""/129, 0x0, 0x81}, 0x20) close(0x3) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000006000000040000000000000700000000000000000000000b010000000000000001000005fdffffff00000000020000000000000000000000da00449cc3c714906e08dfee3d99e0139560133b9b52f6b1fc8ee247390f62fa6fa2075cee426c4667c484e1b9f396f840cf065a51d68d849465675069467aac7b5af9c2dc7e660a08374bf8196e7b5e2e88b3e48c2c7278bc70a7933a01a85ba8246282486ac3b617529e09c8a805e33bcda33343932444"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r4, 0x58, &(0x7f0000000580)}, 0x10) write$cgroup_int(r3, &(0x7f0000000040), 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x890c, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r6, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x0) 877.850558ms ago: executing program 2 (id=1712): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000004800000048000000050000000b0000000200009304000000ffff0000e9000000033085ab2d8936aaca0c62f2d8c11a0400000007000000ff0000000f0000000000000a03000000060000000000000700000000070000000000000800000000005f2e5f00"], 0x0, 0x65}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r1, 0x0, &(0x7f0000000540)=""/153}, 0x20) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x7, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="39000000150081ae10003c000500018311001f9f660fcf066505acb612", 0x1d}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x3e, 0x5f, 0xee6e8b3c8826711]}}, 0x0, 0x29, 0x0, 0x1, 0x2}, 0x28) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a11800150006", 0x21}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a00000700", 0x15}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x600}) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, 0x0) 801.83606ms ago: executing program 3 (id=1713): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x11efa, 0x4, 0x98, 0x0, 0x1, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x2}, 0x108, 0x3, 0x0, 0x6, 0x7, 0x5, 0x2, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x18) r0 = getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x1ff, 0x3717}, 0x11cfa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') close(0x3) 801.14992ms ago: executing program 0 (id=1714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'veth1_to_team\x00', 0x2}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000100)) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f00000000c0)) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) 388.9517ms ago: executing program 0 (id=1715): r0 = perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xbb, 0x3fff8000}, 0x12180, 0x3, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x200004, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x806a2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1a) socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200ffe0000000000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2b9f, 0x2502, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x22e}, 0x0, 0x10, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b7020000b0ffffffbfa30000000000000703000000feffff7a0af0ff8f00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000011000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb450063dedba767ade51f7f1f66acd19100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb4e4d0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e85cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd0cf8f79a015c7bd3f15aa6aadbeab2a01685108e61aa00000000000000000000000000c67c6c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e3b42bcae95239ef5ca2a730a00c87c493db0300e63fda97a296820000000001000000eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e180022537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d3f00000000000000665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d81ab324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606637ece1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca7670000000000000010c65608fda6ed5d08e7a796042aa127d874105787d0347aa37801faff5b9050803a19ff6205aa5c263e407a2f7de56f7a0000e094fa4e3f05528caab5a430c08dd810bc97204b767dd969721a26aa740000000000bc433fe2d0a6ef2a8a91cd3cb305aa80dadef8b0caca780000000000000000863e21db415a222bb1a7ab94bfe4a74157d794f9d0430c2c0eb563350559829865a3dd08fb31bd0801e09aa3ee45e61a56fc83076451cff7632e49a41eadb5044a0d5f73d6932161ae5e9ce218a35cd8e7b747887b1a74798982d0b492c3f0ff53189d80733eb04f8124877b648ff438f7d66c7efcc09a8f3330b6c22d14e80db8e5608bdeab9388b758a15f4ce70390c214bc6838798f5b9b0b500d4e8b5174f329b8501c6feb7a6982bcea74a0f2ced7fa2059234a8d10b7f0597151d5c9067d57d85f4ae933eaf5174ba122f3f702ef8695578d3c08562c9fc185f0f65d11b4c58ae52500cbe99cde3758a5cbe6093dd328ac820e2de309d25a324647aadffcecf0f3bbaeda7af4436d9ffbce1b240a2f5e346eba8812e6329e01b087bde7da4a6448f478102e90c8134f531de08d4cf4f6f35b15a202544c0ced0c1715fd3a90099f785a13a2412bedba2981dd22bd9d736c00000000000000000000000000000000eb6fec8d7d2f77f4d470a9caa5b1bfc00cd1d40830ac35f229f8ffe1c02a63d3c2d9"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r2, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xc, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2009}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r5, 0x0) socketpair(0x1f, 0x6, 0x400fe, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) socket$kcm(0x10, 0x3, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1e00000000000000000008000800000000000000", @ANYRESHEX=r3, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r10, 0x0, &(0x7f0000000200)=""/76}, 0x20) r11 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r11, 0x1, 0x41, &(0x7f0000000040)=r5, 0x4) 349.199311ms ago: executing program 1 (id=1716): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x100000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5d0e, 0x80618, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={&(0x7f0000000400), 0x6}, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x204}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x4}, 0x12, 0x400000000000000, 0x0, 0x7, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="1400000031000b05d2fc6000001d0000060000", 0x13}], 0x1}, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0xb) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x3, 0x8, 0xfd, 0x0, 0x0, 0x0, 0x40212, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x4}, 0x100004, 0x0, 0x0, 0x3, 0x8001, 0x5, 0x0, 0x0, 0x102ff, 0x0, 0x2}, 0x0, 0x0, r3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000005080)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000080}, 0x4058810) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x4, 0xf5, 0xe2, 0x3, 0x0, 0x3, 0x80008, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x4, 0x5}, 0x840a, 0x1, 0x1c1, 0x5, 0x10001, 0x10, 0x993, 0x0, 0x7, 0x0, 0xf50}, 0x0, 0x6, 0xffffffffffffffff, 0x9) getpid() socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x100c, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 264.197983ms ago: executing program 3 (id=1717): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xdf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39", 0x104}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000001}, 0x12100, 0xc8, 0x2, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102033a00fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) sendmsg$inet(r0, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc0000000000000014000000000000000000000034000000"], 0x68}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x1, 0x3, 0x7bf}, 0x50) 73.650598ms ago: executing program 2 (id=1718): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001140)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x4000}, 0x20040001) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x9, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x1002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000010c0)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10f, 0x10f, 0x8, [@enum={0x10, 0x4, 0x0, 0x6, 0x4, [{0x1, 0x614}, {0xa, 0x1}, {0xe, 0x5}, {0x10, 0x18000000}]}, @enum={0xc, 0x3, 0x0, 0x6, 0x4, [{0xb, 0x40}, {0x3, 0x1}, {0xf, 0x87}]}, @struct={0x0, 0x6, 0x0, 0x4, 0x0, 0x7, [{0x1, 0x3, 0x7531}, {0xd, 0x1, 0x6}, {0x9, 0x4, 0x8396}, {0x3, 0x5, 0x80000001}, {0x9, 0x5, 0xe18}, {0x1, 0x5, 0x9}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xe, 0x2}, {0x3, 0x1}, {0xd, 0x3}, {0x3}, {0xd, 0x4}, {0xa, 0x1}, {0xb, 0x2}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x3}, @datasec={0xe, 0x1, 0x0, 0xf, 0xfffffffffffffe01, [{0x3, 0x8, 0x2}], "8f2eed"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x30, 0x0, 0x2e]}}, &(0x7f0000001040)=""/96, 0x130, 0x60, 0x1, 0x0, 0x10000, @value=r5}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006300000095", @ANYRES32=r4, @ANYRES32=r2], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x7, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x3076, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000ec0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) 0s ago: executing program 3 (id=1719): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x2, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0xa0d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdfd, 0x10, 0x0, 0x17}, 0x48) kernel console output (not intermixed with test programs): slave_1 [ 101.327002][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.337201][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.355991][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.368485][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.379394][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.400305][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.456980][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.457855][ C1] hrtimer: interrupt took 100549 ns [ 101.479076][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.487857][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.497303][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.520834][ T5085] Bluetooth: hci2: command tx timeout [ 101.521664][ T5784] Bluetooth: hci1: command tx timeout [ 101.526373][ T5792] Bluetooth: hci0: command tx timeout [ 101.531727][ T5784] Bluetooth: hci3: command tx timeout [ 101.551446][ T5847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 101.569322][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.587565][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.667747][ T5847] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 103.598119][ T5784] Bluetooth: hci2: command tx timeout [ 103.598855][ T5794] Bluetooth: hci0: command tx timeout [ 103.603608][ T5784] Bluetooth: hci1: command tx timeout [ 103.609073][ T5794] Bluetooth: hci3: command tx timeout [ 104.423587][ T5846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4'. [ 104.792850][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.820924][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.951509][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.976203][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.510689][ T5881] netlink: 'syz.2.3': attribute type 17 has an invalid length. [ 106.542766][ T5881] netlink: 'syz.2.3': attribute type 16 has an invalid length. [ 106.567791][ T5881] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3'. [ 106.814160][ T5889] Zero length message leads to an empty skb [ 106.912495][ T5881] syz.2.3 (5881) used greatest stack depth: 18792 bytes left [ 107.384684][ T5898] netlink: 'syz.0.14': attribute type 10 has an invalid length. [ 107.404160][ T5898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14'. [ 107.416982][ T5898] team0: entered promiscuous mode [ 107.422979][ T5898] team_slave_0: entered promiscuous mode [ 107.443239][ T5898] team_slave_1: entered promiscuous mode [ 107.469264][ T5898] team0: entered allmulticast mode [ 107.477829][ T5896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13'. [ 107.489517][ T5898] team_slave_0: entered allmulticast mode [ 107.514048][ T5898] team_slave_1: entered allmulticast mode [ 107.551526][ T5898] bridge0: port 3(team0) entered blocking state [ 107.569509][ T5898] bridge0: port 3(team0) entered disabled state [ 107.642692][ T5898] bridge0: port 3(team0) entered blocking state [ 107.649767][ T5898] bridge0: port 3(team0) entered forwarding state [ 107.686215][ T5896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13'. [ 107.720758][ T5900] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13'. [ 111.882321][ T5934] netlink: 'syz.1.23': attribute type 17 has an invalid length. [ 111.906038][ T5934] netlink: 'syz.1.23': attribute type 16 has an invalid length. [ 111.928427][ T5934] netlink: 152 bytes leftover after parsing attributes in process `syz.1.23'. [ 112.188600][ T5952] syz.3.36: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 112.237165][ T5956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28'. [ 112.248260][ T5952] CPU: 0 PID: 5952 Comm: syz.3.36 Not tainted syzkaller #0 [ 112.255562][ T5952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.265672][ T5952] Call Trace: [ 112.268992][ T5952] [ 112.271958][ T5952] dump_stack_lvl+0x18c/0x250 [ 112.276686][ T5952] ? show_regs_print_info+0x20/0x20 [ 112.281915][ T5952] ? load_image+0x420/0x420 [ 112.286460][ T5952] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 112.292904][ T5952] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 112.299446][ T5952] warn_alloc+0x246/0x340 [ 112.303814][ T5952] ? stack_trace_save+0xaa/0x100 [ 112.308804][ T5952] ? zone_watermark_ok_safe+0x230/0x230 [ 112.314393][ T5952] ? kasan_set_track+0x5f/0x70 [ 112.319188][ T5952] ? kasan_set_track+0x4e/0x70 [ 112.323979][ T5952] ? __kasan_kmalloc+0x8f/0xa0 [ 112.328807][ T5952] ? xsk_init_queue+0xad/0x100 [ 112.333634][ T5952] ? xsk_setsockopt+0x4c9/0x750 [ 112.338526][ T5952] ? do_sock_setsockopt+0x175/0x1a0 [ 112.343766][ T5952] ? __x64_sys_setsockopt+0x182/0x200 [ 112.349168][ T5952] __vmalloc_node_range+0x129/0x1320 [ 112.354540][ T5952] ? free_vm_area+0x50/0x50 [ 112.359097][ T5952] vmalloc_user+0x74/0x80 [ 112.363472][ T5952] ? xskq_create+0xbf/0x170 [ 112.368006][ T5952] xskq_create+0xbf/0x170 [ 112.372395][ T5952] xsk_init_queue+0xad/0x100 [ 112.377038][ T5952] xsk_setsockopt+0x4c9/0x750 [ 112.381753][ T5952] ? xsk_poll+0x670/0x670 [ 112.386130][ T5952] ? __fget_files+0x28/0x460 [ 112.390785][ T5952] ? aa_sock_opt_perm+0x74/0x100 [ 112.395759][ T5952] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 112.401349][ T5952] ? security_socket_setsockopt+0x7e/0xa0 [ 112.407120][ T5952] ? xsk_poll+0x670/0x670 [ 112.411516][ T5952] do_sock_setsockopt+0x175/0x1a0 [ 112.416576][ T5952] ? __fdget+0x180/0x210 [ 112.420849][ T5952] __x64_sys_setsockopt+0x182/0x200 [ 112.426075][ T5952] do_syscall_64+0x55/0xb0 [ 112.430522][ T5952] ? clear_bhb_loop+0x40/0x90 [ 112.435234][ T5952] ? clear_bhb_loop+0x40/0x90 [ 112.439957][ T5952] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 112.445906][ T5952] RIP: 0033:0x7fa2ed39e0d9 [ 112.450366][ T5952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.470048][ T5952] RSP: 002b:00007fa2ee225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 112.478517][ T5952] RAX: ffffffffffffffda RBX: 00007fa2ed625fa0 RCX: 00007fa2ed39e0d9 [ 112.486523][ T5952] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 112.494525][ T5952] RBP: 00007fa2ed435024 R08: 0000000000000004 R09: 0000000000000000 [ 112.502517][ T5952] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 112.510521][ T5952] R13: 00007fa2ed626038 R14: 00007fa2ed625fa0 R15: 00007ffe61fb6768 [ 112.518538][ T5952] [ 112.528304][ T5952] Mem-Info: [ 112.531501][ T5952] active_anon:5217 inactive_anon:0 isolated_anon:0 [ 112.531501][ T5952] active_file:1073 inactive_file:39955 isolated_file:0 [ 112.531501][ T5952] unevictable:768 dirty:429 writeback:0 [ 112.531501][ T5952] slab_reclaimable:9456 slab_unreclaimable:91871 [ 112.531501][ T5952] mapped:24664 shmem:1361 pagetables:554 [ 112.531501][ T5952] sec_pagetables:0 bounce:0 [ 112.531501][ T5952] kernel_misc_reclaimable:0 [ 112.531501][ T5952] free:1368574 free_pcp:8190 free_cma:0 [ 112.600725][ T5952] Node 0 active_anon:20912kB inactive_anon:0kB active_file:4292kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98716kB dirty:1700kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10604kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no [ 112.633396][ T5956] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28'. [ 112.656700][ T5954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.28'. [ 112.674746][ T5952] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 112.710132][ T5952] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.756325][ T5952] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 112.769826][ T5952] Node 0 DMA32 free:1567240kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20772kB inactive_anon:0kB active_file:4292kB inactive_file:158796kB unevictable:1536kB writepending:1692kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:10080kB local_pcp:9088kB free_cma:0kB [ 112.848632][ T5952] lowmem_reserve[]: 0 0 0 0 0 [ 112.866071][ T5952] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:8kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 112.940518][ T5952] lowmem_reserve[]: 0 0 0 0 0 [ 112.945423][ T5952] Node 1 Normal free:3891632kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:16kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23776kB local_pcp:12704kB free_cma:0kB [ 113.073389][ T5952] lowmem_reserve[]: 0 0 0 0 0 [ 113.088330][ T5952] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.153775][ T5952] Node 0 DMA32: 597*4kB (UM) 671*8kB (UM) 722*16kB (U) 1919*32kB (UME) 302*64kB (UE) 133*128kB (UME) 70*256kB (UME) 33*512kB (UM) 24*1024kB (UME) 13*2048kB (UM) 333*4096kB (UM) = 1567052kB [ 113.258306][ T5952] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 113.334488][ T5952] Node 1 Normal: 250*4kB (UME) 51*8kB (UME) 37*16kB (UME) 35*32kB (UME) 16*64kB (UE) 7*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3891632kB [ 113.394694][ T5952] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.418241][ T5952] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.458252][ T5952] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.493886][ T5952] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.504171][ T5952] 42389 total pagecache pages [ 113.525510][ T5952] 0 pages in swap cache [ 113.530922][ T5952] Free swap = 124996kB [ 113.535447][ T5952] Total swap = 124996kB [ 113.540538][ T5952] 2097051 pages RAM [ 113.544458][ T5952] 0 pages HighMem/MovableOnly [ 113.550212][ T5952] 416958 pages reserved [ 113.554439][ T5952] 0 pages cma reserved [ 113.775445][ T5972] netlink: 'syz.2.31': attribute type 39 has an invalid length. [ 113.892670][ T5972] veth0_macvtap: left promiscuous mode [ 114.109705][ T5975] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 116.462328][ T6014] netlink: 'syz.0.45': attribute type 2 has an invalid length. [ 116.496235][ T6014] netlink: 'syz.0.45': attribute type 8 has an invalid length. [ 116.514665][ T6014] netlink: 132 bytes leftover after parsing attributes in process `syz.0.45'. [ 116.534073][ T6016] netlink: 132 bytes leftover after parsing attributes in process `syz.0.45'. [ 116.602298][ T6018] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 116.612256][ T6018] netlink: 60179 bytes leftover after parsing attributes in process `syz.1.46'. [ 116.769247][ T6026] netlink: 'syz.2.48': attribute type 1 has an invalid length. [ 116.776904][ T6026] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.48'. [ 118.380982][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 118.572161][ T6064] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.60'. [ 118.730879][ T6073] netlink: 'syz.0.62': attribute type 2 has an invalid length. [ 118.784376][ T6073] netlink: 184 bytes leftover after parsing attributes in process `syz.0.62'. [ 119.223219][ T6076] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.63'. [ 121.503403][ T6091] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.792662][ T6105] netlink: 'syz.2.71': attribute type 2 has an invalid length. [ 122.233910][ T6118] netlink: 'syz.2.74': attribute type 13 has an invalid length. [ 122.259905][ T6118] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.74'. [ 123.011249][ T5784] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 123.480636][ T6153] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 123.496102][ T6153] IPv6: NLM_F_CREATE should be set when creating new route [ 123.504451][ T6153] IPv6: NLM_F_CREATE should be set when creating new route [ 123.512515][ T6153] IPv6: NLM_F_CREATE should be set when creating new route [ 124.362669][ T6181] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.90'. [ 124.393774][ T6184] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 124.449675][ T6184] netlink: 'syz.1.91': attribute type 29 has an invalid length. [ 124.773267][ T6182] sctp: [Deprecated]: syz.3.88 (pid 6182) Use of int in maxseg socket option. [ 124.773267][ T6182] Use struct sctp_assoc_value instead [ 125.407477][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.1.95'. [ 125.689216][ T6204] netlink: 36 bytes leftover after parsing attributes in process `syz.0.98'. [ 125.750546][ T6204] : renamed from caif0 [ 128.753024][ T6204] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 129.373457][ T6243] netlink: 128 bytes leftover after parsing attributes in process `syz.0.105'. [ 129.434132][ T6243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.535744][ T6238] netlink: 10 bytes leftover after parsing attributes in process `syz.2.106'. [ 129.952472][ T6251] netlink: 'syz.2.108': attribute type 10 has an invalid length. [ 130.104320][ T6251] batman_adv: batadv0: Adding interface: netdevsim0 [ 130.128240][ T6251] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.230692][ T6251] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 132.257873][ T6287] netlink: 'syz.3.116': attribute type 3 has an invalid length. [ 132.308122][ T6287] netlink: 'syz.3.116': attribute type 6 has an invalid length. [ 132.316046][ T6287] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.116'. [ 132.979525][ T6303] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 132.985683][ T6303] syzkaller1: Linktype set failed because interface is up [ 133.001176][ T5827] syzkaller1: tun_net_xmit 90 [ 133.083171][ T1149] syzkaller1: tun_net_xmit 86 [ 133.128646][ T5827] syzkaller1: tun_net_xmit 90 [ 134.206568][ T6323] netlink: 150428 bytes leftover after parsing attributes in process `syz.0.125'. [ 134.475277][ T6330] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 134.522443][ T6308] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.122'. [ 134.576988][ T6308] bridge_slave_1: default FDB implementation only supports local addresses [ 134.598176][ T6321] netlink: 'syz.1.124': attribute type 19 has an invalid length. [ 134.605994][ T6321] netlink: 36 bytes leftover after parsing attributes in process `syz.1.124'. [ 135.164934][ T6343] syzkaller0: entered promiscuous mode [ 135.192724][ T6343] syzkaller0: entered allmulticast mode [ 135.444193][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 135.452923][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.411471][ T6364] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 139.417476][ T6364] syzkaller1: linktype set to 769 [ 139.987648][ T6392] netlink: 'syz.0.141': attribute type 21 has an invalid length. [ 140.664355][ T6388] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.137'. [ 140.689445][ T6388] bridge_slave_1: default FDB implementation only supports local addresses [ 141.742088][ T6415] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 141.771543][ T6415] syzkaller1: Linktype set failed because interface is up [ 141.799520][ T9] syzkaller1: tun_net_xmit 90 [ 142.446703][ T9] syzkaller1: tun_net_xmit 90 [ 143.449172][ T6493] IPv6: Can't replace route, no match found [ 143.479062][ T6494] warning: `syz.2.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 143.623574][ T6497] syzkaller0: entered promiscuous mode [ 143.648164][ T6497] syzkaller0: entered allmulticast mode [ 144.061263][ T6516] netlink: 'syz.3.159': attribute type 1 has an invalid length. [ 144.085191][ T6516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 145.651142][ T5784] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 145.804138][ T6561] netlink: 'syz.1.167': attribute type 21 has an invalid length. [ 145.832229][ T6561] netlink: 132 bytes leftover after parsing attributes in process `syz.1.167'. [ 146.346763][ T6567] netlink: 14 bytes leftover after parsing attributes in process `syz.3.173'. [ 148.251907][ T6591] syz.3.179[6591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.303085][ T6593] netlink: 10 bytes leftover after parsing attributes in process `syz.1.180'. [ 148.331298][ T6591] syz.3.179[6591] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.520247][ T5784] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 148.614327][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.182'. [ 148.694023][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.182'. [ 148.747344][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.182'. [ 148.810376][ T6601] netlink: 60 bytes leftover after parsing attributes in process `syz.2.182'. [ 149.539935][ T6623] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 149.574261][ T6623] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 149.808637][ T6634] netlink: 'syz.3.189': attribute type 21 has an invalid length. [ 149.816485][ T6634] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.829829][ T6634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.837146][ T6634] IPv6: NLM_F_CREATE should be set when creating new route [ 149.844579][ T6634] IPv6: NLM_F_CREATE should be set when creating new route [ 149.851933][ T6634] IPv6: NLM_F_CREATE should be set when creating new route [ 149.886291][ T6636] netlink: 188 bytes leftover after parsing attributes in process `syz.2.190'. [ 149.906716][ T6637] netlink: 'syz.3.189': attribute type 21 has an invalid length. [ 149.915944][ T6637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 150.127481][ T6649] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.194'. [ 150.558304][ T5784] Bluetooth: hci3: command tx timeout [ 150.625068][ T6667] TCP: TCP_TX_DELAY enabled [ 150.679583][ T6671] netlink: 'syz.0.200': attribute type 29 has an invalid length. [ 150.708622][ T6671] netlink: 'syz.0.200': attribute type 29 has an invalid length. [ 150.727051][ T6672] netlink: 'syz.0.200': attribute type 29 has an invalid length. [ 150.930181][ T6678] netlink: 184 bytes leftover after parsing attributes in process `syz.3.201'. [ 150.998615][ T6678] Illegal XDP return value 4294967274 on prog (id 181) dev N/A, expect packet loss! [ 151.482169][ T6692] netlink: 'syz.1.206': attribute type 2 has an invalid length. [ 151.857484][ T6705] syzkaller0: entered promiscuous mode [ 151.863996][ T6705] syzkaller0: entered allmulticast mode [ 153.206865][ T6746] netlink: 'syz.2.224': attribute type 22 has an invalid length. [ 153.230440][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 153.541988][ T6765] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.230'. [ 153.619174][ T6765] cgroup: fork rejected by pids controller in /syz1 [ 153.710297][ T6774] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.232'. [ 154.301258][ T1149] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.427249][ T1149] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.594863][ T1149] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.778279][ T1149] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.668444][ T6806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.243'. [ 155.792514][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.802155][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.811250][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.828564][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.839057][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.846476][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.671254][ T6853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.251'. [ 157.725047][ T6833] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.248'. [ 157.769107][ T6833] bridge_slave_1: default FDB implementation only supports local addresses [ 157.919146][ T5794] Bluetooth: hci0: command tx timeout [ 158.076347][ T6811] chnl_net:caif_netlink_parms(): no params data found [ 158.696079][ T6865] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 158.724191][ T6865] netlink: 55 bytes leftover after parsing attributes in process `syz.0.253'. [ 159.022084][ T6867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.074675][ T1149] hsr_slave_0: left promiscuous mode [ 159.094328][ T1149] hsr_slave_1: left promiscuous mode [ 159.340164][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.347748][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.421134][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.518333][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.557155][ T1149] bridge_slave_1: left allmulticast mode [ 159.568490][ T1149] bridge_slave_1: left promiscuous mode [ 159.586156][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.848252][ T1149] bridge_slave_0: left allmulticast mode [ 159.864290][ T1149] bridge_slave_0: left promiscuous mode [ 159.920514][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.990183][ T1149] veth1_macvtap: left promiscuous mode [ 159.998590][ T5794] Bluetooth: hci0: command tx timeout [ 160.010146][ T1149] veth0_macvtap: left promiscuous mode [ 160.690469][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 160.735311][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 160.774231][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.825609][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.114155][ T1149] bond0 (unregistering): Released all slaves [ 161.230094][ T6884] netlink: 140 bytes leftover after parsing attributes in process `syz.0.257'. [ 161.242700][ T6884] netlink: 6 bytes leftover after parsing attributes in process `syz.0.257'. [ 161.305334][ T6811] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.342125][ T6811] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.352190][ T6811] bridge_slave_0: entered allmulticast mode [ 161.370394][ T6811] bridge_slave_0: entered promiscuous mode [ 161.398725][ T6811] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.405917][ T6811] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.445811][ T6811] bridge_slave_1: entered allmulticast mode [ 161.484984][ T6811] bridge_slave_1: entered promiscuous mode [ 161.583361][ T6811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.626791][ T6811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.747760][ T6811] team0: Port device team_slave_0 added [ 161.759041][ T6811] team0: Port device team_slave_1 added [ 161.990664][ T6918] netlink: 10 bytes leftover after parsing attributes in process `syz.3.263'. [ 162.039825][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.067869][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.096719][ T5794] Bluetooth: hci0: command tx timeout [ 162.160252][ T6811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.216273][ T6811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.241025][ T6811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.294022][ T6811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.359904][ T6915] netlink: 763 bytes leftover after parsing attributes in process `syz.0.262'. [ 162.713735][ T6811] hsr_slave_0: entered promiscuous mode [ 162.736104][ T6811] hsr_slave_1: entered promiscuous mode [ 162.774171][ T6811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.795963][ T6811] Cannot create hsr debugfs directory [ 164.065785][ T6958] netlink: 'syz.3.271': attribute type 10 has an invalid length. [ 164.110555][ T6958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.271'. [ 164.160712][ T5794] Bluetooth: hci0: command tx timeout [ 164.202188][ T6958] caif0: entered promiscuous mode [ 164.207333][ T6958] caif0: entered allmulticast mode [ 164.225545][ T6958] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.375792][ T6964] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.272'. [ 164.825782][ T6974] netlink: 'syz.2.275': attribute type 13 has an invalid length. [ 164.863822][ T6974] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.275'. [ 164.906463][ T6982] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.275'. [ 165.153286][ T5794] Bluetooth: hci1: ACL packet too small [ 165.794645][ T6811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.830784][ T6811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.892763][ T6811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.013923][ T6811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.404407][ T6811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.487740][ T6811] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.562419][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.571017][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.631449][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.638826][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.941920][ T7005] netlink: 'syz.0.283': attribute type 9 has an invalid length. [ 167.019609][ T7005] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.283'. [ 167.088379][ T7011] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.650464][ T6811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.708477][ T7025] netlink: 'syz.2.284': attribute type 10 has an invalid length. [ 167.738287][ T7026] netlink: 'syz.2.284': attribute type 25 has an invalid length. [ 167.746128][ T7026] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.284'. [ 168.573209][ T7040] syzkaller0: entered promiscuous mode [ 168.595533][ T7040] syzkaller0: entered allmulticast mode [ 168.994921][ T7051] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.287'. [ 169.256386][ T6811] veth0_vlan: entered promiscuous mode [ 169.312574][ T6811] veth1_vlan: entered promiscuous mode [ 169.465032][ T7060] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.288'. [ 169.566355][ T7060] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.288'. [ 169.857425][ T6811] veth0_macvtap: entered promiscuous mode [ 170.037115][ T6811] veth1_macvtap: entered promiscuous mode [ 170.096529][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.151918][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.178159][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.215557][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.243386][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.258129][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.280324][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.399442][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.439182][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.468073][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.498061][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.522705][ T6811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.554004][ T6811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.596894][ T6811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.635223][ T6811] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.676466][ T6811] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.685411][ T6811] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.694271][ T6811] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.108781][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.130202][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.217374][ T7082] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.291'. [ 171.308401][ T7082] openvswitch: netlink: Duplicate key (type 0). [ 171.327597][ T6478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.349319][ T6478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.349980][ T7086] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.292'. [ 171.394261][ T7082] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.291'. [ 171.541952][ T7086] netlink: zone id is out of range [ 171.587639][ T7086] netlink: zone id is out of range [ 171.691691][ T7086] netlink: zone id is out of range [ 171.696966][ T7086] netlink: zone id is out of range [ 171.828150][ T7086] netlink: zone id is out of range [ 171.833432][ T7086] netlink: zone id is out of range [ 171.938151][ T7086] netlink: zone id is out of range [ 171.977900][ T7086] netlink: zone id is out of range [ 172.012465][ T7086] netlink: zone id is out of range [ 172.817771][ T7126] netlink: 'syz.2.301': attribute type 2 has an invalid length. [ 172.838413][ T7126] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.301'. [ 173.533635][ T5794] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 173.640964][ T7157] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 173.852562][ T7157] team0: Device wg1 is of different type [ 174.215780][ T7164] syzkaller0: entered promiscuous mode [ 174.224437][ T7164] syzkaller0: entered allmulticast mode [ 178.506218][ T7247] netlink: 'syz.0.328': attribute type 7 has an invalid length. [ 178.524097][ T7248] netlink: 10 bytes leftover after parsing attributes in process `syz.0.328'. [ 178.533871][ T7247] netlink: 10 bytes leftover after parsing attributes in process `syz.0.328'. [ 179.145039][ T7264] syzkaller0: entered promiscuous mode [ 179.156657][ T7264] syzkaller0: entered allmulticast mode [ 179.238581][ T7269] netlink: 'syz.1.335': attribute type 4 has an invalid length. [ 179.253804][ T7269] netlink: 'syz.1.335': attribute type 16 has an invalid length. [ 179.261812][ T7269] netlink: 132 bytes leftover after parsing attributes in process `syz.1.335'. [ 179.311216][ T7271] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.336'. [ 179.690990][ T7282] netlink: 763 bytes leftover after parsing attributes in process `syz.2.340'. [ 179.736202][ T7282] netlink: 'syz.2.340': attribute type 9 has an invalid length. [ 179.760548][ T7282] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.340'. [ 182.031831][ T7338] netlink: 168 bytes leftover after parsing attributes in process `syz.3.356'. [ 182.175673][ T7335] net_ratelimit: 332 callbacks suppressed [ 182.175717][ T7335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.249320][ T7339] netlink: 168 bytes leftover after parsing attributes in process `syz.3.356'. [ 183.627693][ T7377] : renamed from vlan0 (while UP) [ 184.622150][ T7414] veth0_vlan: entered allmulticast mode [ 184.835555][ T7403] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 184.850834][ T7403] netlink: 2 bytes leftover after parsing attributes in process `syz.2.373'. [ 184.870465][ T7411] raw_sendmsg: syz.1.375 forgot to set AF_INET. Fix it! [ 184.887658][ T7403] hsr0: entered promiscuous mode [ 184.972962][ T7403] bridge0: port 3(hsr0) entered blocking state [ 184.999665][ T7403] bridge0: port 3(hsr0) entered disabled state [ 185.071232][ T7403] hsr0: entered allmulticast mode [ 185.076433][ T7403] hsr_slave_0: entered allmulticast mode [ 185.098112][ T7403] hsr_slave_1: entered allmulticast mode [ 185.114051][ T7403] bridge0: port 3(hsr0) entered blocking state [ 185.120729][ T7403] bridge0: port 3(hsr0) entered listening state [ 186.993605][ T7447] netlink: 132 bytes leftover after parsing attributes in process `syz.1.384'. [ 189.828460][ T7507] tap0: tun_chr_ioctl cmd 1074025677 [ 189.834184][ T7507] tap0: linktype set to 777 [ 190.385235][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.407'. [ 190.465908][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.407'. [ 190.700786][ T7524] veth1_macvtap: left promiscuous mode [ 190.713158][ T7524] macsec0: entered allmulticast mode [ 190.807751][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.407'. [ 190.834040][ T7527] veth1_macvtap: entered promiscuous mode [ 190.841731][ T7527] veth1_macvtap: entered allmulticast mode [ 190.847774][ T7527] macsec0: entered promiscuous mode [ 190.952618][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.0.407'. [ 191.325314][ T7535] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.410'. [ 191.368570][ T7535] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 193.069325][ T7592] netlink: 'syz.3.428': attribute type 10 has an invalid length. [ 194.505797][ T7610] netlink: 'syz.2.431': attribute type 29 has an invalid length. [ 194.563193][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.572291][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.584826][ T7614] bridge0: entered allmulticast mode [ 194.618839][ T7610] netlink: 'syz.2.431': attribute type 29 has an invalid length. [ 194.658567][ T7614] bridge_slave_1: left allmulticast mode [ 194.676554][ T7614] bridge_slave_1: left promiscuous mode [ 194.686280][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.706642][ T7614] bridge_slave_0: left promiscuous mode [ 194.715276][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.200622][ T7627] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.435'. [ 195.558330][ T5794] Bluetooth: hci1: ISO packet for unknown connection handle 255 [ 196.953116][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.961392][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.924072][ T7687] syzkaller0: entered promiscuous mode [ 199.030394][ T7687] syzkaller0: entered allmulticast mode [ 201.516762][ T7698] bridge0: port 4(ip6gretap0) entered blocking state [ 201.550858][ T7698] bridge0: port 4(ip6gretap0) entered disabled state [ 201.557873][ T7698] ip6gretap0: entered allmulticast mode [ 201.580177][ T7698] ip6gretap0: entered promiscuous mode [ 201.586692][ T7698] bridge0: port 4(ip6gretap0) entered blocking state [ 201.593677][ T7698] bridge0: port 4(ip6gretap0) entered listening state [ 202.055679][ T7713] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.458'. [ 202.373391][ T7711] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 202.409747][ T7711] syzkaller1: linktype set to 825 [ 202.416678][ T7715] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.460'. [ 202.952620][ T7718] -1: renamed from syzkaller0 [ 203.676618][ T7731] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.465'. [ 203.692837][ T7731] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 203.783248][ T7735] netlink: 10 bytes leftover after parsing attributes in process `syz.1.466'. [ 204.156955][ T7748] netlink: 'syz.0.469': attribute type 21 has an invalid length. [ 204.199725][ T7749] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.470'. [ 204.251102][ T7749] netlink: 'syz.3.470': attribute type 5 has an invalid length. [ 204.263093][ T7749] netlink: 'syz.3.470': attribute type 1 has an invalid length. [ 204.279010][ T7749] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.470'. [ 205.002117][ T7758] netlink: 'syz.0.472': attribute type 2 has an invalid length. [ 205.086570][ T7761] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 205.117345][ T7761] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.474'. [ 205.153234][ T7761] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 207.067276][ T7795] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.481'. [ 208.785288][ T7823] netlink: 'syz.1.489': attribute type 21 has an invalid length. [ 208.805978][ T7826] netlink: 'syz.3.492': attribute type 3 has an invalid length. [ 208.822694][ T7823] netlink: 132 bytes leftover after parsing attributes in process `syz.1.489'. [ 208.930049][ T7826] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.492'. [ 209.212358][ T7832] netlink: 'syz.2.494': attribute type 29 has an invalid length. [ 209.264516][ T7832] netlink: 'syz.2.494': attribute type 29 has an invalid length. [ 209.297587][ T7831] netlink: 'syz.2.494': attribute type 33 has an invalid length. [ 209.312115][ T7831] netlink: 152 bytes leftover after parsing attributes in process `syz.2.494'. [ 209.637018][ T7833] syzkaller0: entered promiscuous mode [ 209.646540][ T7833] syzkaller0: entered allmulticast mode [ 209.769496][ T7846] netlink: 'syz.1.497': attribute type 21 has an invalid length. [ 209.900830][ T7848] syz.0.498: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 209.924970][ T7848] CPU: 1 PID: 7848 Comm: syz.0.498 Not tainted syzkaller #0 [ 209.932505][ T7848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.942637][ T7848] Call Trace: [ 209.945970][ T7848] [ 209.948953][ T7848] dump_stack_lvl+0x18c/0x250 [ 209.953722][ T7848] ? show_regs_print_info+0x20/0x20 [ 209.958994][ T7848] ? load_image+0x420/0x420 [ 209.963569][ T7848] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 209.970202][ T7848] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 209.976805][ T7848] warn_alloc+0x246/0x340 [ 209.981209][ T7848] ? stack_trace_save+0xaa/0x100 [ 209.986242][ T7848] ? zone_watermark_ok_safe+0x230/0x230 [ 209.991863][ T7848] ? kasan_set_track+0x5f/0x70 [ 209.996695][ T7848] ? kasan_set_track+0x4e/0x70 [ 210.001524][ T7848] ? __kasan_kmalloc+0x8f/0xa0 [ 210.006346][ T7848] ? xsk_init_queue+0xad/0x100 [ 210.011183][ T7848] ? xsk_setsockopt+0x4c9/0x750 [ 210.016133][ T7848] ? do_sock_setsockopt+0x175/0x1a0 [ 210.021400][ T7848] ? __x64_sys_setsockopt+0x182/0x200 [ 210.026837][ T7848] __vmalloc_node_range+0x129/0x1320 [ 210.032225][ T7848] ? free_vm_area+0x50/0x50 [ 210.036829][ T7848] vmalloc_user+0x74/0x80 [ 210.041234][ T7848] ? xskq_create+0xbf/0x170 [ 210.045787][ T7848] xskq_create+0xbf/0x170 [ 210.050179][ T7848] xsk_init_queue+0xad/0x100 [ 210.054848][ T7848] xsk_setsockopt+0x4c9/0x750 [ 210.059593][ T7848] ? xsk_poll+0x670/0x670 [ 210.064000][ T7848] ? __fget_files+0x28/0x460 [ 210.068665][ T7848] ? aa_sock_opt_perm+0x74/0x100 [ 210.073665][ T7848] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 210.079282][ T7848] ? security_socket_setsockopt+0x7e/0xa0 [ 210.085048][ T7848] ? xsk_poll+0x670/0x670 [ 210.089421][ T7848] do_sock_setsockopt+0x175/0x1a0 [ 210.094487][ T7848] ? __fdget+0x180/0x210 [ 210.098761][ T7848] __x64_sys_setsockopt+0x182/0x200 [ 210.104017][ T7848] do_syscall_64+0x55/0xb0 [ 210.108484][ T7848] ? clear_bhb_loop+0x40/0x90 [ 210.113211][ T7848] ? clear_bhb_loop+0x40/0x90 [ 210.117924][ T7848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.123849][ T7848] RIP: 0033:0x7f663519e0d9 [ 210.128300][ T7848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.147958][ T7848] RSP: 002b:00007f66360f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.156446][ T7848] RAX: ffffffffffffffda RBX: 00007f6635425fa0 RCX: 00007f663519e0d9 [ 210.164451][ T7848] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 210.172446][ T7848] RBP: 00007f6635235024 R08: 0000000000000004 R09: 0000000000000000 [ 210.180443][ T7848] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 210.188447][ T7848] R13: 00007f6635426038 R14: 00007f6635425fa0 R15: 00007fff739a0098 [ 210.196487][ T7848] [ 210.225075][ T7848] Mem-Info: [ 210.232476][ T7848] active_anon:9192 inactive_anon:0 isolated_anon:0 [ 210.232476][ T7848] active_file:16777 inactive_file:39997 isolated_file:0 [ 210.232476][ T7848] unevictable:768 dirty:165 writeback:0 [ 210.232476][ T7848] slab_reclaimable:10549 slab_unreclaimable:93423 [ 210.232476][ T7848] mapped:25185 shmem:5134 pagetables:587 [ 210.232476][ T7848] sec_pagetables:0 bounce:0 [ 210.232476][ T7848] kernel_misc_reclaimable:0 [ 210.232476][ T7848] free:1338658 free_pcp:14340 free_cma:0 [ 210.285637][ T7848] Node 0 active_anon:35068kB inactive_anon:0kB active_file:67108kB inactive_file:159788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100740kB dirty:660kB writeback:0kB shmem:17300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11340kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 210.334618][ T7848] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 210.371956][ T7848] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.404313][ T7848] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 210.410645][ T7848] Node 0 DMA32 free:1447384kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:31428kB inactive_anon:0kB active_file:67108kB inactive_file:158964kB unevictable:1536kB writepending:660kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:39332kB local_pcp:21568kB free_cma:0kB [ 210.450873][ T7848] lowmem_reserve[]: 0 0 0 0 0 [ 210.465871][ T7848] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 210.509244][ T7848] lowmem_reserve[]: 0 0 0 0 0 [ 210.514099][ T7848] Node 1 Normal free:3891888kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23520kB local_pcp:11072kB free_cma:0kB [ 210.551817][ T7848] lowmem_reserve[]: 0 0 0 0 0 [ 210.589201][ T7848] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.606589][ T7848] Node 0 DMA32: 1829*4kB (UME) 1480*8kB (UME) 894*16kB (UME) 687*32kB (UME) 927*64kB (UME) 553*128kB (UME) 165*256kB (UME) 54*512kB (UME) 28*1024kB (UME) 17*2048kB (UM) 281*4096kB (UM) = 1469908kB [ 210.633115][ T7848] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 210.671919][ T7848] Node 1 Normal: 250*4kB (UME) 51*8kB (UME) 37*16kB (UME) 39*32kB (UME) 18*64kB (UE) 7*128kB (UM) 0*256kB 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3891888kB [ 210.704521][ T7848] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.758100][ T7848] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.834678][ T7848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 210.881771][ T7848] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 210.913064][ T7848] 58170 total pagecache pages [ 210.917866][ T7848] 0 pages in swap cache [ 210.955943][ T7848] Free swap = 124996kB [ 210.967477][ T7848] Total swap = 124996kB [ 211.022676][ T7848] 2097051 pages RAM [ 211.056645][ T7848] 0 pages HighMem/MovableOnly [ 211.075403][ T7848] 416958 pages reserved [ 211.091491][ T7848] 0 pages cma reserved [ 213.619145][ T7860] netlink: 'syz.1.501': attribute type 19 has an invalid length. [ 213.854984][ T7871] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.505'. [ 213.881406][ T7871] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 213.927747][ T7871] CPU: 0 PID: 7871 Comm: syz.3.505 Not tainted syzkaller #0 [ 213.935183][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.945324][ T7871] Call Trace: [ 213.948678][ T7871] [ 213.951688][ T7871] dump_stack_lvl+0x18c/0x250 [ 213.956497][ T7871] ? show_regs_print_info+0x20/0x20 [ 213.961773][ T7871] ? load_image+0x420/0x420 [ 213.966398][ T7871] sysfs_warn_dup+0x8e/0xa0 [ 213.970991][ T7871] sysfs_do_create_link_sd+0xc0/0x110 [ 213.976446][ T7871] device_add_class_symlinks+0x1cf/0x240 [ 213.982192][ T7871] device_add+0x4f9/0xc40 [ 213.986640][ T7871] wiphy_register+0x1d99/0x2ac0 [ 213.991626][ T7871] ? cfg80211_event_work+0x40/0x40 [ 213.996796][ T7871] ? minstrel_ht_alloc+0x88a/0x990 [ 214.002049][ T7871] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 214.008214][ T7871] ieee80211_register_hw+0x2dd8/0x3b30 [ 214.013781][ T7871] ? ieee80211_register_hw+0xfb1/0x3b30 [ 214.019453][ T7871] ? ieee80211_tasklet_handler+0x20/0x20 [ 214.025153][ T7871] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 214.031135][ T7871] ? __debug_object_init+0xec/0x450 [ 214.036419][ T7871] ? __asan_memset+0x22/0x40 [ 214.041124][ T7871] ? __hrtimer_init+0x189/0x270 [ 214.046069][ T7871] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 214.051945][ T7871] ? mac80211_hwsim_free+0x220/0x220 [ 214.057308][ T7871] ? rcu_is_watching+0x15/0xb0 [ 214.062172][ T7871] ? kstrndup+0xbd/0x140 [ 214.066526][ T7871] hwsim_new_radio_nl+0xdad/0x1a70 [ 214.071762][ T7871] ? __nla_validate+0x50/0x50 [ 214.076573][ T7871] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 214.083014][ T7871] ? __nla_parse+0x40/0x50 [ 214.087553][ T7871] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 214.094028][ T7871] genl_family_rcv_msg_doit+0x21a/0x310 [ 214.099677][ T7871] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 214.105697][ T7871] ? bpf_lsm_capable+0x9/0x10 [ 214.110483][ T7871] ? security_capable+0x89/0xb0 [ 214.115430][ T7871] genl_rcv_msg+0x611/0x7a0 [ 214.120035][ T7871] ? genl_bind+0x360/0x360 [ 214.124541][ T7871] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 214.130961][ T7871] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 214.137666][ T7871] netlink_rcv_skb+0x235/0x4c0 [ 214.142545][ T7871] ? genl_bind+0x360/0x360 [ 214.147069][ T7871] ? netlink_ack+0x1160/0x1160 [ 214.151965][ T7871] ? __lock_acquire+0x7d80/0x7d80 [ 214.157123][ T7871] ? down_read+0x1ac/0x2e0 [ 214.161806][ T7871] genl_rcv+0x28/0x40 [ 214.165876][ T7871] netlink_unicast+0x7b1/0x930 [ 214.170763][ T7871] netlink_sendmsg+0x8d0/0xbf0 [ 214.175636][ T7871] ? netlink_getsockopt+0x590/0x590 [ 214.180922][ T7871] ? apparmor_socket_sendmsg+0x8e/0x330 [ 214.186547][ T7871] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 214.191971][ T7871] ? security_socket_sendmsg+0x80/0xa0 [ 214.197496][ T7871] ? netlink_getsockopt+0x590/0x590 [ 214.202759][ T7871] ____sys_sendmsg+0x61b/0x980 [ 214.207646][ T7871] ? __asan_memset+0x22/0x40 [ 214.212322][ T7871] ? __sys_sendmsg_sock+0x30/0x30 [ 214.217436][ T7871] ? __import_iovec+0x5f2/0x850 [ 214.222390][ T7871] ? import_iovec+0x73/0xa0 [ 214.226970][ T7871] ___sys_sendmsg+0x2a6/0x360 [ 214.231726][ T7871] ? __sys_sendmsg+0x2b0/0x2b0 [ 214.236678][ T7871] __se_sys_sendmsg+0x1d0/0x2c0 [ 214.241619][ T7871] ? __x64_sys_sendmsg+0x80/0x80 [ 214.246686][ T7871] ? lockdep_hardirqs_on+0x98/0x150 [ 214.251989][ T7871] do_syscall_64+0x55/0xb0 [ 214.256486][ T7871] ? clear_bhb_loop+0x40/0x90 [ 214.261240][ T7871] ? clear_bhb_loop+0x40/0x90 [ 214.265990][ T7871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 214.271978][ T7871] RIP: 0033:0x7fa2ed39e0d9 [ 214.276471][ T7871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.296158][ T7871] RSP: 002b:00007fa2ee225028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.304653][ T7871] RAX: ffffffffffffffda RBX: 00007fa2ed625fa0 RCX: 00007fa2ed39e0d9 [ 214.312683][ T7871] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 214.320715][ T7871] RBP: 00007fa2ed435024 R08: 0000000000000000 R09: 0000000000000000 [ 214.328750][ T7871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.336782][ T7871] R13: 00007fa2ed626038 R14: 00007fa2ed625fa0 R15: 00007ffe61fb6768 [ 214.344872][ T7871] [ 215.289262][ T7899] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.513'. [ 215.456738][ C0] bridge0: port 3(hsr0) entered learning state [ 215.620249][ T7903] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.515'. [ 216.008926][ T7900] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 216.024339][ T7900] netlink: 156 bytes leftover after parsing attributes in process `syz.2.515'. [ 216.442306][ T7924] netlink: 6 bytes leftover after parsing attributes in process `syz.0.520'. [ 216.528505][ T7930] netlink: 'syz.1.523': attribute type 10 has an invalid length. [ 216.546656][ T7930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.523'. [ 216.568056][ T7930] team0: entered promiscuous mode [ 216.573304][ T7930] team_slave_0: entered promiscuous mode [ 216.588385][ T7930] team_slave_1: entered promiscuous mode [ 216.616323][ T7930] team0: entered allmulticast mode [ 216.643550][ T7930] team_slave_0: entered allmulticast mode [ 216.672595][ T7930] team_slave_1: entered allmulticast mode [ 216.701554][ T7930] bridge0: port 3(team0) entered blocking state [ 216.719866][ T7930] bridge0: port 3(team0) entered disabled state [ 216.757763][ T7930] bridge0: port 3(team0) entered blocking state [ 216.764277][ T7930] bridge0: port 3(team0) entered forwarding state [ 218.308150][ T7963] netlink: 'syz.0.532': attribute type 21 has an invalid length. [ 218.316168][ T7963] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.532'. [ 219.449190][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 219.452634][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 219.455759][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 219.643844][ T7964] netlink: 'syz.2.531': attribute type 21 has an invalid length. [ 219.661968][ T7964] netlink: 'syz.2.531': attribute type 1 has an invalid length. [ 219.705778][ T7964] netlink: 144 bytes leftover after parsing attributes in process `syz.2.531'. [ 220.064361][ T7985] syzkaller0: entered promiscuous mode [ 220.074385][ T7985] syzkaller0: entered allmulticast mode [ 220.216719][ T7987] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.537'. [ 220.460497][ T7987] netlink: 'syz.0.537': attribute type 6 has an invalid length. [ 222.986736][ T8005] netlink: 188 bytes leftover after parsing attributes in process `syz.2.543'. [ 223.011306][ T8006] netlink: 'syz.2.543': attribute type 33 has an invalid length. [ 223.019479][ T8006] netlink: 152 bytes leftover after parsing attributes in process `syz.2.543'. [ 223.208478][ T8013] netlink: 'syz.2.545': attribute type 2 has an invalid length. [ 223.216251][ T8013] netlink: 'syz.2.545': attribute type 8 has an invalid length. [ 223.224323][ T8013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.545'. [ 224.500052][ T8019] syz.2.546 (8019) used obsolete PPPIOCDETACH ioctl [ 225.967764][ T8068] netlink: 'syz.2.562': attribute type 46 has an invalid length. [ 225.996250][ T8068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.562'. [ 226.377761][ T8070] netlink: 132 bytes leftover after parsing attributes in process `syz.1.563'. [ 226.419589][ T8078] netlink: 'syz.3.564': attribute type 2 has an invalid length. [ 226.427367][ T8078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.564'. [ 226.918203][ T8093] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.566'. [ 227.309062][ T8102] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.570'. [ 228.116550][ T8119] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.576'. [ 228.223170][ T8125] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.578'. [ 229.712362][ T8172] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 231.032690][ T8193] netlink: 'syz.3.595': attribute type 9 has an invalid length. [ 231.045564][ T8193] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.595'. [ 231.612559][ T8213] netlink: 'syz.1.600': attribute type 28 has an invalid length. [ 231.685234][ T8213] netlink: 'syz.1.600': attribute type 29 has an invalid length. [ 231.718278][ T8213] netlink: 132 bytes leftover after parsing attributes in process `syz.1.600'. [ 231.944253][ T8222] bridge0: port 4(ip6gretap0) entered disabled state [ 231.949718][ T8217] netlink: 'syz.3.595': attribute type 9 has an invalid length. [ 231.952556][ T8222] bridge0: port 3(hsr0) entered disabled state [ 231.965697][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.974416][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.010525][ T8217] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.595'. [ 232.059993][ T8222] bridge0: entered allmulticast mode [ 232.194053][ T8230] ip6gretap0: left allmulticast mode [ 232.228290][ T8230] ip6gretap0: left promiscuous mode [ 232.258809][ T8230] bridge0: port 4(ip6gretap0) entered disabled state [ 232.389474][ T8230] hsr0: left allmulticast mode [ 232.394349][ T8230] hsr_slave_0: left allmulticast mode [ 232.424877][ T8230] hsr_slave_1: left allmulticast mode [ 232.451376][ T8230] bridge0: port 3(hsr0) entered disabled state [ 232.467296][ T8230] bridge_slave_1: left allmulticast mode [ 232.475960][ T8230] bridge_slave_1: left promiscuous mode [ 232.492871][ T8230] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.507028][ T8230] bridge_slave_0: left allmulticast mode [ 232.544289][ T8230] bridge_slave_0: left promiscuous mode [ 232.552144][ T8230] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.081279][ T8251] netlink: 'syz.3.608': attribute type 6 has an invalid length. [ 233.105631][ T8251] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.608'. [ 233.404836][ T8258] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.611'. [ 233.425470][ T8258] bridge_slave_1: entered promiscuous mode [ 233.624104][ T8267] netlink: 'syz.2.615': attribute type 7 has an invalid length. [ 233.678391][ T8267] netlink: 'syz.2.615': attribute type 6 has an invalid length. [ 233.734057][ T8270] netlink: 'syz.3.614': attribute type 10 has an invalid length. [ 233.765552][ T8270] netlink: 40 bytes leftover after parsing attributes in process `syz.3.614'. [ 233.804061][ T8270] batman_adv: batadv0: Adding interface: virt_wifi0 [ 233.812089][ T8270] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.876988][ T8270] batman_adv: batadv0: Interface activated: virt_wifi0 [ 234.368881][ T8291] netlink: 'syz.2.622': attribute type 3 has an invalid length. [ 234.376632][ T8291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.622'. [ 234.536330][ T8295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.623'. [ 234.564203][ T8295] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.623'. [ 235.079633][ T8310] netlink: 14 bytes leftover after parsing attributes in process `syz.2.627'. [ 235.256697][ T8310] hsr_slave_0: left promiscuous mode [ 235.881372][ T8310] hsr_slave_1: left promiscuous mode [ 236.376369][ T8327] validate_nla: 2 callbacks suppressed [ 236.376416][ T8327] netlink: 'syz.3.631': attribute type 17 has an invalid length. [ 236.401990][ T8327] netlink: 'syz.3.631': attribute type 16 has an invalid length. [ 236.410043][ T8327] netlink: 152 bytes leftover after parsing attributes in process `syz.3.631'. [ 236.424936][ T8324] netlink: 168 bytes leftover after parsing attributes in process `syz.1.632'. [ 237.030264][ T8347] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.639'. [ 237.111124][ T8349] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 237.155528][ T8349] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 237.188589][ T8350] netlink: 'syz.1.640': attribute type 29 has an invalid length. [ 241.191360][ T8376] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.648'. [ 241.472182][ T8393] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.654'. [ 241.484504][ T8394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.652'. [ 242.006114][ T8416] netlink: 'syz.1.657': attribute type 23 has an invalid length. [ 242.519270][ T8435] netlink: 'syz.1.663': attribute type 12 has an invalid length. [ 242.561213][ T8435] netlink: 'syz.1.663': attribute type 11 has an invalid length. [ 242.588083][ T8435] netlink: 188816 bytes leftover after parsing attributes in process `syz.1.663'. [ 242.751121][ T8443] netlink: 132 bytes leftover after parsing attributes in process `syz.0.665'. [ 242.963655][ T8437] -1: renamed from syzkaller0 [ 243.452272][ T8453] netlink: 'syz.1.667': attribute type 3 has an invalid length. [ 243.470808][ T8453] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.667'. [ 243.782302][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.671'. [ 244.431291][ T8481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.454163][ T8523] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 245.472898][ T8523] netlink: 'syz.3.693': attribute type 2 has an invalid length. [ 245.492360][ T8523] netlink: 'syz.3.693': attribute type 2 has an invalid length. [ 245.509652][ T8523] netlink: 'syz.3.693': attribute type 3 has an invalid length. [ 245.535224][ T8523] netlink: 'syz.3.693': attribute type 4 has an invalid length. [ 245.561338][ T8523] netlink: 'syz.3.693': attribute type 5 has an invalid length. [ 245.583601][ T8523] netlink: 'syz.3.693': attribute type 6 has an invalid length. [ 245.622053][ T8523] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.693'. [ 245.656363][ T8530] netlink: 132 bytes leftover after parsing attributes in process `syz.1.695'. [ 246.645312][ T8557] netlink: 64 bytes leftover after parsing attributes in process `syz.1.702'. [ 246.755383][ T8558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.703'. [ 247.252083][ T8562] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.702'. [ 247.263917][ T8576] validate_nla: 7 callbacks suppressed [ 247.263935][ T8576] netlink: 'syz.0.715': attribute type 17 has an invalid length. [ 247.308339][ T8576] netlink: 148 bytes leftover after parsing attributes in process `syz.0.715'. [ 247.352640][ T8577] netlink: 64 bytes leftover after parsing attributes in process `syz.0.715'. [ 247.384743][ T8562] netlink: zone id is out of range [ 247.427675][ T8562] netlink: zone id is out of range [ 247.436532][ T8581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.715'. [ 247.502388][ T8562] netlink: zone id is out of range [ 247.579126][ T8562] netlink: zone id is out of range [ 247.585623][ T8562] netlink: del zone limit has 8 unknown bytes [ 247.964804][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.709'. [ 248.096521][ T8588] syzkaller0: entered promiscuous mode [ 248.102653][ T8588] syzkaller0: entered allmulticast mode [ 249.906604][ T8604] batadv0: entered promiscuous mode [ 250.012865][ T8606] team0: Port device team_slave_0 removed [ 251.090517][ T8633] syz.2.720[8633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.091179][ T8633] syz.2.720[8633] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.461619][ T8645] netlink: 'syz.0.723': attribute type 19 has an invalid length. [ 251.489502][ T8642] netlink: 158144 bytes leftover after parsing attributes in process `syz.1.721'. [ 251.765032][ T8654] netlink: 'syz.2.726': attribute type 10 has an invalid length. [ 251.809067][ T8654] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.726'. [ 251.845126][ T8657] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.728'. [ 251.858748][ T8650] veth0_vlan: entered allmulticast mode [ 251.861705][ T8658] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.728'. [ 251.927598][ T8658] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.728'. [ 252.696104][ T8656] syzkaller0: entered promiscuous mode [ 252.714690][ T8656] syzkaller0: entered allmulticast mode [ 254.662235][ T8673] syzkaller0: entered promiscuous mode [ 254.667815][ T8673] syzkaller0: entered allmulticast mode [ 256.572482][ T8685] netlink: 'syz.2.731': attribute type 33 has an invalid length. [ 256.580504][ T8685] netlink: 152 bytes leftover after parsing attributes in process `syz.2.731'. [ 256.590461][ T8687] netlink: 'syz.3.733': attribute type 1 has an invalid length. [ 256.602939][ T8687] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.733'. [ 257.329823][ T8716] netlink: 'syz.3.743': attribute type 5 has an invalid length. [ 257.353140][ T8716] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.743'. [ 258.258422][ T8734] sit0: entered allmulticast mode [ 258.333592][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.341411][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.374603][ T8739] sit0: entered promiscuous mode [ 259.379543][ T8759] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.756'. [ 259.524203][ T8764] netlink: 'syz.1.759': attribute type 1 has an invalid length. [ 259.568041][ T8764] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.759'. [ 261.318418][ T8791] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.768'. [ 261.370615][ T8791] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.768'. [ 261.443293][ T8803] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.454743][ T8803] IPv6: NLM_F_CREATE should be set when creating new route [ 261.463325][ T8803] IPv6: NLM_F_CREATE should be set when creating new route [ 261.476216][ T8803] IPv6: NLM_F_CREATE should be set when creating new route [ 263.682715][ T8846] netlink: 'syz.1.784': attribute type 9 has an invalid length. [ 263.694380][ T8846] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.784'. [ 264.338621][ T5784] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 264.444489][ T8856] netlink: 'syz.2.785': attribute type 5 has an invalid length. [ 264.463225][ T8840] netlink: 'syz.0.781': attribute type 9 has an invalid length. [ 264.503339][ T8840] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.781'. [ 265.112716][ T8874] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.790'. [ 265.166461][ T8876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.791'. [ 266.887409][ T8876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.791'. [ 267.198519][ T8899] netlink: 'syz.1.796': attribute type 10 has an invalid length. [ 268.201270][ T8916] netlink: 'syz.1.800': attribute type 5 has an invalid length. [ 268.253398][ T5794] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 268.827525][ T8930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.806'. [ 269.041900][ T8927] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 269.078283][ T8927] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.804'. [ 269.116525][ T8927] netlink: 9 bytes leftover after parsing attributes in process `syz.0.804'. [ 269.601115][ T8955] netlink: 'syz.0.811': attribute type 21 has an invalid length. [ 269.618371][ T8955] netlink: 152 bytes leftover after parsing attributes in process `syz.0.811'. [ 270.207433][ T8974] netlink: 'syz.0.814': attribute type 5 has an invalid length. [ 270.353863][ T5794] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 271.315175][ T8989] netlink: 'syz.1.820': attribute type 33 has an invalid length. [ 271.385297][ T8991] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.821'. [ 271.396807][ T8991] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.821'. [ 271.406206][ T8991] tipc: Started in network mode [ 271.411830][ T8991] tipc: Node identity b, cluster identity 57 [ 271.418255][ T8991] tipc: Node number set to 11 [ 271.436881][ T8994] bridge0: entered promiscuous mode [ 271.452753][ T8994] bridge0: entered allmulticast mode [ 271.467334][ T8989] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.820'. [ 272.266060][ T9009] netlink: 'syz.3.827': attribute type 21 has an invalid length. [ 272.288119][ T9009] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.827'. [ 273.081954][ T9035] netlink: 14 bytes leftover after parsing attributes in process `syz.3.835'. [ 273.449418][ T9046] netlink: 'syz.0.840': attribute type 10 has an invalid length. [ 273.457719][ T9046] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.840'. [ 274.124884][ T9064] netlink: 'syz.2.844': attribute type 21 has an invalid length. [ 274.157844][ T9064] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 274.439225][ T9074] netlink: 'syz.3.846': attribute type 6 has an invalid length. [ 274.447435][ T9074] netlink: 164 bytes leftover after parsing attributes in process `syz.3.846'. [ 274.686116][ T6485] tipc: Subscription rejected, illegal request [ 275.051272][ T9088] netlink: 'syz.1.851': attribute type 21 has an invalid length. [ 275.087778][ T9088] netlink: 'syz.1.851': attribute type 6 has an invalid length. [ 275.113166][ T9088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.851'. [ 275.665501][ T9091] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.852'. [ 275.965821][ T9100] netlink: 156 bytes leftover after parsing attributes in process `syz.2.855'. [ 276.015662][ T9098] netlink: 'syz.2.855': attribute type 28 has an invalid length. [ 276.056862][ T9100] netlink: 'syz.2.855': attribute type 28 has an invalid length. [ 276.101111][ T9100] netlink: 'syz.2.855': attribute type 29 has an invalid length. [ 276.124530][ T9100] netlink: 132 bytes leftover after parsing attributes in process `syz.2.855'. [ 276.127085][ T9098] netlink: 'syz.2.855': attribute type 29 has an invalid length. [ 276.168896][ T9098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.855'. [ 277.546502][ T9129] netlink: 'syz.2.863': attribute type 10 has an invalid length. [ 277.556564][ T9129] veth0_vlan: entered allmulticast mode [ 277.594810][ T9135] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.865'. [ 277.614241][ T9135] openvswitch: netlink: Tunnel attr 2 has unexpected len 8 expected 4 [ 277.681377][ T9129] veth0_vlan: left promiscuous mode [ 277.735383][ T9129] veth0_vlan: entered promiscuous mode [ 277.810038][ T9129] team0: Device veth0_vlan failed to register rx_handler [ 278.744335][ T9154] netlink: 399 bytes leftover after parsing attributes in process `syz.0.871'. [ 279.166631][ T9174] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.876'. [ 279.654203][ T9192] validate_nla: 3 callbacks suppressed [ 279.654226][ T9192] netlink: 'syz.1.882': attribute type 21 has an invalid length. [ 279.673638][ T9192] netlink: 152 bytes leftover after parsing attributes in process `syz.1.882'. [ 279.993360][ T9200] netlink: 'syz.3.883': attribute type 10 has an invalid length. [ 280.142052][ T9205] netlink: 'syz.1.885': attribute type 13 has an invalid length. [ 280.173300][ T9207] netlink: 209832 bytes leftover after parsing attributes in process `syz.3.886'. [ 280.253921][ T9207] netlink: 'syz.3.886': attribute type 39 has an invalid length. [ 280.281017][ T9207] macvlan0: entered promiscuous mode [ 280.299355][ T9207] macvlan0: entered allmulticast mode [ 280.384098][ T9210] netlink: 'syz.0.887': attribute type 21 has an invalid length. [ 280.406402][ T9210] netlink: 'syz.0.887': attribute type 6 has an invalid length. [ 280.415006][ T9211] netlink: 'syz.0.887': attribute type 21 has an invalid length. [ 280.429577][ T9211] netlink: 'syz.0.887': attribute type 6 has an invalid length. [ 280.443430][ T9214] netlink: 'syz.1.888': attribute type 9 has an invalid length. [ 280.468368][ T9214] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.888'. [ 280.884788][ T5784] Bluetooth: hci0: command 0x0406 tx timeout [ 281.250171][ T9234] netlink: 188 bytes leftover after parsing attributes in process `syz.1.895'. [ 281.339692][ T9235] netlink: 'syz.1.895': attribute type 33 has an invalid length. [ 281.357935][ T9235] netlink: 152 bytes leftover after parsing attributes in process `syz.1.895'. [ 281.659707][ T9239] netlink: 156 bytes leftover after parsing attributes in process `syz.2.896'. [ 281.785207][ T9239] netlink: 132 bytes leftover after parsing attributes in process `syz.2.896'. [ 282.231974][ T9245] syzkaller0: entered promiscuous mode [ 282.237714][ T9245] syzkaller0: entered allmulticast mode [ 282.253607][ T9268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.899'. [ 284.294140][ T9279] veth1_vlan: left promiscuous mode [ 284.299782][ T9279] macvlan1: entered allmulticast mode [ 284.315623][ T9279] veth1_vlan: entered promiscuous mode [ 284.322672][ T9279] veth1_vlan: entered allmulticast mode [ 284.337293][ T9279] team0: Port device macvlan1 added [ 284.358305][ T9284] : renamed from veth1 (while UP) [ 285.091228][ T9310] sctp: [Deprecated]: syz.2.915 (pid 9310) Use of int in maxseg socket option. [ 285.091228][ T9310] Use struct sctp_assoc_value instead [ 285.689731][ T9330] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.920'. [ 285.775626][ T9336] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.921'. [ 286.158474][ T9333] validate_nla: 5 callbacks suppressed [ 286.158500][ T9333] netlink: 'syz.3.921': attribute type 10 has an invalid length. [ 286.186441][ T9329] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.920'. [ 286.189480][ T9333] netlink: 55 bytes leftover after parsing attributes in process `syz.3.921'. [ 287.555119][ T9348] netlink: 'syz.1.924': attribute type 39 has an invalid length. [ 287.729164][ T9350] netlink: 132 bytes leftover after parsing attributes in process `syz.2.925'. [ 287.840841][ T9348] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.924'. [ 287.878069][ T9348] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.924'. [ 287.912932][ T9348] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.924'. [ 288.062279][ T9365] netlink: 'syz.0.930': attribute type 39 has an invalid length. [ 289.707170][ T9388] netlink: 14 bytes leftover after parsing attributes in process `syz.2.934'. [ 291.210279][ T9425] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 291.227389][ T9425] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 291.306503][ T9428] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 291.365071][ T9425] netlink: 'syz.2.947': attribute type 10 has an invalid length. [ 291.394400][ T9425] veth0_vlan: left promiscuous mode [ 291.410097][ T9425] veth0_vlan: entered promiscuous mode [ 291.451603][ T9425] team0: Device veth0_vlan failed to register rx_handler [ 291.646060][ T9423] netlink: 'syz.3.941': attribute type 10 has an invalid length. [ 291.654090][ T9423] netlink: 40 bytes leftover after parsing attributes in process `syz.3.941'. [ 291.665080][ T9423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.681531][ T9430] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 291.708236][ T9434] netlink: 830 bytes leftover after parsing attributes in process `syz.2.947'. [ 291.737574][ T9428] netlink: 'syz.2.947': attribute type 29 has an invalid length. [ 292.356544][ T9438] mac80211_hwsim hwsim5 ..c: renamed from wlan1 (while UP) [ 293.354369][ T9477] netlink: 'syz.1.959': attribute type 10 has an invalid length. [ 293.539530][ T9477] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 293.565741][ T9477] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 293.627539][ T9477] team0: Port device wlan1 added [ 294.008439][ T9493] netlink: 'syz.3.963': attribute type 17 has an invalid length. [ 294.057584][ T9493] netlink: 'syz.3.963': attribute type 16 has an invalid length. [ 294.120746][ T9493] netlink: 152 bytes leftover after parsing attributes in process `syz.3.963'. [ 294.547811][ T9508] netlink: 60 bytes leftover after parsing attributes in process `syz.3.968'. [ 295.258576][ T9528] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 295.265662][ T9528] syzkaller1: linktype set to 769 [ 295.305231][ T9529] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.972'. [ 296.242925][ T9557] validate_nla: 2 callbacks suppressed [ 296.242946][ T9557] netlink: 'syz.1.978': attribute type 28 has an invalid length. [ 296.283317][ T9557] netlink: 'syz.1.978': attribute type 4 has an invalid length. [ 296.308261][ T9557] netlink: 136 bytes leftover after parsing attributes in process `syz.1.978'. [ 296.592888][ T9555] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 296.956484][ T9555] syzkaller0: entered promiscuous mode [ 296.965469][ T9555] syzkaller0: entered allmulticast mode [ 299.823688][ T9567] netlink: 'syz.1.981': attribute type 5 has an invalid length. [ 299.833223][ T9573] netlink: 'syz.3.982': attribute type 64 has an invalid length. [ 300.218759][ T9589] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.987'. [ 300.544399][ T9585] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.985'. [ 300.862131][ T9597] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 300.975838][ T9597] team0: Port device geneve1 added [ 301.042495][ T9595] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 301.105316][ T9604] netlink: 142592 bytes leftover after parsing attributes in process `syz.1.988'. [ 301.136260][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.988'. [ 301.352037][ T9602] netlink: 'syz.3.991': attribute type 46 has an invalid length. [ 301.382909][ T9613] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 301.397444][ T9613] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.994'. [ 301.407610][ T9613] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 301.465287][ T9615] netlink: 'syz.2.993': attribute type 10 has an invalid length. [ 301.473311][ T9615] batman_adv: batadv0: Removing interface: netdevsim0 [ 301.511749][ T9615] team0: Port device netdevsim0 added [ 301.535934][ T9602] netlink: 'syz.3.991': attribute type 46 has an invalid length. [ 301.930261][ T9624] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.920873][ T9650] netlink: 'syz.3.1004': attribute type 2 has an invalid length. [ 303.164538][ T9645] syzkaller0: entered promiscuous mode [ 303.174326][ T9645] syzkaller0: entered allmulticast mode [ 303.363347][ T9660] netlink: 'syz.2.1007': attribute type 16 has an invalid length. [ 303.384952][ T9660] netlink: 'syz.2.1007': attribute type 25 has an invalid length. [ 303.409595][ T9660] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1007'. [ 305.760585][ T9670] netlink: 'syz.2.1010': attribute type 28 has an invalid length. [ 305.768708][ T9674] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1011'. [ 306.990395][ T9723] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 307.035143][ T9723] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 307.059325][ T9723] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 307.086962][ T9723] team0: Port device netdevsim0 added [ 307.099093][ T9725] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1026'. [ 307.114222][ T9725] tc_dump_action: action bad kind [ 308.266730][ T9738] netlink: 'syz.2.1031': attribute type 10 has an invalid length. [ 308.285659][ T9738] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1031'. [ 308.322223][ T9738] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 311.283265][ T9778] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1038'. [ 311.333835][ T9778] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 312.839781][ T9808] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1049'. [ 315.162961][ T9846] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1061'. [ 315.532781][ T9860] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1066'. [ 315.637564][ T9860] bond0: (slave bond_slave_0): Releasing backup interface [ 315.746257][ T9860] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 315.817689][ T9866] IPv6: Can't replace route, no match found [ 316.034232][ T9874] netlink: 'syz.1.1068': attribute type 39 has an invalid length. [ 316.075501][ T9874] veth0_macvtap: left promiscuous mode [ 316.581220][ T9896] netlink: 539 bytes leftover after parsing attributes in process `syz.3.1073'. [ 316.862360][ T9891] syzkaller0: entered promiscuous mode [ 316.871675][ T9891] syzkaller0: entered allmulticast mode [ 318.951207][ T9921] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 318.978632][ T9921] netlink: 'syz.2.1079': attribute type 3 has an invalid length. [ 318.997381][ T9927] tap0: tun_chr_ioctl cmd 2147767511 [ 319.014991][ T9921] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1079'. [ 319.074543][ T9928] netlink: 'syz.2.1079': attribute type 10 has an invalid length. [ 319.124558][ T9928] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1079'. [ 319.231056][ T9928] netlink: 'syz.2.1079': attribute type 21 has an invalid length. [ 319.264970][ T9936] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1083'. [ 319.581147][ T9952] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1086'. [ 319.763004][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.774734][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.317219][ T9981] netlink: 'syz.1.1093': attribute type 16 has an invalid length. [ 320.325645][ T9981] netlink: 'syz.1.1093': attribute type 3 has an invalid length. [ 320.344392][ T9981] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1093'. [ 320.720114][ T9994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.228965][T10012] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1101'. [ 321.833747][T10031] netlink: 'syz.0.1107': attribute type 64 has an invalid length. [ 322.525081][T10053] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1112'. [ 325.845765][T10065] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1120'. [ 325.921664][T10072] netlink: 207684 bytes leftover after parsing attributes in process `syz.1.1122'. [ 325.945305][T10072] netlink: 'syz.1.1122': attribute type 1 has an invalid length. [ 325.997320][T10072] netlink: 'syz.1.1122': attribute type 2 has an invalid length. [ 326.488808][T10091] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 326.969277][T10104] netlink: 'syz.1.1129': attribute type 29 has an invalid length. [ 327.043220][T10104] netlink: 'syz.1.1129': attribute type 29 has an invalid length. [ 327.093196][T10105] netlink: 'syz.1.1129': attribute type 29 has an invalid length. [ 327.681127][T10123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1136'. [ 327.704668][T10123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1136'. [ 327.877164][T10130] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1138'. [ 328.662424][T10139] sock: sock_timestamping_bind_phc: sock not bind to device [ 328.688802][T10139] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1142'. [ 328.735360][T10140] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1141'. [ 328.773434][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.000396][T10139] bridge_slave_0 (unregistering): left allmulticast mode [ 329.009360][T10139] bridge_slave_0 (unregistering): left promiscuous mode [ 329.018023][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.110767][T10167] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 330.138028][T10167] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 330.438102][T10178] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1151'. [ 330.466470][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 330.578958][T10179] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1151'. [ 330.602685][T10179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.650858][T10184] -1: renamed from syzkaller0 [ 332.095408][T10204] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1157'. [ 332.488953][T10210] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1160'. [ 332.511486][T10210] bridge_slave_0: entered allmulticast mode [ 333.513733][T10239] netlink: 'syz.0.1168': attribute type 21 has an invalid length. [ 333.528121][T10239] netlink: 'syz.0.1168': attribute type 6 has an invalid length. [ 333.535935][T10239] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1168'. [ 333.595306][T10239] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 333.608350][T10239] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.1168'. [ 333.843168][T10248] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 334.053644][T10254] delete_channel: no stack [ 334.533837][T10262] netlink: 'syz.0.1176': attribute type 3 has an invalid length. [ 334.548011][T10262] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1176'. [ 334.574763][T10264] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1177'. [ 336.589436][T10289] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1184'. [ 336.789921][T10291] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.797254][T10291] IPv6: NLM_F_CREATE should be set when creating new route [ 336.804675][T10291] IPv6: NLM_F_CREATE should be set when creating new route [ 336.811980][T10291] IPv6: NLM_F_CREATE should be set when creating new route [ 336.956734][T10292] netlink: 'syz.1.1185': attribute type 9 has an invalid length. [ 336.966415][T10297] netlink: 'syz.0.1188': attribute type 3 has an invalid length. [ 336.996796][T10292] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1185'. [ 337.043492][T10297] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1188'. [ 337.145530][T10296] netlink: 'syz.2.1187': attribute type 10 has an invalid length. [ 337.164562][T10296] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1187'. [ 338.262805][T10310] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1191'. [ 338.283928][T10299] netlink: 'syz.1.1185': attribute type 9 has an invalid length. [ 338.332850][T10299] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1185'. [ 338.501859][T10321] netlink: 'syz.0.1194': attribute type 2 has an invalid length. [ 338.520047][T10321] netlink: 'syz.0.1194': attribute type 8 has an invalid length. [ 338.540588][T10321] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1194'. [ 338.560802][T10322] netlink: 'syz.2.1193': attribute type 5 has an invalid length. [ 338.780752][T10331] netlink: 'syz.2.1196': attribute type 4 has an invalid length. [ 338.817090][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1196'. [ 339.092537][T10334] syzkaller0: entered promiscuous mode [ 339.104327][T10334] syzkaller0: entered allmulticast mode [ 339.109967][T10331] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1196'. [ 339.126981][T10333] netlink: 279 bytes leftover after parsing attributes in process `syz.0.1197'. [ 341.115754][T10341] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1197'. [ 341.131702][T10331] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 341.347574][T10354] netlink: 'syz.1.1201': attribute type 3 has an invalid length. [ 341.366609][T10354] netlink: 'syz.1.1201': attribute type 16 has an invalid length. [ 341.376742][T10354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1201'. [ 342.002442][T10367] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.072670][T10367] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1206'. [ 342.315680][T10375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1210'. [ 342.336401][T10375] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.1210'. [ 342.375199][T10375] netlink: 'syz.0.1210': attribute type 9 has an invalid length. [ 342.399855][T10375] netlink: 196412 bytes leftover after parsing attributes in process `syz.0.1210'. [ 342.491785][T10372] netlink: 'syz.2.1208': attribute type 9 has an invalid length. [ 343.012392][T10381] netlink: 'syz.0.1210': attribute type 9 has an invalid length. [ 343.134496][T10390] netlink: 'syz.1.1214': attribute type 9 has an invalid length. [ 343.309165][T10394] netlink: 'syz.3.1215': attribute type 6 has an invalid length. [ 344.195858][T10409] netlink: 'syz.0.1221': attribute type 1 has an invalid length. [ 346.008256][T10437] netlink: 'syz.1.1227': attribute type 10 has an invalid length. [ 346.313486][T10437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.434628][T10437] batadv0: entered promiscuous mode [ 346.462127][T10437] batadv0: entered allmulticast mode [ 346.495863][T10437] team0: Port device batadv0 added [ 346.528656][ T6485] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 346.538424][ T6485] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 349.082015][T10464] team_slave_0: left promiscuous mode [ 349.235186][T10464] team_slave_0: left allmulticast mode [ 349.376839][T10464] team0: Port device team_slave_0 removed [ 349.529513][T10469] __nla_validate_parse: 10 callbacks suppressed [ 349.529562][T10469] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1236'. [ 350.518460][T10486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.896141][T10532] netlink: 'syz.0.1253': attribute type 9 has an invalid length. [ 351.958177][T10532] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1253'. [ 352.645703][T10530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.653155][T10530] IPv6: NLM_F_CREATE should be set when creating new route [ 352.660794][T10530] IPv6: NLM_F_CREATE should be set when creating new route [ 352.668204][T10530] IPv6: NLM_F_CREATE should be set when creating new route [ 352.991369][T10533] netlink: 'syz.0.1253': attribute type 9 has an invalid length. [ 353.012443][T10533] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1253'. [ 353.298234][T10540] netlink: 'syz.2.1255': attribute type 1 has an invalid length. [ 353.987190][T10547] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1256'. [ 355.161971][T10558] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1260'. [ 355.491494][T10567] netlink: 'syz.2.1263': attribute type 9 has an invalid length. [ 355.510801][T10567] netlink: 201636 bytes leftover after parsing attributes in process `syz.2.1263'. [ 355.705581][T10576] : port 1(hsr_slave_0) entered blocking state [ 355.770329][T10576] : port 1(hsr_slave_0) entered disabled state [ 355.821302][T10576] hsr_slave_0: entered allmulticast mode [ 355.848479][T10576] hsr_slave_0: left allmulticast mode [ 356.009132][T10571] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1264'. [ 357.055040][T10597] tap0: tun_chr_ioctl cmd 35108 [ 357.097071][T10598] tap0: tun_chr_ioctl cmd 2147767506 [ 357.504727][T10612] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1276'. [ 357.531454][T10612] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 357.559583][T10612] CPU: 0 PID: 10612 Comm: syz.2.1276 Not tainted syzkaller #0 [ 357.567174][T10612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.577292][T10612] Call Trace: [ 357.580622][T10612] [ 357.583587][T10612] dump_stack_lvl+0x18c/0x250 [ 357.588330][T10612] ? show_regs_print_info+0x20/0x20 [ 357.593579][T10612] ? load_image+0x420/0x420 [ 357.598142][T10612] sysfs_warn_dup+0x8e/0xa0 [ 357.602694][T10612] sysfs_do_create_link_sd+0xc0/0x110 [ 357.608119][T10612] device_add_class_symlinks+0x1cf/0x240 [ 357.613794][T10612] device_add+0x4f9/0xc40 [ 357.618152][T10612] wiphy_register+0x1d99/0x2ac0 [ 357.623058][T10612] ? cfg80211_event_work+0x40/0x40 [ 357.628220][T10612] ? minstrel_ht_alloc+0x88a/0x990 [ 357.633469][T10612] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 357.639579][T10612] ieee80211_register_hw+0x2dd8/0x3b30 [ 357.645098][T10612] ? ieee80211_register_hw+0xfb1/0x3b30 [ 357.650667][T10612] ? ieee80211_tasklet_handler+0x20/0x20 [ 357.656325][T10612] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 357.662255][T10612] ? __debug_object_init+0xec/0x450 [ 357.667491][T10612] ? __asan_memset+0x22/0x40 [ 357.672114][T10612] ? __hrtimer_init+0x189/0x270 [ 357.677016][T10612] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 357.682810][T10612] ? mac80211_hwsim_free+0x220/0x220 [ 357.688148][T10612] ? rcu_is_watching+0x15/0xb0 [ 357.692955][T10612] ? kstrndup+0xbd/0x140 [ 357.697265][T10612] hwsim_new_radio_nl+0xdad/0x1a70 [ 357.702426][T10612] ? __nla_validate+0x50/0x50 [ 357.707157][T10612] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 357.713528][T10612] ? __nla_parse+0x40/0x50 [ 357.718009][T10612] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 357.724396][T10612] genl_family_rcv_msg_doit+0x21a/0x310 [ 357.729984][T10612] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 357.735917][T10612] ? bpf_lsm_capable+0x9/0x10 [ 357.740648][T10612] ? security_capable+0x89/0xb0 [ 357.745532][T10612] genl_rcv_msg+0x611/0x7a0 [ 357.750087][T10612] ? genl_bind+0x360/0x360 [ 357.754545][T10612] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 357.760933][T10612] ? ref_tracker_free+0x686/0x830 [ 357.765994][T10612] ? __kasan_kmalloc_large+0x8b/0xa0 [ 357.771498][T10612] netlink_rcv_skb+0x235/0x4c0 [ 357.776294][T10612] ? genl_bind+0x360/0x360 [ 357.780747][T10612] ? netlink_ack+0x1160/0x1160 [ 357.785556][T10612] ? __lock_acquire+0x7d80/0x7d80 [ 357.790625][T10612] ? down_read+0x1ac/0x2e0 [ 357.795076][T10612] genl_rcv+0x28/0x40 [ 357.799092][T10612] netlink_unicast+0x7b1/0x930 [ 357.803914][T10612] netlink_sendmsg+0x8d0/0xbf0 [ 357.808717][T10612] ? netlink_getsockopt+0x590/0x590 [ 357.813971][T10612] ? apparmor_socket_sendmsg+0x8e/0x330 [ 357.819557][T10612] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 357.824884][T10612] ? security_socket_sendmsg+0x80/0xa0 [ 357.830373][T10612] ? netlink_getsockopt+0x590/0x590 [ 357.835611][T10612] ____sys_sendmsg+0x61b/0x980 [ 357.840444][T10612] ? __asan_memset+0x22/0x40 [ 357.845074][T10612] ? __sys_sendmsg_sock+0x30/0x30 [ 357.850120][T10612] ? __import_iovec+0x5f2/0x850 [ 357.855016][T10612] ? import_iovec+0x73/0xa0 [ 357.859558][T10612] ___sys_sendmsg+0x2a6/0x360 [ 357.864275][T10612] ? __sys_sendmsg+0x2b0/0x2b0 [ 357.869121][T10612] __se_sys_sendmsg+0x1d0/0x2c0 [ 357.874034][T10612] ? __x64_sys_sendmsg+0x80/0x80 [ 357.879022][T10612] ? lockdep_hardirqs_on+0x98/0x150 [ 357.884258][T10612] do_syscall_64+0x55/0xb0 [ 357.888705][T10612] ? clear_bhb_loop+0x40/0x90 [ 357.893415][T10612] ? clear_bhb_loop+0x40/0x90 [ 357.898124][T10612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.904043][T10612] RIP: 0033:0x7fd5af99e0d9 [ 357.908499][T10612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.928180][T10612] RSP: 002b:00007fd5b0839028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.936636][T10612] RAX: ffffffffffffffda RBX: 00007fd5afc26180 RCX: 00007fd5af99e0d9 [ 357.944664][T10612] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 357.952657][T10612] RBP: 00007fd5afa35024 R08: 0000000000000000 R09: 0000000000000000 [ 357.960648][T10612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.968641][T10612] R13: 00007fd5afc26218 R14: 00007fd5afc26180 R15: 00007ffeeb30d778 [ 357.976661][T10612] [ 360.213628][T10616] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1278'. [ 360.258356][T10616] netlink: 'syz.0.1278': attribute type 5 has an invalid length. [ 360.306793][T10619] netlink: 'syz.1.1279': attribute type 21 has an invalid length. [ 360.329065][T10619] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.346024][T10619] IPv6: Can't replace route, no match found [ 360.416606][T10619] netlink: 'syz.1.1279': attribute type 10 has an invalid length. [ 360.664308][T10619] wg1: entered promiscuous mode [ 360.676172][T10619] wg1: entered allmulticast mode [ 360.686004][T10619] team0: Device wg1 is of different type [ 360.875877][T10638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1283'. [ 360.885727][T10638] : renamed from caif0 [ 360.901232][T10638] : left promiscuous mode [ 360.905782][T10638] : left allmulticast mode [ 360.910956][T10638] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 361.128971][T10644] netlink: 'syz.1.1285': attribute type 10 has an invalid length. [ 361.153916][T10644] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1285'. [ 361.240289][T10648] sit0: entered promiscuous mode [ 361.253874][T10648] sit0: entered allmulticast mode [ 361.303472][T10649] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1287'. [ 361.354206][T10649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.672193][T10677] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1295'. [ 364.460057][T10707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1305'. [ 365.651424][T10722] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 365.845478][T10726] netlink: 'syz.1.1310': attribute type 9 has an invalid length. [ 365.911334][T10726] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1310'. [ 365.972891][T10726] netlink: 'syz.1.1310': attribute type 5 has an invalid length. [ 365.996240][T10726] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1310'. [ 368.243711][T10763] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1319'. [ 368.577106][T10768] netlink: 'syz.3.1321': attribute type 9 has an invalid length. [ 368.608946][T10768] netlink: 319 bytes leftover after parsing attributes in process `syz.3.1321'. [ 369.798330][T10788] can: request_module (can-proto-0) failed. [ 372.333628][T10819] netlink: 'syz.3.1335': attribute type 21 has an invalid length. [ 372.370210][T10819] netlink: 'syz.3.1335': attribute type 6 has an invalid length. [ 372.400407][T10819] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1335'. [ 372.578941][T10822] netlink: 'syz.3.1335': attribute type 10 has an invalid length. [ 372.607795][T10822] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 372.724478][T10822] batman_adv: batadv0: Removing interface: virt_wifi0 [ 372.778299][T10822] team0: Port device virt_wifi0 added [ 372.801249][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1338'. [ 373.139712][T10845] netlink: 'syz.0.1342': attribute type 10 has an invalid length. [ 373.277397][T10848] netlink: 'syz.2.1343': attribute type 10 has an invalid length. [ 373.298820][T10848] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1343'. [ 373.334376][T10850] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1344'. [ 373.353958][T10850] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 373.368913][T10850] CPU: 1 PID: 10850 Comm: syz.0.1344 Not tainted syzkaller #0 [ 373.376453][T10850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.386554][T10850] Call Trace: [ 373.389884][T10850] [ 373.392880][T10850] dump_stack_lvl+0x18c/0x250 [ 373.397676][T10850] ? show_regs_print_info+0x20/0x20 [ 373.402964][T10850] ? load_image+0x420/0x420 [ 373.407560][T10850] sysfs_warn_dup+0x8e/0xa0 [ 373.412131][T10850] sysfs_do_create_link_sd+0xc0/0x110 [ 373.417575][T10850] device_add_class_symlinks+0x1cf/0x240 [ 373.423267][T10850] device_add+0x4f9/0xc40 [ 373.427650][T10850] wiphy_register+0x1d99/0x2ac0 [ 373.432583][T10850] ? cfg80211_event_work+0x40/0x40 [ 373.437761][T10850] ? minstrel_ht_alloc+0x88a/0x990 [ 373.442951][T10850] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 373.449098][T10850] ieee80211_register_hw+0x2dd8/0x3b30 [ 373.454630][T10850] ? ieee80211_register_hw+0xfb1/0x3b30 [ 373.460221][T10850] ? ieee80211_tasklet_handler+0x20/0x20 [ 373.465873][T10850] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 373.471800][T10850] ? __debug_object_init+0xec/0x450 [ 373.477036][T10850] ? __asan_memset+0x22/0x40 [ 373.481706][T10850] ? __hrtimer_init+0x189/0x270 [ 373.486593][T10850] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 373.492371][T10850] ? mac80211_hwsim_free+0x220/0x220 [ 373.497687][T10850] ? rcu_is_watching+0x15/0xb0 [ 373.502477][T10850] ? kstrndup+0xbd/0x140 [ 373.506787][T10850] hwsim_new_radio_nl+0xdad/0x1a70 [ 373.512106][T10850] ? __nla_validate+0x50/0x50 [ 373.516828][T10850] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 373.523197][T10850] ? __nla_parse+0x40/0x50 [ 373.527644][T10850] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 373.534005][T10850] genl_family_rcv_msg_doit+0x21a/0x310 [ 373.539593][T10850] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 373.545625][T10850] ? bpf_lsm_capable+0x9/0x10 [ 373.550354][T10850] ? security_capable+0x89/0xb0 [ 373.555236][T10850] genl_rcv_msg+0x611/0x7a0 [ 373.559766][T10850] ? genl_bind+0x360/0x360 [ 373.564210][T10850] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 373.570563][T10850] ? ref_tracker_free+0x686/0x830 [ 373.575613][T10850] ? __kasan_kmalloc_large+0x8b/0xa0 [ 373.580946][T10850] netlink_rcv_skb+0x235/0x4c0 [ 373.585771][T10850] ? genl_bind+0x360/0x360 [ 373.590219][T10850] ? netlink_ack+0x1160/0x1160 [ 373.595061][T10850] ? __lock_acquire+0x7d80/0x7d80 [ 373.600143][T10850] ? down_read+0x1ac/0x2e0 [ 373.604637][T10850] genl_rcv+0x28/0x40 [ 373.608651][T10850] netlink_unicast+0x7b1/0x930 [ 373.613563][T10850] netlink_sendmsg+0x8d0/0xbf0 [ 373.618366][T10850] ? netlink_getsockopt+0x590/0x590 [ 373.623596][T10850] ? apparmor_socket_sendmsg+0x8e/0x330 [ 373.629180][T10850] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 373.634502][T10850] ? security_socket_sendmsg+0x80/0xa0 [ 373.640010][T10850] ? netlink_getsockopt+0x590/0x590 [ 373.645271][T10850] ____sys_sendmsg+0x61b/0x980 [ 373.650088][T10850] ? __asan_memset+0x22/0x40 [ 373.654710][T10850] ? __sys_sendmsg_sock+0x30/0x30 [ 373.659756][T10850] ? __import_iovec+0x5f2/0x850 [ 373.664692][T10850] ? import_iovec+0x73/0xa0 [ 373.669243][T10850] ___sys_sendmsg+0x2a6/0x360 [ 373.673953][T10850] ? __sys_sendmsg+0x2b0/0x2b0 [ 373.678798][T10850] __se_sys_sendmsg+0x1d0/0x2c0 [ 373.683681][T10850] ? __x64_sys_sendmsg+0x80/0x80 [ 373.688670][T10850] ? lockdep_hardirqs_on+0x98/0x150 [ 373.693914][T10850] do_syscall_64+0x55/0xb0 [ 373.698369][T10850] ? clear_bhb_loop+0x40/0x90 [ 373.703073][T10850] ? clear_bhb_loop+0x40/0x90 [ 373.707783][T10850] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 373.713707][T10850] RIP: 0033:0x7f663519e0d9 [ 373.718155][T10850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.737786][T10850] RSP: 002b:00007f66360f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.746237][T10850] RAX: ffffffffffffffda RBX: 00007f6635425fa0 RCX: 00007f663519e0d9 [ 373.754233][T10850] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 373.762243][T10850] RBP: 00007f6635235024 R08: 0000000000000000 R09: 0000000000000000 [ 373.770257][T10850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.778256][T10850] R13: 00007f6635426038 R14: 00007f6635425fa0 R15: 00007fff739a0098 [ 373.786327][T10850] [ 373.891311][T10853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1345'. [ 373.901785][T10853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1345'. [ 373.982524][T10854] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1345'. [ 374.004197][T10853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1345'. [ 374.370960][T10869] netlink: 'syz.0.1350': attribute type 29 has an invalid length. [ 374.386497][T10867] ): renamed from bridge0 (while UP) [ 374.398753][T10869] netlink: 'syz.0.1350': attribute type 29 has an invalid length. [ 374.420768][T10867] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1349'. [ 374.753631][T10886] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1356'. [ 374.894111][T10891] netlink: zone id is out of range [ 374.906714][T10891] netlink: zone id is out of range [ 374.923983][T10891] netlink: zone id is out of range [ 374.936382][T10891] netlink: zone id is out of range [ 374.955066][T10891] netlink: zone id is out of range [ 375.000387][T10891] netlink: zone id is out of range [ 375.042711][T10891] netlink: zone id is out of range [ 375.093539][T10891] netlink: zone id is out of range [ 375.158045][T10891] netlink: zone id is out of range [ 375.163295][T10891] netlink: zone id is out of range [ 375.289454][T10904] netlink: 'syz.2.1359': attribute type 39 has an invalid length. [ 375.426503][T10906] netlink: 'syz.0.1360': attribute type 9 has an invalid length. [ 376.122946][T10940] syzkaller0: entered promiscuous mode [ 376.128889][T10940] syzkaller0: entered allmulticast mode [ 376.370169][T10947] netlink: 'syz.0.1373': attribute type 21 has an invalid length. [ 378.706220][T10964] netlink: 'syz.0.1376': attribute type 6 has an invalid length. [ 378.714437][T10964] __nla_validate_parse: 7 callbacks suppressed [ 378.714452][T10964] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1376'. [ 379.044794][T10967] netlink: 'syz.2.1378': attribute type 10 has an invalid length. [ 379.109409][T10967] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1378'. [ 380.289734][T10974] 0: renamed from pim6reg1 [ 380.445090][T10986] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1381'. [ 380.476147][T10986] net_ratelimit: 216 callbacks suppressed [ 380.476166][T10986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.766509][T10994] netlink: 'syz.2.1382': attribute type 2 has an invalid length. [ 381.273986][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.283861][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.179186][T11023] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1396'. [ 382.208472][T11023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.399934][T11031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.541281][T11029] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1389'. [ 382.824324][T11037] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1392'. [ 383.202599][T11054] netlink: 'syz.0.1398': attribute type 64 has an invalid length. [ 383.278523][T11054] netlink: 'syz.0.1398': attribute type 64 has an invalid length. [ 383.301157][T11050] netlink: 'syz.0.1398': attribute type 64 has an invalid length. [ 383.363731][T11059] netlink: 'syz.3.1400': attribute type 46 has an invalid length. [ 383.608719][T11059] netlink: 'syz.3.1400': attribute type 3 has an invalid length. [ 383.702436][T11059] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 383.778081][T11059] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.1400'. [ 384.279862][T11081] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1404'. [ 384.322978][T11087] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1407'. [ 384.336869][T11087] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 384.584530][T11097] netlink: 'syz.0.1410': attribute type 153 has an invalid length. [ 384.631724][T11097] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1410'. [ 385.039646][T11110] netlink: 'syz.1.1413': attribute type 2 has an invalid length. [ 385.047534][T11110] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1413'. [ 385.215176][T11115] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1415'. [ 385.266366][T11115] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 385.883048][T11141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1420'. [ 385.911711][T11141] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 385.991206][T11140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1420'. [ 386.041073][T11140] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 387.410991][T11184] netlink: 'syz.1.1434': attribute type 10 has an invalid length. [ 387.964670][T11204] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1440'. [ 388.274890][T11211] netlink: 'syz.0.1442': attribute type 10 has an invalid length. [ 388.284080][T11211] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1442'. [ 388.325384][T11211] batman_adv: batadv0: Adding interface: virt_wifi0 [ 388.387111][T11211] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.470128][T11211] batman_adv: batadv0: Interface activated: virt_wifi0 [ 388.857070][T11244] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1450'. [ 388.881772][T11246] netlink: 'syz.1.1451': attribute type 12 has an invalid length. [ 388.910429][T11246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1451'. [ 389.018380][T11246] syzkaller0: entered promiscuous mode [ 389.023958][T11246] syzkaller0: entered allmulticast mode [ 390.763893][T11271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1458'. [ 391.671407][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 391.680994][T11276] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1459'. [ 391.849673][T11285] ): renamed from bridge0 (while UP) [ 392.719101][T11325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.384520][T11330] netlink: 'syz.0.1473': attribute type 9 has an invalid length. [ 393.415654][T11330] netlink: 'syz.0.1473': attribute type 23 has an invalid length. [ 393.427494][T11334] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1475'. [ 393.430616][T11330] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.1473'. [ 393.777465][T11346] netlink: 'syz.3.1477': attribute type 3 has an invalid length. [ 393.794158][T11349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1479'. [ 393.812819][T11346] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1477'. [ 393.832264][T11353] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1478'. [ 393.858105][T11353] __nla_validate_parse: 1 callbacks suppressed [ 393.858123][T11353] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1478'. [ 393.874282][T11352] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1479'. [ 393.886206][T11351] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1478'. [ 393.904233][T11354] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1478'. [ 394.042710][T11357] netlink: 'syz.0.1480': attribute type 3 has an invalid length. [ 394.057884][T11357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1480'. [ 394.370539][T11372] netlink: 'syz.0.1484': attribute type 10 has an invalid length. [ 394.387797][T11372] ): port 2(bridge_slave_1) entered disabled state [ 394.433720][T11372] bridge_slave_1: left allmulticast mode [ 394.440107][T11372] bridge_slave_1: left promiscuous mode [ 394.446005][T11372] ): port 2(bridge_slave_1) entered disabled state [ 394.474841][T11372] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 394.863239][T11387] syzkaller0: entered promiscuous mode [ 394.874202][T11387] syzkaller0: entered allmulticast mode [ 395.317371][T11394] netlink: 'syz.3.1492': attribute type 29 has an invalid length. [ 395.343483][T11394] netlink: 'syz.3.1492': attribute type 29 has an invalid length. [ 395.357700][T11394] netlink: 'syz.3.1492': attribute type 29 has an invalid length. [ 395.366490][T11394] netlink: 'syz.3.1492': attribute type 29 has an invalid length. [ 395.397782][T11394] netlink: 'syz.3.1492': attribute type 29 has an invalid length. [ 395.490675][T11396] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1491'. [ 397.088132][T11418] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1498'. [ 397.842057][T11438] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1504'. [ 398.231057][T11450] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1507'. [ 398.975643][ T5794] Bluetooth: hci3: ISO packet for unknown connection handle 3848 [ 398.985440][T11477] validate_nla: 6 callbacks suppressed [ 398.985458][T11477] netlink: 'syz.0.1516': attribute type 10 has an invalid length. [ 399.000147][T11477] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1516'. [ 399.032526][T11477] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 399.196482][T11477] batman_adv: batadv0: Removing interface: virt_wifi0 [ 400.010167][T11488] syz.0.1527[11488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.010881][T11488] syz.0.1527[11488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.423267][T11500] netlink: 'syz.0.1522': attribute type 2 has an invalid length. [ 400.481533][T11494] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1521'. [ 400.502243][T11500] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1522'. [ 400.687114][T11494] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 401.134845][T11505] netlink: 'syz.1.1524': attribute type 15 has an invalid length. [ 401.153188][T11505] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1524'. [ 401.534639][T11521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.863394][T11530] syzkaller0: entered promiscuous mode [ 401.870318][T11530] syzkaller0: entered allmulticast mode [ 403.286583][T11555] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1539'. [ 404.543025][T11552] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1539'. [ 405.241195][T11591] sit0: left promiscuous mode [ 406.285302][T11636] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1560'. [ 406.318259][T11634] netlink: 'syz.0.1559': attribute type 1 has an invalid length. [ 406.326060][T11634] netlink: 'syz.0.1559': attribute type 3 has an invalid length. [ 406.345427][T11634] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1559'. [ 406.600917][T11644] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1562'. [ 406.628238][T11644] bridge_slave_1: default FDB implementation only supports local addresses [ 407.016074][T11652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 407.168483][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1567'. [ 407.177619][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1567'. [ 407.205403][T11663] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 407.241888][T11663] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 407.252615][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1567'. [ 407.272341][T11660] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1567'. [ 407.296650][T11663] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 407.328673][T11667] netlink: 'syz.0.1568': attribute type 29 has an invalid length. [ 407.777684][T11679] netlink: 'syz.2.1571': attribute type 29 has an invalid length. [ 407.927272][T11679] netlink: 'syz.2.1571': attribute type 29 has an invalid length. [ 408.532724][T11699] netlink: 'syz.2.1576': attribute type 3 has an invalid length. [ 408.555451][T11699] netlink: 'syz.2.1576': attribute type 5 has an invalid length. [ 411.594060][T11691] netlink: 'syz.3.1574': attribute type 10 has an invalid length. [ 411.603579][T11691] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.613051][T11691] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.622705][T11691] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.634791][T11691] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.674988][T11691] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.686043][T11691] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.695404][T11691] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.704428][T11691] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.721524][T11691] team0: Port device geneve1 added [ 412.126116][T11731] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1584'. [ 412.283263][T11733] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1585'. [ 412.540011][T11734] netlink: 'syz.1.1585': attribute type 10 has an invalid length. [ 412.592849][T11734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.621699][T11734] bond0: entered promiscuous mode [ 412.632320][T11734] bond_slave_0: entered promiscuous mode [ 412.643884][T11734] bond_slave_1: entered promiscuous mode [ 412.650659][T11734] bond0: entered allmulticast mode [ 412.655913][T11734] bond_slave_0: entered allmulticast mode [ 412.665640][T11734] bond_slave_1: entered allmulticast mode [ 412.673088][T11734] team0: Port device bond0 added [ 413.687389][T11761] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1593'. [ 413.845896][T11763] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1594'. [ 414.329260][T11778] netlink: 'syz.2.1598': attribute type 10 has an invalid length. [ 414.363406][T11778] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1598'. [ 414.430059][T11781] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.537736][T11781] netlink: 'syz.0.1600': attribute type 9 has an invalid length. [ 414.547022][T11781] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1600'. [ 414.894139][T11790] netlink: 'syz.1.1601': attribute type 21 has an invalid length. [ 414.950855][T11790] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1601'. [ 414.978182][T11790] netlink: 'syz.1.1601': attribute type 4 has an invalid length. [ 415.073956][T11792] netlink: 'syz.1.1601': attribute type 21 has an invalid length. [ 415.178519][T11792] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1601'. [ 415.210672][T11792] netlink: 'syz.1.1601': attribute type 4 has an invalid length. [ 416.292317][T11785] netlink: 'syz.0.1600': attribute type 9 has an invalid length. [ 416.329435][T11785] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1600'. [ 417.178715][T11810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1606'. [ 417.259137][T11810] netlink: 'syz.3.1606': attribute type 21 has an invalid length. [ 418.168290][T11824] netlink: 'syz.1.1610': attribute type 27 has an invalid length. [ 418.178235][T11824] netlink: 'syz.1.1610': attribute type 4 has an invalid length. [ 418.186069][T11824] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1610'. [ 419.115632][T11837] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.1613'. [ 419.145949][T11837] netlink: zone id is out of range [ 419.261214][T11837] netlink: 144056 bytes leftover after parsing attributes in process `syz.0.1613'. [ 420.652691][T11860] netlink: 'syz.1.1619': attribute type 21 has an invalid length. [ 420.688054][T11860] netlink: 'syz.1.1619': attribute type 4 has an invalid length. [ 420.709987][T11860] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1619'. [ 420.906490][T11861] syzkaller0: entered promiscuous mode [ 420.917058][T11861] syzkaller0: entered allmulticast mode [ 427.705480][T11886] netlink: 'syz.1.1625': attribute type 10 has an invalid length. [ 428.066782][T11901] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1629'. [ 428.189156][T11906] netlink: 'syz.2.1631': attribute type 4 has an invalid length. [ 428.201045][T11902] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1628'. [ 428.211990][T11906] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1631'. [ 428.237416][T11900] netlink: 'syz.1.1628': attribute type 21 has an invalid length. [ 428.247011][T11900] netlink: 'syz.1.1628': attribute type 30 has an invalid length. [ 428.963221][ T5794] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 430.665834][T11959] netlink: 'syz.1.1648': attribute type 10 has an invalid length. [ 430.702626][T11959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1648'. [ 431.453514][T11990] bY4`Ҙ: renamed from lo (while UP) [ 432.382138][T11997] Q6`Ҙ: renamed from lo (while UP) [ 432.990311][T12008] netlink: 'syz.3.1662': attribute type 10 has an invalid length. [ 433.008343][T12008] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1662'. [ 433.053415][T12008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 434.177604][T12021] tap0: tun_chr_ioctl cmd 2147767507 [ 434.194026][T12021] tap0: tun_chr_ioctl cmd 2147767507 [ 435.562916][T12057] netlink: 'syz.2.1677': attribute type 10 has an invalid length. [ 435.583450][T12057] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1677'. [ 435.640594][T12057] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 436.222855][T12086] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.1685'. [ 436.270163][T12086] netlink: 'syz.2.1685': attribute type 2 has an invalid length. [ 436.309346][T12086] netlink: 'syz.2.1685': attribute type 1 has an invalid length. [ 437.532820][T12110] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 437.728217][T12123] netlink: 'syz.0.1693': attribute type 1 has an invalid length. [ 437.750685][T12123] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1693'. [ 438.576036][T12133] netlink: 'syz.2.1698': attribute type 29 has an invalid length. [ 438.595385][T12133] netlink: 'syz.2.1698': attribute type 29 has an invalid length. [ 438.672967][T12133] netlink: 'syz.2.1698': attribute type 29 has an invalid length. [ 438.981308][T12148] netlink: 'syz.3.1701': attribute type 6 has an invalid length. [ 439.001671][T12148] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1701'. [ 439.139974][T12157] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1702'. [ 442.668629][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.675141][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.748765][T12184] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1711'. [ 443.050952][T12193] netlink: 'syz.2.1712': attribute type 21 has an invalid length. [ 443.068828][T12193] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1712'. [ 443.131673][T12196] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1715'. [ 443.246344][T12201] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 443.535073][ C0] [ 443.537482][ C0] ====================================================== [ 443.544537][ C0] WARNING: possible circular locking dependency detected [ 443.551592][ C0] syzkaller #0 Not tainted [ 443.556037][ C0] ------------------------------------------------------ [ 443.563107][ C0] syz-executor/6811 is trying to acquire lock: [ 443.569298][ C0] ffff88807e131a38 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x94/0x630 [ 443.578277][ C0] [ 443.578277][ C0] but task is already holding lock: [ 443.585671][ C0] ffffffff975b3140 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x9e/0x520 [ 443.595840][ C0] [ 443.595840][ C0] which lock already depends on the new lock. [ 443.595840][ C0] [ 443.606387][ C0] [ 443.606387][ C0] the existing dependency chain (in reverse order) is: [ 443.615438][ C0] [ 443.615438][ C0] -> #1 (&obj_hash[i].lock){-.-.}-{2:2}: [ 443.623298][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 443.629173][ C0] debug_check_no_obj_freed+0x9e/0x520 [ 443.635211][ C0] __free_pages_ok+0x2e0/0xad0 [ 443.640540][ C0] free_large_kmalloc+0x101/0x1b0 [ 443.646120][ C0] trie_update_elem+0x783/0xd60 [ 443.651519][ C0] bpf_map_update_value+0x64b/0x710 [ 443.657273][ C0] map_update_elem+0x586/0x710 [ 443.662591][ C0] __sys_bpf+0x6b5/0x890 [ 443.667379][ C0] __x64_sys_bpf+0x7c/0x90 [ 443.672335][ C0] do_syscall_64+0x55/0xb0 [ 443.677290][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.683746][ C0] [ 443.683746][ C0] -> #0 (&trie->lock){-.-.}-{2:2}: [ 443.691065][ C0] __lock_acquire+0x37ef/0x7d80 [ 443.696479][ C0] lock_acquire+0x19e/0x420 [ 443.701512][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 443.707338][ C0] trie_delete_elem+0x94/0x630 [ 443.712654][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 443.718650][ C0] trace_call_bpf+0x333/0x6c0 [ 443.723871][ C0] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 443.729967][ C0] perf_trace_lock_acquire+0x342/0x400 [ 443.735964][ C0] lock_acquire+0x3ef/0x420 [ 443.741191][ C0] _raw_spin_lock+0x2e/0x40 [ 443.746249][ C0] __free_object+0x3fe/0xa70 [ 443.751388][ C0] debug_check_no_obj_freed+0x10e/0x520 [ 443.757483][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 443.763448][ C0] kmem_cache_free+0xf8/0x290 [ 443.768716][ C0] rcu_core+0x9c1/0x17f0 [ 443.773508][ C0] handle_softirqs+0x27d/0x820 [ 443.778810][ C0] __irq_exit_rcu+0xd3/0x190 [ 443.783937][ C0] irq_exit_rcu+0x9/0x20 [ 443.788717][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 443.794901][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 443.801438][ C0] finish_task_switch+0x267/0x8f0 [ 443.807016][ C0] __schedule+0x15b6/0x4660 [ 443.812066][ C0] schedule+0xbd/0x170 [ 443.816685][ C0] do_nanosleep+0x1b3/0x5e0 [ 443.821756][ C0] hrtimer_nanosleep+0x175/0x370 [ 443.827249][ C0] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 443.833339][ C0] do_syscall_64+0x55/0xb0 [ 443.838312][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.844754][ C0] [ 443.844754][ C0] other info that might help us debug this: [ 443.844754][ C0] [ 443.855001][ C0] Possible unsafe locking scenario: [ 443.855001][ C0] [ 443.862468][ C0] CPU0 CPU1 [ 443.867867][ C0] ---- ---- [ 443.873254][ C0] lock(&obj_hash[i].lock); [ 443.877880][ C0] lock(&trie->lock); [ 443.884491][ C0] lock(&obj_hash[i].lock); [ 443.891620][ C0] lock(&trie->lock); [ 443.895718][ C0] [ 443.895718][ C0] *** DEADLOCK *** [ 443.895718][ C0] [ 443.903884][ C0] 3 locks held by syz-executor/6811: [ 443.909187][ C0] #0: ffffffff8d131ec0 (rcu_callback){....}-{0:0}, at: rcu_core+0x951/0x17f0 [ 443.918107][ C0] #1: ffffffff975b3140 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x9e/0x520 [ 443.928695][ C0] #2: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: trace_call_bpf+0xc3/0x6c0 [ 443.938049][ C0] [ 443.938049][ C0] stack backtrace: [ 443.943965][ C0] CPU: 0 PID: 6811 Comm: syz-executor Not tainted syzkaller #0 [ 443.951531][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 443.961646][ C0] Call Trace: [ 443.964946][ C0] [ 443.967812][ C0] dump_stack_lvl+0x18c/0x250 [ 443.972526][ C0] ? load_image+0x420/0x420 [ 443.977051][ C0] ? show_regs_print_info+0x20/0x20 [ 443.982272][ C0] ? print_circular_bug+0x12b/0x1a0 [ 443.987512][ C0] check_noncircular+0x2fc/0x400 [ 443.992479][ C0] ? print_deadlock_bug+0x5d0/0x5d0 [ 443.997698][ C0] ? lockdep_lock+0xf5/0x230 [ 444.002308][ C0] ? perf_trace_lock_acquire+0x1a7/0x400 [ 444.007974][ C0] ? _find_first_zero_bit+0xd6/0x100 [ 444.013304][ C0] __lock_acquire+0x37ef/0x7d80 [ 444.018210][ C0] ? perf_trace_buf_alloc+0x131/0x290 [ 444.023608][ C0] ? verify_lock_unused+0x140/0x140 [ 444.028836][ C0] ? perf_trace_lock_acquire+0x1a7/0x400 [ 444.034513][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 444.041126][ C0] lock_acquire+0x19e/0x420 [ 444.045654][ C0] ? trie_delete_elem+0x94/0x630 [ 444.050633][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 444.057249][ C0] ? read_lock_is_recursive+0x20/0x20 [ 444.062668][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 444.069301][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 444.074633][ C0] ? trie_delete_elem+0x94/0x630 [ 444.079600][ C0] ? _raw_spin_lock+0x40/0x40 [ 444.084314][ C0] trie_delete_elem+0x94/0x630 [ 444.089146][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 444.094648][ C0] trace_call_bpf+0x333/0x6c0 [ 444.099365][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 444.104167][ C0] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 444.110252][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 444.115309][ C0] perf_trace_run_bpf_submit+0x7a/0x1c0 [ 444.120872][ C0] perf_trace_lock_acquire+0x342/0x400 [ 444.126373][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 444.133006][ C0] lock_acquire+0x3ef/0x420 [ 444.137532][ C0] ? __free_object+0x3fe/0xa70 [ 444.142321][ C0] ? verify_lock_unused+0x140/0x140 [ 444.147558][ C0] ? read_lock_is_recursive+0x20/0x20 [ 444.152967][ C0] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 444.159575][ C0] ? __lock_acquire+0x1262/0x7d80 [ 444.164628][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 444.169615][ C0] _raw_spin_lock+0x2e/0x40 [ 444.174172][ C0] ? __free_object+0x3fe/0xa70 [ 444.178978][ C0] __free_object+0x3fe/0xa70 [ 444.183613][ C0] ? alloc_object+0x640/0x640 [ 444.188338][ C0] ? do_raw_spin_lock+0x11f/0x2b0 [ 444.193405][ C0] ? __rwlock_init+0x150/0x150 [ 444.198205][ C0] debug_check_no_obj_freed+0x10e/0x520 [ 444.203781][ C0] slab_free_freelist_hook+0xd2/0x1a0 [ 444.209186][ C0] ? rcu_core+0x9c1/0x17f0 [ 444.213622][ C0] kmem_cache_free+0xf8/0x290 [ 444.218350][ C0] ? kernfs_put+0x360/0x360 [ 444.222882][ C0] ? rcu_core+0x951/0x17f0 [ 444.227320][ C0] rcu_core+0x9c1/0x17f0 [ 444.231590][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 444.236808][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 444.242039][ C0] ? sched_clock_cpu+0x75/0x430 [ 444.246921][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 444.252920][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 444.258222][ C0] ? lock_chain_count+0x20/0x20 [ 444.263099][ C0] handle_softirqs+0x27d/0x820 [ 444.267883][ C0] ? read_tsc+0x9/0x20 [ 444.271961][ C0] ? ktime_get+0x24b/0x280 [ 444.276392][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 444.281172][ C0] ? do_softirq+0x1a0/0x1a0 [ 444.285704][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 444.290933][ C0] __irq_exit_rcu+0xd3/0x190 [ 444.295556][ C0] ? irq_exit_rcu+0x20/0x20 [ 444.300106][ C0] irq_exit_rcu+0x9/0x20 [ 444.304372][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 444.310042][ C0] [ 444.313006][ C0] [ 444.315958][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 444.321959][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 444.327790][ C0] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 23 f7 3a 09 e8 be 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 444.347443][ C0] RSP: 0018:ffffc900038b79a0 EFLAGS: 00000286 [ 444.353550][ C0] RAX: 3340314815f13b00 RBX: 0000000000000000 RCX: 3340314815f13b00 [ 444.361538][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 444.369528][ C0] RBP: ffffc900038b79f0 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 444.377519][ C0] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88804c1ebc00 [ 444.385511][ C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 444.393526][ C0] __schedule+0x15b6/0x4660 [ 444.398061][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 444.403295][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 444.409293][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 444.414342][ C0] ? asan.module_dtor+0x20/0x20 [ 444.419217][ C0] ? timerqueue_add+0x1ca/0x1f0 [ 444.424109][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 444.430035][ C0] ? _raw_spin_unlock+0x40/0x40 [ 444.434936][ C0] schedule+0xbd/0x170 [ 444.439040][ C0] do_nanosleep+0x1b3/0x5e0 [ 444.443578][ C0] ? do_nanosleep+0x80/0x5e0 [ 444.448243][ C0] ? usleep_range_state+0x1b0/0x1b0 [ 444.453471][ C0] ? __asan_memset+0x22/0x40 [ 444.458079][ C0] ? __hrtimer_init+0x189/0x270 [ 444.462951][ C0] hrtimer_nanosleep+0x175/0x370 [ 444.467906][ C0] ? __might_fault+0xc6/0x120 [ 444.472600][ C0] ? nanosleep_copyout+0x120/0x120 [ 444.477755][ C0] ? __remove_hrtimer+0x470/0x470 [ 444.482794][ C0] ? timespec64_add_safe+0x1f0/0x1f0 [ 444.488112][ C0] ? perf_trace_preemptirq_template+0xac/0x330 [ 444.494357][ C0] __se_sys_clock_nanosleep+0x30f/0x3a0 [ 444.499932][ C0] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 444.505588][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 444.510818][ C0] do_syscall_64+0x55/0xb0 [ 444.515259][ C0] ? clear_bhb_loop+0x40/0x90 [ 444.519967][ C0] ? clear_bhb_loop+0x40/0x90 [ 444.524670][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.530588][ C0] RIP: 0033:0x7fc18cf5e90e [ 444.535040][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 444.554669][ C0] RSP: 002b:00007ffd15fecb08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 444.563100][ C0] RAX: ffffffffffffffda RBX: 000055558b189500 RCX: 00007fc18cf5e90e [ 444.571108][ C0] RDX: 00007ffd15fecb60 RSI: 0000000000000000 RDI: 0000000000000000 [ 444.579096][ C0] RBP: 00007ffd15fecbcc R08: 0000000000000000 R09: 0000000000000000 [ 444.587091][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 444.595089][ C0] R13: 00000000000927c0 R14: 000000000006c356 R15: 00007ffd15fecc20 [ 444.603113][ C0]