last executing test programs: 19.698370943s ago: executing program 2 (id=2720): socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x2, 0xa, 0xc, 0x8}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800003, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x8, 0x7, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x8) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.949583298s ago: executing program 2 (id=2723): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x711fec55}, 0xa0d2}, 0x0, 0x8000000000000000, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x4, 0xffffffff}, 0x14e2, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(r3) close(r2) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0xa, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x3a, &(0x7f0000000100), 0xff83) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@phonet={0x23, 0x8, 0x0, 0x31}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="bb2c1ee2f055fe1e9e75f2da3a44", 0xe}], 0x1}, 0x400c1) socket$kcm(0x10, 0x2, 0x4) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x3020, 0x4, 0x9, 0x9, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}, 0x50) 17.326639613s ago: executing program 2 (id=2728): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="17fb95d1cff5", 0x6}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x80}, 0x40000) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x40000062) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, 0x0, 0x60) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000240)={0x4, 0x80, 0x2, 0x7f, 0xe, 0x8, 0x0, 0x8, 0xc001, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x400, 0x90, 0xffff0001, 0x4, 0x827, 0xb, 0x80, 0x0, 0xe, 0x0, 0x100}) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) 9.192077172s ago: executing program 3 (id=2749): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x9, 0x21, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x1fc}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) socket$kcm(0xa, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000100)='\')-&%,{:[]:$&\\\x00') (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) (async, rerun: 64) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r4}, 0x18) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 6.347386194s ago: executing program 3 (id=2752): r0 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0xed, 0xc, 0x0, 0x0, 0x0, 0x1800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRESHEX=r0, @ANYBLOB="00000000000000000000000000000000800000004f2bcf00303850a6082e7e0e66b7976e281910c3bd2eb3fc0c5328d1cb64f41c7e8bca35988f3bcb9bbc982122100033f6530292a3e424889c898860598f5c74723c5f8762b9034ed9987259fa5a686895e6a908c2b36d8d50f890ffeae5fbc433e8308469cc594ae0286b9a4be8ae918846ee64cd18a1bd119fdb423a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005d87307f750d62133a2aa4fe88ff2954b88c1d2ae59311a15a5e0ff86dbd126719ee0d10a5fadff461e62972684241255fdd874e6cb348b242e9e181c2d11e5e6362d5df15edb846a9d76086305f278d7556be1bc9d90741e506c1419383f50e7553cbe99951772931d5b07117761467168cb8d4dd3585207c2e8b65d9a06bfec644b8bcdf6c4bdbbafa3c45cfb596fb6225d243d5b09077be29f67efa927e6e422eafb6544e7c51772fa81d9fb1aa91580becd5"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0x20, &(0x7f0000000d80)={&(0x7f0000000c80)=""/147, 0x93, 0x0, &(0x7f0000000d40)=""/60, 0x3c}}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r5) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8905, &(0x7f0000002280)={'bridge_slave_0\x00', @random="2b0100004ec6"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x105121, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1000000001, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xfffffffffffffebb, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4044800) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000640)={&(0x7f00000004c0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}}}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000005c0)="b247f92323806d1e483ba0d649aa9b55df8cf08c0ff657f169ba21be08dde25de7e1a74601ff01afe53b9c01a1aa90be8e5f5a0496e754b3d9f4a16afee2652139acb30a1904bb5d1ddd6d0c8b73be2d0011cc037d2a", 0x56}, {&(0x7f00000006c0)="9bcde138782cbed35a2efe41bc889ea847eeb53ba22d4a6fe5639e51fc51f5c1a8f149e2b7e13c34cdbd7caa79d942ff773da2afef74ac513ce30d018f0af4ac5b9d48060da929245e29bc513c3877a6c6d6f97cc53e2f962ca2b4adc9ccf9927560291b91d3db", 0x67}, {&(0x7f0000000740)="62794ed0d5038e0466177675d480b2e4faab70e313ffcbc9a215dad17dd16914dd8f55536969bd2adad67d05b088a302780771ce07aa61943f8a24167d71731cf7b296156867813531408f829099330a3a0080b676dc85caab62", 0x5a}], 0x3, &(0x7f0000000a40)="5a852b9380713978401d09daa3115a2f5fce3a5f317d0a64e8c53466e13ee28f56601c3d76f4c68b4ee84ef5c65280d4417ef48c624aab41361dfef5bc4c25a2c48a1fe8079f58af08d0799854fd40df8aa50150453fc24169202fdb6954bd6f34c3acbf9b9dd476873666e80ba5a3006e98197caadf15f7527bd288400457caaa2556609e1a919c5b7b93f11d58afb83200a3dd0bd22b3f3a304be706a585a237c00881d632e5477e8b639554e78e2375a2841d44b8a2a585b8a92b2cf597e7b9f8df28a49deee1b272b6956f88caf51b1f20ad350df380fe5f05a089ee6283a68652e683c378922403f932479f260a71a978006d3518", 0xf7, 0x20000080}, 0x800) getpid() sendmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x24004000) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r11}, 0xc) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a00014006001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 5.735221062s ago: executing program 3 (id=2755): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x260}, 0x40040) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r1) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x301) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff4c) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) close(r6) socket$kcm(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x106) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0xfffffffffffffdf5, 0x0}, 0x240480f9) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNSETDEBUG(r8, 0x400454c9, &(0x7f0000000100)=0x6) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x0) sendmsg$kcm(r7, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x703, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) 5.626415398s ago: executing program 1 (id=2756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x4, 0x3}, 0x50) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r5) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r4, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r4}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r7) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r7, @ANYRES32=r8], 0x9a) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x10, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000240)={{r10}, &(0x7f0000000100), 0x0}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r0, @ANYRES16=r2, @ANYRESDEC=r10], &(0x7f0000000b00)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020000e603000000080471310bc147ee3943fa99", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x8, &(0x7f0000000200)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r12}}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0x1a, 0xffffffffffffffee, &(0x7f0000000080)="630b008646dc3f0adf398151d9000000000000000000ea1f0000", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2f) 5.018563956s ago: executing program 2 (id=2758): r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x1a, &(0x7f0000000040), 0x47) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xa, 0x84b4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815001b000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993b134e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db79826521340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x44000) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811d", 0x1f}], 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x102000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9}, 0x0, 0x0, r6, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x1ff) setsockopt$sock_attach_bpf(r5, 0x84, 0x82, &(0x7f0000000000), 0x8) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYBLOB="0000000000f80000000000000000000000000000495bbb5022ede13648a7996e8361683cf9fe20afeedbe3aa4727f4b84bebf671188dddb17c3e59018f06417b47704429a4a4684ef79d1ad503a5ca85201563445f87c130ba065aa45f5009fe9511a406e34ccb656e7aa2bf1dbbdbf729e39ff95b2a56b71383d44d73554d6ecfa2ef0b771bd3f1f0bdccc121d011cc7c49bd9c620e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b423000000000000611154c3af5df8724c59c000000000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.018153466s ago: executing program 1 (id=2759): r0 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) 4.851669474s ago: executing program 0 (id=2760): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8001, 0x3}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000006c0)={r2, r0, 0x0, 0x1, 0xfffffffffffffffe}, 0x30) r3 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x8, 0x6, 0x1, 0x1f, 0x0, 0x800, 0x20000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x110098, 0x1, 0x6, 0x8, 0x8, 0xffffffff, 0x0, 0x0, 0x698f, 0x0, 0x6}, r2, 0x10, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r2, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r5}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000040)="25a688a800a34400000000000000", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.72693658s ago: executing program 3 (id=2761): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000040)="5fa836cc94d9c68bda5a28a15bf86aa7a1e6cc13b3764c36aa77114b810908534e3442f2f7cbd62659ed577164d960f8c93050811518719b964f44c734747b32692958006feba8698286d178b133454b3a66ed65e8c4dc0d30abda8401578394f22bd2cc40d77ce4daa6fd8e83ca8a9f08826d9e169ba44456ba98655b21f5ae37d3a9850fe7f23656aab44e28b290d656523d7e2c2ecf805a422a50c8045fad", 0xa0}, {&(0x7f0000000100)="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", 0x1000}, {&(0x7f0000001100)="ce795233181cb512f3df03cb09893d", 0xf}, {&(0x7f0000001140)="ac6bad9af2ac860095583155d958391ce3d442cd348ed47a44a94b705e8e57713698a679caf7269320870e1c2bc3987cf69413973784eabaf0ec50ee2e4348d1389074870de04e7f46786fe9cea7b1396a4073e9f0149b61349260508f1609cf2776abd5d219f1c048d0bf9e5984f811b19fced18fb45d28b5e37a20944da661d7883d3efcb00efe13dd829ee4f7d7ab1ed01ac26fda9a041f2ffbe0442098b416047c3c9a10302e5f53abca82ddf4b134a8833a315e4958ec7896643f8ffe69c8ff5b2930eb0d54f5221da8cb41e8", 0xcf}, {&(0x7f0000001240)="038f6cefef64b13dda9014c5881f9e2d506eaf0cec72fd956e4d053c19d47a24d4082e7fa0e42aee9dff6bcdc2816018e0e25975a5160e5f88a06b0c4578e2eed93f48502345abd18c1987132701165e7cfcbc2b096b73c358063338f9d6bace7407074162", 0x65}, {&(0x7f00000012c0)="6e5808ccc539dcef1f080bc5b4f0fa1a9b63589e2426bf3cbcd85b1c3ca90bf8b55e0e339d7e508504e8e34b48b1313caf263b25689a21d8b819bd4bbdaf65af", 0x40}, {&(0x7f0000001300)="3d66f7d9c526e5353b88f5ba158412da1cc22dee17ee78dea60fcc6b8f6fd3c979926c5c30e8e26f077af4990108648b9b9180e52f4c", 0x36}, {&(0x7f0000001340)="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", 0x1000}], 0x8}, 0x4000010) 4.522314689s ago: executing program 1 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c) socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r3}, 0x18) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="001000"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000004000085000000b1000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000027c0)={0x6, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000fdffffff000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000004b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000f2ffdeb6020000020000008500000085000000b7000000000000009500000000000000ce90207ef869ec5af1a315c4d77c49570ed52187d0b86b412c9138e6ec591459ea4595e6965ec7fb0fbb5186734a83ca26c7d23a149c0ce0073a5a59cb11428e03c63e48ec7b873a7ed5bd809c97037d8c4ee1c386159fe500"/196], &(0x7f0000000600)='syzkaller\x00', 0x81, 0x0, 0x0, 0x41000, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 4.519548319s ago: executing program 0 (id=2763): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="eee4b0de2bd4810d33e76f90b4ca10efe1bb5b5af1ded72795f32688064f2888b46f10dce3c5af82520f9fe2f26beaffa712b66996a8d21100aeaa7c7a8b3572f2396f4057191795d5f5a39c5560364b5ba27b0557d4931490e529cf174fcb23f7b9b72fc3bda8e7df994e5a67e08079fc225887a62ed07d9425d099acd7b99ea56378562a5a9ab931a648d05e6af8c5e427c322adf7d00f39733869bdd039312678", 0xa2}], 0x1, 0x0, 0x0, 0x40080}, 0x4004) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x20, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2c0000000}, 0x115905, 0x4, 0x0, 0x5, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x400c084) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x400c084) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd631cce620300fe"], 0xfe1b) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x742ff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2005}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7fff}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180831d56d1501cc49139d666a5ca12519f1000800000000000004000032cf5d9c91b614dcd7d40000dd18000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r9, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8080) (async) sendmsg$kcm(r9, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"], 0x18}, 0x8080) sendmsg$kcm(r9, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r9, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000880)=""/219, 0xdb}], 0x1}, 0x40010040) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6a2c, 0x7}, 0x12000, 0x400000, 0x10000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 4.486415991s ago: executing program 3 (id=2764): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000280)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'wlan1\x00', @local}) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000640), &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xb, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="5211697d00c2454fb3e1fa476508a71f11", 0x11}, {&(0x7f00000003c0)}], 0x2, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x68}, 0x4040000) (async) sendmsg$inet(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="5211697d00c2454fb3e1fa476508a71f11", 0x11}, {&(0x7f00000003c0)}], 0x2, &(0x7f00000008c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @loopback}}}], 0x68}, 0x4040000) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000000c0), 0x4) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a", 0x17}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x7, 0x185, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x7, 0x185, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000ff03000000000000", @ANYRES32, @ANYBLOB="a40000010000000000000000000000000a5fe42c0f580764eca610b83fbd", @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="02000000010000000100"/28], 0x50) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000000000000000ff03000000000000", @ANYRES32, @ANYBLOB="a40000010000000000000000000000000a5fe42c0f580764eca610b83fbd", @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="02000000010000000100"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1d, 0x27, &(0x7f0000000980)=ANY=[@ANYBLOB="180000006d530000000000006400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100f9ffffff940000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000a60102000000000018480000010000000000000000000000d11b0400ffffffff95000000000000001831000002000000000000000000000018400000feffffff000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018000000050000000000000080000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000ac0)='syzkaller\x00', 0xc, 0xbd, &(0x7f0000000cc0)=""/189, 0x40f00, 0x21, '\x00', 0x0, 0x1b, r2, 0x8, &(0x7f0000000d80)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, 0x0, 0x3, 0x0, &(0x7f0000000dc0)=[{0x0, 0x5, 0x7, 0x4}, {0x3, 0x2, 0x7, 0xa}, {0x0, 0x3, 0xc, 0x1}], 0x10, 0x8001}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') recvmsg(r8, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000480)={r9, &(0x7f00000001c0)="9c5d2abd7998d936fb2fd1536c63ed40048bc60b115fd373ed1427bdd0281f46722d8bb9dbdb1cdfb543f3e7afae9251796976e4e10e34724bcdbf18fd40b18e2adb22351f1f0a150c09c28cfe9c33f5bb49d04caef986337993f759a5b328fa5c79c4bf0df8d6234f17751edc7dfaa6", &(0x7f00000003c0)=""/165, 0x4}, 0x20) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe0f82, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r10, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x48, 0x4, 0x0, 0x3}, {0x44, 0x94}, {}, {0x6, 0x0, 0xd}]}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) getpid() (async) getpid() 3.887956459s ago: executing program 2 (id=2765): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x18000000000002a0, 0x1b, 0x0, &(0x7f0000000000)="b9fe0307681f4c8c989a14f088a8650186dda8c6e96fd9d5a77080", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x6, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000400000000822be3f58e76ff0165f450e71b0075e3002500028d459e37000f0000000000", 0x39}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000c000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xc}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09060000000000550901005d0000009500000000000000bf91000000000000b7020000008f00008500000084000000b700000000e023424a00000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x850) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0x0, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x59) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 3.826595111s ago: executing program 0 (id=2766): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.597867292s ago: executing program 0 (id=2767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="0400000004000000040000000100000000000000", @ANYRES32, @ANYBLOB="b44810598c"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x5, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffffc8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000100), 0x120) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.343150024s ago: executing program 3 (id=2768): r0 = socket$kcm(0xa, 0x1, 0x106) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffaf0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x11, 0x200000000000002, 0x300) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) (async) write$cgroup_devices(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef2685634a8270e7123c00000000000000000000000000ac1414cf14"], 0xffdd) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 3.194171491s ago: executing program 1 (id=2769): perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x4, 0x7, 0x8, 0x42, 0x0, 0x3ff, 0x800c, 0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfe, 0xc, 0x2, @perf_bp={0x0, 0x1}, 0x4, 0x2, 0x800, 0x2, 0x13, 0x8000001, 0x2002, 0x0, 0xc05, 0x0, 0x4e9c}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000340)={r0}) r1 = perf_event_open(&(0x7f0000000400)={0x4, 0x80, 0x22, 0x0, 0x3, 0x44, 0x0, 0xd, 0xa16ae, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5, 0xe}, 0x2090, 0xa4, 0xffffffff, 0x7, 0x7e, 0x9b96, 0x26, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) perf_event_open$cgroup(&(0x7f0000000500)={0x1, 0x80, 0xd, 0x0, 0x8, 0x7, 0x0, 0x8, 0x900, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x3, 0x3}, 0x1, 0x1, 0x8, 0xcb6f90596ec24725, 0x40, 0x6, 0xff00, 0x0, 0xffff, 0x0, 0x39e6f045}, r3, 0x5, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000081000000040000000080000016"], 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000280)='\\**}\x00') bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000080), &(0x7f0000000100)='%pS \x00'}, 0x20) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) sendmsg$inet(r0, &(0x7f0000001840)={&(0x7f0000000040)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10, &(0x7f00000017c0)=[{&(0x7f00000001c0)="9ab987b41cc7728283ee959477c96afc8a04e0c85296ddccf22a1cc4bcc500b1ea0f8051fe63df1e7ce1546ea8a3125ea28b3a2bb567adb9717448b3e1a6e0982b694c8f85d30ee553a002f75171bf4e11f98b4b446dc375cdd55ceb9297003d0e8b77fe82809410219f88a28612dd88d9686dffd9c1", 0x76}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="f4ed01cbcf3b38194e41afe56346fbb75a6faa6353d77807f903442f6024902fd08eb126fccd50d5d748", 0x2a}], 0x3, &(0x7f0000001800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x30}, 0x1001) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000001980)=""/4122, 0x101a}, {&(0x7f0000002b80)=""/4094, 0xffe}, {&(0x7f00000003c0)=""/207, 0xcf}, {&(0x7f00000006c0)=""/94, 0x5e}], 0x4}, 0x22) 2.727622792s ago: executing program 1 (id=2770): r0 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x12, 0x7, 0x3, 0x6, 0x0, 0x2, 0x0, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x8000000000000000, 0x101}, 0x3301, 0xffff, 0x3, 0x9, 0x2, 0x2, 0x5, 0x0, 0x2c, 0x0, 0xeba}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000080)='/$-$#[+#,]/\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000400)=""/140, 0x8c, 0x0, &(0x7f00000004c0)=""/82, 0x52}}, 0x10) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x8, 0x80, 0xffffef7d, 0xfffffcd6, 0x100, 0xffffffffffffffff, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb}, [@alu={0x7, 0x1, 0x3, 0x6, 0x3, 0x8, 0x8}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0x0, &(0x7f0000000240), 0x1e00, 0x3, '\x00', r3, @fallback=0x2b, r4, 0x8, &(0x7f0000000380)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xa, 0xf7, 0x9fea}, 0x10, r5, r2, 0x0, &(0x7f00000006c0)=[0xffffffffffffffff, r6, r7], 0x0, 0x10, 0x6}, 0x94) sendmsg$sock(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)="a5d4f57917997666c68b833596bd2e670b04f0b62914597e3e93981d14cdd9624f7659a5a20bb387ea5e5d5f4e1b20fec27262e8ddfee6171b384244ce6b3bf9bc904a339e6816eb36b80955dd64c6fbe0ed40b51c2c9ddd2a56ca1e38bf8668a6e179f2cdcdc3dda858757b96a97393f68036b44c74d9", 0x77}], 0x1, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x43}}], 0x30}, 0x20004010) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r4}, 0x8) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r6}, &(0x7f0000000940), &(0x7f0000000980)='%+9llu \x00'}, 0x20) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)={0x1b, 0x0, 0x0, 0xfffffff3, 0x0, r8, 0x4, '\x00', r3}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000fc0)={r4, 0xe0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x77, &(0x7f0000000dc0)=[{}], 0x8, 0x10, &(0x7f0000000e00), &(0x7f0000000e40), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000e80)}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001000)=r5, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x4, 0x23, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x3, 0x2, 0x1, 0x9, 0x7, 0x2, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x1, 0xa, 0xa, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x7, 0xb, 0x9, 0x100, 0x1}, @call={0x85, 0x0, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x7, 0x0, 0x5, 0x5, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x2, 0xe8, &(0x7f0000000c00)=""/232, 0x41100, 0x1f, '\x00', r10, @fallback=0x3e731702e3c1518d, r11, 0x8, &(0x7f0000001040)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001080)={0x5, 0xd, 0x9, 0x258e}, 0x10, r5, r8, 0x2, 0x0, &(0x7f00000010c0)=[{0x1, 0x3, 0xd, 0x4}, {0x3, 0x5, 0xd}], 0x10, 0x9}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000011c0)={r4}) sendmsg(r13, &(0x7f0000002780)={&(0x7f0000001200)=@xdp={0x2c, 0x2, r10, 0x2b}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001280)="19c2fad99207550c9a47edf75d3745db1d89169c4c48cdf5937815ac9cc1708428d23f791583ec5a5e05bce4b0f18db0fafa430127621be9463116eaa03d425ba17bfc378e928c1f5247d3248470f80bf2ce3f3ec2d7f1712d27b8f0cd39f243590f3923a9f407f1a8f38df5b7c17330ff04f4e7cc1d4ec479b4b8088998859f66489b7c6e20d855467367a115797304218c", 0x92}, {&(0x7f0000001340)="f068ba433b6e9eda62abaa69d2faf8cf44aeeaba6ce5b70448e689d5588e6cbb2579f0f5538fd791c4ea3e7f3c05cb52fb1ef27b4905624e592acde7fa5af6793bb1da07471afcca2defdc88aa5dfa06d62a317abbc3b224ea0c2950eac11b62323abbbd205743d8e5492e939e46b7f1a75e0d8fdebb018cb25ae57402e380b44a36cfb20a70f04cd11b564665be2f17ab5d889d36ee8428cf270b2610f62108e3e4", 0xa2}, {&(0x7f0000001400)="dc5e26341cda606ea68ae43dc309f66450f35dfb88ee1b58", 0x18}], 0x3, &(0x7f0000001480)=[{0x18, 0x103, 0x9, "71081f"}, {0xb0, 0x10e, 0x0, "e25bc07b2109866c57f555036eb7239a415ad9c8ae765b2f93abbac07dace7d96e2b915371f4b816335408b772f42f34fd693e90c9cc0a898258977959d2a3ce259e09fa6cb4a862834721cd87dab6d7737bb859262837fda0e3ae6252486feaee892e6ffcb6ce1c01df6c36f5f0da88a2ac4543dd1e7ed285b69991fb1bf177e7fd9867948a74603a283f3fcd57be1149080b3fe5e4c8ddcac9aa"}, {0x70, 0x84, 0xa, "a4bc5a0f71b1c9144d0ccb48e3968d9326051769333667d48d77684897885a0c852b8475680458b72e1185205bb8769d121fbbf3dd648ef72b8da1b01531493143ccfcfdfd9c0a199c7de525f18959a04e2b29cf715257d873f630f1"}, {0x1010, 0x107, 0x8, "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"}, {0xc8, 0x104, 0xffffffff, "59a814d138eaf1dceaf895d61ecf1906dd99a3e50afbda0a45b8db0a9416ea038b781a328dc33a07b01ca3ce8f005b8246d23be753c6d401cfa45924873765ca4aea8d03557a4bbe896d8631409c139ec9ffba2fe726cea207eae6866eab0158813fd98a608addc189a5cfe9bb8adfd4b7de40af8039cd930216f74ca8bccd94190371bad60ae4e256f1c6198264035a048271f2462091fcde542b57f3f22b5653eaa0944c9c06098fa2d03dbfb3361bd0aa"}, {0xd0, 0x11, 0x4, "80ba3763ef8ade4291f4530f4ebbb50072934541637857eaee01e04dba36ee98103d8712eb060279874f39d54e46c3d068e600a46c1ea3c86aa845fdbd2373402869317b350ec7910d422de2564afa18498792ffe429d6cba6c43f9b2d4cdda9ab03f703c70ad68149095aa05f54aa530cdd810a3d077bae0f0fe04178cc039ef3528111534869fdc9a693bc34b1411ecae720e66135d7ef3cb9846ce17ab638330e377cc5f1ca46d7c35357ce25736eabf087c4e06ac9a5f3df08"}], 0x12e0}, 0x20000894) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002800)={r8, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002840)=@generic={&(0x7f00000027c0)='./file0\x00', r14}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002b00)={r8, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002b40)={&(0x7f0000002880)="fa4a6bd7b8e1e795718f282bb188d19f7a9e51338ef11c52d0d208e64ab7816b42483393640fc95d212991bb547fd5de71cd514818b1a5ec77c1771c64304d70e7be8c2a0392477e4ef7cf10b40fd2d839cf980e7f04c14d8b6f2f97498dbd4796b94a6633d1edccbcb098bdf51ecd852ed2f89a2fd8233d4ad94cfb009a76c911653c567a0b3c7df296db9437f5ceb192ea225e0428dc7164a39c236b6fe0ce398d", &(0x7f0000002940)=""/2, &(0x7f0000002980)="43c9987d042624d39a7a8e76070fda2e966e647750d5074c15141569d6d441b2cd9910aa2f088496f3123cfa9c56692ee7b92a0e014d99124e1deb949ded9938af2e2334678ac02859c6a85aa68b67105c0fd8cb6ac3455247afa2c4b071333cd23a9b0c621adc2efa7c8a4462196cc456fa34f7146d12b174327d92e20e2beae6d3e90032f3744f005b4ca54e3b19ad40771b57d5d6e3d8387650c23a5fd137e95615a373582278c63aa82cbe502e4e88de99a04e73c208f4", &(0x7f0000002a40)="f077fa91a99486c852ca48f4ab854329a8c5c540db0b6b4ebe67b213c7914a4f851dd9038a050f3b9411d8fedbfd6c3ed0015b765241dc9e649fdccf56ff08c5276fd0216f22c70f6394d912496f9cf39910c6a39b9a1493954eadb7d27ea46441add319c9c3bb4221fcd8ff4fdd1fecea20de9c522dedbbfe3ce506a03119b7a9ab66496f60862eacf49f1b24a166549166932cf5e4df65533272e10ebafc7f49e244eb7c3e898f039ed27ccf0da06c0a87348794a1600e7a0e0b63f2dae653", 0x1, r15}, 0x38) r16 = syz_clone(0x8000, &(0x7f0000002c40)="9e4eb2adc5f52435e6898466e3521f625e84c59c97b16b7e9a31db14c2d262f3a7dba595cc8e5a48f96594e6c0ff65088707c2a004703f6b1e19affd00c47a65f117660cdbe51587f40fbe7d948ac7b88fbf82167064769b6dd51a9df117677624025153cdb496a1e8d1ca049a539ef0120fcd26c38d9b4476fa88b78db0a78cedb41be885779f0d48454242789faabb710a21f732392fd88aff0271b1623dda9e1523d8d73c0a3ac5b0d160971fe88c", 0xb0, &(0x7f0000002d00), &(0x7f0000002d40), &(0x7f0000002d80)="604accfc0645318fe67e2e109d") perf_event_open(&(0x7f0000002bc0)={0x5, 0x80, 0x3, 0x11, 0x3, 0x9, 0x0, 0x3, 0x40200, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000002b80), 0x2}, 0x114000, 0x0, 0xffff, 0x3, 0x7ff, 0x5, 0xe, 0x0, 0xc, 0x0, 0x7}, r16, 0xffffffffffffffff, r0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002dc0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003000)=@bpf_ext={0x1c, 0x5, &(0x7f0000002e00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x6}]}, &(0x7f0000002e40)='syzkaller\x00', 0xa, 0xe7, &(0x7f0000002e80)=""/231, 0x41100, 0x4e, '\x00', r10, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xc5ad, r4, 0x4, &(0x7f0000002f80)=[r8], &(0x7f0000002fc0)=[{0x2, 0x1, 0x0, 0x9}, {0x2, 0x4, 0xc, 0xa}, {0x1, 0x5, 0x2, 0x6}, {0x3, 0x3, 0xd, 0x5}], 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000030c0)=r17, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000003400)={0xc, 0x10, &(0x7f00000031c0)=@raw=[@call={0x85, 0x0, 0x0, 0xca}, @map_fd={0x18, 0xb, 0x1, 0x0, r4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x1, 0x2, 0x6, 0x3, 0x7d3ff99af84759a6, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000003240)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x20, '\x00', r10, @fallback=0xa, r11, 0x8, &(0x7f0000003280)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r5, r12, 0x2, &(0x7f0000003380)=[r7, 0xffffffffffffffff], &(0x7f00000033c0)=[{0x4, 0x5, 0x4, 0x6}, {0x1, 0x1, 0xa}], 0x10, 0x4}, 0x94) 2.020020746s ago: executing program 1 (id=2771): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c63", 0xe}], 0x1}, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000680)=@in6={0xa, 0x4e23, 0x9, @mcast1, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000640)="00d6", 0x2}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000500)={0x0, 0xffffffffffffff41, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1, &(0x7f0000000100)=""/19, 0x13}, 0x40001012) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r8) r10 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r10, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) setsockopt$sock_attach_bpf(r10, 0x6, 0x1e, &(0x7f0000000500)=r9, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) 271.619687ms ago: executing program 2 (id=2772): r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x41a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000300)="d2a22170eb6f46898aee9037b47a6b73fc0d7cc18b684806adc3d0dda3fd2e0a28bf4d877e778db18cd90fb05905a03123ae79b4a7d0a9fc089bc90e90f00b1d818f823f7b86f8c8643641ef3e4469bdd6813ce50247415682f8f84ee8a3e462ab1795fe7319131a9f33745acb58678c6c640e937c03cfd08c1b314d2004fb7cac6924ce3c6f0a754540efebe2a5e762d0cf7b6a6c77dbd8866f944e73050e7e5e471a3317de411bd1e38d14f82a0f57cd290482d8ec5b6991aa12204a5b6ae6701f6959", 0xc4}, {&(0x7f0000000400)="547e0cac7c9559bdb72b5a707ef9543b342d9e2353acc5d63f24dcbb18b3a05a9bd588f912de01860caf", 0x2a}, {&(0x7f0000000440)="ebeed91b1c", 0x5}, {&(0x7f0000000540)="829b9560e5e3711970f081cf2025f060f1d16749600b6e5052951511fb", 0x1d}, {&(0x7f0000000200)="859316e22f8a4dfcc24526e087cbcd22cb2793ed43d86a289c288aa83e48eb653f3e46ab44391f815ee44ddf80c975cbd3480aec4158c5127d36a3aeb310b5af67afd56e4154634df18236637629499c5024bfbeb84d6b75ee54a3", 0x5b}], 0x5, &(0x7f00000007c0)=[@ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xf2, 0x3, 0x4, [{@multicast1, 0x5}, {@multicast1, 0x6}, {@private=0xa010100}, {@remote, 0x6}, {@multicast2, 0x9}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @ssrr={0x89, 0x2b, 0x9a, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @multicast1, @empty, @remote, @broadcast, @empty, @multicast1]}]}}}, @ip_retopts={{0x60, 0x0, 0x7, {[@timestamp={0x44, 0x2c, 0x6a, 0x0, 0x5, [0x6, 0x3, 0x4, 0x7, 0x2, 0x85, 0x114b, 0x0, 0x7, 0x2]}, @ra={0x94, 0x4}, @generic={0x86, 0x11, "0610fbb05c1b7d940fe3f6dcd96e18"}, @generic={0x0, 0xc, "b0a8fb65c18c7c9c2ace"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0xe8}, 0x0) 81.606986ms ago: executing program 0 (id=2773): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x8100000}, 0x40001) 0s ago: executing program 0 (id=2774): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="05"], 0x10) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f00000000c0), &(0x7f0000000100)=r4}, 0x20) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x12, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x40004000) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x33fe0) kernel console output (not intermixed with test programs): 386.721044][T11039] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1334'. [ 387.191471][T11042] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1334'. [ 389.346154][T11073] netlink: 13695 bytes leftover after parsing attributes in process `syz.3.1339'. [ 391.048015][T11078] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 391.068262][T11077] netlink: 'syz.3.1342': attribute type 2 has an invalid length. [ 391.119139][T11078] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 391.154226][T11079] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 391.326229][T11079] netlink: 'syz.0.1340': attribute type 3 has an invalid length. [ 391.368946][T11079] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1340'. [ 391.674419][T11084] netlink: 'syz.3.1344': attribute type 10 has an invalid length. [ 391.958049][T11084] team0: Device hsr_slave_0 failed to register rx_handler [ 392.111427][T11075] netlink: 'syz.0.1340': attribute type 29 has an invalid length. [ 393.210157][T11107] sit0: entered allmulticast mode [ 393.329483][T11102] sit0: left allmulticast mode [ 394.173301][ T5788] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 394.422741][T11126] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.1351'. [ 394.910249][T11140] netlink: 'syz.3.1355': attribute type 29 has an invalid length. [ 395.127863][T11140] netlink: 'syz.3.1355': attribute type 29 has an invalid length. [ 395.226668][T11137] netlink: 'syz.3.1355': attribute type 29 has an invalid length. [ 395.243556][T11140] netlink: 'syz.3.1355': attribute type 3 has an invalid length. [ 395.291008][T11140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1355'. [ 395.369056][T11137] netlink: 'syz.3.1355': attribute type 29 has an invalid length. [ 395.386328][T11147] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.1356'. [ 395.386368][T11147] netlink: 'syz.2.1356': attribute type 2 has an invalid length. [ 395.386498][T11147] netlink: 'syz.2.1356': attribute type 1 has an invalid length. [ 395.544047][T11144] netlink: 'syz.0.1357': attribute type 10 has an invalid length. [ 395.693514][T11144] team0: Device hsr_slave_0 failed to register rx_handler [ 396.261318][T11159] sit0: left promiscuous mode [ 396.535835][T11159] sit0: left allmulticast mode [ 397.775131][T11192] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1370'. [ 397.799947][T11192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.838005][T11198] bond0: entered promiscuous mode [ 397.846881][T11198] bond_slave_0: entered promiscuous mode [ 397.852843][T11198] bond_slave_1: entered promiscuous mode [ 397.860619][T11198] bridge0: entered promiscuous mode [ 397.869428][T11198] bond0: entered allmulticast mode [ 397.877902][T11198] bond_slave_0: entered allmulticast mode [ 397.891031][T11198] bond_slave_1: entered allmulticast mode [ 397.954158][T11200] netlink: 'syz.1.1369': attribute type 10 has an invalid length. [ 398.136163][T11206] netlink: 'syz.3.1372': attribute type 5 has an invalid length. [ 398.426589][T11214] sit0: left promiscuous mode [ 398.632345][T11214] sit0: left allmulticast mode [ 398.928940][T11229] netlink: 'syz.2.1380': attribute type 3 has an invalid length. [ 398.957661][T11229] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1380'. [ 399.468900][T11242] netlink: 'syz.0.1385': attribute type 2 has an invalid length. [ 399.519083][T11242] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1385'. [ 400.482518][T11243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.486826][T11280] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1393'. [ 402.547062][T11289] : port 1(ip6gretap0) entered blocking state [ 402.553407][T11289] : port 1(ip6gretap0) entered disabled state [ 402.560185][T11289] ip6gretap0: entered allmulticast mode [ 402.567547][T11289] ip6gretap0: entered promiscuous mode [ 402.692366][T11290] ip6gretap0: left allmulticast mode [ 402.704460][T11290] ip6gretap0: left promiscuous mode [ 402.709963][T11290] : port 1(ip6gretap0) entered disabled state [ 403.139251][T11299] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1397'. [ 404.194047][T11327] sock: sock_set_timeout: `syz.2.1406' (pid 11327) tries to set negative timeout [ 404.529932][T11336] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1408'. [ 404.757060][T11340] netlink: 'syz.0.1409': attribute type 21 has an invalid length. [ 404.766366][T11340] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1409'. [ 405.044037][T11356] netlink: 'syz.1.1412': attribute type 1 has an invalid length. [ 405.080070][T11356] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.1412'. [ 405.534469][T11365] netlink: 'syz.2.1415': attribute type 21 has an invalid length. [ 406.582826][T11376] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1419'. [ 406.595127][T11376] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1419'. [ 408.239026][T11420] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1431'. [ 408.478493][T11428] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1434'. [ 408.979630][T11428] hsr_slave_0: left promiscuous mode [ 408.992062][T11428] hsr_slave_1: left promiscuous mode [ 409.009154][T11428] bridge0: port 3(hsr0) entered disabled state [ 409.033109][T11428] hsr0 (unregistering): left allmulticast mode [ 409.040204][T11428] bridge0: port 3(hsr0) entered disabled state [ 409.051919][T11433] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1435'. [ 409.217204][T11436] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1436'. [ 409.255473][T11436] netlink: 4548 bytes leftover after parsing attributes in process `syz.1.1436'. [ 409.270753][T11436] netlink: 'syz.1.1436': attribute type 1 has an invalid length. [ 409.660716][T11444] Ÿë: port 1(ip6gretap0) entered blocking state [ 409.671612][T11444] Ÿë: port 1(ip6gretap0) entered disabled state [ 409.703114][T11444] ip6gretap0: entered allmulticast mode [ 409.732714][T11458] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 409.753728][T11458] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1441'. [ 409.997765][T11444] ip6gretap0: entered promiscuous mode [ 410.372428][T11474] netlink: 826 bytes leftover after parsing attributes in process `syz.0.1446'. [ 410.431335][T11476] netlink: 826 bytes leftover after parsing attributes in process `syz.0.1446'. [ 410.967555][T11482] syzkaller0: entered promiscuous mode [ 410.975072][T11482] syzkaller0: entered allmulticast mode [ 413.438706][T11509] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1455'. [ 413.448174][T11511] netlink: 'syz.1.1456': attribute type 39 has an invalid length. [ 416.067871][T11569] netlink: 'syz.1.1470': attribute type 10 has an invalid length. [ 416.470833][T11586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1476'. [ 416.487165][T11586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1476'. [ 416.502277][T11586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1476'. [ 416.519387][T11586] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1476'. [ 418.368878][T11609] netlink: 668 bytes leftover after parsing attributes in process `syz.1.1484'. [ 418.405675][T11609] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 418.424281][T11609] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 418.624573][T11622] netlink: 'syz.3.1488': attribute type 17 has an invalid length. [ 418.646685][T11622] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 418.692960][T11625] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.1489'. [ 420.048543][T11669] netlink: 'syz.3.1503': attribute type 29 has an invalid length. [ 420.084180][T11669] netlink: 'syz.3.1503': attribute type 29 has an invalid length. [ 420.735692][T11678] netlink: 'syz.1.1507': attribute type 46 has an invalid length. [ 420.780342][T11678] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1507'. [ 421.812315][T11690] netlink: 'syz.1.1508': attribute type 9 has an invalid length. [ 421.840852][T11696] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1510'. [ 421.852660][T11690] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1508'. [ 421.865430][T11693] netlink: 'syz.1.1508': attribute type 9 has an invalid length. [ 421.873235][T11693] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1508'. [ 422.004262][T11704] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1512'. [ 422.007944][T11697] delete_channel: no stack [ 422.029014][T11707] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1512'. [ 422.356600][T11721] tun0: tun_chr_ioctl cmd 1074025681 [ 422.377418][T11723] tun0: tun_chr_ioctl cmd 1074025673 [ 422.394336][T11722] tun0: tun_chr_ioctl cmd 1074025681 [ 423.175173][T11743] netlink: 'syz.0.1522': attribute type 3 has an invalid length. [ 423.185663][T11743] netlink: 'syz.0.1522': attribute type 4 has an invalid length. [ 423.275820][T11743] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1522'. [ 423.361815][T11746] macvlan0: entered promiscuous mode [ 423.368621][T11746] macvlan0: entered allmulticast mode [ 423.376216][T11746] veth1_vlan: entered allmulticast mode [ 423.399096][T11744] netlink: 'syz.1.1521': attribute type 10 has an invalid length. [ 423.739107][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.867520][T11744] bridge_slave_1: left allmulticast mode [ 423.873280][T11744] bridge_slave_1: left promiscuous mode [ 423.914563][T11744] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.223997][T11757] dvmrp1: tun_chr_ioctl cmd 1074025698 [ 426.937304][T11807] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1539'. [ 427.505743][T11826] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1542'. [ 427.534107][T11831] netlink: 'syz.0.1547': attribute type 21 has an invalid length. [ 427.564167][T11826] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1542'. [ 427.607851][T11816] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1542'. [ 427.625477][T11836] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1542'. [ 427.659140][T11816] netlink: 'syz.1.1542': attribute type 10 has an invalid length. [ 427.682595][T11838] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.1550'. [ 427.698627][T11816] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1542'. [ 427.713830][T11838] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1550'. [ 427.729681][ T5788] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 427.785434][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1550'. [ 427.912993][T11841] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1551'. [ 428.758902][T11857] syzkaller0: entered promiscuous mode [ 428.792991][T11857] syzkaller0: entered allmulticast mode [ 432.876036][T11900] -: renamed from syzkaller0 [ 432.995991][T11911] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1566'. [ 433.152893][T11906] netlink: 'syz.3.1568': attribute type 10 has an invalid length. [ 433.871460][T11906] team_slave_0: left promiscuous mode [ 433.881328][T11906] team_slave_0: left allmulticast mode [ 433.954757][T11906] team0 (unregistering): Port device team_slave_0 removed [ 433.964954][T11906] team_slave_1: left promiscuous mode [ 433.970549][T11906] team_slave_1: left allmulticast mode [ 433.982523][T11906] team0 (unregistering): Port device team_slave_1 removed [ 433.996143][T11906] netdevsim netdevsim3 ÿÿÿÿÿÿ: left promiscuous mode [ 434.003039][T11906] netdevsim netdevsim3 ÿÿÿÿÿÿ: left allmulticast mode [ 434.015808][T11906] team0 (unregistering): Port device ÿÿÿÿÿÿ removed [ 434.555554][T11938] netlink: 'syz.1.1572': attribute type 3 has an invalid length. [ 434.581562][T11938] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1572'. [ 435.787976][T11968] netlink: 'syz.0.1590': attribute type 13 has an invalid length. [ 435.905649][T11968] netlink: 'syz.0.1590': attribute type 58 has an invalid length. [ 435.981718][T11968] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1590'. [ 438.922762][T12042] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1598'. [ 438.953865][T12042] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 439.202884][T12055] netlink: 'syz.0.1600': attribute type 153 has an invalid length. [ 439.222764][T12055] netlink: 'syz.0.1600': attribute type 1 has an invalid length. [ 439.243248][T12055] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1600'. [ 439.816689][T12074] netlink: 'syz.3.1605': attribute type 10 has an invalid length. [ 440.257931][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.266975][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.446689][T12096] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1610'. [ 441.031355][T12103] tap0: tun_chr_ioctl cmd 1074025677 [ 441.037701][T12103] tap0: linktype set to 768 [ 441.245627][T12111] netlink: 'syz.0.1616': attribute type 3 has an invalid length. [ 441.279653][T12111] netlink: 'syz.0.1616': attribute type 1 has an invalid length. [ 441.609787][T12117] syzkaller0: entered promiscuous mode [ 441.684581][T12117] syzkaller0: entered allmulticast mode [ 441.753233][T12127] netlink: 'syz.1.1620': attribute type 3 has an invalid length. [ 441.762298][T12118] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1618'. [ 441.839623][T12127] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1620'. [ 442.087678][T12126] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1620'. [ 442.324779][T12118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.347876][T12118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.363575][T12118] bond0 (unregistering): (slave ..ãc¤±): Releasing backup interface [ 442.378719][T12118] bond0 (unregistering): Released all slaves [ 442.471039][T12126] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1620'. [ 444.338374][T12136] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 444.456174][T12143] netlink: 'syz.2.1624': attribute type 9 has an invalid length. [ 444.489844][T12143] netlink: 155304 bytes leftover after parsing attributes in process `syz.2.1624'. [ 444.622822][T12153] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1627'. [ 444.897546][T12147] netlink: 'syz.0.1625': attribute type 2 has an invalid length. [ 444.929077][T12147] netlink: 'syz.0.1625': attribute type 8 has an invalid length. [ 444.954293][T12147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1625'. [ 444.974604][T12165] syz.3.1629[12165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.974758][T12165] syz.3.1629[12165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 444.986802][T12148] netlink: 'syz.0.1625': attribute type 2 has an invalid length. [ 445.063559][T12148] netlink: 'syz.0.1625': attribute type 8 has an invalid length. [ 445.103496][T12148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1625'. [ 445.117067][T12168] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.1629'. [ 445.145242][T12166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1625'. [ 445.169883][T12147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1625'. [ 445.221664][T12176] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1630'. [ 445.452967][T12181] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1632'. [ 445.475510][T12179] can: request_module (can-proto-0) failed. [ 445.735499][T12188] netlink: 'syz.2.1634': attribute type 21 has an invalid length. [ 445.770167][T12188] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1634'. [ 445.816586][T12188] netlink: 'syz.2.1634': attribute type 5 has an invalid length. [ 446.475731][T12194] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check. [ 447.212334][T12212] netlink: 'syz.1.1639': attribute type 21 has an invalid length. [ 447.234566][T12212] netlink: 'syz.1.1639': attribute type 5 has an invalid length. [ 447.953083][T12202] delete_channel: no stack [ 447.964043][T12202] delete_channel: no stack [ 452.229051][T12254] validate_nla: 2 callbacks suppressed [ 452.229067][T12254] netlink: 'syz.2.1649': attribute type 4 has an invalid length. [ 452.273892][T12254] __nla_validate_parse: 4 callbacks suppressed [ 452.273911][T12254] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1649'. [ 452.305055][T12254] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 452.347327][T12262] netlink: 'syz.2.1649': attribute type 27 has an invalid length. [ 452.370423][T12262] netlink: 'syz.2.1649': attribute type 3 has an invalid length. [ 453.164724][T12274] netlink: 'syz.1.1655': attribute type 10 has an invalid length. [ 453.825084][T12279] netlink: 'syz.2.1657': attribute type 4 has an invalid length. [ 453.843257][T12279] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1657'. [ 454.002399][T12284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1659'. [ 454.069866][T12284] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1659'. [ 458.448846][T12352] netlink: 'syz.0.1672': attribute type 7 has an invalid length. [ 458.684558][T12357] netlink: 'syz.1.1675': attribute type 2 has an invalid length. [ 458.723798][T12357] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 458.915688][T12362] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1674'. [ 460.737885][T12406] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1688'. [ 460.846809][T12411] netlink: 'syz.3.1690': attribute type 29 has an invalid length. [ 460.869417][T12411] netlink: 'syz.3.1690': attribute type 29 has an invalid length. [ 461.324378][T12427] netlink: 'syz.3.1694': attribute type 21 has an invalid length. [ 461.357006][T12427] netlink: 'syz.3.1694': attribute type 21 has an invalid length. [ 461.410498][T12427] netlink: 'syz.3.1694': attribute type 21 has an invalid length. [ 461.449178][T12427] netlink: 'syz.3.1694': attribute type 21 has an invalid length. [ 461.493830][T12427] netlink: 'syz.3.1694': attribute type 21 has an invalid length. [ 462.438824][T12431] IPv6: NLM_F_CREATE should be specified when creating new route [ 462.465042][T12431] IPv6: Can't replace route, no match found [ 463.590146][T12453] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1701'. [ 463.901313][T12468] validate_nla: 61 callbacks suppressed [ 463.901359][T12468] netlink: 'syz.1.1705': attribute type 14 has an invalid length. [ 463.933860][T12468] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1705'. [ 463.945494][ T5788] Bluetooth: hci0: ISO packet for unknown connection handle 2878 [ 464.068633][T12473] netlink: 'syz.3.1707': attribute type 10 has an invalid length. [ 464.113866][T12473] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1707'. [ 464.734795][T12496] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 464.755343][T12496] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 464.955925][T12500] syzkaller1: tun_chr_ioctl cmd 35108 [ 465.007511][T12498] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 467.096039][T12547] netlink: 'syz.2.1726': attribute type 5 has an invalid length. [ 468.552436][T12581] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1735'. [ 469.650965][T12625] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.427764][T12654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1746'. [ 470.473210][T12654] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1746'. [ 470.504975][T12651] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1746'. [ 470.562895][T12646] netlink: 'syz.2.1744': attribute type 10 has an invalid length. [ 470.611726][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1744'. [ 470.676541][T12646] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 470.694049][T12646] netlink: 'syz.2.1744': attribute type 10 has an invalid length. [ 470.702007][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1744'. [ 470.712825][T12646] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 470.731230][T12655] netlink: 'syz.1.1745': attribute type 15 has an invalid length. [ 470.751399][T12655] netlink: 'syz.1.1745': attribute type 7 has an invalid length. [ 470.764139][T12646] netlink: 'syz.2.1744': attribute type 10 has an invalid length. [ 470.772343][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1744'. [ 470.784263][T12646] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 470.811145][T12646] netlink: 'syz.2.1744': attribute type 10 has an invalid length. [ 470.841654][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1744'. [ 470.894320][T12646] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 470.953903][T12646] netlink: 'syz.2.1744': attribute type 10 has an invalid length. [ 470.985240][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1744'. [ 471.004117][T12646] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 471.044043][T12646] netlink: 'syz.2.1744': attribute type 10 has an invalid length. [ 471.052157][T12646] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1744'. [ 471.078173][T12646] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 471.408121][T12681] netlink: 'syz.2.1751': attribute type 39 has an invalid length. [ 472.500244][T12714] can: request_module (can-proto-0) failed. [ 473.274911][T12710] netlink: 'syz.3.1761': attribute type 2 has an invalid length. [ 473.285706][T12710] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1761'. [ 473.965105][T12742] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check. [ 474.287527][T12745] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 474.294449][T12745] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 474.346739][T12745] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 474.370142][T12745] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 474.392047][T12745] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 475.754480][T12780] sock: sock_set_timeout: `syz.3.1779' (pid 12780) tries to set negative timeout [ 478.548149][T12798] : entered allmulticast mode [ 478.639560][T12802] __nla_validate_parse: 4 callbacks suppressed [ 478.639584][T12802] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1785'. [ 479.073718][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 479.114550][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 479.131826][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 479.203070][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 479.236382][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 479.263964][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 479.334107][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 479.399335][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 479.435881][T12813] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1788'. [ 481.533440][T12872] validate_nla: 4 callbacks suppressed [ 481.533461][T12872] netlink: 'syz.1.1803': attribute type 10 has an invalid length. [ 482.902013][T12879] netlink: 'syz.3.1807': attribute type 10 has an invalid length. [ 482.941421][T12884] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 482.966363][T12884] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 483.095167][T12890] netlink: 'syz.3.1809': attribute type 46 has an invalid length. [ 483.185480][T12887] veth1_to_bond: entered allmulticast mode [ 483.243027][T12888] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.142783][T12894] __nla_validate_parse: 28 callbacks suppressed [ 486.142805][T12894] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1811'. [ 486.617733][T12938] netlink: 'syz.1.1821': attribute type 11 has an invalid length. [ 487.004425][T12951] netlink: 'syz.3.1825': attribute type 10 has an invalid length. [ 487.049433][T12951] batman_adv: batadv0: Adding interface: ÿÿÿÿÿÿ [ 487.069355][T12951] batman_adv: batadv0: The MTU of interface ÿÿÿÿÿÿ is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.137834][T12951] batman_adv: batadv0: Not using interface ÿÿÿÿÿÿ (retrying later): interface not active [ 487.438041][T12960] netlink: 'syz.3.1828': attribute type 2 has an invalid length. [ 487.455529][T12960] netlink: 'syz.3.1828': attribute type 1 has an invalid length. [ 487.463362][T12960] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1828'. [ 488.127244][T12990] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1838'. [ 488.206603][T12990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1838'. [ 488.250969][T12990] netlink: 'syz.3.1838': attribute type 10 has an invalid length. [ 488.279701][T12990] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1838'. [ 488.310194][T12990] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 488.588566][T13009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1842'. [ 488.835301][T13020] netlink: zone id is out of range [ 488.846346][T13020] netlink: set zone limit has 8 unknown bytes [ 489.042812][T13024] netlink: 'syz.2.1846': attribute type 46 has an invalid length. [ 489.074198][T13024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1846'. [ 489.164978][T13028] netlink: 'syz.0.1848': attribute type 30 has an invalid length. [ 489.177270][T13029] netlink: 'syz.0.1848': attribute type 15 has an invalid length. [ 490.239459][T13058] netlink: 'syz.3.1855': attribute type 21 has an invalid length. [ 490.255067][T13058] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1855'. [ 490.347543][T13063] netlink: 'syz.0.1857': attribute type 9 has an invalid length. [ 490.365791][T13063] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1857'. [ 490.387969][T13067] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1858'. [ 491.357750][T13098] __nla_validate_parse: 1 callbacks suppressed [ 491.357768][T13098] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.1866'. [ 491.568038][T13113] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1871'. [ 491.831350][T13119] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1873'. [ 493.299192][T13144] mac80211_hwsim hwsim3 ..ãc¤±: renamed from wlan1 (while UP) [ 494.178032][T13146] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1881'. [ 494.191287][T13149] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1880'. [ 494.509429][T13153] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1882'. [ 494.838280][T13174] validate_nla: 3 callbacks suppressed [ 494.838299][T13174] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 494.880334][T13174] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1888'. [ 494.897865][T13174] netlink: 'syz.3.1888': attribute type 10 has an invalid length. [ 494.906068][T13174] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1888'. [ 494.930486][T13173] netlink: 'syz.1.1887': attribute type 9 has an invalid length. [ 494.939008][T13173] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1887'. [ 494.981792][T13173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1887'. [ 495.436913][T13198] netlink: 'syz.1.1892': attribute type 10 has an invalid length. [ 495.829648][T13211] netlink: 'syz.2.1898': attribute type 9 has an invalid length. [ 495.883451][T13213] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 495.901825][T13213] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 496.010848][T13213] nr0: port 1(hsr0) entered blocking state [ 496.018559][T13213] nr0: port 1(hsr0) entered forwarding state [ 496.059744][T13213] hsr0: left allmulticast mode [ 496.066260][T13213] hsr_slave_0: left allmulticast mode [ 496.072258][T13213] hsr_slave_1: left allmulticast mode [ 496.081851][T13213] nr0: port 1(hsr0) entered disabled state [ 496.133258][T13222] openvswitch: netlink: Flow key attribute not present in set flow. [ 496.143079][T13213] bridge0: port 1(hsr0) entered blocking state [ 496.159670][T13213] bridge0: port 1(hsr0) entered disabled state [ 496.180189][T13213] hsr0: entered allmulticast mode [ 496.197403][T13213] hsr_slave_0: entered allmulticast mode [ 496.203754][T13213] hsr_slave_1: entered allmulticast mode [ 496.399411][T13231] __nla_validate_parse: 5 callbacks suppressed [ 496.399429][T13231] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1905'. [ 497.254857][T13251] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1908'. [ 498.157597][T13271] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.1915'. [ 498.185676][T13271] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 498.322315][T13283] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1917'. [ 498.348395][T13283] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1917'. [ 498.620791][T13286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1917'. [ 498.647558][T13288] delete_channel: no stack [ 499.018918][T13298] netlink: 13183 bytes leftover after parsing attributes in process `syz.1.1921'. [ 500.432798][T13308] netlink: 'syz.3.1924': attribute type 13 has an invalid length. [ 500.447557][T13308] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1924'. [ 500.508451][T13314] netlink: 'syz.2.1925': attribute type 27 has an invalid length. [ 500.568690][T13314] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1925'. [ 500.671031][T13314] netlink: 279 bytes leftover after parsing attributes in process `syz.2.1925'. [ 500.995717][T13326] netlink: 'syz.3.1927': attribute type 10 has an invalid length. [ 501.348817][T13332] netlink: 'syz.0.1928': attribute type 10 has an invalid length. [ 501.641911][T13332] veth0_vlan: left promiscuous mode [ 501.710218][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.716758][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.773411][T13332] veth0_vlan: entered promiscuous mode [ 501.799887][T13332] team0: Device veth0_vlan failed to register rx_handler [ 502.139221][T13337] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1930'. [ 502.820559][T13358] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1937'. [ 502.907267][T13358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 503.027980][T13362] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1938'. [ 504.523260][T13396] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1946'. [ 504.594127][T13396] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1946'. [ 505.923952][T13398] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1947'. [ 507.915372][T13439] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1954'. [ 508.054831][T13439] tc_dump_action: action bad kind [ 510.991603][T13480] netlink: 'syz.3.1966': attribute type 3 has an invalid length. [ 511.850118][T13489] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 511.900473][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 513.704373][T13505] delete_channel: no stack [ 513.709681][T13505] delete_channel: no stack [ 513.854461][T13512] sctp: [Deprecated]: syz.1.1975 (pid 13512) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.854461][T13512] Use struct sctp_sack_info instead [ 513.895166][T13512] netlink: 'syz.1.1975': attribute type 2 has an invalid length. [ 514.780455][T13522] netlink: 'syz.1.1978': attribute type 41 has an invalid length. [ 518.810585][T13580] netlink: 2903 bytes leftover after parsing attributes in process `syz.0.1992'. [ 519.230910][T13588] netlink: 'syz.2.1994': attribute type 21 has an invalid length. [ 519.308838][T13588] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1994'. [ 519.349270][T13592] netlink: 'syz.2.1994': attribute type 2 has an invalid length. [ 519.431293][T13591] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1996'. [ 519.453765][T13592] netlink: 9039 bytes leftover after parsing attributes in process `syz.2.1994'. [ 519.786675][T13597] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1997'. [ 520.456157][T13617] netlink: 'syz.1.2002': attribute type 3 has an invalid length. [ 520.488228][T13617] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2002'. [ 520.894738][T13637] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2006'. [ 522.229906][T13675] netlink: 'syz.0.2017': attribute type 19 has an invalid length. [ 522.239343][T13675] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2017'. [ 522.269586][T13677] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2018'. [ 522.596738][T13687] syzkaller0: entered promiscuous mode [ 522.608433][T13687] syzkaller0: entered allmulticast mode [ 522.968957][T13701] netlink: 'syz.3.2023': attribute type 10 has an invalid length. [ 523.005132][T13701] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2023'. [ 523.068434][T13701] netlink: 'syz.3.2023': attribute type 10 has an invalid length. [ 523.159304][T13712] netlink: 'syz.1.2025': attribute type 29 has an invalid length. [ 523.180366][T13712] netlink: 'syz.1.2025': attribute type 29 has an invalid length. [ 523.193010][T13712] netlink: 'syz.1.2025': attribute type 29 has an invalid length. [ 523.203032][T13712] netlink: 'syz.1.2025': attribute type 29 has an invalid length. [ 525.937602][T13752] __nla_validate_parse: 2 callbacks suppressed [ 525.937621][T13752] netlink: 60243 bytes leftover after parsing attributes in process `syz.2.2034'. [ 526.000820][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 527.082637][T13765] validate_nla: 4 callbacks suppressed [ 527.082683][T13765] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 527.099966][T13765] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2038'. [ 528.491442][T13776] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2040'. [ 528.503082][T13774] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2041'. [ 528.781742][T13774] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.896523][T13776] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 528.945026][T13776] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.2040'. [ 529.408237][T13787] netlink: 'syz.1.2044': attribute type 3 has an invalid length. [ 529.493896][T13787] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2044'. [ 529.868448][T13793] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 530.974230][T13803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2048'. [ 530.983417][T13803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2048'. [ 531.080230][T13802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2048'. [ 531.088578][T13806] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2048'. [ 531.184651][T13801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2048'. [ 531.234785][T13803] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 532.655304][T13816] netlink: 'syz.0.2051': attribute type 13 has an invalid length. [ 532.663243][T13816] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2051'. [ 532.763115][T13816] erspan0: refused to change device tx_queue_len [ 532.931010][T13818] netlink: 105940 bytes leftover after parsing attributes in process `syz.1.2052'. [ 533.035857][T13818] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.2052'. [ 533.076361][T13818] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2052'. [ 533.109752][T13818] netlink: 'syz.1.2052': attribute type 28 has an invalid length. [ 533.134698][T13818] netlink: 'syz.1.2052': attribute type 29 has an invalid length. [ 533.153949][T13818] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2052'. [ 534.109907][T13839] netlink: 'syz.2.2059': attribute type 9 has an invalid length. [ 534.317516][T13849] syzkaller0: entered promiscuous mode [ 534.323082][T13849] syzkaller0: entered allmulticast mode [ 535.555937][T13853] netlink: 'syz.0.2062': attribute type 10 has an invalid length. [ 535.585360][T13853] dummy0: entered promiscuous mode [ 535.590601][T13853] dummy0: entered allmulticast mode [ 535.605396][T13853] bridge0: port 3(dummy0) entered blocking state [ 535.615858][T13853] bridge0: port 3(dummy0) entered disabled state [ 536.475739][T13873] __nla_validate_parse: 5 callbacks suppressed [ 536.475757][T13873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2065'. [ 536.522764][T13873] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2065'. [ 536.597860][T13872] netlink: 'syz.3.2069': attribute type 10 has an invalid length. [ 536.610695][T13872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2069'. [ 536.658868][T13876] netlink: 'syz.1.2070': attribute type 3 has an invalid length. [ 536.679588][T13876] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2070'. [ 536.918113][T13880] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2071'. [ 537.170192][T13876] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2070'. [ 537.273962][T13876] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2070'. [ 538.110889][T13903] tap0: tun_chr_ioctl cmd 2148553947 [ 538.309047][T13906] netlink: 'syz.1.2077': attribute type 10 has an invalid length. [ 539.508845][T13938] netlink: 167060 bytes leftover after parsing attributes in process `syz.0.2086'. [ 539.663732][T13938] openvswitch: netlink: Flow key attr not present in new flow. [ 539.878572][T13943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 540.407087][T13948] pim6reg1: entered promiscuous mode [ 540.438234][T13945] netlink: 201656 bytes leftover after parsing attributes in process `syz.2.2089'. [ 540.850372][T13959] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2094'. [ 540.862502][T13959] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 541.693356][T13987] netlink: 161340 bytes leftover after parsing attributes in process `syz.1.2097'. [ 541.770397][T13992] netlink: 'syz.3.2098': attribute type 10 has an invalid length. [ 541.913529][T13994] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2099'. [ 541.959232][T13994] netlink: 'syz.2.2099': attribute type 39 has an invalid length. [ 542.375468][T14016] netlink: 'syz.0.2104': attribute type 29 has an invalid length. [ 544.501941][T14010] netlink: 'syz.3.2102': attribute type 2 has an invalid length. [ 544.545650][T14011] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2102'. [ 544.563641][T14016] netlink: 'syz.0.2104': attribute type 29 has an invalid length. [ 544.571757][T14021] netlink: 'syz.1.2105': attribute type 21 has an invalid length. [ 544.604264][T14021] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2105'. [ 544.974292][T14029] netlink: 'syz.2.2109': attribute type 10 has an invalid length. [ 545.014154][T14029] veth0_vlan: left promiscuous mode [ 545.020658][T14029] veth0_vlan: entered promiscuous mode [ 545.046597][T14029] team0: Device veth0_vlan failed to register rx_handler [ 545.356637][T14048] netlink: 'syz.0.2106': attribute type 10 has an invalid length. [ 545.364744][T14048] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2106'. [ 545.471032][T14040] syzkaller0: entered promiscuous mode [ 545.482425][T14040] syzkaller0: entered allmulticast mode [ 547.534501][T14060] sit0: entered allmulticast mode [ 547.929160][T14076] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.2120'. [ 548.004849][T14077] netlink: 'syz.3.2118': attribute type 21 has an invalid length. [ 548.125383][T14083] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2123'. [ 548.162015][T14084] netlink: 'syz.0.2122': attribute type 13 has an invalid length. [ 548.177868][T14081] netlink: 'syz.1.2121': attribute type 2 has an invalid length. [ 548.188887][T14084] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2122'. [ 548.232543][T14084] erspan0: refused to change device tx_queue_len [ 548.264920][T14088] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2123'. [ 549.181202][T14103] netlink: 'syz.1.2127': attribute type 2 has an invalid length. [ 549.194306][T14103] netlink: 'syz.1.2127': attribute type 8 has an invalid length. [ 549.216842][T14103] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2127'. [ 549.472269][T14115] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2130'. [ 549.911169][T14135] validate_nla: 1 callbacks suppressed [ 549.911187][T14135] netlink: 'syz.2.2137': attribute type 2 has an invalid length. [ 549.949493][T14135] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 549.957973][T14135] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2137'. [ 549.973092][T14135] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2137'. [ 549.999589][T14135] netlink: 'syz.2.2137': attribute type 1 has an invalid length. [ 550.019643][T14135] netlink: 'syz.2.2137': attribute type 4 has an invalid length. [ 550.027715][T14135] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2137'. [ 550.302731][T14148] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2141'. [ 550.316485][T14148] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check. [ 550.456228][T14152] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.463826][T14152] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.471705][T14152] bridge0: entered allmulticast mode [ 550.709204][T14162] netlink: 'syz.3.2145': attribute type 3 has an invalid length. [ 550.792604][T14168] netlink: 'syz.3.2145': attribute type 39 has an invalid length. [ 553.167140][T14212] __nla_validate_parse: 3 callbacks suppressed [ 553.167159][T14212] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2158'. [ 553.947537][T14239] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2165'. [ 553.993751][T14239] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 554.044324][T14241] netlink: 'syz.3.2165': attribute type 10 has an invalid length. [ 554.072936][T14241] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2165'. [ 554.124398][T14246] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2166'. [ 554.154230][T14242] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2165'. [ 554.671143][T14267] netlink: 'syz.1.2169': attribute type 29 has an invalid length. [ 554.716513][T14267] netlink: 'syz.1.2169': attribute type 29 has an invalid length. [ 555.054987][T14274] netlink: 'syz.3.2172': attribute type 33 has an invalid length. [ 555.102733][T14274] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2172'. [ 555.129766][T14274] `: renamed from ip6tnl0 (while UP) [ 555.816571][T14274] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 556.448804][T14303] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2174'. [ 558.124573][T14317] netlink: 60243 bytes leftover after parsing attributes in process `syz.0.2178'. [ 558.199679][T14317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2178'. [ 559.799879][T14343] netlink: 'syz.3.2184': attribute type 29 has an invalid length. [ 559.844396][T14343] netlink: 'syz.3.2184': attribute type 29 has an invalid length. [ 561.836215][T14375] ±ÿ: renamed from lo (while UP) [ 562.789675][T14377] syzkaller0: entered promiscuous mode [ 562.796289][T14377] syzkaller0: entered allmulticast mode [ 563.139259][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.147551][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.744653][T14447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2204'. [ 567.995003][T14430] netlink: 'syz.3.2200': attribute type 10 has an invalid length. [ 568.002972][T14447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2204'. [ 568.141520][T14457] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2205'. [ 568.556883][T14463] netlink: 'syz.1.2209': attribute type 4 has an invalid length. [ 568.594893][T14463] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2209'. [ 568.724867][T14462] netlink: 'syz.1.2209': attribute type 4 has an invalid length. [ 568.733050][T14462] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2209'. [ 569.165992][T14488] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2213'. [ 570.108724][ T5788] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 571.796160][T14544] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2228'. [ 573.575933][T14571] netlink: 'syz.0.2237': attribute type 10 has an invalid length. [ 574.254030][T14590] tap0: tun_chr_ioctl cmd 1074025680 [ 574.545333][T14595] netlink: 'syz.1.2243': attribute type 21 has an invalid length. [ 574.553423][T14595] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.2243'. [ 574.788764][T14595] bridge0: port 2(ip6gretap0) entered blocking state [ 574.820234][T14595] bridge0: port 2(ip6gretap0) entered disabled state [ 574.852494][T14595] ip6gretap0: entered allmulticast mode [ 574.882702][T14595] ip6gretap0: entered promiscuous mode [ 574.899613][T14595] bridge0: port 2(ip6gretap0) entered blocking state [ 574.906573][T14595] bridge0: port 2(ip6gretap0) entered forwarding state [ 575.163047][T14602] netlink: 'syz.3.2245': attribute type 17 has an invalid length. [ 575.275889][T14602] netlink: 'syz.3.2245': attribute type 21 has an invalid length. [ 575.300015][T14602] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2245'. [ 575.354559][T14602] netlink: 'syz.3.2245': attribute type 4 has an invalid length. [ 575.384589][T14602] netlink: 'syz.3.2245': attribute type 3 has an invalid length. [ 575.443955][T14602] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2245'. [ 575.484208][T14604] netlink: 'syz.2.2246': attribute type 39 has an invalid length. [ 578.647253][T14665] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2261'. [ 580.249229][T14680] syzkaller0: entered promiscuous mode [ 580.264675][T14680] syzkaller0: entered allmulticast mode [ 581.040779][T14697] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2269'. [ 582.481085][T14716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2275'. [ 583.165670][T14716] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2275'. [ 583.175207][T14717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2275'. [ 583.185324][T14719] netlink: 'syz.3.2275': attribute type 10 has an invalid length. [ 583.263417][T14722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2275'. [ 583.289787][T14724] netlink: 'syz.1.2276': attribute type 10 has an invalid length. [ 583.304071][T14724] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2276'. [ 583.325701][T14724] netlink: 'syz.1.2276': attribute type 10 has an invalid length. [ 583.341058][T14724] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2276'. [ 583.446723][T14730] netlink: 'syz.3.2279': attribute type 13 has an invalid length. [ 583.473794][T14730] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2279'. [ 583.492799][T14730] syz_tun: refused to change device tx_queue_len [ 583.515572][T14730] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 583.710489][T14742] netlink: 'syz.0.2281': attribute type 21 has an invalid length. [ 583.741542][T14742] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2281'. [ 583.842672][T14742] bridge0: port 4(ip6gretap0) entered blocking state [ 583.850195][T14742] bridge0: port 4(ip6gretap0) entered disabled state [ 583.865892][T14742] ip6gretap0: entered allmulticast mode [ 583.876389][T14742] ip6gretap0: entered promiscuous mode [ 584.559077][T14763] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.2287'. [ 584.580652][T14768] netlink: 142336 bytes leftover after parsing attributes in process `syz.0.2287'. [ 585.500459][T14788] delete_channel: no stack [ 585.512154][T14788] delete_channel: no stack [ 585.842233][T14797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2294'. [ 586.430294][T14810] netlink: 'syz.1.2296': attribute type 1 has an invalid length. [ 586.448673][T14814] netlink: 'syz.3.2297': attribute type 21 has an invalid length. [ 586.457092][T14814] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2297'. [ 586.576549][T14814] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 587.269493][T14827] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 587.275995][T14831] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2301'. [ 587.402260][T14831] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 587.446834][T14839] netlink: 'syz.0.2303': attribute type 153 has an invalid length. [ 587.484362][T14839] netlink: 'syz.0.2303': attribute type 1 has an invalid length. [ 587.492167][T14839] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.2303'. [ 587.682859][T14841] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2301'. [ 587.704553][T14841] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 587.724779][T14841] CPU: 1 PID: 14841 Comm: syz.3.2301 Not tainted syzkaller #0 [ 587.732315][T14841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 587.742428][T14841] Call Trace: [ 587.745850][T14841] [ 587.748871][T14841] dump_stack_lvl+0x18c/0x250 [ 587.753746][T14841] ? show_regs_print_info+0x20/0x20 [ 587.759037][T14841] ? load_image+0x420/0x420 [ 587.763623][T14841] sysfs_warn_dup+0x8e/0xa0 [ 587.768208][T14841] sysfs_do_create_link_sd+0xc0/0x110 [ 587.773606][T14841] device_add_class_symlinks+0x1cf/0x240 [ 587.779300][T14841] device_add+0x4f9/0xc40 [ 587.783654][T14841] wiphy_register+0x1d99/0x2ac0 [ 587.788630][T14841] ? cfg80211_event_work+0x40/0x40 [ 587.793760][T14841] ? minstrel_ht_alloc+0x88a/0x990 [ 587.798942][T14841] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 587.805059][T14841] ieee80211_register_hw+0x2dd8/0x3b30 [ 587.810607][T14841] ? ieee80211_register_hw+0xfb1/0x3b30 [ 587.816204][T14841] ? ieee80211_tasklet_handler+0x20/0x20 [ 587.821861][T14841] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 587.827880][T14841] ? __debug_object_init+0xec/0x450 [ 587.833140][T14841] ? __asan_memset+0x22/0x40 [ 587.837770][T14841] ? __hrtimer_init+0x189/0x270 [ 587.842671][T14841] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 587.848453][T14841] ? mac80211_hwsim_free+0x220/0x220 [ 587.853758][T14841] ? rcu_is_watching+0x15/0xb0 [ 587.858539][T14841] ? kstrndup+0xbd/0x140 [ 587.862829][T14841] hwsim_new_radio_nl+0xdad/0x1a70 [ 587.867962][T14841] ? __nla_validate+0x50/0x50 [ 587.872697][T14841] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 587.879084][T14841] ? __nla_parse+0x40/0x50 [ 587.883547][T14841] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 587.889993][T14841] genl_family_rcv_msg_doit+0x21a/0x310 [ 587.895575][T14841] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 587.901492][T14841] ? bpf_lsm_capable+0x9/0x10 [ 587.906224][T14841] ? security_capable+0x89/0xb0 [ 587.911159][T14841] genl_rcv_msg+0x611/0x7a0 [ 587.915699][T14841] ? genl_bind+0x360/0x360 [ 587.920143][T14841] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 587.926494][T14841] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 587.933093][T14841] ? ref_tracker_free+0x686/0x830 [ 587.938143][T14841] netlink_rcv_skb+0x235/0x4c0 [ 587.942922][T14841] ? genl_bind+0x360/0x360 [ 587.947358][T14841] ? netlink_ack+0x1160/0x1160 [ 587.952146][T14841] ? __lock_acquire+0x7d80/0x7d80 [ 587.957195][T14841] ? down_read+0x1ac/0x2e0 [ 587.961631][T14841] genl_rcv+0x28/0x40 [ 587.965637][T14841] netlink_unicast+0x7b1/0x930 [ 587.970424][T14841] netlink_sendmsg+0x8d0/0xbf0 [ 587.975212][T14841] ? netlink_getsockopt+0x590/0x590 [ 587.980428][T14841] ? apparmor_socket_sendmsg+0x8e/0x330 [ 587.986016][T14841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 587.991313][T14841] ? security_socket_sendmsg+0x80/0xa0 [ 587.996781][T14841] ? netlink_getsockopt+0x590/0x590 [ 588.002000][T14841] ____sys_sendmsg+0x61b/0x980 [ 588.006882][T14841] ? __asan_memset+0x22/0x40 [ 588.011574][T14841] ? __sys_sendmsg_sock+0x30/0x30 [ 588.016642][T14841] ? __import_iovec+0x5f2/0x850 [ 588.021525][T14841] ? import_iovec+0x73/0xa0 [ 588.026048][T14841] ___sys_sendmsg+0x2a6/0x360 [ 588.030752][T14841] ? __sys_sendmsg+0x2b0/0x2b0 [ 588.035593][T14841] __se_sys_sendmsg+0x1d0/0x2c0 [ 588.040473][T14841] ? __x64_sys_sendmsg+0x80/0x80 [ 588.045444][T14841] ? lockdep_hardirqs_on+0x98/0x150 [ 588.050719][T14841] do_syscall_64+0x55/0xb0 [ 588.055153][T14841] ? clear_bhb_loop+0x40/0x90 [ 588.059903][T14841] ? clear_bhb_loop+0x40/0x90 [ 588.064600][T14841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 588.070516][T14841] RIP: 0033:0x7fb9d319e159 [ 588.074977][T14841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.094629][T14841] RSP: 002b:00007fb9d13f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.103058][T14841] RAX: ffffffffffffffda RBX: 00007fb9d3426540 RCX: 00007fb9d319e159 [ 588.111041][T14841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 588.119023][T14841] RBP: 00007fb9d323506b R08: 0000000000000000 R09: 0000000000000000 [ 588.127109][T14841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.135123][T14841] R13: 00007fb9d34265d8 R14: 00007fb9d3426540 R15: 00007fff7aa0edd8 [ 588.143144][T14841] [ 588.309649][T14846] netlink: 'syz.2.2304': attribute type 29 has an invalid length. [ 588.338929][T14846] netlink: 'syz.2.2304': attribute type 29 has an invalid length. [ 589.014470][T14870] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2309'. [ 589.036835][T14870] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 591.418703][T14858] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.2305'. [ 591.429616][T14861] netlink: 'syz.2.2304': attribute type 39 has an invalid length. [ 591.437681][T14860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.448852][T14860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.460114][T14860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.472238][T14860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.481640][T14860] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 591.492542][T14860] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 591.504461][T14860] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 591.550440][T14849] netlink: 'syz.0.2305': attribute type 10 has an invalid length. [ 591.558868][T14849] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2305'. [ 592.339607][T14890] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2315'. [ 593.240964][T14907] netlink: 'syz.0.2319': attribute type 6 has an invalid length. [ 593.260092][T14907] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2319'. [ 595.306475][T14917] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.2322'. [ 595.335066][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 595.371450][T14917] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.2322'. [ 595.401309][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 595.426559][T14923] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2324'. [ 595.472701][T14917] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.2322'. [ 595.495898][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 595.505283][T14925] netlink: 'syz.3.2325': attribute type 21 has an invalid length. [ 595.524863][T14917] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.2322'. [ 595.556827][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2322'. [ 595.569474][T14917] netlink: 142592 bytes leftover after parsing attributes in process `syz.2.2322'. [ 596.088810][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 596.101832][ T5783] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 596.111259][ T5783] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 596.123388][ T5783] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 596.132260][ T5783] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 596.140047][ T5783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 596.582477][T12608] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.740343][T12608] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.826702][T12608] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.902031][T14954] netlink: 'syz.0.2333': attribute type 10 has an invalid length. [ 596.935224][T14954] batman_adv: : Adding interface: virt_wifi0 [ 596.942225][T14954] batman_adv: : The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.972350][T14954] batman_adv: : Interface activated: virt_wifi0 [ 597.010361][T12608] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.024983][T14955] netlink: 'syz.0.2333': attribute type 10 has an invalid length. [ 597.049367][T14956] netlink: 'syz.0.2333': attribute type 2 has an invalid length. [ 597.067249][T14956] netlink: 'syz.0.2333': attribute type 8 has an invalid length. [ 597.084163][T14958] netlink: 'syz.3.2334': attribute type 2 has an invalid length. [ 597.092329][T14958] netlink: 'syz.3.2334': attribute type 8 has an invalid length. [ 597.146931][T14934] chnl_net:caif_netlink_parms(): no params data found [ 597.342831][T14934] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.351264][T14934] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.363918][T14934] bridge_slave_0: entered allmulticast mode [ 597.372076][T14934] bridge_slave_0: entered promiscuous mode [ 597.387875][T14934] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.396474][T14934] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.404699][T14934] bridge_slave_1: entered allmulticast mode [ 597.411970][T14934] bridge_slave_1: entered promiscuous mode [ 597.440235][T12608] bridge0: port 2(ip6gretap0) entered disabled state [ 597.502204][T12608] ip6gretap0 (unregistering): left allmulticast mode [ 597.510346][T12608] ip6gretap0 (unregistering): left promiscuous mode [ 597.518406][T12608] bridge0: port 2(ip6gretap0) entered disabled state [ 597.559946][T14968] netlink: 'syz.3.2335': attribute type 21 has an invalid length. [ 597.620142][T14934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.638503][T14934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.722575][T14934] team0: Port device team_slave_0 added [ 597.740540][T14934] team0: Port device team_slave_1 added [ 597.900569][T14934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.910933][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.944999][T14934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.076256][T14934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.083271][T14934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.130345][T14934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.181294][ T5783] Bluetooth: hci4: command tx timeout [ 598.332602][T14974] netlink: 'syz.0.2337': attribute type 9 has an invalid length. [ 598.404541][T14934] hsr_slave_0: entered promiscuous mode [ 598.418905][T14934] hsr_slave_1: entered promiscuous mode [ 599.057032][T14975] netlink: 'syz.0.2337': attribute type 9 has an invalid length. [ 599.716364][T15009] syzkaller0: left promiscuous mode [ 599.724991][T15009] syzkaller0: left allmulticast mode [ 600.065202][T15030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 600.253713][ T5783] Bluetooth: hci4: command tx timeout [ 600.689958][T12608] bridge_slave_0: left allmulticast mode [ 600.718054][T12608] bridge_slave_0: left promiscuous mode [ 600.754640][T12608] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.817803][T12608] veth1_vlan: left promiscuous mode [ 600.835247][T15046] delete_channel: no stack [ 600.841089][T12608] veth0_vlan: left promiscuous mode [ 602.333785][ T5783] Bluetooth: hci4: command tx timeout [ 602.887016][T14934] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 602.973327][T14934] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 603.028129][T14934] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 603.070574][T14934] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 603.628040][T15076] validate_nla: 1 callbacks suppressed [ 603.628074][T15076] netlink: 'syz.3.2356': attribute type 21 has an invalid length. [ 603.644036][T15076] __nla_validate_parse: 128 callbacks suppressed [ 603.644073][T15076] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2356'. [ 603.685958][T15076] netlink: 'syz.3.2356': attribute type 4 has an invalid length. [ 603.744469][T15076] netlink: 'syz.3.2356': attribute type 5 has an invalid length. [ 603.765970][T15076] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2356'. [ 603.924786][T14934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.973259][T14934] 8021q: adding VLAN 0 to HW filter on device team0 [ 604.010860][ T7453] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.018093][ T7453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 604.048845][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.056063][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.414620][ T5783] Bluetooth: hci4: command tx timeout [ 605.323719][T14934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.557713][T14934] veth0_vlan: entered promiscuous mode [ 605.632617][T14934] veth1_vlan: entered promiscuous mode [ 605.734598][T14934] veth0_macvtap: entered promiscuous mode [ 605.751401][T14934] veth1_macvtap: entered promiscuous mode [ 605.819244][T14934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.378784][T14934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.404229][T14934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.413028][T14934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.921597][T14934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.930511][T14934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.831256][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.873734][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.962397][T15137] netlink: 'syz.0.2364': attribute type 39 has an invalid length. [ 607.972992][ T7455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.007262][ T7455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.109858][T15140] sit0: entered allmulticast mode [ 608.268372][T15143] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2366'. [ 608.329970][T15143] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 608.351149][T15145] syzkaller0: entered promiscuous mode [ 608.359639][T15145] syzkaller0: entered allmulticast mode [ 608.615574][T15155] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2370'. [ 608.659999][T15158] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2371'. [ 608.775847][T15163] netlink: 'syz.0.2372': attribute type 9 has an invalid length. [ 608.789700][T15163] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2372'. [ 608.977030][T15173] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2373'. [ 609.055942][T15163] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2372'. [ 610.931516][T15203] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 611.593648][T15216] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2384'. [ 612.366066][T14516] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 612.379055][T14516] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.392950][T14516] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.401363][T14516] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.409253][T14516] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 612.418540][T14516] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.588974][T15234] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2390'. [ 612.802174][T12638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.874268][T15239] C: renamed from team_slave_0 (while UP) [ 612.974662][T15239] netlink: 'syz.1.2389': attribute type 8 has an invalid length. [ 613.030321][T15239] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 613.272660][T12638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.492912][T12638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.710970][T12638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.498692][T14516] Bluetooth: hci3: command tx timeout [ 615.299480][T12638] ip6gretap0 (unregistering): left allmulticast mode [ 615.323651][T12638] ip6gretap0 (unregistering): left promiscuous mode [ 615.347575][T12638] bridge0: port 4(ip6gretap0) entered disabled state [ 616.022601][T15270] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2395'. [ 616.049736][T15228] chnl_net:caif_netlink_parms(): no params data found [ 616.121032][T15270] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 616.645949][T14516] Bluetooth: hci3: command tx timeout [ 617.451835][T15228] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.494346][T15228] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.501633][T15228] bridge_slave_0: entered allmulticast mode [ 617.532160][T15228] bridge_slave_0: entered promiscuous mode [ 617.559611][T15228] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.575352][T15228] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.593162][T15228] bridge_slave_1: entered allmulticast mode [ 617.614969][T15228] bridge_slave_1: entered promiscuous mode [ 618.065730][T15315] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2401'. [ 618.616763][T15228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.648857][T15228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.659406][T14516] Bluetooth: hci3: command tx timeout [ 619.275709][T15329] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2404'. [ 619.337252][T15228] team0: Port device team_slave_0 added [ 619.358332][T15228] team0: Port device team_slave_1 added [ 619.465407][T15228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.472434][T15228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.553630][T15228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.700750][T15228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.718264][T15228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.765514][T15228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.101272][T15228] hsr_slave_0: entered promiscuous mode [ 620.124232][T15228] hsr_slave_1: entered promiscuous mode [ 620.134576][T15228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.147858][T15228] Cannot create hsr debugfs directory [ 620.734677][T14516] Bluetooth: hci3: command tx timeout [ 622.933421][T15393] syz.3.2415: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 622.950226][T15393] CPU: 0 PID: 15393 Comm: syz.3.2415 Not tainted syzkaller #0 [ 622.957853][T15393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.967965][T15393] Call Trace: [ 622.971263][T15393] [ 622.974237][T15393] dump_stack_lvl+0x18c/0x250 [ 622.979018][T15393] ? show_regs_print_info+0x20/0x20 [ 622.984298][T15393] ? load_image+0x420/0x420 [ 622.988903][T15393] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 622.995417][T15393] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 623.002058][T15393] warn_alloc+0x246/0x340 [ 623.006448][T15393] ? stack_trace_save+0xaa/0x100 [ 623.011481][T15393] ? zone_watermark_ok_safe+0x230/0x230 [ 623.017138][T15393] ? kasan_set_track+0x5f/0x70 [ 623.022075][T15393] ? kasan_set_track+0x4e/0x70 [ 623.026853][T15393] ? __kasan_kmalloc+0x8f/0xa0 [ 623.031670][T15393] ? xsk_init_queue+0xad/0x100 [ 623.036555][T15393] ? xsk_setsockopt+0x4c9/0x750 [ 623.041421][T15393] ? do_sock_setsockopt+0x175/0x1a0 [ 623.046635][T15393] ? __x64_sys_setsockopt+0x182/0x200 [ 623.052035][T15393] __vmalloc_node_range+0x129/0x1320 [ 623.057484][T15393] ? free_vm_area+0x50/0x50 [ 623.062110][T15393] vmalloc_user+0x74/0x80 [ 623.066525][T15393] ? xskq_create+0xbf/0x170 [ 623.071109][T15393] xskq_create+0xbf/0x170 [ 623.075466][T15393] xsk_init_queue+0xad/0x100 [ 623.080091][T15393] xsk_setsockopt+0x4c9/0x750 [ 623.084888][T15393] ? xsk_poll+0x670/0x670 [ 623.089261][T15393] ? __fget_files+0x28/0x460 [ 623.093953][T15393] ? __fget_files+0x28/0x460 [ 623.098574][T15393] ? aa_sock_opt_perm+0x74/0x100 [ 623.103573][T15393] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 623.109187][T15393] ? security_socket_setsockopt+0x7e/0xa0 [ 623.114957][T15393] ? xsk_poll+0x670/0x670 [ 623.119325][T15393] do_sock_setsockopt+0x175/0x1a0 [ 623.124421][T15393] ? __fdget+0x180/0x210 [ 623.128725][T15393] __x64_sys_setsockopt+0x182/0x200 [ 623.134008][T15393] do_syscall_64+0x55/0xb0 [ 623.138475][T15393] ? clear_bhb_loop+0x40/0x90 [ 623.143168][T15393] ? clear_bhb_loop+0x40/0x90 [ 623.147865][T15393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.153791][T15393] RIP: 0033:0x7fb9d319e159 [ 623.158305][T15393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.177967][T15393] RSP: 002b:00007fb9d403b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 623.186409][T15393] RAX: ffffffffffffffda RBX: 00007fb9d3425fa0 RCX: 00007fb9d319e159 [ 623.194497][T15393] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 623.202491][T15393] RBP: 00007fb9d323506b R08: 0000000000000004 R09: 0000000000000000 [ 623.210505][T15393] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 623.218543][T15393] R13: 00007fb9d3426038 R14: 00007fb9d3425fa0 R15: 00007fff7aa0edd8 [ 623.226641][T15393] [ 623.246454][T15393] Mem-Info: [ 623.250630][T15393] active_anon:10389 inactive_anon:0 isolated_anon:0 [ 623.250630][T15393] active_file:18492 inactive_file:40153 isolated_file:0 [ 623.250630][T15393] unevictable:768 dirty:106 writeback:0 [ 623.250630][T15393] slab_reclaimable:11065 slab_unreclaimable:96986 [ 623.250630][T15393] mapped:24047 shmem:1367 pagetables:558 [ 623.250630][T15393] sec_pagetables:0 bounce:0 [ 623.250630][T15393] kernel_misc_reclaimable:0 [ 623.250630][T15393] free:1336904 free_pcp:7120 free_cma:0 [ 623.296730][T15393] Node 0 active_anon:41556kB inactive_anon:0kB active_file:73968kB inactive_file:160412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96188kB dirty:420kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13520kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no [ 623.346581][T15393] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 623.380141][T15393] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 623.409698][T15393] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 623.416197][T15393] Node 0 DMA32 free:1443004kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:41516kB inactive_anon:0kB active_file:73968kB inactive_file:159588kB unevictable:1536kB writepending:416kB present:3129332kB managed:2586800kB mlocked:0kB bounce:0kB free_pcp:10316kB local_pcp:1808kB free_cma:0kB [ 623.447866][T15393] lowmem_reserve[]: 0 0 0 0 0 [ 623.452660][T15393] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 623.479829][T15393] lowmem_reserve[]: 0 0 0 0 0 [ 623.484733][T15393] Node 1 Normal free:3889252kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18276kB local_pcp:11204kB free_cma:0kB [ 623.514494][T15393] lowmem_reserve[]: 0 0 0 0 0 [ 623.519293][T15393] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 623.532709][T15393] Node 0 DMA32: 765*4kB (UME) 449*8kB (UME) 880*16kB (UME) 1310*32kB (UME) 1430*64kB (UME) 464*128kB (UME) 121*256kB (UME) 32*512kB (UM) 11*1024kB (UME) 8*2048kB (UME) 282*4096kB (UM) = 1443644kB [ 623.578401][T12638] bond0: (slave wlan1): Releasing backup interface [ 623.584590][T15393] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 623.636492][T15393] Node 1 Normal: 215*4kB (UE) 59*8kB (UE) 41*16kB (UE) 141*32kB (UE) 38*64kB (UME) 9*128kB (UME) 1*256kB (E) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 946*4096kB (M) = 3889252kB [ 623.666873][T15393] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 623.693645][T15393] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 623.703017][T15393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 623.747304][T15393] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 623.775864][T15393] 60012 total pagecache pages [ 623.782194][T15393] 0 pages in swap cache [ 623.802190][T15393] Free swap = 124996kB [ 623.806506][T15393] Total swap = 124996kB [ 623.810699][T15393] 2097051 pages RAM [ 623.833607][T15393] 0 pages HighMem/MovableOnly [ 623.838405][T15393] 416965 pages reserved [ 623.846880][T15393] 0 pages cma reserved [ 624.589254][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.595932][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.714559][T15424] netlink: 'syz.1.2421': attribute type 2 has an invalid length. [ 624.805097][T12638] hsr_slave_0: left promiscuous mode [ 624.820790][T12638] hsr_slave_1: left promiscuous mode [ 624.837569][T12638] batman_adv: : Interface deactivated: batadv_slave_0 [ 624.853821][T12638] batman_adv: : Removing interface: batadv_slave_0 [ 624.883802][T12638] batman_adv: : Interface deactivated: veth1_virt_wifi [ 624.890964][T12638] batman_adv: : Removing interface: veth1_virt_wifi [ 624.936284][T12638] batman_adv: : Interface deactivated: virt_wifi0 [ 624.942995][T12638] batman_adv: : Removing interface: virt_wifi0 [ 625.001766][T12638] bridge0: port 3(dummy0) entered disabled state [ 625.086972][T12638] hsr0: left allmulticast mode [ 625.092268][T12638] bridge0: port 1(hsr0) entered disabled state [ 625.122994][T12638] bridge_slave_1: left allmulticast mode [ 625.140276][T12638] bridge_slave_1: left promiscuous mode [ 625.155285][T12638] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.247943][T12638] veth1_vlan: left allmulticast mode [ 625.254156][T12638] veth1_vlan: left promiscuous mode [ 628.097291][T12638] team0 (unregistering): Port device team_slave_1 removed [ 628.149131][T12638] team0 (unregistering): Port device team_slave_0 removed [ 628.194363][T12638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.203181][T12638] bond_slave_1 (unregistering): left promiscuous mode [ 628.211958][T12638] bond_slave_1 (unregistering): left allmulticast mode [ 628.258612][T12638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.268770][T12638] bond_slave_0 (unregistering): left promiscuous mode [ 628.275782][T12638] bond_slave_0 (unregistering): left allmulticast mode [ 628.617948][T12638] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 628.626908][T12638] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 628.640181][T12638] bridge0 (unregistering): left promiscuous mode [ 628.646846][T12638] bond0 (unregistering): Released all slaves [ 628.739253][T15424] netlink: 'syz.1.2421': attribute type 2 has an invalid length. [ 628.748595][T15425] netlink: 'syz.1.2421': attribute type 10 has an invalid length. [ 628.771941][T15425] macvlan0: entered promiscuous mode [ 628.806603][T15425] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 628.830729][T15427] netlink: 'syz.2.2422': attribute type 23 has an invalid length. [ 629.079044][T15228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 629.136651][T15228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 629.212839][T15228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 629.227698][T15228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 629.692057][T15228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.807926][T15228] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.861529][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.869611][ T7464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 629.922824][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.930148][ T7464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 630.827782][T15228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.932708][T15506] netlink: 'syz.2.2435': attribute type 19 has an invalid length. [ 631.012333][T15504] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2434'. [ 631.050095][T15504] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 631.134951][T15228] veth0_vlan: entered promiscuous mode [ 631.167834][T15228] veth1_vlan: entered promiscuous mode [ 631.255550][T15514] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2436'. [ 631.269324][T15228] veth0_macvtap: entered promiscuous mode [ 631.289233][T15228] veth1_macvtap: entered promiscuous mode [ 631.346500][T15228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 631.360532][T15228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.377560][T15228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.400105][T15228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 631.434335][T15228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 631.449259][T15228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.466345][T15228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.479157][T15228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.490803][T15228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.502695][T15228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.736097][T12638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.757977][T12638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 631.858349][ T7463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 631.874827][ T7463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.630282][T15541] netlink: 'syz.3.2442': attribute type 9 has an invalid length. [ 632.759778][T15541] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2442'. [ 632.770298][T15525] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2439'. [ 633.880224][T15558] ÿ: renamed from bond_slave_0 (while UP) [ 635.589918][T15525] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 636.623190][T15584] netlink: 'syz.0.2447': attribute type 3 has an invalid length. [ 636.655028][T15584] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2447'. [ 636.954721][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 636.985861][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 636.998481][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 637.011213][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 637.020844][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.028672][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 637.119973][T12638] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.363729][T15594] syzkaller0: entered promiscuous mode [ 637.378864][T15594] syzkaller0: entered allmulticast mode [ 639.148143][T14516] Bluetooth: hci0: command tx timeout [ 640.573332][T12638] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.742970][T12638] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.214021][ T5783] Bluetooth: hci0: command tx timeout [ 642.559786][T15667] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2458'. [ 642.589329][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.618191][T15672] tap0: tun_chr_ioctl cmd 1074025681 [ 642.702427][T12638] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.898300][T15600] chnl_net:caif_netlink_parms(): no params data found [ 643.207611][T15600] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.236585][T15600] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.256479][T15600] bridge_slave_0: entered allmulticast mode [ 643.278944][T15600] bridge_slave_0: entered promiscuous mode [ 643.307397][ T5783] Bluetooth: hci0: command tx timeout [ 643.357157][T15600] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.364718][T15600] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.372110][T15600] bridge_slave_1: entered allmulticast mode [ 643.379870][T15600] bridge_slave_1: entered promiscuous mode [ 643.459636][T15600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.479715][T15600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 643.592245][T12638] ip6gretap0 (unregistering): left allmulticast mode [ 643.605785][T12638] ip6gretap0 (unregistering): left promiscuous mode [ 643.612783][T12638] Ÿë: port 1(ip6gretap0) entered disabled state [ 643.780029][T15713] netlink: 'syz.1.2467': attribute type 29 has an invalid length. [ 643.834581][T15718] netlink: 'syz.1.2467': attribute type 27 has an invalid length. [ 643.852021][T15718] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2467'. [ 643.920859][T15713] netlink: 'syz.1.2467': attribute type 29 has an invalid length. [ 643.958642][T15600] team0: Port device team_slave_0 added [ 644.031605][T15709] syzkaller0: entered promiscuous mode [ 644.037690][T15709] syzkaller0: entered allmulticast mode [ 644.096941][T15600] team0: Port device team_slave_1 added [ 644.103140][T15726] netlink: 'syz.0.2469': attribute type 10 has an invalid length. [ 644.124606][T15726] netlink: 'syz.0.2469': attribute type 16 has an invalid length. [ 644.132473][T15726] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2469'. [ 645.383849][ T5783] Bluetooth: hci0: command tx timeout [ 646.532799][T15733] netlink: 'syz.0.2470': attribute type 7 has an invalid length. [ 646.617887][T15600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.637475][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.696986][T15600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.714896][T15600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.722006][T15600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.793810][T15600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.468252][T15747] syzkaller0: entered promiscuous mode [ 647.488761][T15747] syzkaller0: entered allmulticast mode [ 647.604944][T15600] hsr_slave_0: entered promiscuous mode [ 647.634146][T15600] hsr_slave_1: entered promiscuous mode [ 647.673747][T15600] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.681379][T15600] Cannot create hsr debugfs directory [ 650.842754][T15798] erspan0: entered allmulticast mode [ 651.323092][T15823] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2487'. [ 651.348215][T15823] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 651.507303][T15827] netlink: 'syz.0.2487': attribute type 29 has an invalid length. [ 653.349408][T15827] netlink: 'syz.0.2487': attribute type 29 has an invalid length. [ 653.364950][T15830] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2489'. [ 653.375521][T15830] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 653.422077][T15831] netlink: 'syz.0.2487': attribute type 29 has an invalid length. [ 654.889504][T15876] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2495'. [ 654.933788][T15876] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 656.279515][T12638] hsr_slave_0: left promiscuous mode [ 656.293231][T12638] hsr_slave_1: left promiscuous mode [ 656.395320][T12638] veth0_vlan: left promiscuous mode [ 659.409852][T15600] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 659.472016][T15600] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 659.504446][T15600] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 659.586395][T15600] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 659.749498][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 659.964495][T15912] nr0: port 1(hsr0) entered blocking state [ 659.971829][T15912] nr0: port 1(hsr0) entered disabled state [ 659.978276][T15912] hsr0: entered allmulticast mode [ 659.997516][T15912] hsr_slave_0: entered allmulticast mode [ 660.024045][T15912] hsr_slave_1: entered allmulticast mode [ 660.047100][T15912] hsr0: entered promiscuous mode [ 660.300576][T15918] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2503'. [ 660.399186][T15600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 660.454297][T15600] 8021q: adding VLAN 0 to HW filter on device team0 [ 660.493189][T12637] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.500426][T12637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 660.553201][T12637] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.560455][T12637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.697012][T15970] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2513'. [ 661.855507][T15972] netlink: 'syz.1.2516': attribute type 3 has an invalid length. [ 661.864218][T15972] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2516'. [ 662.072359][T15962] syzkaller0: entered promiscuous mode [ 662.078524][T15962] syzkaller0: entered allmulticast mode [ 662.110349][T15600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.908287][T16033] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2521'. [ 663.920655][T16033] netlink: 'syz.1.2521': attribute type 2 has an invalid length. [ 665.675465][T15600] veth0_vlan: entered promiscuous mode [ 665.723307][T15600] veth1_vlan: entered promiscuous mode [ 665.834820][T15600] veth0_macvtap: entered promiscuous mode [ 665.898329][T15600] veth1_macvtap: entered promiscuous mode [ 665.965257][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 665.983763][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.005920][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.033980][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.056084][T15600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.100623][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.132855][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.163904][T15600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 666.183604][T15600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.209512][T15600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.251355][T15600] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.261039][T15600] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.278292][T15600] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.289002][T15600] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.366733][T16068] netlink: 'syz.0.2527': attribute type 9 has an invalid length. [ 666.407496][T16068] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2527'. [ 667.511277][ T7463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.537733][ T7463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.604106][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.621574][T16088] netlink: 'syz.1.2529': attribute type 11 has an invalid length. [ 667.626173][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.663440][T16088] netlink: 'syz.1.2529': attribute type 2 has an invalid length. [ 667.688316][T16088] netlink: 198864 bytes leftover after parsing attributes in process `syz.1.2529'. [ 668.689694][ T5783] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 669.250028][T16127] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2535'. [ 669.682643][T16137] netlink: 'syz.1.2538': attribute type 9 has an invalid length. [ 669.703806][T16137] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2538'. [ 669.791536][T14516] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 669.801439][T14516] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 669.809881][T14516] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 669.819242][T14516] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 669.845371][T14516] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 669.853144][T14516] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 669.958360][T12626] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.292618][T16141] batadv0: entered promiscuous mode [ 670.363398][T12626] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.586749][T12626] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.845045][T12626] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.905755][T16159] netlink: 'syz.1.2544': attribute type 39 has an invalid length. [ 670.917740][T16158] netlink: 'syz.1.2544': attribute type 39 has an invalid length. [ 671.142785][T16164] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2545'. [ 671.455209][T16144] chnl_net:caif_netlink_parms(): no params data found [ 671.708346][T16174] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 671.753628][T16174] netlink: 'syz.0.2547': attribute type 2 has an invalid length. [ 671.794023][T16174] netlink: 'syz.0.2547': attribute type 2 has an invalid length. [ 671.841520][T16174] netlink: 'syz.0.2547': attribute type 3 has an invalid length. [ 671.860056][T16174] netlink: 'syz.0.2547': attribute type 4 has an invalid length. [ 671.891816][T16144] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.914594][T16174] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.2547'. [ 671.945619][ T5783] Bluetooth: hci1: command tx timeout [ 671.993665][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.028765][T16144] bridge_slave_0: entered allmulticast mode [ 672.055581][T16144] bridge_slave_0: entered promiscuous mode [ 672.464238][T16144] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.481141][T16144] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.507823][T16144] bridge_slave_1: entered allmulticast mode [ 672.533460][T16144] bridge_slave_1: entered promiscuous mode [ 672.846435][T16201] validate_nla: 7 callbacks suppressed [ 672.846455][T16201] netlink: 'syz.3.2550': attribute type 9 has an invalid length. [ 672.982584][T16201] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2550'. [ 673.569791][T16144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.747208][T16144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.014115][ T5783] Bluetooth: hci1: command tx timeout [ 674.051930][T16144] team0: Port device team_slave_0 added [ 674.211773][T16144] team0: Port device team_slave_1 added [ 674.513808][T16144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.526203][T16144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.590289][T16144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.619639][T16144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.634992][T16144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.703649][T16144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.924089][T16231] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2557'. [ 674.957003][T16236] netlink: 'syz.3.2557': attribute type 1 has an invalid length. [ 675.065991][T16236] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2557'. [ 675.512634][T16144] hsr_slave_0: entered promiscuous mode [ 675.566290][T16144] hsr_slave_1: entered promiscuous mode [ 675.603772][T16144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.619127][T16144] Cannot create hsr debugfs directory [ 675.672482][T16261] netlink: 'syz.0.2561': attribute type 10 has an invalid length. [ 675.694988][T16261] netlink: 210880 bytes leftover after parsing attributes in process `syz.0.2561'. [ 675.862994][T16261] netlink: 'syz.0.2561': attribute type 16 has an invalid length. [ 675.876514][T16261] netlink: 'syz.0.2561': attribute type 25 has an invalid length. [ 675.894109][T16261] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2561'. [ 676.093967][ T5783] Bluetooth: hci1: command tx timeout [ 676.224367][T16302] netlink: 'syz.0.2563': attribute type 1 has an invalid length. [ 676.232185][T16302] netlink: 'syz.0.2563': attribute type 3 has an invalid length. [ 676.251378][T16302] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2563'. [ 677.121743][T16315] netlink: 'syz.0.2566': attribute type 10 has an invalid length. [ 677.141634][T16315] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2566'. [ 677.448641][T16329] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2567'. [ 677.497209][T16329] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 678.174418][ T5783] Bluetooth: hci1: command tx timeout [ 678.457925][T12626] bridge_slave_1: left allmulticast mode [ 678.477863][T12626] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.500912][T12626] bridge_slave_0: left promiscuous mode [ 678.520377][T12626] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.556028][T12626] veth1_vlan: left promiscuous mode [ 679.336708][T12626] team0 (unregistering): Port device team_slave_1 removed [ 679.400160][T12626] team0 (unregistering): Port device team_slave_0 removed [ 680.085821][T16144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 680.119467][T16144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 680.225143][T16144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 680.251728][T16144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 680.693205][T16379] netlink: 'syz.0.2577': attribute type 21 has an invalid length. [ 680.741780][T16144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.762831][T16381] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.2576'. [ 680.779531][T16381] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2576'. [ 680.816321][T16144] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.872385][T12637] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.879609][T12637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.937374][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.944582][ T3537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.447538][T16399] netlink: 'syz.3.2579': attribute type 10 has an invalid length. [ 681.468844][T16399] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.2579'. [ 681.600551][T16399] netlink: 'syz.3.2579': attribute type 16 has an invalid length. [ 681.623672][T16399] netlink: 'syz.3.2579': attribute type 25 has an invalid length. [ 681.631851][T16399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2579'. [ 681.773126][T16144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.821614][T16419] netlink: 'syz.0.2582': attribute type 29 has an invalid length. [ 681.901226][T16419] netlink: 'syz.0.2582': attribute type 29 has an invalid length. [ 682.062237][T16144] veth0_vlan: entered promiscuous mode [ 682.123001][T16144] veth1_vlan: entered promiscuous mode [ 682.255368][T16432] netlink: 'syz.3.2584': attribute type 27 has an invalid length. [ 682.282683][T16144] veth0_macvtap: entered promiscuous mode [ 682.313471][T16432] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2584'. [ 682.322904][T16144] veth1_macvtap: entered promiscuous mode [ 682.394719][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.417907][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.437468][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.478860][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.500421][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.512383][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.545372][T16144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.752906][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.771668][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.783391][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.808448][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.820706][T16144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.841921][T16144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.875116][T16144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.958966][T16144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.976942][T16144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.987815][T16144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.997787][T16144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.354624][T16458] netlink: 'syz.3.2588': attribute type 10 has an invalid length. [ 683.369701][T16458] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2588'. [ 683.391183][T16458] hsr0: entered promiscuous mode [ 683.404793][T16458] bridge0: port 3(hsr0) entered blocking state [ 683.415041][T16458] bridge0: port 3(hsr0) entered disabled state [ 683.426158][T16458] hsr0: entered allmulticast mode [ 683.445741][T16458] hsr_slave_0: entered allmulticast mode [ 683.466177][T16458] hsr_slave_1: entered allmulticast mode [ 683.558106][T16458] bridge0: port 3(hsr0) entered blocking state [ 683.565594][T16458] bridge0: port 3(hsr0) entered forwarding state [ 683.782106][ T7463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.815321][ T7463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.901711][T12638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.938556][T12638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.481283][T16505] netlink: 'syz.1.2597': attribute type 10 has an invalid length. [ 684.508951][T16505] team0: Device hsr_slave_0 failed to register rx_handler [ 685.399140][T16534] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.2602'. [ 685.423238][T16534] openvswitch: netlink: Message has 20476 unknown bytes. [ 686.037348][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.052530][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.004035][ T5783] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 689.054999][T14516] Bluetooth: hci1: command 0x0406 tx timeout [ 689.657549][T16591] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2613'. [ 689.918707][T16604] netlink: 'syz.3.2617': attribute type 7 has an invalid length. [ 690.181975][T16616] netlink: 'syz.2.2620': attribute type 3 has an invalid length. [ 690.205884][T16616] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 690.222540][T16616] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2620'. [ 690.417769][T16622] netlink: 'syz.0.2621': attribute type 10 has an invalid length. [ 690.446899][T16622] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2621'. [ 690.663048][T16622] batman_adv: batadv0: Adding interface: virt_wifi0 [ 690.680090][T16622] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.730390][T16622] batman_adv: batadv0: Interface activated: virt_wifi0 [ 690.792985][T16623] netlink: 'syz.0.2621': attribute type 2 has an invalid length. [ 690.812530][T16623] netlink: 'syz.0.2621': attribute type 8 has an invalid length. [ 690.823382][T16623] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2621'. [ 690.852237][T16627] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.2622'. [ 690.866912][T16627] tc_dump_action: action bad kind [ 691.493216][T16642] IPv6: Can't replace route, no match found [ 691.564195][T16646] netlink: 'syz.3.2628': attribute type 10 has an invalid length. [ 691.598587][T16646] hsr0: left allmulticast mode [ 691.603445][T16646] hsr_slave_0: left allmulticast mode [ 691.636125][T16646] hsr_slave_1: left allmulticast mode [ 691.641824][T16646] bridge0: port 3(hsr0) entered disabled state [ 691.944511][T16646] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 692.102943][T16650] netlink: 'syz.0.2629': attribute type 10 has an invalid length. [ 692.116452][T16650] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2629'. [ 692.181185][T16650] hsr0: entered promiscuous mode [ 692.195738][T16650] bridge0: port 3(hsr0) entered blocking state [ 692.206748][T16650] bridge0: port 3(hsr0) entered disabled state [ 692.213267][T16650] hsr0: entered allmulticast mode [ 692.221304][T16650] hsr_slave_0: entered allmulticast mode [ 692.229783][T16650] hsr_slave_1: entered allmulticast mode [ 692.239210][T16650] bridge0: port 3(hsr0) entered blocking state [ 692.245608][T16650] bridge0: port 3(hsr0) entered forwarding state [ 692.267471][T16662] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2632'. [ 692.284073][T16662] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 692.456075][T16665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2632'. [ 692.657919][T16668] netlink: 'syz.1.2634': attribute type 1 has an invalid length. [ 692.788067][T16668] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2634'. [ 693.033190][T16675] netlink: 'syz.3.2635': attribute type 3 has an invalid length. [ 693.163763][T16675] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2635'. [ 695.165159][T16702] validate_nla: 66 callbacks suppressed [ 695.165180][T16702] netlink: 'syz.2.2642': attribute type 10 has an invalid length. [ 695.227351][T16702] __nla_validate_parse: 33 callbacks suppressed [ 695.227373][T16702] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2642'. [ 695.273358][T16702] hsr0: entered promiscuous mode [ 695.300613][T16702] bridge0: port 3(hsr0) entered blocking state [ 695.336698][T16702] bridge0: port 3(hsr0) entered disabled state [ 695.344011][T16702] hsr0: entered allmulticast mode [ 695.350295][T16702] hsr_slave_0: entered allmulticast mode [ 695.357465][T16702] hsr_slave_1: entered allmulticast mode [ 695.453795][T16702] bridge0: port 3(hsr0) entered blocking state [ 695.465766][T16711] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2645'. [ 695.467154][T16702] bridge0: port 3(hsr0) entered forwarding state [ 695.494300][T16711] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.2645'. [ 695.781948][T16723] netlink: 'syz.0.2649': attribute type 10 has an invalid length. [ 696.901069][T16730] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2651'. [ 697.089187][T16740] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2652'. [ 697.908825][T16739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.927909][T16747] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2654'. [ 698.549201][T16765] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.2660'. [ 698.576862][T16765] openvswitch: netlink: Key type 4112 is out of range max 32 [ 698.707053][T16773] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.909327][T16773] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.917588][T16773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.930722][T16776] sctp: [Deprecated]: syz.3.2664 (pid 16776) Use of int in maxseg socket option. [ 698.930722][T16776] Use struct sctp_assoc_value instead [ 699.426015][T16787] netlink: 'syz.0.2665': attribute type 2 has an invalid length. [ 699.444668][T16787] netlink: 119 bytes leftover after parsing attributes in process `syz.0.2665'. [ 699.604240][T16790] netlink: 'syz.0.2665': attribute type 1 has an invalid length. [ 699.674794][T16790] netlink: 16142 bytes leftover after parsing attributes in process `syz.0.2665'. [ 700.408158][T16796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 700.432566][T16796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 700.492129][T16796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 700.510088][T16793] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 700.578133][T16796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.715787][T16793] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2666'. [ 701.033930][ T5783] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 703.051259][T16842] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2677'. [ 703.085813][T16842] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 704.253370][T16861] syzkaller0: entered promiscuous mode [ 704.273611][T16861] syzkaller0: entered allmulticast mode [ 707.144227][T16877] netlink: 'syz.3.2689': attribute type 5 has an invalid length. [ 707.167957][T16877] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2689'. [ 707.313987][T16881] sit0: entered promiscuous mode [ 707.339952][T16881] sit0: entered allmulticast mode [ 707.646016][T16896] netlink: 'syz.0.2691': attribute type 10 has an invalid length. [ 707.666011][T16896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2691'. [ 707.841610][T16896] ipvlan1: entered promiscuous mode [ 707.854252][T16896] ipvlan1: entered allmulticast mode [ 707.874951][T16896] veth0_vlan: entered allmulticast mode [ 708.298398][T16896] bridge0: port 4(ipvlan1) entered blocking state [ 708.344462][T16896] bridge0: port 4(ipvlan1) entered disabled state [ 708.378664][T16896] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 708.432345][T16909] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 708.483953][T16909] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 708.572440][T16908] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2694'. [ 708.727646][T16908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 709.167956][T16920] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2698'. [ 709.202601][T16920] netlink: 184140 bytes leftover after parsing attributes in process `syz.3.2698'. [ 709.229545][T16920] openvswitch: netlink: Flow key attribute not present in set flow. [ 710.059443][T16944] netlink: 'syz.3.2706': attribute type 10 has an invalid length. [ 710.399336][T16952] netlink: 'syz.3.2709': attribute type 4 has an invalid length. [ 710.423790][T16952] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2709'. [ 710.705019][T16956] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2710'. [ 710.819264][T16954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 710.826659][T16954] IPv6: NLM_F_CREATE should be set when creating new route [ 710.834081][T16954] IPv6: NLM_F_CREATE should be set when creating new route [ 710.841358][T16954] IPv6: NLM_F_CREATE should be set when creating new route [ 712.274414][T16958] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2711'. [ 715.140529][T17027] netlink: 'syz.1.2716': attribute type 21 has an invalid length. [ 715.702807][T17041] netlink: 'syz.1.2719': attribute type 10 has an invalid length. [ 715.731768][T17041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2719'. [ 716.044337][T17041] ipvlan1: entered promiscuous mode [ 716.080358][T17041] ipvlan1: entered allmulticast mode [ 716.115344][T17041] veth0_vlan: entered allmulticast mode [ 716.163941][T17041] bridge0: port 3(ipvlan1) entered blocking state [ 716.186723][T17041] bridge0: port 3(ipvlan1) entered disabled state [ 716.342430][T17041] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 716.451784][T17047] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.2721'. [ 716.491037][T17041] syz.1.2719 (17041) used greatest stack depth: 17928 bytes left [ 717.676600][T17061] netlink: 'syz.1.2724': attribute type 2 has an invalid length. [ 718.044923][T14516] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 718.900999][T17083] Bluetooth: hci4: command 0x0406 tx timeout [ 719.061917][T17087] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2730'. [ 719.090925][T17087] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 719.093255][T17089] netlink: 'syz.1.2731': attribute type 2 has an invalid length. [ 719.260329][T17089] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2731'. [ 721.409876][T17095] netlink: 'syz.3.2732': attribute type 10 has an invalid length. [ 721.508033][T17095] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2732'. [ 721.602437][T17095] ipvlan1: entered promiscuous mode [ 721.608362][T17095] ipvlan1: entered allmulticast mode [ 721.672331][T17095] veth0_vlan: entered allmulticast mode [ 721.942808][T17095] bridge0: port 3(ipvlan1) entered blocking state [ 721.950849][T17095] bridge0: port 3(ipvlan1) entered disabled state [ 722.006579][T17095] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 722.528948][T17111] macsec0: entered allmulticast mode [ 722.570311][T17111] veth1_macvtap: entered allmulticast mode [ 722.615944][T17117] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2736'. [ 722.704409][T17117] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2736'. [ 722.781896][T17117] bond0: (slave bond_slave_0): Releasing backup interface [ 722.833411][T17117] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 722.914437][T17122] veth1_macvtap: left allmulticast mode [ 722.926758][T17122] veth1_macvtap: left promiscuous mode [ 722.932377][T17122] macsec0: left allmulticast mode [ 723.299428][T17124] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.2737'. [ 723.357573][T17127] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2738'. [ 723.439261][T17127] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 725.039538][T17149] netlink: 'syz.1.2745': attribute type 21 has an invalid length. [ 725.053673][T17149] IPv6: NLM_F_CREATE should be specified when creating new route [ 725.073776][T17149] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 725.081128][T17149] IPv6: NLM_F_CREATE should be set when creating new route [ 725.088658][T17149] IPv6: NLM_F_CREATE should be set when creating new route [ 725.095988][T17149] IPv6: NLM_F_CREATE should be set when creating new route [ 725.223399][T17154] netlink: 'syz.3.2746': attribute type 10 has an invalid length. [ 725.261490][T17154] veth1_macvtap: left promiscuous mode [ 725.340048][T17159] netlink: 'syz.1.2747': attribute type 4 has an invalid length. [ 725.348882][T17159] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2747'. [ 726.665575][T17177] netlink: 'syz.0.2751': attribute type 21 has an invalid length. [ 726.702451][T17177] netlink: 'syz.0.2751': attribute type 1 has an invalid length. [ 726.754962][T17177] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.2751'. [ 728.792137][T17180] netlink: 'syz.0.2751': attribute type 29 has an invalid length. [ 729.064813][T17183] netlink: 'syz.3.2752': attribute type 2 has an invalid length. [ 729.084627][T17183] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2752'. [ 729.221744][T17189] ref_ctr_offset mismatch. inode: 0x1fd offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 729.273783][T17185] netlink: 'syz.3.2752': attribute type 17 has an invalid length. [ 729.296449][T17185] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2752'. [ 729.309659][T17185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 730.400108][T17218] netlink: 'syz.2.2758': attribute type 27 has an invalid length. [ 730.411119][T17218] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2758'. [ 730.568847][T17215] netlink: 'syz.2.2758': attribute type 1 has an invalid length. [ 730.654286][T17215] netlink: 191376 bytes leftover after parsing attributes in process `syz.2.2758'. [ 730.791949][T17228] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 730.814603][T17228] netlink: 'syz.0.2763': attribute type 4 has an invalid length. [ 730.841617][T17228] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2763'. [ 730.894171][T17229] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 730.933020][T17229] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2763'. [ 730.957627][T17234] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2763'. [ 731.648107][T17248] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2765'. [ 731.832957][T17248] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.2765'. [ 731.937899][T17248] netlink: 252 bytes leftover after parsing attributes in process `syz.2.2765'. [ 732.102028][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.112002][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.122138][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.131526][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.141381][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.150828][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.160364][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.170066][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.180069][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 732.322178][T17256] syzkaller0: entered promiscuous mode [ 732.328014][T17256] syzkaller0: entered allmulticast mode [ 732.342436][T17263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2769'. [ 732.355707][T17263] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2769'. Stopping sshd: stopped /usr/sbin/sshd (pid 5531) OK [ 734.369983][T17252] net_ratelimit: 2743 callbacks suppressed [ 734.370048][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 Stopping crond: [ 734.387060][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 734.397134][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 734.407557][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 734.418011][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 734.427903][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 734.437710][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 734.447718][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 734.458201][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 734.468688][T17252] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 stopped /usr/sbin/crond (pid 5515) OK [ 735.367496][T17286] ================================================================== [ 735.375804][T17286] BUG: KASAN: slab-out-of-bounds in stack_map_get_build_id_offset+0x6c0/0x720 [ 735.384759][T17286] Write of size 4 at addr ffff88807a45e330 by task syz.0.2774/17286 [ 735.392763][T17286] [ 735.395146][T17286] CPU: 1 PID: 17286 Comm: syz.0.2774 Not tainted syzkaller #0 [ 735.402660][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.412844][T17286] Call Trace: [ 735.416155][T17286] [ 735.419124][T17286] dump_stack_lvl+0x18c/0x250 [ 735.423856][T17286] ? __lock_acquire+0x7d80/0x7d80 [ 735.428912][T17286] ? show_regs_print_info+0x20/0x20 [ 735.434143][T17286] ? load_image+0x420/0x420 [ 735.438670][T17286] ? __virt_addr_valid+0x10c/0x380 [ 735.443839][T17286] ? __virt_addr_valid+0x10c/0x380 [ 735.448978][T17286] ? __virt_addr_valid+0x10c/0x380 [ 735.454118][T17286] print_report+0xa8/0x210 [ 735.458580][T17286] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 735.464769][T17286] kasan_report+0x117/0x150 [ 735.469308][T17286] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 735.475516][T17286] stack_map_get_build_id_offset+0x6c0/0x720 [ 735.481672][T17286] ? pcpu_freelist_pop+0x12a/0x190 [ 735.486838][T17286] ? __bpf_get_stackid+0x900/0x900 [ 735.492002][T17286] ? perf_get_regs_user+0x5bb/0x6b0 [ 735.497232][T17286] ? perf_reg_abi+0x62/0x90 [ 735.501762][T17286] __bpf_get_stackid+0x564/0x900 [ 735.506746][T17286] bpf_get_stackid_pe+0x343/0x410 [ 735.511814][T17286] bpf_prog_2414a5d5030ea31b+0x29/0x2d [ 735.517301][T17286] bpf_overflow_handler+0x1fc/0x510 [ 735.522534][T17286] ? bpf_overflow_handler+0xde/0x510 [ 735.527936][T17286] ? tp_perf_event_destroy+0x20/0x20 [ 735.533632][T17286] ? perf_trace_preemptirq_template+0xac/0x330 [ 735.539960][T17286] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 735.547205][T17286] ? __perf_event_account_interrupt+0x187/0x280 [ 735.553487][T17286] __perf_event_overflow+0x461/0x660 [ 735.558810][T17286] perf_swevent_event+0x319/0x570 [ 735.563877][T17286] ? perf_tp_event+0x1550/0x1550 [ 735.568845][T17286] ? is_bpf_text_address+0x26/0x2a0 [ 735.574077][T17286] ___perf_sw_event+0x4ab/0x730 [ 735.578955][T17286] ? ___perf_sw_event+0x19e/0x730 [ 735.584034][T17286] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 735.590475][T17286] ? __lock_acquire+0x1336/0x7d80 [ 735.595544][T17286] ? __put_user_1+0x11/0x20 [ 735.600086][T17286] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 735.606182][T17286] ? lock_chain_count+0x20/0x20 [ 735.611063][T17286] __perf_sw_event+0x139/0x270 [ 735.615855][T17286] do_user_addr_fault+0x1242/0x12d0 [ 735.621085][T17286] ? rcu_is_watching+0x15/0xb0 [ 735.625888][T17286] exc_page_fault+0x64/0x100 [ 735.630505][T17286] asm_exc_page_fault+0x26/0x30 [ 735.635387][T17286] RIP: 0010:__put_user_1+0x11/0x20 [ 735.640524][T17286] Code: 5f 02 f7 ff c3 eb eb e8 cd 5f 02 f7 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 735.660160][T17286] RSP: 0018:ffffc900047170f8 EFLAGS: 00050202 [ 735.666257][T17286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000000cf3d [ 735.674256][T17286] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 735.682252][T17286] RBP: 000000000000fd90 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 735.690255][T17286] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff88806294c678 [ 735.698283][T17286] R13: ffff88806294c670 R14: ffff88806294c684 R15: 1ffff1100c5298cf [ 735.706298][T17286] bpf_vlog_reset+0x24a/0x330 [ 735.711011][T17286] do_check+0x9dc7/0xd0a0 [ 735.715376][T17286] ? __stack_depot_save+0x1f/0x660 [ 735.720519][T17286] ? __kasan_kmalloc+0x8f/0xa0 [ 735.725587][T17286] ? __sys_bpf+0x5ba/0x890 [ 735.730027][T17286] ? __x64_sys_bpf+0x7c/0x90 [ 735.734643][T17286] ? do_syscall_64+0x55/0xb0 [ 735.739299][T17286] ? init_func_state+0x2d10/0x2d10 [ 735.744442][T17286] ? __asan_memset+0x22/0x40 [ 735.749166][T17286] ? init_func_state+0x1dc6/0x2d10 [ 735.754307][T17286] ? btf_check_subprog_arg_match+0x142/0x2a0 [ 735.760320][T17286] do_check_common+0xacc/0x1410 [ 735.765214][T17286] bpf_check+0x65df/0xec40 [ 735.769674][T17286] ? __lock_acquire+0x1336/0x7d80 [ 735.774745][T17286] ? bpf_get_btf_vmlinux+0x20/0x20 [ 735.780080][T17286] ? __lock_acquire+0x1262/0x7d80 [ 735.785254][T17286] ? mark_lock+0x94/0x320 [ 735.789624][T17286] ? __lock_acquire+0x1336/0x7d80 [ 735.794690][T17286] ? verify_lock_unused+0x140/0x140 [ 735.799916][T17286] ? perf_trace_lock+0xfc/0x3b0 [ 735.804797][T17286] ? trace_event_raw_event_lock+0x240/0x240 [ 735.810717][T17286] ? perf_trace_lock+0xfc/0x3b0 [ 735.815589][T17286] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 735.821445][T17286] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 735.827460][T17286] ? __lock_acquire+0x7d80/0x7d80 [ 735.832514][T17286] ? lock_chain_count+0x20/0x20 [ 735.837396][T17286] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 735.843693][T17286] ? lockdep_hardirqs_on+0x98/0x150 [ 735.848916][T17286] ? ktime_get_with_offset+0x103/0x330 [ 735.854406][T17286] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 735.860678][T17286] ? ktime_get_real_ts64+0x440/0x440 [ 735.865999][T17286] ? do_raw_spin_unlock+0x121/0x230 [ 735.871237][T17286] ? bpf_obj_name_cpy+0x194/0x1e0 [ 735.876293][T17286] bpf_prog_load+0x10fa/0x1610 [ 735.881110][T17286] ? map_freeze+0x420/0x420 [ 735.885740][T17286] ? __might_fault+0xaa/0x120 [ 735.890452][T17286] ? __might_fault+0xc6/0x120 [ 735.895170][T17286] ? __might_fault+0xaa/0x120 [ 735.899895][T17286] ? bpf_lsm_bpf+0x9/0x10 [ 735.904256][T17286] ? security_bpf+0x7e/0xa0 [ 735.908793][T17286] __sys_bpf+0x5ba/0x890 [ 735.913075][T17286] ? bpf_link_show_fdinfo+0x560/0x560 [ 735.918488][T17286] ? lock_chain_count+0x20/0x20 [ 735.923378][T17286] __x64_sys_bpf+0x7c/0x90 [ 735.927832][T17286] do_syscall_64+0x55/0xb0 [ 735.932275][T17286] ? clear_bhb_loop+0x40/0x90 [ 735.937099][T17286] ? clear_bhb_loop+0x40/0x90 [ 735.941831][T17286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 735.947974][T17286] RIP: 0033:0x7fd9d659e159 [ 735.952486][T17286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.972133][T17286] RSP: 002b:00007fd9d74ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 735.980574][T17286] RAX: ffffffffffffffda RBX: 00007fd9d6825fa0 RCX: 00007fd9d659e159 [ 735.988669][T17286] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 735.996676][T17286] RBP: 00007fd9d663506b R08: 0000000000000000 R09: 0000000000000000 [ 736.004675][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.012667][T17286] R13: 00007fd9d6826038 R14: 00007fd9d6825fa0 R15: 00007fffce1b22e8 [ 736.020695][T17286] [ 736.023734][T17286] [ 736.026073][T17286] Allocated by task 17286: [ 736.030553][T17286] kasan_set_track+0x4e/0x70 [ 736.035185][T17286] __kasan_kmalloc+0x8f/0xa0 [ 736.039804][T17286] __kmalloc_node+0xb6/0x240 [ 736.044511][T17286] bpf_map_area_alloc+0x5e/0x110 [ 736.049480][T17286] prealloc_elems_and_freelist+0x86/0x1c0 [ 736.055231][T17286] stack_map_alloc+0x32b/0x4b0 [ 736.060019][T17286] map_create+0x877/0x12f0 [ 736.064463][T17286] __sys_bpf+0x651/0x890 [ 736.068730][T17286] __x64_sys_bpf+0x7c/0x90 [ 736.073167][T17286] do_syscall_64+0x55/0xb0 [ 736.077608][T17286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.083534][T17286] [ 736.085877][T17286] Last potentially related work creation: [ 736.091632][T17286] kasan_save_stack+0x3e/0x60 [ 736.096355][T17286] __kasan_record_aux_stack+0xaf/0xc0 [ 736.101789][T17286] kvfree_call_rcu+0xee/0x780 [ 736.106511][T17286] drop_sysctl_table+0x394/0x540 [ 736.111482][T17286] unregister_sysctl_table+0x41/0x60 [ 736.116798][T17286] neigh_sysctl_unregister+0x78/0xa0 [ 736.122220][T17286] addrconf_ifdown+0x15a8/0x18a0 [ 736.127224][T17286] addrconf_notify+0x6c6/0x1010 [ 736.132119][T17286] notifier_call_chain+0x18f/0x380 [ 736.137268][T17286] unregister_netdevice_many_notify+0x1037/0x1910 [ 736.143867][T17286] unregister_netdevice_queue+0x2e9/0x330 [ 736.149614][T17286] __tun_detach+0xdb2/0x1580 [ 736.154255][T17286] tun_chr_close+0x10d/0x1c0 [ 736.158872][T17286] __fput+0x221/0x940 [ 736.162888][T17286] task_work_run+0x1d4/0x260 [ 736.167512][T17286] exit_to_user_mode_loop+0xe6/0x110 [ 736.172827][T17286] exit_to_user_mode_prepare+0xee/0x180 [ 736.178426][T17286] syscall_exit_to_user_mode+0x1a/0x50 [ 736.183925][T17286] do_syscall_64+0x61/0xb0 [ 736.188383][T17286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.194307][T17286] [ 736.196649][T17286] Second to last potentially related work creation: [ 736.203297][T17286] kasan_save_stack+0x3e/0x60 [ 736.208005][T17286] __kasan_record_aux_stack+0xaf/0xc0 [ 736.213402][T17286] insert_work+0x3d/0x310 [ 736.217764][T17286] __queue_work+0xbfd/0xfd0 [ 736.222301][T17286] queue_work_on+0x128/0x1f0 [ 736.226936][T17286] process_scheduled_works+0xa60/0x1600 [ 736.232511][T17286] worker_thread+0xa5e/0xfe0 [ 736.237216][T17286] kthread+0x2fa/0x390 [ 736.241311][T17286] ret_from_fork+0x48/0x80 [ 736.245855][T17286] ret_from_fork_asm+0x11/0x20 [ 736.250723][T17286] [ 736.253067][T17286] The buggy address belongs to the object at ffff88807a45e000 [ 736.253067][T17286] which belongs to the cache kmalloc-cg-1k of size 1024 [ 736.267463][T17286] The buggy address is located 0 bytes to the right of [ 736.267463][T17286] allocated 816-byte region [ffff88807a45e000, ffff88807a45e330) [ 736.282020][T17286] [ 736.284359][T17286] The buggy address belongs to the physical page: [ 736.290914][T17286] page:ffffea0001e91600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a458 [ 736.301103][T17286] head:ffffea0001e91600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 736.310257][T17286] memcg:ffff88802f06e701 [ 736.314567][T17286] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 736.322587][T17286] page_type: 0xffffffff() [ 736.326958][T17286] raw: 00fff00000000840 ffff888017c4f280 ffffea0001eede00 dead000000000002 [ 736.335574][T17286] raw: 0000000000000000 0000000080100010 00000001ffffffff ffff88802f06e701 [ 736.344958][T17286] page dumped because: kasan: bad access detected [ 736.351402][T17286] page_owner tracks the page as allocated [ 736.357247][T17286] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5775, tgid 5775 (syz-executor), ts 110892484000, free_ts 110887119377 [ 736.380315][T17286] post_alloc_hook+0x1c1/0x200 [ 736.385140][T17286] get_page_from_freelist+0x2181/0x22a0 [ 736.390803][T17286] __alloc_pages+0x1f0/0x460 [ 736.395416][T17286] alloc_slab_page+0x5d/0x180 [ 736.400114][T17286] new_slab+0x87/0x2d0 [ 736.404203][T17286] ___slab_alloc+0xc5c/0x12f0 [ 736.408899][T17286] __kmem_cache_alloc_node+0x11f/0x250 [ 736.414409][T17286] __kmalloc_node+0xa6/0x240 [ 736.419220][T17286] kvmalloc_node+0x70/0x180 [ 736.423760][T17286] xt_alloc_table_info+0x3b/0xa0 [ 736.428818][T17286] do_ip6t_set_ctl+0x90c/0xe10 [ 736.433722][T17286] nf_setsockopt+0x263/0x280 [ 736.438484][T17286] do_sock_setsockopt+0x175/0x1a0 [ 736.443557][T17286] __x64_sys_setsockopt+0x182/0x200 [ 736.448800][T17286] do_syscall_64+0x55/0xb0 [ 736.453246][T17286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 736.459168][T17286] page last free stack trace: [ 736.463858][T17286] free_unref_page_prepare+0x7d7/0x8f0 [ 736.469423][T17286] free_unref_page+0x32/0x2e0 [ 736.474214][T17286] __unfreeze_partials+0x1cf/0x210 [ 736.479352][T17286] put_cpu_partial+0x17c/0x250 [ 736.484136][T17286] __slab_free+0x319/0x400 [ 736.488573][T17286] qlist_free_all+0x75/0xd0 [ 736.493127][T17286] kasan_quarantine_reduce+0x143/0x160 [ 736.498612][T17286] __kasan_slab_alloc+0x22/0x80 [ 736.504646][T17286] slab_post_alloc_hook+0x6a/0x4d0 [ 736.509911][T17286] __kmem_cache_alloc_node+0x194/0x250 [ 736.515414][T17286] kmalloc_node_trace+0x26/0xe0 [ 736.520299][T17286] __get_vm_area_node+0x125/0x370 [ 736.525353][T17286] __vmalloc_node_range+0x36f/0x1320 [ 736.531371][T17286] vzalloc+0x79/0x90 [ 736.535312][T17286] alloc_counters+0xcb/0x6c0 [ 736.540032][T17286] do_ipt_get_ctl+0xad5/0x1210 [ 736.544860][T17286] [ 736.547218][T17286] Memory state around the buggy address: [ 736.552891][T17286] ffff88807a45e200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 736.560988][T17286] ffff88807a45e280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 736.569074][T17286] >ffff88807a45e300: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 736.577154][T17286] ^ [ 736.582913][T17286] ffff88807a45e380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 736.591035][T17286] ffff88807a45e400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 736.599279][T17286] ================================================================== [ 736.607362][T17286] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 736.614583][T17286] CPU: 1 PID: 17286 Comm: syz.0.2774 Not tainted syzkaller #0 [ 736.622067][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 736.632144][T17286] Call Trace: [ 736.635445][T17286] [ 736.638590][T17286] dump_stack_lvl+0x18c/0x250 [ 736.643315][T17286] ? show_regs_print_info+0x20/0x20 [ 736.648556][T17286] ? load_image+0x420/0x420 [ 736.653114][T17286] panic+0x2ca/0x720 [ 736.657038][T17286] ? bpf_jit_dump+0xd0/0xd0 [ 736.661565][T17286] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 736.667494][T17286] ? _raw_spin_unlock+0x40/0x40 [ 736.672407][T17286] ? print_memory_metadata+0x314/0x400 [ 736.677921][T17286] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 736.684398][T17286] check_panic_on_warn+0x84/0xa0 [ 736.689384][T17286] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 736.695662][T17286] end_report+0x6f/0x130 [ 736.699930][T17286] kasan_report+0x128/0x150 [ 736.704466][T17286] ? stack_map_get_build_id_offset+0x6c0/0x720 [ 736.710656][T17286] stack_map_get_build_id_offset+0x6c0/0x720 [ 736.716666][T17286] ? pcpu_freelist_pop+0x12a/0x190 [ 736.721896][T17286] ? __bpf_get_stackid+0x900/0x900 [ 736.727034][T17286] ? perf_get_regs_user+0x5bb/0x6b0 [ 736.732250][T17286] ? perf_reg_abi+0x62/0x90 [ 736.736795][T17286] __bpf_get_stackid+0x564/0x900 [ 736.741770][T17286] bpf_get_stackid_pe+0x343/0x410 [ 736.746864][T17286] bpf_prog_2414a5d5030ea31b+0x29/0x2d [ 736.752350][T17286] bpf_overflow_handler+0x1fc/0x510 [ 736.757579][T17286] ? bpf_overflow_handler+0xde/0x510 [ 736.762984][T17286] ? tp_perf_event_destroy+0x20/0x20 [ 736.768385][T17286] ? perf_trace_preemptirq_template+0xac/0x330 [ 736.774579][T17286] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 736.781830][T17286] ? __perf_event_account_interrupt+0x187/0x280 [ 736.788127][T17286] __perf_event_overflow+0x461/0x660 [ 736.793456][T17286] perf_swevent_event+0x319/0x570 [ 736.798512][T17286] ? perf_tp_event+0x1550/0x1550 [ 736.803541][T17286] ? is_bpf_text_address+0x26/0x2a0 [ 736.808833][T17286] ___perf_sw_event+0x4ab/0x730 [ 736.813735][T17286] ? ___perf_sw_event+0x19e/0x730 [ 736.818807][T17286] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 736.825272][T17286] ? __lock_acquire+0x1336/0x7d80 [ 736.830332][T17286] ? __put_user_1+0x11/0x20 [ 736.834889][T17286] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 736.840991][T17286] ? lock_chain_count+0x20/0x20 [ 736.845877][T17286] __perf_sw_event+0x139/0x270 [ 736.850668][T17286] do_user_addr_fault+0x1242/0x12d0 [ 736.855900][T17286] ? rcu_is_watching+0x15/0xb0 [ 736.860692][T17286] exc_page_fault+0x64/0x100 [ 736.865422][T17286] asm_exc_page_fault+0x26/0x30 [ 736.870303][T17286] RIP: 0010:__put_user_1+0x11/0x20 [ 736.875449][T17286] Code: 5f 02 f7 ff c3 eb eb e8 cd 5f 02 f7 89 d8 5b 41 5e 41 5f 5d c3 cc cc cc cc f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 736.895083][T17286] RSP: 0018:ffffc900047170f8 EFLAGS: 00050202 [ 736.901173][T17286] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000020000000cf3d [ 736.909164][T17286] RDX: 0000000000000000 RSI: ffffffff8acade60 RDI: ffffffff8b1d3ba0 [ 736.917159][T17286] RBP: 000000000000fd90 R08: ffffffff8e8c316f R09: 1ffffffff1d1862d [ 736.925238][T17286] R10: dffffc0000000000 R11: fffffbfff1d1862e R12: ffff88806294c678 [ 736.933228][T17286] R13: ffff88806294c670 R14: ffff88806294c684 R15: 1ffff1100c5298cf [ 736.941334][T17286] bpf_vlog_reset+0x24a/0x330 [ 736.946162][T17286] do_check+0x9dc7/0xd0a0 [ 736.950551][T17286] ? __stack_depot_save+0x1f/0x660 [ 736.955694][T17286] ? __kasan_kmalloc+0x8f/0xa0 [ 736.960485][T17286] ? __sys_bpf+0x5ba/0x890 [ 736.964924][T17286] ? __x64_sys_bpf+0x7c/0x90 [ 736.969550][T17286] ? do_syscall_64+0x55/0xb0 [ 736.974316][T17286] ? init_func_state+0x2d10/0x2d10 [ 736.979474][T17286] ? __asan_memset+0x22/0x40 [ 736.984110][T17286] ? init_func_state+0x1dc6/0x2d10 [ 736.989265][T17286] ? btf_check_subprog_arg_match+0x142/0x2a0 [ 736.995370][T17286] do_check_common+0xacc/0x1410 [ 737.000345][T17286] bpf_check+0x65df/0xec40 [ 737.004801][T17286] ? __lock_acquire+0x1336/0x7d80 [ 737.009943][T17286] ? bpf_get_btf_vmlinux+0x20/0x20 [ 737.015092][T17286] ? __lock_acquire+0x1262/0x7d80 [ 737.020238][T17286] ? mark_lock+0x94/0x320 [ 737.024604][T17286] ? __lock_acquire+0x1336/0x7d80 [ 737.029675][T17286] ? verify_lock_unused+0x140/0x140 [ 737.034924][T17286] ? perf_trace_lock+0xfc/0x3b0 [ 737.039807][T17286] ? trace_event_raw_event_lock+0x240/0x240 [ 737.045750][T17286] ? perf_trace_lock+0xfc/0x3b0 [ 737.050641][T17286] ? pcpu_memcg_post_alloc_hook+0xef/0x3f0 [ 737.056515][T17286] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 737.062535][T17286] ? __lock_acquire+0x7d80/0x7d80 [ 737.067588][T17286] ? lock_chain_count+0x20/0x20 [ 737.072470][T17286] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 737.078753][T17286] ? lockdep_hardirqs_on+0x98/0x150 [ 737.084005][T17286] ? ktime_get_with_offset+0x103/0x330 [ 737.089504][T17286] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 737.095776][T17286] ? ktime_get_real_ts64+0x440/0x440 [ 737.101110][T17286] ? do_raw_spin_unlock+0x121/0x230 [ 737.106342][T17286] ? bpf_obj_name_cpy+0x194/0x1e0 [ 737.111390][T17286] bpf_prog_load+0x10fa/0x1610 [ 737.116185][T17286] ? map_freeze+0x420/0x420 [ 737.120718][T17286] ? __might_fault+0xaa/0x120 [ 737.125426][T17286] ? __might_fault+0xc6/0x120 [ 737.130143][T17286] ? __might_fault+0xaa/0x120 [ 737.134843][T17286] ? bpf_lsm_bpf+0x9/0x10 [ 737.139205][T17286] ? security_bpf+0x7e/0xa0 [ 737.143779][T17286] __sys_bpf+0x5ba/0x890 [ 737.148333][T17286] ? bpf_link_show_fdinfo+0x560/0x560 [ 737.153751][T17286] ? lock_chain_count+0x20/0x20 [ 737.158637][T17286] __x64_sys_bpf+0x7c/0x90 [ 737.163079][T17286] do_syscall_64+0x55/0xb0 [ 737.167525][T17286] ? clear_bhb_loop+0x40/0x90 [ 737.172231][T17286] ? clear_bhb_loop+0x40/0x90 [ 737.177034][T17286] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.182958][T17286] RIP: 0033:0x7fd9d659e159 [ 737.187394][T17286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.207049][T17286] RSP: 002b:00007fd9d74ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 737.215494][T17286] RAX: ffffffffffffffda RBX: 00007fd9d6825fa0 RCX: 00007fd9d659e159 [ 737.223535][T17286] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 737.231540][T17286] RBP: 00007fd9d663506b R08: 0000000000000000 R09: 0000000000000000 [ 737.239543][T17286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.248055][T17286] R13: 00007fd9d6826038 R14: 00007fd9d6825fa0 R15: 00007fffce1b22e8 [ 737.256066][T17286] [ 737.259353][T17286] Kernel Offset: disabled [ 737.264308][T17286] Rebooting in 86400 seconds..