last executing test programs: 33.368909881s ago: executing program 0 (id=4851): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x3, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0xad6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) socket$kcm(0xa, 0x2, 0x3a) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff0000, 0x5, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x2b, 0x800, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa023, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0xa00, 0x2, 0x0, 0x2, 0x100000008, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000020000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(r2, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 31.179663943s ago: executing program 0 (id=4856): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) r0 = socket$kcm(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) gettid() (async, rerun: 64) sendmsg$unix(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)='\t', 0x1}], 0x1, &(0x7f0000000c00)=ANY=[@ANYBLOB="14fad39d7ec7076b4c00000001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20008000}, 0x4000080) (rerun: 64) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) (async) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x809, 0x640b9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x7b, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x11, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9, r8}, 0xc) (async) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00'}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r11, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10004) (async) recvmsg$kcm(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x797}], 0x1}, 0x0) (async) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f91424fc60100005000a000200053582c137153e37000c0680040006000a00", 0x33fe0}], 0x1}, 0x0) (async) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xa) 30.077364654s ago: executing program 0 (id=4864): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/147, 0x93}, {&(0x7f00000001c0)=""/140, 0x8c}], 0x2, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r2, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup/syz0\x00', 0x200002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8912, &(0x7f0000000080)) 29.805810247s ago: executing program 0 (id=4866): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r1 = socket$kcm(0xa, 0x1, 0x106) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x44}, 0x40811) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xd4, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0400000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000200000400a62b6eb77324000000000000000000000020008cecf2cbe221ba9e3b2049a5102131b2b0fd5e52b1a5daf9efd684b621d59c0cc19de10ece251e932ecab1dab2ec7c1f18399a1b56027d4b99caf63846c080de3aaef545531e3b5a62987c604d494d1e2f1c714d3157fe76932cf59e4a8f"], 0x48) unlink(&(0x7f0000000180)='./cgroup/../file0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000bfa400000000000007040000f8ffff11b8050000000000008500000019000000950000000000000018365650ac07cd3b725b5649d2bb1ef7b713deefe6b28da90d178f9e0cae3dd9de148b71b87a9cc4"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0xe, 0x0, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xf, &(0x7f00000002c0)=r6, 0x4) r8 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000005c0)=r8, 0x12) write$cgroup_pid(r6, &(0x7f0000000700)=r8, 0x12) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) 29.557271378s ago: executing program 2 (id=4870): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000005c0)="0d113311d7af2c7d0a6b8bcc9ab7", 0xe}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000001c0)={r2, r4}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c11802f2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r2, &(0x7f0000001640)={&(0x7f00000000c0)=@ax25={{0x3, @netrom}, [@netrom, @default, @remote, @default, @default, @remote, @rose]}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/232, 0xe8}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x3}, 0x140) 28.077078397s ago: executing program 3 (id=4874): r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000100)='./file0\x00', r2, 0x4000, r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x80, 0x8, 0x6, 0x3, 0x6, 0x0, 0x7, 0x4, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x880, 0xd, 0x1, 0x7, 0x40, 0x7, 0xd34, 0x0, 0x7, 0x0, 0x6}, r3, 0x8, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xfffffffffffffffd, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x80047437, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000340)=r3, 0x4) r6 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x114, 0x6, 0x0, 0x8) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00200000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000085000000230000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1f, @loopback}}, 0x80, 0x0}, 0x106) 27.803609869s ago: executing program 2 (id=4876): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040)="1387c6", 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000040)="1387c6", 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee688892f", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r6}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x4, [@type_tag={0x6, 0x0, 0x0, 0x12, 0x4}, @enum={0x7, 0x5, 0x0, 0x6, 0x4, [{0x8, 0x4}, {0xb, 0xffffffff}, {0x6, 0x800}, {0xf, 0x2}, {0xd}]}, @enum={0x1, 0x6, 0x0, 0x6, 0x4, [{0xa, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0xe}, {0x0, 0x10000}, {0x5, 0x7}]}]}, {0x0, [0x0, 0x30]}}, &(0x7f0000000a00)=""/239, 0x98, 0xef, 0x0, 0xfff, 0x10000, @value=r2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x1e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000aac9ab2c782505a318f4758b55655803ee485da8514a2da073fb3e07ceaaf61a8dc88b22d8cb5b5ea0e89305bebc4f92e64e255d425588ff9cee7b988f64e7a5f48a3cb90853efc3046c9e1418f828c7c9d4fe64880a99415e820be50001e53eab59c0ba7dfbe53c435c627ddcde8a911177c7526885cd00ae254fbfca3e25eaa2c8b5c5bad42d9c22ffde01194cc1405072150508852eeec25034261a320f0351f5977715be7f0cf955c1b4a63623b7396b", @ANYRES32=r3, @ANYRESHEX=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186000000b0000000000000007000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000b40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x8, 0xff, 0x7fff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xffffff9c) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x1e, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1800000008000000000000000800000018110000aac9ab2c782505a318f4758b55655803ee485da8514a2da073fb3e07ceaaf61a8dc88b22d8cb5b5ea0e89305bebc4f92e64e255d425588ff9cee7b988f64e7a5f48a3cb90853efc3046c9e1418f828c7c9d4fe64880a99415e820be50001e53eab59c0ba7dfbe53c435c627ddcde8a911177c7526885cd00ae254fbfca3e25eaa2c8b5c5bad42d9c22ffde01194cc1405072150508852eeec25034261a320f0351f5977715be7f0cf955c1b4a63623b7396b", @ANYRES32=r3, @ANYRESHEX=r1, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000186000000b0000000000000007000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x25, r8, 0x8, &(0x7f0000000b40)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x0, 0x8, 0xff, 0x7fff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0xffffff9c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmsg$kcm(r2, &(0x7f0000000380)={&(0x7f0000000140)=@phonet, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)}, {&(0x7f0000000300)=""/12, 0xc}], 0x2}, 0x10061) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 27.739512593s ago: executing program 0 (id=4877): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) (async) socket$kcm(0x2, 0x3, 0x73) (async) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="120000000800000001000000b47c000000000000dd6ecc3c7886db4984c85edc91dd67d2cdd36203846ba65e10010e9586882e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000400"/28], 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) socket$kcm(0x2, 0x3, 0x2) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000980), 0x4) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000987651ce00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)="71781a18f3404ced36aae26754eb723973a585d881eaaa31f2c7a071cbe39077c2205d4dfcc6f2ac93a451fb00"/56, &(0x7f0000000580), 0x1000, r6}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000fffffffff0a00f3ff000000000300080000000030002e00000000"], 0x0, 0x37, 0x0, 0x7, 0x6}, 0x28) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x3b, 0x0, &(0x7f0000000040)="a9010360003d000000000000000081d9c4d1eca7000000000000d755283979ed7b52c09f7e8000ec741b17c6cd76fdb67c4d4c6ee4c0869a748e3f", 0x0, 0x1104, 0x6000000000000000, 0x61, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca", 0x0, 0x3}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) 26.830329815s ago: executing program 3 (id=4878): openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xdf}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000400)}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private2, 0x8}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x0, 0x3e, 0x0, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r2], 0x0, 0x3e, 0x0, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x45, 0x1, 0x3, 0x80000000}, {0x60, 0x8, 0x0, 0x9}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0xc}, {0x6, 0x0, 0x0, 0x10000000}]}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x45, 0x1, 0x3, 0x80000000}, {0x60, 0x8, 0x0, 0x9}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0xc}, {0x6, 0x0, 0x0, 0x10000000}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffe, 0x3, @perf_config_ext={0x0, 0xfffffffffffffff4}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) gettid() (async) r5 = gettid() syz_open_procfs$namespace(r5, &(0x7f0000000240)='ns/user\x00') ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xb) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="180000003f0a0000000000000900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703001ad90000008500000083000000bf0900000000000055090100000000009500000000000000bf910040000e000000130000000000008500000084000000b7000000000000f0684039043637febe"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x18, 0xfffffffffffffffc, 0x0, 0x30, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x26) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 26.739606369s ago: executing program 2 (id=4879): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async, rerun: 32) r1 = syz_clone(0x62200300, &(0x7f00000001c0)="3622796c3d296bb197226067d7979fef3010f2fb468ffdb54c9881777878d651b953c71913b0d6175e5d2ee5712a2a0e71055f9bf0c5c069beb8bb5dac7729f688f1ee9c60c4f6eb2b9fb03cceec30159276cbcd9b146780ea", 0x59, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="e14523e620c6d2527f76f8be87552d9c98cd0cfb5fb5abf61a18201d") (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3, 0x6, 0xc, 0x1, 0x0, 0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xf}, 0x4182, 0x9, 0x0, 0x3, 0x8000000000000000, 0x2c5a, 0x2, 0x0, 0xd11, 0x0, 0x24cc}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r1, 0xb, r2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 64) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x4474, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x100) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0xff, 0x0, 0x40, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x85a, 0x4}, 0x0, 0x7b, 0x8, 0x8, 0x1, 0x0, 0x82, 0x0, 0x7, 0x0, 0xa}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x43e90bacaf4f4c62, @perf_bp={0x0}, 0x104260, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffbfffffffff, r5, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008200000018070000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f0000000380)}, 0x10) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, r6, 0x0, 0x4, &(0x7f0000000400)='GPL\x00'}, 0x30) (rerun: 32) 26.733764359s ago: executing program 0 (id=4880): r0 = socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x7}, 0x3}, 0x0, 0xffffffffffffffef, 0xffffffffffffffff, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xa) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001ac0)={r2, 0x0, 0x0, 0x4}, 0x20) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x30}, 0x28) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22ffff) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 26.210097323s ago: executing program 3 (id=4885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002700)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020b00000000000c02000000000000000200000d000000000100000002000000090000000000000000005f00"], 0x0, 0x44}, 0x28) 25.917874987s ago: executing program 3 (id=4886): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) socketpair(0x9, 0x80000, 0x4, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_clone(0x1000000, 0x0, 0x60, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 25.8554705s ago: executing program 1 (id=4887): r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0xa, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x13, &(0x7f0000000200)=r4, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x81, 0x411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x2}, 0x2080, 0x0, 0x2, 0x1, 0x7fff, 0x200005, 0x80, 0x0, 0x0, 0x0, 0xfffffffffffffff2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="110000001e007f109e03e601d8878d53d3", 0x11}], 0x1}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="00005c6fc30000000000000000000068bdd9db5b1fd7df00"/37, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114104, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r9, 0x80082407, 0xfffffffffffffffd) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/user\x00') ioctl$TUNSETIFF(r10, 0xb702, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x1e, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@call={0x85, 0x0, 0x0, 0x8b}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x8f, &(0x7f0000000300)=""/143, 0x100, 0x3, '\x00', 0x0, @fallback=0x54ceabbec6a93234, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0x1], 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 25.391375961s ago: executing program 1 (id=4888): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000f40000000000ad3000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x80, 0x0}, 0x20040010) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000ed0000000000001c000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000002408000000b000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) 24.938885182s ago: executing program 2 (id=4889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x4}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) (rerun: 64) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async, rerun: 32) recvmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) (async) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x1, 0x3fff8000}, 0x1, 0x8, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r7}, 0x8) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x83080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x40, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x1) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000080)='syz1\x00', 0x1ff) 24.547491421s ago: executing program 3 (id=4890): socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x642b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd78, 0x7, 0x9, 0x491, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0x15, 0x8, 0x0, 0x2, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x158}, 0x40) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @dev}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000ac0)="ee", 0x1}, {&(0x7f0000000200)="50260440a560c9ac44504b8b59090b2c1903dd1ce7b8b7ccee6ffa2a84b60ba22ca5db81b0bd1c988a86dc4005e381d9d94c59", 0x33}, {&(0x7f0000000440)="306325eb600bcdc4999e063d4090200e64639e3940d9677e5591a6af9792654a3afa5bfda72e16794d3be1e89a448721d481faf6eb6a90f8edf4f3339ff0f42b0432ad45a6f01c394344ca35e8133c4acab7db15f7db4c53a12c91792c86f0b9ffbc50304431dc676a80ec74f97b2967c846ede2bfc1b568b257187d1b6942d21d68d09867dc7fe6d05c6f33f7473485d10c99cfa49616d87185ee3ecee932f4904d740f0535889e5780cf68830e8c", 0xaf}, {&(0x7f00000028c0)="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", 0x4a2}], 0x4, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d700e5ff1010"], 0x10b8}, 0x7f40) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d000a847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x200005, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1, @perf_bp={0x0, 0x6}, 0x9408, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x9) 24.352691569s ago: executing program 1 (id=4891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4060, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8906, 0x0) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x8907, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb010018000000000600009d552432473b30e5c3bd00040000000000000e0300000000000000040000000000000c02000000000000000000000202000000002e000061d735876d3d74427926491a36f0ef62d48aee70c629b519"], 0x0, 0x46}, 0x28) (async) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f00000004c0)=@l2tp={0x2, 0x0, @private=0xa010101, 0x1}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000980)="66503f24baa0839642d0bf4950cb58f810122b6eae71dd51ac757c85cb1f9b9450cb0a5a02af8be04257cb43b9de2c989eba8d1ad88511dd8507ced41c31a4e50f0486b7a0e195c965e89153babf3542cf8933703cdc30eeccc552497a17963b4fd0c3bd3a835a5e086bd1e181c0f38b423522e9d5ad2cc97f380d76609247648f4d4c9bd41a19deb4986975a59aab6fb348e4cd31fc3655bd341b4993253395863ac0a47465b3935609a5aabae0aaf27e339b49fb653f565cf22f5542", 0xbd}, {&(0x7f0000000a40)="0feb4c3a6c5bd2046698ab30025e8f607ac1840ec5b302f6d72c97cd4fdd2651d13985fe7ae1cd9add01e070bcf5096a5d4dc81d6bcc19f93514c26d4e5592f39ab76c6f7646125aa25a8e2ac62be719b6038bd848a6d2a0c2fbf8ef74f912387eebd325d41808a6", 0x68}, {&(0x7f0000000ac0)="dab12ebcd41c56648e34da396954c161deded05e38fdf8015d9ba7a381b96f7641fdb3ebe54800f006509d8a4f469e5ffe4927177f76a17dae787d5d3c8458c3370935d596dc1cdccef2fcff74e52c799978c1c1ac3ad779ec16dcff472d2362fad91a4535079821b3d65762522b09096eed920aa4baa16d6ed630dc4576b27543a2561ea88de67bf10f90d006c0d687dbd9ff347e9034be40c476d85dab03150136d745697447ef5cc993e5a0b6726c2c9a9274f401", 0xb6}, {&(0x7f0000000b80)="4af56ea542824b3965c482bdd6425bfc8439c14a28ab45ed94f129fc8996e0718e7b8b40be1f3fc7885a4be5b4b4086433a9e24f8618c04a806cfce7f42b6d9e31b44635b941f5aa06bad77df17c677ebfa4bae820a67bdf49194ef3273b34b79af1a096c38bd14b7d0b2a346f90a047f53870b78b141e64b4c27051358725aba7d334cd1f05e7afc9a1202792a2102b1f55ce0ab201dd8f56a5c92561e776de7d7edd42ccb06f3277a4595f67c7f2527228ba844ffcf77f2b7d00553a8e50c1956b21c73bbc5dc32e23d4d92ded11aa4a071fa80ac9fbef5a38916e7950a3b67469eed87191b7089ccc8b77b3", 0xed}, {&(0x7f0000000c80)="eef03f5895b97a75937e3bd4b6c0e3c376e3719a3820e811c74501273ce5b30dea804a2cd95ecbde5f995a09f797e7cf6137cc1853cd56ffce3ee4a82f25dfdbd7cdd1e733ee7482766dc35ad101ee74c005ae48e83149c3a910cd77a87839325133ab1d61500f44872d0ca9b7767be15f8d3f97e9001638d45383ac41ef58a083b3ebd6aa86f920a10fffc5ebdcff168d089312", 0x94}], 0x5, &(0x7f0000000dc0)=[{0xe0, 0x113, 0x9f18, "17f55ca8dbd99e1366c7e44327fbf07569db8ebd1379e67bc575abb9b7e831042d8f4d03d5dd575768258dfa16a973f4c53ef532166348552b94a05f1fba68669abaa6eb45a34b7bab9b8927a844a300ce0004252fcf6e8a551e96b374ded405ea2a2fc95d79c64e2d9f3470ed386d7cf7b35390d9b4426dd774b91bd9369da3428fd6a4d1eabbc9aa54893ec6c6c1de4fa16d347d42e7ef7388f65f313d8ceedaa92fff02bc74dcee66a351b02b7cea49efab59bbd737a2c05db807a5a665ba555ee3551d04ce5d85"}, {0x20, 0x114, 0x72, "ebe3eb1272ff1a21d767"}, {0x38, 0x117, 0x7, "61e61b0ef3aaf6e94d817becf5b47af44032c07057192ad164bf518c83d053c15f91"}, {0x90, 0x114, 0x1, "58cb1b7ae48689fd101c96f14825a80c06a121b07d0f9d594dabbdd5790c592e0a4ce7f7af1ac66acd35881229f2b8a36899d07ad63b7393edda6e4e4983470b6d35ed8bd6bbdff5b2f6a5de5d57aaef55305501349c1490b7ab85741da2d423bce08d4180115c2a7187697376dfd1912eeed0bd9909243ca071590106bdf978"}, {0xe0, 0x115, 0x9, "8bda3efba6c6ecbb38932afd5f4e0aaf1ea6e345fc8b7a7026fa8254939108c13564bf832a94908df88584d49c7940de85a3662529574541b41092510472ecb34c6b8ae80e6313e37bd2e2d436e73a2b35992fbce80ea77f3322fd38b4ecf527986b6cc4ee3e46c7b5686801386eb8404b74950dcf1f032c498df4b0c5ceb5107d48034a2a23291042965c4414c995f91dac291c782bb948907a5100c28930f832b6f61a1c58f4f628e70e3d23597cdf4fc7f7b98e94cbbd5a30e827b5e78ab7f263aaf25e21aa809cb4701ae2dbe628"}, {0xe0, 0x108, 0x1, "aced53fcc2bbd914c22078b17a1348b2cf7a28069e664da769a9f634d98319655df829dfa5070b14a7f1029cc326c345647c46d4016f9f8bdf642b753477105729dd723e230f9a48d5ada37651c99dc52ef241ccfe84b8e9b84f5cded7fe656c3e9fadd216e42114790af613130eec089ad117ca34ca02edd9bf66514b035703c8420674732806dfc92fbfa582846e99c54fe9e069e0708816c580c676e888122170a7ded37295a958ea2bd4ee60b1b0111c709fbc54bd06bd0d5415071523b4967666eb31d8290c57531b"}, {0xd0, 0x224, 0xd08, "6514c375b460c272b7ecc6fa813bf918f3f77c19a8a5152870c5f78174db4947a1a87f9053211b4e82fd610bf8cd95e5f53b2678779a214d5eceaafdf0a1d18c16ba13555598effd6fd2b1b299004472f9cba64dfde2895380a68a7844f43e6e29eaa884b7eba9d05f57de0a1dd78b1db35368f82fc889e18bcda8bbff7563dc4e4370e527d17283a12bbde941a62b2e869bbfa541e88085530c849681012891102391cee924c6bb3915a97ef0ee59e1f1a19f452f0b415a10536e6e0ce7"}, {0x58, 0x103, 0x8, "7015a2714401168f5c5208c048efcc7068f882e80589cc5da017667159c84061c2476d1e682b155905ddcc914e4326af4dd9c2d7536b523d65bbbe1c45c15769483f"}], 0x4b0}, 0x20048004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)=r1}, 0x20) (async) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001380)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r6, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f00000013c0)=r7}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f00000008c0), 0x4) (async) r13 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) r14 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) r15 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{r15, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f0000001480)=r13}, 0x20) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb, &(0x7f0000001780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000017c0), &(0x7f0000001800), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000001840)}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002b00)={r5, 0x20, &(0x7f0000002ac0)={&(0x7f0000001a40)=""/68, 0x44, 0x0, &(0x7f0000001ac0)=""/4096, 0x1000}}, 0x10) r19 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x6, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x40}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r19, &(0x7f0000000440), &(0x7f0000000000), 0x2}, 0x20) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002c00)=@bpf_lsm={0x1d, 0x2a, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@ldst={0x0, 0x2, 0x1, 0x2, 0xb, 0xfffffffffffffff0, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r16}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @alu={0x7, 0x0, 0x0, 0x6, 0x9, 0x4, 0xffffffffffffffff}, @generic={0x74, 0x7, 0x7, 0x7, 0x8001}, @tail_call={{0x18, 0x2, 0x1, 0x0, r15}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001680)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0xc, '\x00', r17, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000019c0)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001a00)={0x1, 0xa, 0xfffffff9, 0x10000}, 0x10, r18, 0x0, 0x5, &(0x7f0000002b40)=[r9, r15, r19, r9, 0x1, r8], &(0x7f0000002b80)=[{0x2, 0x2, 0x8, 0x4}, {0x2, 0x2, 0x1, 0x3}, {0x3, 0x2, 0x7, 0x9}, {0x4, 0x1, 0x8, 0x4f80cef83417faae}, {0x4, 0x5, 0x3, 0x3}]}, 0x94) 23.952719818s ago: executing program 1 (id=4892): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x4, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x3, 0x6c99e481}, 0x100001, 0xca, 0x5, 0x5, 0xd12, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2000000000000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0xe, 0x1ef7}, 0x1080aa, 0x4, 0x98, 0x9, 0x8, 0x32f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x100024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100", @ANYRESHEX=0x0], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[], 0x9, 0x4000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000280), 0x0}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r4, 0x0, 0x0}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2062) sendmsg$inet(r3, 0x0, 0x4) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 23.505342729s ago: executing program 3 (id=4893): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0xfffffffd, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10508, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x1, 0xccb8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, r4, 0x2) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x161) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x400c000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x22240, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000280)={'tunl0\x00'}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 23.232694962s ago: executing program 1 (id=4894): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$kcm(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x85, &(0x7f0000000000), 0x90) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0xffffffffffffff80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x1e, 0x1, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x1d, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, 0x0, 0x0) socket$kcm(0x10, 0x5, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r6) socket$kcm(0x2, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x4d}, 0x28) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') 22.586571831s ago: executing program 2 (id=4895): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000030000000000000000000005000000000000005f2e"], 0x0, 0xffffffffffffff47, 0x0, 0x1, 0x0, 0x10000, @value=r2}, 0x28) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000140)={0x0, 0x80, 0x3, 0x1, 0x7, 0x1, 0x0, 0xffffffffffffffc0, 0x20101, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x200010, 0x7fff, 0x3, 0x6, 0x3, 0x5, 0xecb3, 0x0, 0xf5f8, 0x0, 0x9}, r5, 0xe, r1, 0x6) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000b2b5000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r7, 0x0, &(0x7f0000001700)=""/53}, 0x20) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040100000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x63}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 22.515827104s ago: executing program 1 (id=4896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) (async) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) socket$kcm(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x100c, 0x7, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2b4000004800912574"], 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, &(0x7f0000000180)}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000080850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 800.379682ms ago: executing program 2 (id=4897): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x35}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90424fc600d00030009000300ff3582c137153e370248018002000000d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket$kcm(0x2, 0xa, 0x2) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x42}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "10"}], 0x18}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f00000000c0)={'bond_slave_0\x00'}) 231.76µs ago: executing program 32 (id=4896): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000b80)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) (async) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, 0x0) socket$kcm(0x11, 0x3, 0x300) r2 = perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x100c, 0x7, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) (async) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="2b4000004800912574"], 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, &(0x7f0000000180)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, 0x0, &(0x7f0000000180)}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000080850000009b000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000007b00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xe, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x0, 0x9}, 0x8210, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0x74, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 0s ago: executing program 33 (id=4893): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0xfffffffd, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYRES64=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10508, 0x400000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x1, 0xccb8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, r4, 0x2) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0), 0x161) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x400c000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x22240, 0x0) ioctl$TUNGETIFF(r8, 0x800454d2, &(0x7f0000000280)={'tunl0\x00'}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): id length. [ 1128.782966][T16717] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1128.996753][T16731] -1: renamed from syzkaller0 [ 1129.702967][T16741] netlink: 'syz.3.3195': attribute type 46 has an invalid length. [ 1131.250428][T16763] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3202'. [ 1131.368887][T16760] syzkaller0: entered promiscuous mode [ 1131.380315][T16760] syzkaller0: entered allmulticast mode [ 1137.076296][T16796] netlink: 15698 bytes leftover after parsing attributes in process `syz.2.3211'. [ 1137.185836][T16799] netlink: 'syz.3.3212': attribute type 10 has an invalid length. [ 1137.211721][T16799] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3212'. [ 1137.486783][T16806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3212'. [ 1137.644993][T16810] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3215'. [ 1137.668969][T16830] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1137.760205][T16806] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3212'. [ 1137.781008][T16810] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1137.789360][T16813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3212'. [ 1137.806615][T16810] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1137.825435][T16810] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1137.844742][T16810] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1137.880978][T16810] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1137.902777][T16810] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1137.931883][T16810] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1137.972077][T16810] netlink: 'syz.2.3215': attribute type 39 has an invalid length. [ 1138.178261][T16868] IPv6: NLM_F_CREATE should be specified when creating new route [ 1138.200973][T16868] IPv6: Can't replace route, no match found [ 1138.675661][T16877] netlink: 8670 bytes leftover after parsing attributes in process `syz.2.3223'. [ 1138.718004][T16877] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.3223'. [ 1138.748379][T16877] netlink: zone id is out of range [ 1138.754185][T16877] netlink: zone id is out of range [ 1138.764296][T16877] netlink: zone id is out of range [ 1138.769922][T16877] netlink: zone id is out of range [ 1138.781210][T16877] netlink: zone id is out of range [ 1138.921475][T16877] netlink: zone id is out of range [ 1138.954749][T16877] netlink: zone id is out of range [ 1138.960179][T16877] netlink: zone id is out of range [ 1139.041639][T16877] netlink: zone id is out of range [ 1139.120459][T16877] netlink: zone id is out of range [ 1139.368991][T16882] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3226'. [ 1141.194773][T16943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1141.202788][T16943] IPv6: NLM_F_CREATE should be set when creating new route [ 1141.211281][T16943] IPv6: NLM_F_CREATE should be set when creating new route [ 1141.219321][T16943] IPv6: NLM_F_CREATE should be set when creating new route [ 1141.220175][T16944] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3240'. [ 1141.311988][T16917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.320273][T16917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.365980][T16917] bridge0: entered allmulticast mode [ 1141.559852][T16941] bridge_slave_1: left allmulticast mode [ 1141.569722][T16941] bridge_slave_1: left promiscuous mode [ 1141.579920][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.637568][T16941] bridge_slave_0: left allmulticast mode [ 1141.650906][T16941] bridge_slave_0: left promiscuous mode [ 1141.656959][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.887722][T16946] bond0: (slave syz_tun): Releasing backup interface [ 1142.683976][T16966] syzkaller0: entered promiscuous mode [ 1142.709088][T16966] syzkaller0: entered allmulticast mode [ 1142.732536][T16970] __nla_validate_parse: 1 callbacks suppressed [ 1142.732572][T16970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3249'. [ 1146.409849][T17002] validate_nla: 61 callbacks suppressed [ 1146.409868][T17002] netlink: 'syz.3.3254': attribute type 17 has an invalid length. [ 1146.848370][T17010] netlink: 'syz.3.3256': attribute type 39 has an invalid length. [ 1148.413223][T17022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3260'. [ 1148.437925][T17022] : renamed from virt_wifi0 [ 1148.516241][T17029] netlink: 'syz.2.3262': attribute type 49 has an invalid length. [ 1148.558982][T17029] netlink: 'syz.2.3262': attribute type 49 has an invalid length. [ 1148.643426][T17035] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3263'. [ 1148.667873][T17035] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3263'. [ 1149.792980][T17058] netlink: 'syz.1.3269': attribute type 10 has an invalid length. [ 1149.828048][ T5831] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 1150.225210][T17063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1150.233275][T17063] IPv6: NLM_F_CREATE should be set when creating new route [ 1150.241793][T17063] IPv6: NLM_F_CREATE should be set when creating new route [ 1150.250063][T17063] IPv6: NLM_F_CREATE should be set when creating new route [ 1150.410382][T17063] netlink: 'syz.3.3273': attribute type 9 has an invalid length. [ 1150.481111][T17063] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3273'. [ 1150.594250][T17070] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3276'. [ 1150.731577][T17075] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.3277'. [ 1151.169471][T17089] pim6reg1: entered promiscuous mode [ 1151.188075][T17089] pim6reg1: entered allmulticast mode [ 1151.587961][T17095] netlink: 'syz.2.3282': attribute type 17 has an invalid length. [ 1151.601468][T17095] net_ratelimit: 240 callbacks suppressed [ 1151.601488][T17095] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1151.751763][T17097] netlink: 'syz.0.3283': attribute type 2 has an invalid length. [ 1151.759645][T17097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3283'. [ 1151.827616][T17097] netlink: 'syz.0.3283': attribute type 2 has an invalid length. [ 1151.870512][T17097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3283'. [ 1152.554760][T17117] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.3288'. [ 1154.554143][T17170] netlink: 'syz.1.3299': attribute type 10 has an invalid length. [ 1154.563347][T17170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3299'. [ 1154.624075][T17170] batman_adv: batadv0: Adding interface: veth0_vlan [ 1154.655400][T17170] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1154.761204][T17170] batman_adv: batadv0: Interface activated: veth0_vlan [ 1154.810322][T17177] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3302'. [ 1154.832322][T17177] netlink: 'syz.3.3302': attribute type 3 has an invalid length. [ 1154.840295][T17177] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3302'. [ 1155.377717][T17183] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3304'. [ 1155.476114][T17186] netlink: 'syz.2.3304': attribute type 10 has an invalid length. [ 1155.560461][T17186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3304'. [ 1155.624330][T17186] dummy0: entered promiscuous mode [ 1155.660248][T17186] dummy0: entered allmulticast mode [ 1155.689936][T17186] bridge0: port 3(dummy0) entered blocking state [ 1155.727360][T17186] bridge0: port 3(dummy0) entered disabled state [ 1155.784659][T17186] bridge0: port 3(dummy0) entered blocking state [ 1155.791446][T17186] bridge0: port 3(dummy0) entered forwarding state [ 1158.443825][T17233] bridge0: port 3(dummy0) entered disabled state [ 1158.450485][T17233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.458226][T17233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.508847][T17233] bridge0: entered allmulticast mode [ 1158.576164][T17236] bridge0: port 3(dummy0) entered disabled state [ 1159.390554][T17236] bridge_slave_1: left allmulticast mode [ 1159.402607][T17236] bridge_slave_1: left promiscuous mode [ 1159.409841][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 1159.456289][T17236] bridge_slave_0: left allmulticast mode [ 1159.467434][T17236] bridge_slave_0: left promiscuous mode [ 1159.481005][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.616169][T17244] netlink: 'syz.3.3318': attribute type 1 has an invalid length. [ 1159.637477][T17248] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3319'. [ 1159.650601][T17248] netlink: 'syz.0.3319': attribute type 1 has an invalid length. [ 1159.658535][T17248] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.3319'. [ 1159.671268][T17247] netlink: 'syz.3.3318': attribute type 27 has an invalid length. [ 1161.718284][T17271] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3325'. [ 1161.833591][T17279] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.3326'. [ 1162.038381][T17292] netlink: 'syz.1.3329': attribute type 3 has an invalid length. [ 1162.064679][T17292] netlink: 'syz.1.3329': attribute type 1 has an invalid length. [ 1162.074523][T17292] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3329'. [ 1162.969703][T17321] netlink: 'syz.3.3336': attribute type 9 has an invalid length. [ 1162.986258][T17321] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3336'. [ 1163.045855][T17330] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1163.089686][T17330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1163.150899][T17331] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3337'. [ 1163.184558][T17331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1163.384410][T17335] netlink: 'syz.3.3340': attribute type 9 has an invalid length. [ 1163.401949][T17335] netlink: 'syz.3.3340': attribute type 23 has an invalid length. [ 1163.419126][T17335] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1166.053541][T17349] ±ÿ: renamed from lo (while UP) [ 1168.085855][T17372] netlink: 'syz.2.3350': attribute type 12 has an invalid length. [ 1168.102067][T17372] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.3350'. [ 1168.993900][T17390] netlink: 'syz.3.3355': attribute type 1 has an invalid length. [ 1169.033491][T17390] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3355'. [ 1170.583835][T17410] delete_channel: no stack [ 1170.681727][T17415] netlink: 'syz.2.3361': attribute type 21 has an invalid length. [ 1170.690246][T17415] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3361'. [ 1170.710071][T17417] netlink: 'syz.0.3363': attribute type 7 has an invalid length. [ 1170.878454][T17426] netlink: 'syz.2.3361': attribute type 21 has an invalid length. [ 1171.987660][T17456] netlink: 'syz.2.3373': attribute type 21 has an invalid length. [ 1172.062662][T17458] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.3372'. [ 1172.082043][T17458] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 1172.263867][T17468] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3376'. [ 1172.325686][T17465] netlink: 'syz.0.3377': attribute type 21 has an invalid length. [ 1172.334856][T17465] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1172.345397][T17465] netlink: 'syz.0.3377': attribute type 4 has an invalid length. [ 1172.387994][T17465] netlink: 'syz.0.3377': attribute type 3 has an invalid length. [ 1172.397742][T17465] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1172.703296][T17477] netlink: 'syz.3.3378': attribute type 10 has an invalid length. [ 1172.716339][T17482] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1172.865213][T17477] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 1173.258603][T17487] netlink: 'syz.0.3382': attribute type 9 has an invalid length. [ 1173.268307][T17487] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3382'. [ 1173.413253][T17477] syz.3.3378 (17477) used greatest stack depth: 16776 bytes left [ 1173.845974][T17502] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1173.850905][T17504] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1174.031088][T17506] syzkaller0: entered promiscuous mode [ 1174.038285][T17506] syzkaller0: entered allmulticast mode [ 1177.681333][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.687816][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.283746][ T5831] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 1181.677393][T11600] tipc: Subscription rejected, illegal request [ 1181.892753][T17579] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3404'. [ 1182.640955][T17597] netlink: 'syz.1.3408': attribute type 10 has an invalid length. [ 1182.660897][T17597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3408'. [ 1182.697923][T17597] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1182.739804][T17597] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1182.790504][T17597] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1183.370977][ T5831] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 1185.157768][T17633] netlink: 'syz.3.3420': attribute type 1 has an invalid length. [ 1185.209417][T17633] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3420'. [ 1185.441330][T17646] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3424'. [ 1185.485937][T17646] bridge_slave_1: default FDB implementation only supports local addresses [ 1185.807633][T17658] netlink: 'syz.3.3427': attribute type 2 has an invalid length. [ 1185.821309][T17658] netlink: 'syz.3.3427': attribute type 8 has an invalid length. [ 1185.849184][T17658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3427'. [ 1185.871810][T17658] netlink: 'syz.3.3427': attribute type 2 has an invalid length. [ 1185.884401][T17658] netlink: 'syz.3.3427': attribute type 8 has an invalid length. [ 1185.900299][T17658] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3427'. [ 1186.634831][ T5831] Bluetooth: hci1: Malformed HCI Event: 0x22 [ 1187.768719][T17698] netlink: 'syz.1.3434': attribute type 12 has an invalid length. [ 1187.801984][T17698] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.3434'. [ 1188.332436][T17719] netlink: 209756 bytes leftover after parsing attributes in process `syz.1.3439'. [ 1188.509291][T17714] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3438'. [ 1188.527472][T17714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1188.828782][T17728] syzkaller0: entered promiscuous mode [ 1188.838976][T17728] syzkaller0: entered allmulticast mode [ 1189.487177][T17742] netlink: 'syz.0.3446': attribute type 11 has an invalid length. [ 1190.008238][T17755] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3449'. [ 1190.119230][T17757] netlink: zone id is out of range [ 1190.136951][T17757] netlink: set zone limit has 8 unknown bytes [ 1190.781457][T17760] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3451'. [ 1191.267535][T17760] bond0: (slave bond_slave_0): Releasing backup interface [ 1191.357606][T17760] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1191.487439][T17773] syzkaller0: entered promiscuous mode [ 1191.497322][T17773] syzkaller0: entered allmulticast mode [ 1193.012863][T17789] netlink: 'syz.2.3456': attribute type 9 has an invalid length. [ 1193.042103][T17789] netlink: 399 bytes leftover after parsing attributes in process `syz.2.3456'. [ 1195.687791][T17821] netlink: 'syz.2.3464': attribute type 1 has an invalid length. [ 1195.721426][T17821] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3464'. [ 1196.340112][T17831] netlink: 'syz.3.3467': attribute type 7 has an invalid length. [ 1196.620522][T17831] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1196.677248][T17836] netlink: 'syz.3.3467': attribute type 2 has an invalid length. [ 1196.696747][T17836] netlink: 'syz.3.3467': attribute type 8 has an invalid length. [ 1196.715942][T17836] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3467'. [ 1196.925269][T17849] syzkaller0: entered promiscuous mode [ 1196.942565][T17849] syzkaller0: entered allmulticast mode [ 1202.218753][T17881] netlink: 'syz.1.3478': attribute type 10 has an invalid length. [ 1202.239119][T17881] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1202.333186][T17881] batman_adv: batadv0: Removing interface: veth0_vlan [ 1202.390289][T17881] veth0_vlan: left promiscuous mode [ 1202.398235][T17881] veth0_vlan: entered promiscuous mode [ 1202.408376][T17881] team0: Device veth0_vlan failed to register rx_handler [ 1202.582317][T17886] netlink: 'syz.0.3480': attribute type 21 has an invalid length. [ 1202.590391][T17886] netlink: 'syz.0.3480': attribute type 6 has an invalid length. [ 1202.641002][T17886] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1202.746384][T17888] netlink: 'syz.2.3481': attribute type 2 has an invalid length. [ 1202.765834][T17888] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1203.218410][T17908] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1203.279797][T17901] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3484'. [ 1203.372133][T17901] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1203.400903][T17908] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3485'. [ 1203.486944][T17913] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3486'. [ 1203.619809][T17916] netlink: 'syz.3.3487': attribute type 2 has an invalid length. [ 1203.627772][T17916] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3487'. [ 1204.033669][T17921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1206.853444][T17926] team0: Port device team_slave_0 removed [ 1207.394585][T17959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3497'. [ 1207.434795][T17958] netlink: 'syz.0.3498': attribute type 1 has an invalid length. [ 1207.451074][T17959] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3497'. [ 1207.462637][T17958] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.3498'. [ 1207.478315][T17961] netlink: 'syz.0.3498': attribute type 27 has an invalid length. [ 1208.510092][T17971] netlink: 'syz.2.3500': attribute type 2 has an invalid length. [ 1208.542489][T17975] netlink: 'syz.3.3502': attribute type 2 has an invalid length. [ 1208.582447][T17975] __nla_validate_parse: 38 callbacks suppressed [ 1208.582463][T17975] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3502'. [ 1210.885642][T18022] netlink: 'syz.1.3513': attribute type 3 has an invalid length. [ 1210.903780][T18022] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3513'. [ 1211.652626][T18028] netlink: 'syz.1.3514': attribute type 10 has an invalid length. [ 1211.695736][T18028] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 1211.731358][T18033] netlink: 'syz.1.3514': attribute type 3 has an invalid length. [ 1211.756486][T18033] netlink: 'syz.1.3514': attribute type 1 has an invalid length. [ 1211.785058][T18033] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1213.225262][T18065] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3524'. [ 1213.261055][T18065] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1213.296865][T18065] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1215.334447][T18070] netlink: 'syz.0.3525': attribute type 27 has an invalid length. [ 1215.361292][T18070] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3525'. [ 1215.423495][T18070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1215.559702][T18076] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3527'. [ 1215.588639][T18076] bridge_slave_1: entered promiscuous mode [ 1215.613884][T18077] netlink: 'syz.3.3528': attribute type 10 has an invalid length. [ 1215.680171][T18077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.740458][T18077] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1215.747577][T18080] netlink: 'syz.3.3528': attribute type 153 has an invalid length. [ 1215.781394][T18080] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3528'. [ 1216.847513][T18109] netlink: 'syz.3.3536': attribute type 10 has an invalid length. [ 1216.909024][T18109] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3536'. [ 1220.558622][T18158] C: renamed from team_slave_0 [ 1220.622819][T18158] netlink: 'syz.0.3546': attribute type 4 has an invalid length. [ 1220.674013][T18158] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3546'. [ 1220.737709][T18158] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1220.761025][T18162] netlink: 'syz.0.3546': attribute type 4 has an invalid length. [ 1220.768832][T18162] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3546'. [ 1220.778893][T18162] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1221.485028][T18184] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1221.498859][T18184] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1221.510554][T18184] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1221.684555][T18184] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1221.779858][T18184] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1221.919701][T18184] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1222.714480][T18196] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3552'. [ 1222.755283][T18196] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3552'. [ 1222.953501][T18211] bridge0: port 2(veth0_to_bond) entered blocking state [ 1222.960941][T18211] bridge0: port 2(veth0_to_bond) entered disabled state [ 1222.968070][T18211] veth0_to_bond: entered allmulticast mode [ 1223.013392][T18211] veth0_to_bond: entered promiscuous mode [ 1223.032534][T18211] bridge0: port 2(veth0_to_bond) entered blocking state [ 1223.039818][T18211] bridge0: port 2(veth0_to_bond) entered forwarding state [ 1223.457432][T18220] netlink: 'syz.1.3557': attribute type 1 has an invalid length. [ 1223.482608][T18220] netlink: 'syz.1.3557': attribute type 3 has an invalid length. [ 1223.497626][T18220] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1223.528087][T18219] netlink: 'syz.1.3557': attribute type 10 has an invalid length. [ 1223.545420][T18219] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1223.867494][T18233] netlink: 'syz.0.3562': attribute type 21 has an invalid length. [ 1223.891383][T18233] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3562'. [ 1223.958153][T18233] netlink: 'syz.0.3562': attribute type 21 has an invalid length. [ 1223.975544][T18233] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3562'. [ 1224.312069][T18245] netlink: 'syz.0.3563': attribute type 1 has an invalid length. [ 1224.321083][T18245] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3563'. [ 1224.336253][T18245] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3563'. [ 1224.726418][T18260] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 1226.715475][T18296] netlink: 'syz.1.3577': attribute type 3 has an invalid length. [ 1226.805918][T18296] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 1226.825719][T18296] __nla_validate_parse: 2 callbacks suppressed [ 1226.825736][T18296] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.3577'. [ 1226.961255][T18303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1226.970330][T18303] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1226.990002][T18301] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1227.025541][T18302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3578'. [ 1227.377105][T18322] netlink: 'syz.2.3583': attribute type 10 has an invalid length. [ 1228.153395][T18347] sock: sock_timestamping_bind_phc: sock not bind to device [ 1228.302494][T18332] syzkaller0: entered promiscuous mode [ 1228.308196][T18332] syzkaller0: entered allmulticast mode [ 1228.317268][T18351] netlink: 'syz.0.3588': attribute type 12 has an invalid length. [ 1228.326392][T18351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3588'. [ 1230.606237][T18359] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3590'. [ 1230.616323][T18363] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1230.636468][T18365] netlink: 'syz.0.3593': attribute type 13 has an invalid length. [ 1230.655394][T18365] netlink: 'syz.0.3593': attribute type 58 has an invalid length. [ 1230.682623][T18365] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3593'. [ 1230.943269][T18370] Bluetooth: hci1: command 0x0406 tx timeout [ 1231.255930][T18394] netlink: 'syz.1.3598': attribute type 1 has an invalid length. [ 1231.264318][T18394] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3598'. [ 1231.319113][T18393] netlink: 'syz.3.3599': attribute type 4 has an invalid length. [ 1231.332388][T18393] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3599'. [ 1231.538286][T18401] netlink: 'syz.1.3601': attribute type 7 has an invalid length. [ 1231.661038][T18407] netlink: 'syz.1.3601': attribute type 7 has an invalid length. [ 1231.956704][T18414] netlink: 'syz.0.3603': attribute type 3 has an invalid length. [ 1231.985942][T18414] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3603'. [ 1232.996213][T18435] netlink: 'syz.2.3606': attribute type 13 has an invalid length. [ 1233.048166][T18435] netlink: 'syz.2.3606': attribute type 58 has an invalid length. [ 1233.066284][T18435] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1233.170679][T18442] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3609'. [ 1233.249710][T18442] netlink: 'syz.3.3609': attribute type 21 has an invalid length. [ 1233.454769][T18446] netlink: 'syz.2.3611': attribute type 4 has an invalid length. [ 1233.518551][T18446] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3611'. [ 1233.673062][T18453] netlink: 'syz.0.3612': attribute type 9 has an invalid length. [ 1233.681854][T18453] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1236.868717][T18483] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3617'. [ 1237.175680][T18491] netlink: 'syz.1.3620': attribute type 13 has an invalid length. [ 1237.187505][T18491] netlink: 'syz.1.3620': attribute type 58 has an invalid length. [ 1237.197911][T18491] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1238.030825][T18505] netlink: 'syz.0.3624': attribute type 21 has an invalid length. [ 1238.039127][T18505] netlink: 'syz.0.3624': attribute type 10 has an invalid length. [ 1238.054246][T18505] netlink: 'syz.0.3624': attribute type 12 has an invalid length. [ 1238.063957][T18505] netlink: 'syz.0.3624': attribute type 13 has an invalid length. [ 1238.072445][T18505] netlink: 'syz.0.3624': attribute type 14 has an invalid length. [ 1238.081591][T18505] netlink: 'syz.0.3624': attribute type 15 has an invalid length. [ 1238.099392][T18505] netlink: 'syz.0.3624': attribute type 16 has an invalid length. [ 1238.108114][T18505] netlink: 'syz.0.3624': attribute type 19 has an invalid length. [ 1238.118332][T18505] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.3624'. [ 1238.648757][T18530] syzkaller0: left allmulticast mode [ 1239.034129][T18551] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3633'. [ 1239.130450][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.136925][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.154053][T18555] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1239.223973][T18556] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1240.461256][T18581] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.3637'. [ 1240.476408][T18581] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.3637'. [ 1242.979915][T18604] validate_nla: 5 callbacks suppressed [ 1242.979959][T18604] netlink: 'syz.1.3645': attribute type 21 has an invalid length. [ 1243.009365][T18604] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3645'. [ 1243.028481][T18604] netlink: 'syz.1.3645': attribute type 4 has an invalid length. [ 1243.038805][T18604] netlink: 'syz.1.3645': attribute type 3 has an invalid length. [ 1243.051859][T18604] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3645'. [ 1243.241170][T18615] netlink: 'syz.2.3647': attribute type 10 has an invalid length. [ 1243.297571][T18615] hsr0: entered promiscuous mode [ 1243.408889][T18615] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1243.450857][T18615] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1243.481530][T18615] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1243.540981][T18615] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1243.824262][T18622] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1245.442166][T18671] netlink: 'syz.2.3661': attribute type 10 has an invalid length. [ 1245.474294][T18671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1246.797409][T18703] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.3670'. [ 1246.823901][ T5831] Bluetooth: hci3: ISO packet for unknown connection handle 2878 [ 1246.900987][T18703] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3670'. [ 1247.046899][T18705] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3674'. [ 1247.057656][T18705] bridge_slave_1: default FDB implementation only supports local addresses [ 1247.306056][T18705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.732721][T18714] delete_channel: no stack [ 1247.742362][T18714] delete_channel: no stack [ 1247.747112][T18714] delete_channel: no stack [ 1247.763514][T18714] delete_channel: no stack [ 1247.770194][T18714] delete_channel: no stack [ 1247.780389][T18714] delete_channel: no stack [ 1247.794251][T18714] delete_channel: no stack [ 1247.798903][T18714] delete_channel: no stack [ 1247.817898][T18714] delete_channel: no stack [ 1247.832191][T18714] delete_channel: no stack [ 1247.841746][T18714] delete_channel: no stack [ 1247.854932][T18714] delete_channel: no stack [ 1247.864878][T18714] delete_channel: no stack [ 1247.874564][T18714] delete_channel: no stack [ 1247.885584][T18714] delete_channel: no stack [ 1247.897388][T18714] delete_channel: no stack [ 1247.906992][T18714] delete_channel: no stack [ 1247.917483][T18714] delete_channel: no stack [ 1247.927455][T18714] delete_channel: no stack [ 1247.932833][T18714] delete_channel: no stack [ 1247.937746][T18714] delete_channel: no stack [ 1248.056877][T18714] delete_channel: no stack [ 1248.071019][T18714] delete_channel: no stack [ 1248.075700][T18714] delete_channel: no stack [ 1248.080360][T18714] delete_channel: no stack [ 1248.104395][T18714] delete_channel: no stack [ 1248.109614][T18714] delete_channel: no stack [ 1248.114957][T18714] delete_channel: no stack [ 1248.123574][T18714] delete_channel: no stack [ 1248.128382][T18714] delete_channel: no stack [ 1248.133616][T18714] delete_channel: no stack [ 1248.138436][T18714] delete_channel: no stack [ 1248.145744][T18714] delete_channel: no stack [ 1248.152198][T18714] delete_channel: no stack [ 1248.157356][T18714] delete_channel: no stack [ 1248.164128][T18714] delete_channel: no stack [ 1248.168791][T18714] delete_channel: no stack [ 1248.176412][T18714] delete_channel: no stack [ 1248.182547][T18714] delete_channel: no stack [ 1248.191898][T18714] delete_channel: no stack [ 1248.196537][T18714] delete_channel: no stack [ 1248.210216][T18735] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.3679'. [ 1248.224618][T18714] delete_channel: no stack [ 1248.229277][T18714] delete_channel: no stack [ 1248.234803][T18714] delete_channel: no stack [ 1248.239462][T18714] delete_channel: no stack [ 1248.253416][T18714] delete_channel: no stack [ 1248.258659][T18714] delete_channel: no stack [ 1248.267118][T18714] delete_channel: no stack [ 1248.273661][T18714] delete_channel: no stack [ 1248.279221][T18714] delete_channel: no stack [ 1248.297576][T18714] delete_channel: no stack [ 1248.307725][T18714] delete_channel: no stack [ 1248.312564][T18714] delete_channel: no stack [ 1248.323847][T18714] delete_channel: no stack [ 1248.328497][T18714] delete_channel: no stack [ 1248.346054][T18714] delete_channel: no stack [ 1248.351235][T18714] delete_channel: no stack [ 1248.353703][T18742] netlink: 'syz.0.3680': attribute type 10 has an invalid length. [ 1248.355863][T18714] delete_channel: no stack [ 1248.374212][T18714] delete_channel: no stack [ 1248.378890][T18714] delete_channel: no stack [ 1248.387402][T18714] delete_channel: no stack [ 1248.394805][T18714] delete_channel: no stack [ 1248.399625][T18714] delete_channel: no stack [ 1248.413234][T18714] delete_channel: no stack [ 1248.418070][T18714] delete_channel: no stack [ 1252.305654][T18792] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1252.326349][T18792] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1252.336477][T18792] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1256.064727][T18830] netlink: 'syz.2.3700': attribute type 3 has an invalid length. [ 1256.138434][T18830] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1256.711947][T18845] netlink: 'syz.2.3705': attribute type 10 has an invalid length. [ 1256.720037][T18845] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3705'. [ 1257.625469][T18853] netlink: 'syz.2.3706': attribute type 21 has an invalid length. [ 1257.670859][T18853] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1257.706843][T18853] netlink: 'syz.2.3706': attribute type 10 has an invalid length. [ 1258.125992][T18856] netlink: 'syz.0.3707': attribute type 17 has an invalid length. [ 1258.196321][T18856] netlink: 'syz.0.3707': attribute type 16 has an invalid length. [ 1258.237036][T18856] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3707'. [ 1258.516901][T18859] pim6reg1: entered promiscuous mode [ 1258.791864][T18862] syzkaller0: entered promiscuous mode [ 1258.797441][T18862] syzkaller0: entered allmulticast mode [ 1259.193785][T18867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1267.039687][T18913] netlink: 'syz.2.3720': attribute type 27 has an invalid length. [ 1267.068627][T18920] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3722'. [ 1270.716140][T18947] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1270.938491][T18947] netlink: 'syz.2.3729': attribute type 3 has an invalid length. [ 1270.961590][T18947] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3729'. [ 1271.473052][T18972] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3736'. [ 1271.550473][T18974] sctp: [Deprecated]: syz.0.3737 (pid 18974) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1271.550473][T18974] Use struct sctp_sack_info instead [ 1272.379588][T18976] netlink: 'syz.1.3738': attribute type 9 has an invalid length. [ 1272.406845][T18976] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1272.478669][T18979] netlink: 'syz.2.3739': attribute type 10 has an invalid length. [ 1272.501038][T18979] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1272.626613][T18993] netlink: 'syz.3.3742': attribute type 12 has an invalid length. [ 1272.634904][T18993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3742'. [ 1272.687840][T18993] netlink: 'syz.3.3742': attribute type 1 has an invalid length. [ 1272.699558][T18993] netlink: 13854 bytes leftover after parsing attributes in process `syz.3.3742'. [ 1272.746224][T18981] netlink: 'syz.1.3738': attribute type 9 has an invalid length. [ 1272.769059][T18981] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1273.398650][T19006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3746'. [ 1274.291500][T19020] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1274.348505][T19020] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 1275.718661][T19054] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3755'. [ 1275.731117][T19060] netlink: 'syz.1.3757': attribute type 4 has an invalid length. [ 1275.750787][T19060] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3757'. [ 1275.789659][T19060] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1276.260982][T19078] netlink: 'syz.0.3764': attribute type 5 has an invalid length. [ 1279.227137][T19134] syzkaller0: left promiscuous mode [ 1279.249069][T19148] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1279.408080][T19151] syzkaller0: entered allmulticast mode [ 1279.487643][T19149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3773'. [ 1280.282121][T19149] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3773'. [ 1280.863613][T19175] netlink: 'syz.0.3779': attribute type 10 has an invalid length. [ 1281.051138][T19168] netlink: 'syz.0.3779': attribute type 11 has an invalid length. [ 1281.090941][T19168] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.3779'. [ 1281.156175][T19168] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 1281.184280][T19168] CPU: 1 PID: 19168 Comm: syz.0.3779 Not tainted syzkaller #0 [ 1281.191830][T19168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1281.201960][T19168] Call Trace: [ 1281.205291][T19168] [ 1281.208292][T19168] dump_stack_lvl+0x18c/0x250 [ 1281.213072][T19168] ? show_regs_print_info+0x20/0x20 [ 1281.218341][T19168] ? load_image+0x420/0x420 [ 1281.222956][T19168] sysfs_warn_dup+0x8e/0xa0 [ 1281.227543][T19168] sysfs_do_create_link_sd+0xc0/0x110 [ 1281.233000][T19168] device_add_class_symlinks+0x1cf/0x240 [ 1281.238830][T19168] device_add+0x4f9/0xc40 [ 1281.243337][T19168] wiphy_register+0x1d99/0x2ac0 [ 1281.248335][T19168] ? cfg80211_event_work+0x40/0x40 [ 1281.253516][T19168] ? minstrel_ht_alloc+0x88a/0x990 [ 1281.258943][T19168] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1281.265111][T19168] ieee80211_register_hw+0x2dd8/0x3b30 [ 1281.270761][T19168] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1281.276407][T19168] ? ieee80211_tasklet_handler+0x20/0x20 [ 1281.282191][T19168] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1281.288200][T19168] ? __debug_object_init+0xec/0x450 [ 1281.293503][T19168] ? __asan_memset+0x22/0x40 [ 1281.298197][T19168] ? __hrtimer_init+0x189/0x270 [ 1281.303134][T19168] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1281.309015][T19168] ? mac80211_hwsim_free+0x220/0x220 [ 1281.314378][T19168] ? rcu_is_watching+0x15/0xb0 [ 1281.319220][T19168] ? kstrndup+0xbd/0x140 [ 1281.323552][T19168] hwsim_new_radio_nl+0xdad/0x1a70 [ 1281.328709][T19168] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1281.334738][T19168] ? lock_chain_count+0x20/0x20 [ 1281.339644][T19168] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1281.346029][T19168] ? __nla_parse+0x40/0x50 [ 1281.350483][T19168] ? __nla_parse+0x40/0x50 [ 1281.354996][T19168] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1281.361421][T19168] genl_family_rcv_msg_doit+0x21a/0x310 [ 1281.367013][T19168] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1281.372958][T19168] ? bpf_lsm_capable+0x9/0x10 [ 1281.377657][T19168] ? security_capable+0x89/0xb0 [ 1281.382563][T19168] genl_rcv_msg+0x611/0x7a0 [ 1281.387107][T19168] ? genl_bind+0x360/0x360 [ 1281.391548][T19168] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1281.397900][T19168] ? perf_trace_lock+0x303/0x3b0 [ 1281.402883][T19168] netlink_rcv_skb+0x235/0x4c0 [ 1281.407764][T19168] ? genl_bind+0x360/0x360 [ 1281.412213][T19168] ? netlink_ack+0x1160/0x1160 [ 1281.417129][T19168] ? __lock_acquire+0x7d80/0x7d80 [ 1281.422197][T19168] ? down_read+0x1ac/0x2e0 [ 1281.426731][T19168] genl_rcv+0x28/0x40 [ 1281.430749][T19168] netlink_unicast+0x7b1/0x930 [ 1281.435575][T19168] netlink_sendmsg+0x8d0/0xbf0 [ 1281.440400][T19168] ? lockdep_hardirqs_on+0x98/0x150 [ 1281.445626][T19168] ? netlink_getsockopt+0x590/0x590 [ 1281.450872][T19168] ? netlink_getsockopt+0x590/0x590 [ 1281.456097][T19168] ____sys_sendmsg+0x61b/0x980 [ 1281.460916][T19168] ? __asan_memset+0x22/0x40 [ 1281.465543][T19168] ? __sys_sendmsg_sock+0x30/0x30 [ 1281.470636][T19168] ? __import_iovec+0x5f2/0x850 [ 1281.475550][T19168] ? import_iovec+0x73/0xa0 [ 1281.480086][T19168] ___sys_sendmsg+0x2a6/0x360 [ 1281.484892][T19168] ? __sys_sendmsg+0x2b0/0x2b0 [ 1281.489691][T19168] ? perf_trace_preemptirq_template+0x269/0x330 [ 1281.496064][T19168] __se_sys_sendmsg+0x1d0/0x2c0 [ 1281.500951][T19168] ? __x64_sys_sendmsg+0x80/0x80 [ 1281.505947][T19168] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1281.511911][T19168] do_syscall_64+0x55/0xb0 [ 1281.516353][T19168] ? clear_bhb_loop+0x40/0x90 [ 1281.521067][T19168] ? clear_bhb_loop+0x40/0x90 [ 1281.525810][T19168] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.532024][T19168] RIP: 0033:0x7f1e0799e159 [ 1281.536477][T19168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.556582][T19168] RSP: 002b:00007f1e0880e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1281.565034][T19168] RAX: ffffffffffffffda RBX: 00007f1e07c25fa0 RCX: 00007f1e0799e159 [ 1281.573036][T19168] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1281.581035][T19168] RBP: 00007f1e07a3506b R08: 0000000000000000 R09: 0000000000000000 [ 1281.589042][T19168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.597039][T19168] R13: 00007f1e07c26038 R14: 00007f1e07c25fa0 R15: 00007ffcbb3e3978 [ 1281.605074][T19168] [ 1283.342917][T19203] ¥: port 1(team0) entered blocking state [ 1283.349033][T19203] ¥: port 1(team0) entered disabled state [ 1283.399320][T19202] netlink: 'syz.3.3788': attribute type 5 has an invalid length. [ 1283.421018][T19207] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3789'. [ 1283.435973][T19207] netlink: get zone limit has 4 unknown bytes [ 1283.457337][T19209] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3790'. [ 1283.531156][T19209] bond0: (slave bond_slave_0): Releasing backup interface [ 1283.541764][T19217] netlink: 'syz.0.3791': attribute type 9 has an invalid length. [ 1283.550526][T19217] netlink: 399 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1283.579624][T19209] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1283.626126][T18532] bridge0: port 2(veth0_to_bond) entered disabled state [ 1283.809663][T19226] netlink: 'syz.1.3795': attribute type 2 has an invalid length. [ 1283.819131][T19226] netlink: 'syz.1.3795': attribute type 1 has an invalid length. [ 1283.840877][T19226] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3795'. [ 1284.113850][T19233] netlink: 'syz.0.3798': attribute type 29 has an invalid length. [ 1284.259559][T19233] netlink: 'syz.0.3798': attribute type 22 has an invalid length. [ 1284.280972][T19233] netlink: 14378 bytes leftover after parsing attributes in process `syz.0.3798'. [ 1289.745741][T19325] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3817'. [ 1290.837506][T19349] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.3825'. [ 1292.993056][T19367] netlink: 'syz.0.3828': attribute type 9 has an invalid length. [ 1293.001734][T19367] netlink: 'syz.0.3828': attribute type 23 has an invalid length. [ 1293.009632][T19367] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.3828'. [ 1293.826243][T19388] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3832'. [ 1293.860230][T19388] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3832'. [ 1293.976500][T19388] tap0: tun_chr_ioctl cmd 2148553947 [ 1294.045505][T19401] netlink: 'syz.0.3836': attribute type 21 has an invalid length. [ 1294.056828][T19401] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3836'. [ 1294.354404][T19387] delete_channel: no stack [ 1296.087719][T19419] netlink: 'syz.2.3839': attribute type 10 has an invalid length. [ 1296.136580][T19419] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3839'. [ 1297.197267][T19448] netlink: 'syz.0.3846': attribute type 12 has an invalid length. [ 1297.216036][T19448] netlink: 'syz.0.3846': attribute type 15 has an invalid length. [ 1297.290094][T19452] netlink: 'syz.1.3847': attribute type 1 has an invalid length. [ 1297.298393][T19452] netlink: 150560 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1297.419185][T19457] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3848'. [ 1297.432671][T19457] netlink: get zone limit has 4 unknown bytes [ 1297.689033][T19457] syzkaller0: entered promiscuous mode [ 1297.694744][T19457] syzkaller0: entered allmulticast mode [ 1300.370143][T19463] netlink: 'syz.1.3850': attribute type 2 has an invalid length. [ 1300.381257][T19467] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3850'. [ 1300.460607][T19469] netlink: 'syz.1.3850': attribute type 17 has an invalid length. [ 1300.470925][T19469] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3850'. [ 1300.491032][T19469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1300.550008][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.556664][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.185739][T19481] netlink: 'syz.3.3854': attribute type 4 has an invalid length. [ 1301.259992][T19481] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3854'. [ 1301.944135][T19496] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1302.107520][T19508] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.3863'. [ 1302.120996][T19508] netlink: 252 bytes leftover after parsing attributes in process `syz.2.3863'. [ 1303.303815][T19538] netlink: 'syz.3.3871': attribute type 11 has an invalid length. [ 1303.313276][T19538] netlink: 212812 bytes leftover after parsing attributes in process `syz.3.3871'. [ 1303.355100][T19538] netlink: 'syz.3.3871': attribute type 4 has an invalid length. [ 1305.430550][T19586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3883'. [ 1305.519315][ T5831] Bluetooth: hci3: ACL packet for unknown connection handle 2816 [ 1305.583650][T19583] syzkaller0: entered promiscuous mode [ 1308.020260][T19606] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3888'. [ 1308.076061][T19605] netlink: 'syz.0.3890': attribute type 19 has an invalid length. [ 1309.158388][T19635] netlink: 'syz.2.3896': attribute type 21 has an invalid length. [ 1309.201254][T19635] netlink: 'syz.2.3896': attribute type 19 has an invalid length. [ 1309.230973][T19635] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.3896'. [ 1309.242209][T19637] netlink: 'syz.2.3896': attribute type 21 has an invalid length. [ 1309.250182][T19637] netlink: 'syz.2.3896': attribute type 19 has an invalid length. [ 1309.279092][T19637] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.3896'. [ 1309.364750][T19640] netlink: 'syz.1.3897': attribute type 41 has an invalid length. [ 1309.429397][T19640] netlink: 'syz.1.3897': attribute type 41 has an invalid length. [ 1309.446902][T19646] netlink: 'syz.1.3897': attribute type 9 has an invalid length. [ 1309.456938][T19645] Â: renamed from ip6gretap0 (while UP) [ 1309.464547][T19646] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1309.599838][T19648] netlink: 'syz.2.3900': attribute type 3 has an invalid length. [ 1309.611566][T19648] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3900'. [ 1309.873133][ T5831] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.880993][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.888297][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.895763][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.903208][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.910768][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.920941][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.928136][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.935679][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1309.942910][T18370] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1310.038947][T19661] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1311.942120][T18370] Bluetooth: hci3: command 0x0406 tx timeout [ 1313.610792][T19677] netlink: 'syz.1.3905': attribute type 21 has an invalid length. [ 1313.618964][T19677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3905'. [ 1314.032929][T19684] netlink: 'syz.1.3909': attribute type 29 has an invalid length. [ 1314.047239][T19684] netlink: 'syz.1.3909': attribute type 29 has an invalid length. [ 1314.263330][T19689] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1314.367060][T19697] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1314.443340][T19698] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1314.531236][T19701] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.3910'. [ 1314.997140][T19705] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1315.152236][T19712] -: renamed from syzkaller0 [ 1317.827126][T19753] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1317.907591][T19753] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1318.040997][T19750] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3922'. [ 1318.060748][T19750] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1321.445798][T19805] netlink: 'syz.2.3935': attribute type 2 has an invalid length. [ 1321.482043][T19805] netlink: 'syz.2.3935': attribute type 8 has an invalid length. [ 1321.505690][T19805] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1321.563792][T19807] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3936'. [ 1321.656084][T19814] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.3938'. [ 1323.772922][T19825] netlink: 'syz.1.3941': attribute type 10 has an invalid length. [ 1323.780920][T19825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3941'. [ 1325.104772][T19855] netlink: 'syz.3.3946': attribute type 1 has an invalid length. [ 1325.137916][T19855] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3946'. [ 1327.173428][T19824] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3941'. [ 1327.387778][T19862] netlink: 'syz.1.3949': attribute type 9 has an invalid length. [ 1327.397498][T19862] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3949'. [ 1327.602286][T19870] netlink: 'syz.2.3950': attribute type 10 has an invalid length. [ 1327.700067][T19870] team0: Device hsr_slave_0 failed to register rx_handler [ 1327.995208][T19891] syz.0.3954[19891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1327.995386][T19891] syz.0.3954[19891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1328.219535][T19893] netlink: 'syz.0.3954': attribute type 3 has an invalid length. [ 1328.369262][T19893] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.3954'. [ 1329.847649][T19904] netlink: 'syz.3.3957': attribute type 1 has an invalid length. [ 1329.890738][T19904] netlink: 32163 bytes leftover after parsing attributes in process `syz.3.3957'. [ 1330.410750][T19918] netlink: 'syz.2.3960': attribute type 39 has an invalid length. [ 1330.765422][T19925] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3961'. [ 1333.079324][T19928] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.3962'. [ 1333.102542][T19932] netlink: 'syz.3.3963': attribute type 10 has an invalid length. [ 1333.236824][T19935] netlink: 'syz.0.3965': attribute type 13 has an invalid length. [ 1333.326656][T19941] C: renamed from team_slave_0 [ 1333.356796][T19941] netlink: 'syz.1.3967': attribute type 3 has an invalid length. [ 1333.376880][T19941] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1333.406099][T19941] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1333.690155][T19950] netlink: 'syz.2.3970': attribute type 29 has an invalid length. [ 1333.718256][T19950] netlink: 'syz.2.3970': attribute type 29 has an invalid length. [ 1333.801197][T19955] netlink: 'syz.2.3970': attribute type 29 has an invalid length. [ 1333.831852][T19950] netlink: 'syz.2.3970': attribute type 29 has an invalid length. [ 1333.848572][T19955] netlink: 'syz.2.3970': attribute type 10 has an invalid length. [ 1333.890193][T19955] veth0_vlan: entered allmulticast mode [ 1333.992842][T19955] veth0_vlan: left promiscuous mode [ 1333.999824][T19955] veth0_vlan: entered promiscuous mode [ 1334.036879][T19955] team0: Device veth0_vlan failed to register rx_handler [ 1334.082598][T19950] netlink: 'syz.2.3970': attribute type 29 has an invalid length. [ 1334.118900][T19963] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3970'. [ 1334.137928][T19965] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3975'. [ 1334.210271][T19966] netlink: 'syz.0.3975': attribute type 21 has an invalid length. [ 1334.230152][T19957] veth0_macvtap: left promiscuous mode [ 1334.254554][T19957] veth0_macvtap: entered promiscuous mode [ 1334.294811][T19957] team0: Device macvtap0 failed to register rx_handler [ 1334.341163][T19957] veth0_macvtap: left promiscuous mode [ 1335.006492][T19993] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3982'. [ 1335.083603][T19995] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3981'. [ 1335.954510][T20016] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.3985'. [ 1338.594753][T20035] validate_nla: 2 callbacks suppressed [ 1338.594772][T20035] netlink: 'syz.1.3991': attribute type 17 has an invalid length. [ 1338.640908][T20035] netlink: 'syz.1.3991': attribute type 16 has an invalid length. [ 1338.649164][T20035] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3991'. [ 1338.932663][T20047] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1338.961374][T20047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1339.109874][T20052] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3997'. [ 1339.202697][T20043] netlink: 49920 bytes leftover after parsing attributes in process `syz.2.3994'. [ 1340.095036][T20074] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4001'. [ 1340.317327][T20077] netlink: 'syz.0.4002': attribute type 4 has an invalid length. [ 1340.341274][T20077] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4002'. [ 1340.771196][T20082] syz.1.4004[20082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1340.772876][T20082] syz.1.4004[20082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1343.758145][T20096] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4009'. [ 1343.944954][T20111] netlink: 'syz.2.4011': attribute type 12 has an invalid length. [ 1343.970841][T20111] netlink: 'syz.2.4011': attribute type 11 has an invalid length. [ 1343.981463][T20111] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.4011'. [ 1344.443448][T20126] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4014'. [ 1344.531022][T20126] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1345.273177][T20154] netlink: 'syz.1.4023': attribute type 7 has an invalid length. [ 1349.768524][T20182] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4030'. [ 1349.805533][T20182] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1350.758831][T20213] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4035'. [ 1352.544282][T20237] FAULT_INJECTION: forcing a failure. [ 1352.544282][T20237] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.557511][T20237] CPU: 1 PID: 20237 Comm: syz.1.4041 Not tainted syzkaller #0 [ 1352.565009][T20237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1352.575094][T20237] Call Trace: [ 1352.578379][T20237] [ 1352.581336][T20237] dump_stack_lvl+0x18c/0x250 [ 1352.586127][T20237] ? show_regs_print_info+0x20/0x20 [ 1352.591348][T20237] ? load_image+0x420/0x420 [ 1352.595909][T20237] ? mark_lock+0x94/0x320 [ 1352.600271][T20237] ? __lock_acquire+0x1336/0x7d80 [ 1352.605332][T20237] should_fail_ex+0x394/0x4c0 [ 1352.610070][T20237] should_failslab+0x9/0x20 [ 1352.614612][T20237] slab_pre_alloc_hook+0x59/0x300 [ 1352.619668][T20237] kmem_cache_alloc+0x5a/0x2c0 [ 1352.624443][T20237] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1352.630019][T20237] radix_tree_node_alloc+0x7e/0x3a0 [ 1352.635245][T20237] idr_get_free+0x28f/0xa10 [ 1352.639959][T20237] idr_alloc_cyclic+0x28a/0x610 [ 1352.644848][T20237] ? idr_alloc+0x2e0/0x2e0 [ 1352.649283][T20237] ? do_raw_spin_lock+0x11f/0x2b0 [ 1352.654333][T20237] ? __radix_tree_preload+0x82/0x880 [ 1352.659642][T20237] ? btf_alloc_id+0x30/0x2d0 [ 1352.664245][T20237] btf_alloc_id+0x4f/0x2d0 [ 1352.668668][T20237] btf_new_fd+0x80a/0x9e0 [ 1352.673028][T20237] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1352.678180][T20237] ? capable+0x88/0xe0 [ 1352.682310][T20237] __sys_bpf+0x670/0x890 [ 1352.686574][T20237] ? bpf_link_show_fdinfo+0x560/0x560 [ 1352.692316][T20237] ? lock_chain_count+0x20/0x20 [ 1352.697177][T20237] __x64_sys_bpf+0x7c/0x90 [ 1352.701623][T20237] do_syscall_64+0x55/0xb0 [ 1352.706080][T20237] ? clear_bhb_loop+0x40/0x90 [ 1352.710794][T20237] ? clear_bhb_loop+0x40/0x90 [ 1352.715520][T20237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1352.721440][T20237] RIP: 0033:0x7f364779e159 [ 1352.725870][T20237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1352.745517][T20237] RSP: 002b:00007f3648603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1352.754038][T20237] RAX: ffffffffffffffda RBX: 00007f3647a25fa0 RCX: 00007f364779e159 [ 1352.762040][T20237] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 1352.770126][T20237] RBP: 00007f3648603090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.778160][T20237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1352.786140][T20237] R13: 00007f3647a26038 R14: 00007f3647a25fa0 R15: 00007ffd269b4ff8 [ 1352.794151][T20237] [ 1353.307096][T20247] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4042'. [ 1353.362077][T20247] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1354.106860][T20256] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.4045'. [ 1354.131830][T20263] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.4047'. [ 1354.391900][T20273] FAULT_INJECTION: forcing a failure. [ 1354.391900][T20273] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.404672][T20273] CPU: 0 PID: 20273 Comm: syz.1.4051 Not tainted syzkaller #0 [ 1354.412174][T20273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1354.422278][T20273] Call Trace: [ 1354.425678][T20273] [ 1354.428638][T20273] dump_stack_lvl+0x18c/0x250 [ 1354.433455][T20273] ? show_regs_print_info+0x20/0x20 [ 1354.438697][T20273] ? load_image+0x420/0x420 [ 1354.443354][T20273] should_fail_ex+0x394/0x4c0 [ 1354.448275][T20273] should_failslab+0x9/0x20 [ 1354.452918][T20273] slab_pre_alloc_hook+0x59/0x300 [ 1354.458091][T20273] kmem_cache_alloc+0x5a/0x2c0 [ 1354.462982][T20273] ? radix_tree_node_alloc+0x7e/0x3a0 [ 1354.468406][T20273] radix_tree_node_alloc+0x7e/0x3a0 [ 1354.473665][T20273] idr_get_free+0x28f/0xa10 [ 1354.478240][T20273] idr_alloc_cyclic+0x28a/0x610 [ 1354.483141][T20273] ? idr_alloc+0x2e0/0x2e0 [ 1354.487656][T20273] ? do_raw_spin_lock+0x11f/0x2b0 [ 1354.492751][T20273] ? __radix_tree_preload+0x82/0x880 [ 1354.498117][T20273] ? btf_alloc_id+0x30/0x2d0 [ 1354.502771][T20273] btf_alloc_id+0x4f/0x2d0 [ 1354.507332][T20273] btf_new_fd+0x80a/0x9e0 [ 1354.511719][T20273] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1354.516898][T20273] ? capable+0x88/0xe0 [ 1354.521026][T20273] __sys_bpf+0x670/0x890 [ 1354.525317][T20273] ? bpf_link_show_fdinfo+0x560/0x560 [ 1354.530749][T20273] ? lock_chain_count+0x20/0x20 [ 1354.535645][T20273] __x64_sys_bpf+0x7c/0x90 [ 1354.540094][T20273] do_syscall_64+0x55/0xb0 [ 1354.544544][T20273] ? clear_bhb_loop+0x40/0x90 [ 1354.549265][T20273] ? clear_bhb_loop+0x40/0x90 [ 1354.554002][T20273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.559950][T20273] RIP: 0033:0x7f364779e159 [ 1354.564407][T20273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.584064][T20273] RSP: 002b:00007f3648603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1354.592530][T20273] RAX: ffffffffffffffda RBX: 00007f3647a25fa0 RCX: 00007f364779e159 [ 1354.600538][T20273] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 1354.608543][T20273] RBP: 00007f3648603090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.616551][T20273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.624563][T20273] R13: 00007f3647a26038 R14: 00007f3647a25fa0 R15: 00007ffd269b4ff8 [ 1354.632594][T20273] [ 1356.039595][T20288] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1356.050403][T20289] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4055'. [ 1356.755474][T20298] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4058'. [ 1356.767535][T20298] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1357.485712][T20326] FAULT_INJECTION: forcing a failure. [ 1357.485712][T20326] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.535713][T20326] CPU: 0 PID: 20326 Comm: syz.3.4063 Not tainted syzkaller #0 [ 1357.543358][T20326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1357.553472][T20326] Call Trace: [ 1357.556804][T20326] [ 1357.559784][T20326] dump_stack_lvl+0x18c/0x250 [ 1357.564622][T20326] ? show_regs_print_info+0x20/0x20 [ 1357.569886][T20326] ? load_image+0x420/0x420 [ 1357.574436][T20326] ? __might_sleep+0xe0/0xe0 [ 1357.579038][T20326] ? __lock_acquire+0x7d80/0x7d80 [ 1357.584136][T20326] should_fail_ex+0x394/0x4c0 [ 1357.588883][T20326] should_failslab+0x9/0x20 [ 1357.593460][T20326] slab_pre_alloc_hook+0x59/0x300 [ 1357.598554][T20326] ? d_instantiate+0x6f/0x90 [ 1357.603195][T20326] kmem_cache_alloc+0x5a/0x2c0 [ 1357.607997][T20326] ? alloc_empty_file+0x9e/0x1d0 [ 1357.612964][T20326] alloc_empty_file+0x9e/0x1d0 [ 1357.617769][T20326] alloc_file+0x5b/0x600 [ 1357.622042][T20326] alloc_file_pseudo+0x184/0x210 [ 1357.627002][T20326] ? fput+0x1a0/0x1a0 [ 1357.631007][T20326] ? _raw_spin_unlock+0x28/0x40 [ 1357.636074][T20326] anon_inode_getfd+0xca/0x1c0 [ 1357.640867][T20326] btf_new_fd+0x848/0x9e0 [ 1357.645224][T20326] ? bpf_btf_show_fdinfo+0x80/0x80 [ 1357.650403][T20326] ? capable+0x88/0xe0 [ 1357.654510][T20326] __sys_bpf+0x670/0x890 [ 1357.658771][T20326] ? bpf_link_show_fdinfo+0x560/0x560 [ 1357.664180][T20326] ? lock_chain_count+0x20/0x20 [ 1357.669055][T20326] __x64_sys_bpf+0x7c/0x90 [ 1357.673504][T20326] do_syscall_64+0x55/0xb0 [ 1357.677938][T20326] ? clear_bhb_loop+0x40/0x90 [ 1357.682670][T20326] ? clear_bhb_loop+0x40/0x90 [ 1357.687625][T20326] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1357.693548][T20326] RIP: 0033:0x7f45c4d9e159 [ 1357.697989][T20326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.717872][T20326] RSP: 002b:00007f45c5ce9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1357.726477][T20326] RAX: ffffffffffffffda RBX: 00007f45c5025fa0 RCX: 00007f45c4d9e159 [ 1357.734568][T20326] RDX: 0000000000000028 RSI: 0000200000000140 RDI: 0000000000000012 [ 1357.742554][T20326] RBP: 00007f45c5ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.750539][T20326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1357.758520][T20326] R13: 00007f45c5026038 R14: 00007f45c5025fa0 R15: 00007ffd89c31968 [ 1357.766525][T20326] [ 1357.916695][T20337] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1357.931729][T20337] netlink: 'syz.3.4068': attribute type 10 has an invalid length. [ 1357.940855][T20337] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1357.951480][T20337] team0: entered promiscuous mode [ 1357.965453][T20337] team_slave_1: entered promiscuous mode [ 1357.973903][T20337] team0: entered allmulticast mode [ 1357.981861][T20337] team_slave_1: entered allmulticast mode [ 1357.988124][ T5831] bt_warn_ratelimited: 55 callbacks suppressed [ 1357.988198][ T5831] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13 [ 1358.009065][T20337] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1358.641408][T20359] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4076'. [ 1359.412890][T20382] syzkaller0: entered promiscuous mode [ 1359.459000][T20382] syzkaller0: entered allmulticast mode [ 1360.435498][T20400] netlink: 'syz.2.4087': attribute type 13 has an invalid length. [ 1360.460682][T20400] netlink: 'syz.2.4087': attribute type 58 has an invalid length. [ 1360.500809][T20400] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1360.613294][T20408] netlink: 'syz.0.4090': attribute type 10 has an invalid length. [ 1360.657733][T20408] : entered promiscuous mode [ 1360.673253][T20408] : entered allmulticast mode [ 1360.678794][T20408] team0: Port device  added [ 1360.687303][T20406] netlink: 'syz.0.4090': attribute type 10 has an invalid length. [ 1360.799715][T20423] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1360.823156][T20423] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1360.857138][T20424] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1361.611873][T20446] netlink: 'syz.1.4100': attribute type 12 has an invalid length. [ 1361.620586][T20446] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1361.987292][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.994122][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.181047][ T12] wlan1: Trigger new scan to find an IBSS to join [ 1363.265622][T20486] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4112'. [ 1363.400279][T20486] netlink: 'syz.0.4112': attribute type 5 has an invalid length. [ 1363.917062][T20492] netlink: 'syz.2.4111': attribute type 13 has an invalid length. [ 1363.957895][T20492] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4111'. [ 1364.025037][T20499] sock: sock_timestamping_bind_phc: sock not bind to device [ 1364.081470][T20502] syzkaller0: entered promiscuous mode [ 1364.413549][T20516] netlink: 'syz.0.4122': attribute type 3 has an invalid length. [ 1364.421941][T20516] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1364.757415][T20514] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1364.780322][T20514] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4122'. [ 1365.691940][ T5831] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 1366.677908][T20563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4133'. [ 1366.685479][T20559] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1366.723319][T20559] syzkaller1: linktype set to 825 [ 1366.752183][T20555] netlink: 'syz.3.4131': attribute type 10 has an invalid length. [ 1367.270783][T18526] wlan1: Trigger new scan to find an IBSS to join [ 1367.369344][T20580] netlink: 'syz.2.4138': attribute type 10 has an invalid length. [ 1367.385584][T20580] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4138'. [ 1367.479576][T20569] netlink: 'syz.3.4136': attribute type 10 has an invalid length. [ 1367.623745][T20569] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode [ 1367.631900][T20569] mac80211_hwsim hwsim26 wlan1: entered allmulticast mode [ 1367.642898][T20569] team0: Port device wlan1 added [ 1367.841524][T20568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1369.187437][T18526] wlan1: Creating new IBSS network, BSSID 4a:41:c2:2e:17:6d [ 1370.806587][T20623] netlink: 'syz.1.4152': attribute type 1 has an invalid length. [ 1370.815284][T20623] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.4152'. [ 1371.233460][T20636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1371.309459][T20638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1372.579022][T20658] syzkaller0: entered promiscuous mode [ 1372.597290][T20658] syzkaller0: entered allmulticast mode [ 1373.249811][T20664] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4164'. [ 1376.259682][T20686] netlink: 'syz.3.4165': attribute type 21 has an invalid length. [ 1376.268295][T20686] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4165'. [ 1376.277625][T20686] netlink: 'syz.3.4165': attribute type 4 has an invalid length. [ 1376.287068][T20686] netlink: 'syz.3.4165': attribute type 3 has an invalid length. [ 1376.296554][T20686] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4165'. [ 1376.545948][T20719] netlink: 'syz.2.4172': attribute type 46 has an invalid length. [ 1376.588133][T20722] netlink: 'syz.0.4175': attribute type 29 has an invalid length. [ 1376.588790][T20719] netlink: 'syz.2.4172': attribute type 46 has an invalid length. [ 1376.637744][T20722] netlink: 'syz.0.4175': attribute type 29 has an invalid length. [ 1376.702837][T20730] netlink: 'syz.1.4176': attribute type 29 has an invalid length. [ 1377.098487][T20728] netlink: 'syz.0.4175': attribute type 29 has an invalid length. [ 1377.109077][T20730] netlink: 'syz.1.4176': attribute type 29 has an invalid length. [ 1377.368379][T20740] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.4179'. [ 1377.602429][T20741] syzkaller0: left promiscuous mode [ 1377.607718][T20741] syzkaller0: left allmulticast mode [ 1377.786769][T20744] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4180'. [ 1377.840977][T20744] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1378.323096][T20760] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4186'. [ 1379.221183][T20786] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4195'. [ 1380.806804][T20803] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4201'. [ 1382.206717][T20828] validate_nla: 1 callbacks suppressed [ 1382.206735][T20828] netlink: 'syz.3.4207': attribute type 13 has an invalid length. [ 1382.240101][T20828] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4207'. [ 1384.251867][T20887] netlink: 'syz.1.4223': attribute type 29 has an invalid length. [ 1384.271225][T20887] netlink: 'syz.1.4223': attribute type 29 has an invalid length. [ 1384.283964][T20887] netlink: 'syz.1.4223': attribute type 29 has an invalid length. [ 1384.565401][T20894] netlink: 'syz.3.4224': attribute type 9 has an invalid length. [ 1384.600760][T20894] netlink: 'syz.3.4224': attribute type 23 has an invalid length. [ 1384.608654][T20894] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1384.635663][T20898] netlink: 'syz.3.4224': attribute type 3 has an invalid length. [ 1384.644659][T20898] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1384.693347][T20898] netlink: 668 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1384.703099][T20898] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1384.721114][T20898] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1385.446942][T20911] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1385.463885][T20910] netlink: 'syz.3.4229': attribute type 3 has an invalid length. [ 1385.512511][T20910] netlink: 191996 bytes leftover after parsing attributes in process `syz.3.4229'. [ 1385.784965][T20919] netlink: 'syz.1.4230': attribute type 23 has an invalid length. [ 1386.379497][T20930] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1386.412161][T20930] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1386.448958][T20931] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4234'. [ 1386.523644][T20931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1386.683321][T20939] netlink: 'syz.0.4235': attribute type 28 has an invalid length. [ 1386.778203][T20939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4235'. [ 1386.924871][T20935] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4235'. [ 1387.453458][T20959] validate_nla: 1 callbacks suppressed [ 1387.453479][T20959] netlink: 'syz.3.4241': attribute type 8 has an invalid length. [ 1387.534378][T20959] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.4241'. [ 1387.766371][ T5831] Bluetooth: hci3: Malformed Event: 0x13 [ 1389.813394][T20993] ref_ctr_offset mismatch. inode: 0x917 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 1390.901052][T21013] netlink: 'syz.3.4253': attribute type 19 has an invalid length. [ 1390.942843][T21014] netlink: 'syz.1.4254': attribute type 2 has an invalid length. [ 1390.958307][T21014] netlink: 'syz.1.4254': attribute type 1 has an invalid length. [ 1391.286151][T21034] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1391.298043][T21034] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1391.419392][T21032] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 1391.426940][T21032] mac80211_hwsim hwsim23 wlan0: left allmulticast mode [ 1391.459673][T21034] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1391.483574][T21034] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1391.531214][T21032] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 1391.546809][T21032] mac80211_hwsim hwsim23 wlan0: left allmulticast mode [ 1391.705290][T21034] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1391.740812][T21034] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1391.805336][T21032] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 1391.821323][T21032] mac80211_hwsim hwsim23 wlan0: left allmulticast mode [ 1391.867996][T21034] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1391.888797][T21034] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1392.432581][T21054] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4263'. [ 1394.984735][T21032] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 1394.992002][T21032] mac80211_hwsim hwsim23 wlan0: left allmulticast mode [ 1395.007793][T21034] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 1395.016060][T21034] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 1395.048554][T21055] bridge_slave_0: entered promiscuous mode [ 1395.054814][T21055] bridge_slave_0: entered allmulticast mode [ 1395.169883][T21068] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4265'. [ 1395.312397][T21073] mac80211_hwsim hwsim26 ..ãc¤±: renamed from wlan1 (while UP) [ 1395.355091][T21073] netlink: 423 bytes leftover after parsing attributes in process `syz.3.4268'. [ 1395.754446][T21081] netlink: 'syz.1.4270': attribute type 41 has an invalid length. [ 1395.764334][T21081] netlink: 'syz.1.4270': attribute type 41 has an invalid length. [ 1396.931965][T21102] netlink: 'syz.0.4278': attribute type 10 has an invalid length. [ 1397.443005][T21126] netlink: 'syz.1.4285': attribute type 10 has an invalid length. [ 1397.978806][T21140] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4288'. [ 1400.222840][T21168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4292'. [ 1400.359012][T21175] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4294'. [ 1400.402399][T21176] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4294'. [ 1400.437979][T21175] tun0: tun_chr_ioctl cmd 1074025681 [ 1400.775560][T21189] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1400.899619][T21190] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1400.921929][T21192] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.4299'. [ 1401.501616][T21204] netlink: 'syz.0.4302': attribute type 10 has an invalid length. [ 1404.268644][T21233] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4309'. [ 1404.278117][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4309'. [ 1404.373403][T21233] syzkaller0: entered allmulticast mode [ 1404.428078][T21233] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.4309'. [ 1404.651684][T21236] netlink: 'syz.3.4305': attribute type 21 has an invalid length. [ 1404.659893][T21236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4305'. [ 1405.734485][T21255] netlink: 'syz.2.4315': attribute type 10 has an invalid length. [ 1405.744987][T21255] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4315'. [ 1406.187122][T21266] netlink: 'syz.2.4316': attribute type 10 has an invalid length. [ 1406.452485][T21266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1406.702539][T21266] team0: Port device bond0 added [ 1406.961587][T21277] netlink: 'syz.1.4319': attribute type 10 has an invalid length. [ 1406.985685][T21286] netlink: 'syz.3.4320': attribute type 9 has an invalid length. [ 1407.007810][T21277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4319'. [ 1407.073417][T21277] bridge0: port 3(ipvlan1) entered blocking state [ 1407.131324][T21277] bridge0: port 3(ipvlan1) entered disabled state [ 1407.191663][T21286] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4320'. [ 1407.192970][T21277] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1407.240310][T21268] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4324'. [ 1407.250729][T21268] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.4324'. [ 1407.746250][T21304] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 1407.758526][T21304] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.4325'. [ 1407.843016][T21307] wg2: entered promiscuous mode [ 1407.847964][T21307] wg2: entered allmulticast mode [ 1408.386322][T21336] netlink: 'syz.2.4334': attribute type 13 has an invalid length. [ 1408.404898][T21336] netlink: 'syz.2.4334': attribute type 58 has an invalid length. [ 1408.996885][T21350] syzkaller0: entered promiscuous mode [ 1409.013833][T21350] syzkaller0: entered allmulticast mode [ 1411.566325][T21361] __nla_validate_parse: 2 callbacks suppressed [ 1411.566346][T21361] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1417.372155][T21441] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4360'. [ 1417.485728][T21443] netlink: 'syz.0.4362': attribute type 10 has an invalid length. [ 1417.691487][T21449] netlink: 'syz.2.4363': attribute type 29 has an invalid length. [ 1417.703406][T21449] netlink: 'syz.2.4363': attribute type 29 has an invalid length. [ 1417.803835][T21445] netlink: 'syz.3.4361': attribute type 10 has an invalid length. [ 1418.770890][T21445] geneve1: entered promiscuous mode [ 1418.776362][T21445] geneve1: entered allmulticast mode [ 1418.798161][T21445] team0: Port device geneve1 added [ 1418.809388][T21447] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4363'. [ 1418.959738][T21459] lo: entered allmulticast mode [ 1418.978001][T21459] lo: entered promiscuous mode [ 1418.988319][T21459] lo: left allmulticast mode [ 1420.192927][T21495] netlink: 'syz.1.4376': attribute type 29 has an invalid length. [ 1420.243958][T21495] netlink: 'syz.1.4376': attribute type 29 has an invalid length. [ 1420.408050][T21495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4376'. [ 1421.926910][T21529] netlink: 'syz.3.4383': attribute type 28 has an invalid length. [ 1421.952647][T21529] netlink: 142516 bytes leftover after parsing attributes in process `syz.3.4383'. [ 1422.172864][ T5831] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1422.992317][T21557] netlink: 'syz.0.4390': attribute type 3 has an invalid length. [ 1423.000444][T21557] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4390'. [ 1423.473311][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.479695][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.705194][T18370] Bluetooth: hci2: unexpected event 0x23 length: 15 > 13 [ 1423.786129][T21570] netlink: 'syz.2.4394': attribute type 29 has an invalid length. [ 1423.806955][T21570] netlink: 'syz.2.4394': attribute type 29 has an invalid length. [ 1423.816502][T21570] netlink: 'syz.2.4394': attribute type 29 has an invalid length. [ 1423.837930][T21570] netlink: 'syz.2.4394': attribute type 29 has an invalid length. [ 1423.869621][T21572] netlink: 'syz.2.4394': attribute type 29 has an invalid length. [ 1423.927029][T21571] netlink: 'syz.2.4394': attribute type 29 has an invalid length. [ 1424.220021][T21590] netlink: 'syz.1.4398': attribute type 21 has an invalid length. [ 1424.334216][T21593] netlink: 'syz.0.4400': attribute type 10 has an invalid length. [ 1424.364942][T21593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4400'. [ 1424.391563][T21593] bridge0: port 3(ipvlan1) entered blocking state [ 1424.399432][T21593] bridge0: port 3(ipvlan1) entered disabled state [ 1424.416111][T21593] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1424.461010][T21597] : renamed from bond0 (while UP) [ 1425.159956][T21615] netlink: 'syz.3.4406': attribute type 3 has an invalid length. [ 1425.179892][T21615] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4406'. [ 1425.454729][T21624] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4409'. [ 1425.494712][T21624] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1428.178191][T21642] vcan0: entered allmulticast mode [ 1428.491200][T21644] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 1428.501386][T21645] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4412'. [ 1428.552807][T21647] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1428.600487][T21647] tc_dump_action: action bad kind [ 1428.669264][T21654] validate_nla: 1 callbacks suppressed [ 1428.669285][T21654] netlink: 'syz.1.4415': attribute type 10 has an invalid length. [ 1428.729635][T21654] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4415'. [ 1428.992271][T21654] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1429.105635][T21654] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1429.298737][T21649] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1429.321155][T21649] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 1433.280789][T21693] delete_channel: no stack [ 1434.263977][T21717] netlink: 'syz.1.4430': attribute type 17 has an invalid length. [ 1434.290747][T21717] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4430'. [ 1434.756012][T21730] netlink: 'syz.1.4435': attribute type 10 has an invalid length. [ 1437.085387][T21794] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4453'. [ 1438.530428][T21815] netlink: 'syz.2.4458': attribute type 10 has an invalid length. [ 1438.562932][T21815] team0: Device ipvlan1 failed to register rx_handler [ 1440.050336][T21864] netlink: 'syz.3.4471': attribute type 28 has an invalid length. [ 1440.070855][T21864] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4471'. [ 1440.850131][T21882] netlink: 'syz.3.4476': attribute type 15 has an invalid length. [ 1440.892180][T21882] netlink: 'syz.3.4476': attribute type 16 has an invalid length. [ 1440.924624][T21882] netlink: 'syz.3.4476': attribute type 20 has an invalid length. [ 1440.951220][T21882] netlink: 'syz.3.4476': attribute type 21 has an invalid length. [ 1440.976688][T21882] netlink: 'syz.3.4476': attribute type 23 has an invalid length. [ 1440.999233][T21882] netlink: 'syz.3.4476': attribute type 25 has an invalid length. [ 1441.020298][T21882] netlink: 'syz.3.4476': attribute type 27 has an invalid length. [ 1441.042546][T21882] netlink: 'syz.3.4476': attribute type 28 has an invalid length. [ 1441.063349][T21882] netlink: 'syz.3.4476': attribute type 29 has an invalid length. [ 1441.950481][T21899] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4479'. [ 1442.310975][T18370] Bluetooth: hci2: Dropping invalid advertising data [ 1442.317895][T18370] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1442.562593][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4487'. [ 1443.098509][T21928] syzkaller0: entered promiscuous mode [ 1443.150368][T21928] syzkaller0: entered allmulticast mode [ 1443.434392][T21935] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1445.353603][T21946] validate_nla: 1 callbacks suppressed [ 1445.353625][T21946] netlink: 'syz.0.4492': attribute type 10 has an invalid length. [ 1445.395638][T21946] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1445.446240][T21949] netlink: 'syz.0.4492': attribute type 10 has an invalid length. [ 1445.478682][T21949] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.4492'. [ 1445.523742][T21953] netlink: 'syz.2.4493': attribute type 16 has an invalid length. [ 1445.576442][T21953] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4493'. [ 1445.884403][T21964] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4495'. [ 1445.910800][T21965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4495'. [ 1446.036615][T21964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1446.044725][T21964] IPv6: NLM_F_CREATE should be set when creating new route [ 1446.053148][T21964] IPv6: NLM_F_CREATE should be set when creating new route [ 1446.061808][T21964] IPv6: NLM_F_CREATE should be set when creating new route [ 1446.196857][T21965] netlink: 'syz.0.4495': attribute type 9 has an invalid length. [ 1446.273988][T21965] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4495'. [ 1451.703522][T21973] netlink: 'syz.0.4495': attribute type 10 has an invalid length. [ 1451.718766][T21977] netlink: 'syz.0.4495': attribute type 10 has an invalid length. [ 1451.879145][T21964] netlink: 'syz.0.4495': attribute type 9 has an invalid length. [ 1451.897471][T21964] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4495'. [ 1452.086322][T22017] netlink: 'syz.1.4507': attribute type 1 has an invalid length. [ 1452.222175][T22021] netlink: 'syz.1.4507': attribute type 2 has an invalid length. [ 1452.278420][T22021] netlink: 'syz.1.4507': attribute type 8 has an invalid length. [ 1452.294985][T22021] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4507'. [ 1453.096586][T22033] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1453.152945][T22038] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1453.209673][T22038] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1453.658540][T22057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1453.685216][T22057] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1453.744327][T22060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1453.785924][T22059] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.4520'. [ 1454.823507][T22078] syzkaller0: entered promiscuous mode [ 1454.971835][T22078] syzkaller0: entered allmulticast mode [ 1455.131082][T22065] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4518'. [ 1455.349035][T22065] bridge_slave_1: default FDB implementation only supports local addresses [ 1455.600893][T22050] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4518'. [ 1455.610309][T22050] bridge_slave_1: default FDB implementation only supports local addresses [ 1457.718060][T22115] netlink: 'syz.3.4531': attribute type 3 has an invalid length. [ 1457.759172][T22115] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4531'. [ 1462.348288][T22148] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4538'. [ 1462.359645][T22155] netlink: 703 bytes leftover after parsing attributes in process `syz.0.4539'. [ 1462.695121][T22169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4543'. [ 1465.210649][T22169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.426733][T22169] bridge_slave_0 (unregistering): left allmulticast mode [ 1465.467719][T22169] bridge_slave_0 (unregistering): left promiscuous mode [ 1465.505400][T22169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1466.137173][T22185] syzkaller0: entered promiscuous mode [ 1466.149145][T22185] syzkaller0: entered allmulticast mode [ 1469.505636][T22210] netlink: 'syz.3.4549': attribute type 2 has an invalid length. [ 1469.915257][T22233] IPv6: NLM_F_CREATE should be specified when creating new route [ 1470.915127][T22242] netlink: 'syz.0.4558': attribute type 10 has an invalid length. [ 1470.953368][T22242] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 1471.669323][T22263] syzkaller0: left allmulticast mode [ 1474.913283][T22328] netlink: 'syz.2.4577': attribute type 1 has an invalid length. [ 1474.921467][T22328] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1474.933502][T22328] netlink: 'syz.2.4577': attribute type 1 has an invalid length. [ 1474.996320][T22328] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.4577'. [ 1475.741843][T22349] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1475.747855][T22349] syzkaller0: linktype set to 0 [ 1475.841183][T22352] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 1475.935716][T22352] syzkaller0: persist enabled [ 1476.034769][T22362] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1476.079848][T22362] syzkaller0: linktype set to 0 [ 1476.293941][T22361] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1476.313953][T22360] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 1476.328398][T22360] syzkaller0: persist enabled [ 1476.349030][T22368] IPv6: NLM_F_CREATE should be specified when creating new route [ 1476.380820][T22368] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4583'. [ 1476.389925][T22366] netlink: 'syz.1.4584': attribute type 21 has an invalid length. [ 1476.400060][T22366] IPv6: NLM_F_CREATE should be specified when creating new route [ 1476.427483][T22366] IPv6: Can't replace route, no match found [ 1476.712487][T22377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4588'. [ 1476.900773][T22377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1476.937973][T22381] netlink: 'syz.2.4588': attribute type 9 has an invalid length. [ 1477.131352][T22381] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4588'. [ 1478.119356][T22383] sit0: entered allmulticast mode [ 1479.045563][T22396] netlink: 'syz.1.4593': attribute type 21 has an invalid length. [ 1479.083170][T22396] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4593'. [ 1479.171043][T22396] netlink: 'syz.1.4593': attribute type 4 has an invalid length. [ 1479.198359][T22396] netlink: 'syz.1.4593': attribute type 3 has an invalid length. [ 1479.237955][T22396] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4593'. [ 1481.408187][T22432] netlink: 'syz.2.4602': attribute type 9 has an invalid length. [ 1481.417675][T22432] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4602'. [ 1482.027813][T22434] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4603'. [ 1482.347580][T22448] netlink: 'syz.0.4608': attribute type 6 has an invalid length. [ 1482.359920][T22448] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4608'. [ 1482.404832][T22447] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4607'. [ 1482.546874][T22447] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4607'. [ 1483.411221][T22472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1483.428085][T22472] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1483.450053][T22468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1483.503949][T22471] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4613'. [ 1483.763049][T22482] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4616'. [ 1483.853821][T22487] IPv6: NLM_F_CREATE should be specified when creating new route [ 1484.486242][T22492] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1484.884483][T22506] netlink: 'syz.1.4623': attribute type 29 has an invalid length. [ 1484.927718][T22506] netlink: 'syz.1.4623': attribute type 29 has an invalid length. [ 1485.100047][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.106780][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.250924][T22521] netlink: 'syz.0.4634': attribute type 21 has an invalid length. [ 1489.314717][T22532] __nla_validate_parse: 3 callbacks suppressed [ 1489.314734][T22532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1489.614217][T22532] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1489.679876][T22546] netlink: 'syz.3.4630': attribute type 10 has an invalid length. [ 1489.704360][T22546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4630'. [ 1489.759196][T22541] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4628'. [ 1490.639790][T22573] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1490.649178][T22573] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1490.659121][T22565] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1490.672549][T22573] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1490.693496][T22565] netlink: 'syz.0.4637': attribute type 10 has an invalid length. [ 1490.707479][T22565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4637'. [ 1490.754761][T22565] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1490.932466][T22577] netlink: 'syz.1.4641': attribute type 3 has an invalid length. [ 1490.940509][T22577] netlink: 'syz.1.4641': attribute type 1 has an invalid length. [ 1490.949740][T22577] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.4641'. [ 1491.039797][T22582] netlink: 'syz.1.4642': attribute type 10 has an invalid length. [ 1491.971709][T22593] netlink: 'syz.3.4645': attribute type 2 has an invalid length. [ 1492.332272][T22605] netlink: 'syz.0.4648': attribute type 12 has an invalid length. [ 1492.761964][T22616] sctp: [Deprecated]: syz.0.4651 (pid 22616) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1492.761964][T22616] Use struct sctp_sack_info instead [ 1493.240117][T22609] netlink: 'syz.3.4649': attribute type 10 has an invalid length. [ 1493.492948][T22626] syzkaller0: entered allmulticast mode [ 1497.182001][T22653] __nla_validate_parse: 11 callbacks suppressed [ 1497.182022][T22653] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4660'. [ 1497.722836][T22655] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1498.022770][T22662] netlink: 'syz.1.4664': attribute type 10 has an invalid length. [ 1498.046928][T22662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4664'. [ 1498.094811][T22662] team0: entered promiscuous mode [ 1498.100512][T22662] team_slave_1: entered promiscuous mode [ 1498.161179][T22662] bond0: entered promiscuous mode [ 1498.166947][T22662] bond_slave_1: entered promiscuous mode [ 1498.220148][T22662] bridge_slave_1: entered promiscuous mode [ 1498.329388][T22662] team0: entered allmulticast mode [ 1498.370445][T22662] team_slave_1: entered allmulticast mode [ 1498.391540][T22662] bond0: entered allmulticast mode [ 1498.427470][T22662] bond_slave_1: entered allmulticast mode [ 1498.459432][T22662] bridge_slave_1: entered allmulticast mode [ 1498.629930][T22662] bridge0: port 1(team0) entered blocking state [ 1498.642740][T22662] bridge0: port 1(team0) entered disabled state [ 1498.719411][T22662] bridge0: port 1(team0) entered blocking state [ 1498.726042][T22662] bridge0: port 1(team0) entered forwarding state [ 1500.189408][T22700] netlink: 'syz.1.4676': attribute type 7 has an invalid length. [ 1500.217220][T22700] netlink: 'syz.1.4676': attribute type 1 has an invalid length. [ 1500.273924][T22700] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1500.460865][T22709] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4678'. [ 1502.217190][T22719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4681'. [ 1502.431708][T22726] netlink: 'syz.1.4683': attribute type 10 has an invalid length. [ 1502.439811][T22726] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4683'. [ 1502.496558][T22726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1502.815208][T22738] netlink: 'syz.1.4687': attribute type 17 has an invalid length. [ 1502.841156][T22738] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1502.926896][T22738] delete_channel: no stack [ 1502.945411][T22738] delete_channel: no stack [ 1503.251217][T22750] bridge_slave_1: left allmulticast mode [ 1503.262773][T22750] bridge_slave_1: left promiscuous mode [ 1503.270201][T22750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.351594][T22750] bridge_slave_0: left allmulticast mode [ 1503.388951][T22750] bridge_slave_0: left promiscuous mode [ 1503.408852][T22750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.731468][T22749] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.4691'. [ 1504.057688][T22763] netlink: 'syz.0.4695': attribute type 21 has an invalid length. [ 1504.065732][T22763] netlink: 'syz.0.4695': attribute type 12 has an invalid length. [ 1504.075858][T22763] netlink: 'syz.0.4695': attribute type 13 has an invalid length. [ 1504.096103][T22763] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.4695'. [ 1504.724290][T22797] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4701'. [ 1504.779175][T22796] netlink: 'syz.0.4701': attribute type 10 has an invalid length. [ 1504.816341][T22796] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4701'. [ 1504.829145][T22805] netlink: 'syz.2.4704': attribute type 2 has an invalid length. [ 1504.837906][T22796] dummy0: entered promiscuous mode [ 1504.847837][T22805] netlink: 'syz.2.4704': attribute type 1 has an invalid length. [ 1504.855947][T22796] dummy0: entered allmulticast mode [ 1504.866419][T22805] netlink: 198036 bytes leftover after parsing attributes in process `syz.2.4704'. [ 1504.883275][T22796] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1504.899271][T22807] netlink: 3554 bytes leftover after parsing attributes in process `syz.3.4705'. [ 1504.915603][T22804] netlink: 'syz.2.4704': attribute type 2 has an invalid length. [ 1504.925695][T22804] netlink: 'syz.2.4704': attribute type 1 has an invalid length. [ 1504.936869][T22804] netlink: 198036 bytes leftover after parsing attributes in process `syz.2.4704'. [ 1505.302935][T22815] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.4708'. [ 1505.483349][T22818] hsr_slave_0: left promiscuous mode [ 1505.580898][T22818] hsr_slave_1: left promiscuous mode [ 1505.917461][T22833] À: port 1(vlan0) entered blocking state [ 1505.945673][T22833] À: port 1(vlan0) entered disabled state [ 1505.975636][T22833] vlan0: entered allmulticast mode [ 1506.015567][T22833] vlan0: entered promiscuous mode [ 1506.056116][T22830] netlink: 'syz.1.4713': attribute type 13 has an invalid length. [ 1506.064930][T22830] netlink: 'syz.1.4713': attribute type 58 has an invalid length. [ 1506.123958][T22835] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 1507.757846][T18370] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 1507.765966][T18370] Bluetooth: hci0: Invalid connection link type handle 0x0000 [ 1508.846291][T22882] __nla_validate_parse: 6 callbacks suppressed [ 1508.846315][T22882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4726'. [ 1510.608118][T22937] netlink: 58323 bytes leftover after parsing attributes in process `syz.2.4742'. [ 1510.636954][T22941] netlink: 58323 bytes leftover after parsing attributes in process `syz.2.4742'. [ 1513.803200][T22988] validate_nla: 3 callbacks suppressed [ 1513.803218][T22988] netlink: 'syz.2.4752': attribute type 41 has an invalid length. [ 1513.971271][T23000] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4753'. [ 1514.232561][T23003] netlink: 'syz.3.4754': attribute type 10 has an invalid length. [ 1514.536140][T23003] netlink: 'syz.3.4754': attribute type 3 has an invalid length. [ 1514.607525][T23003] netlink: 'syz.3.4754': attribute type 1 has an invalid length. [ 1514.655906][T23003] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.4754'. [ 1515.075849][T23013] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4757'. [ 1515.179461][T23016] syzkaller0: entered allmulticast mode [ 1516.144202][T23031] netlink: 'syz.2.4762': attribute type 153 has an invalid length. [ 1516.197073][T23031] netlink: 77268 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1517.066199][T23041] netlink: 'syz.2.4765': attribute type 3 has an invalid length. [ 1517.135902][T23041] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4765'. [ 1518.669209][T23073] netlink: 'syz.2.4773': attribute type 4 has an invalid length. [ 1518.696315][T23073] netlink: 'syz.2.4773': attribute type 16 has an invalid length. [ 1518.740417][T23073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4773'. [ 1519.480793][T23084] tap0: tun_chr_ioctl cmd 1074812117 [ 1519.527148][T23083] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1519.551016][T23088] netlink: 763 bytes leftover after parsing attributes in process `syz.2.4775'. [ 1519.825509][T23094] netlink: 'syz.2.4778': attribute type 29 has an invalid length. [ 1519.838456][T23094] netlink: 'syz.2.4778': attribute type 29 has an invalid length. [ 1520.185944][T23098] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4779'. [ 1520.785909][T23098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.815814][T23098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.841388][T23098] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 1520.891222][T23098] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1520.926262][T23098] bond0 (unregistering): Released all slaves [ 1520.956445][T23106] netlink: 'syz.2.4778': attribute type 29 has an invalid length. [ 1521.312140][T23116] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4784'. [ 1521.999892][T23133] macsec0: entered allmulticast mode [ 1522.005517][T23133] veth1_macvtap: entered allmulticast mode [ 1522.041250][T23133] veth1_macvtap: left allmulticast mode [ 1522.070712][T23133] veth1_macvtap: left promiscuous mode [ 1522.076288][T23133] macsec0: left allmulticast mode [ 1523.844045][T18370] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1523.954992][T23186] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4805'. [ 1524.608036][T23195] syzkaller0: entered allmulticast mode [ 1524.764382][T23199] netlink: 'syz.3.4809': attribute type 1 has an invalid length. [ 1524.807057][T23199] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.4809'. [ 1525.228764][T23211] netlink: 'syz.2.4811': attribute type 5 has an invalid length. [ 1525.262420][T23211] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4811'. [ 1528.824636][T23269] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4826'. [ 1528.872684][T23269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1530.594622][T23295] netlink: 'syz.1.4831': attribute type 1 has an invalid length. [ 1530.630870][T23295] netlink: 'syz.1.4831': attribute type 3 has an invalid length. [ 1530.638661][T23295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4831'. [ 1531.525863][T18370] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 1531.525902][T18370] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 1532.428901][T23326] netlink: 'syz.0.4839': attribute type 29 has an invalid length. [ 1532.491146][T23326] netlink: 'syz.0.4839': attribute type 29 has an invalid length. [ 1532.572839][T23325] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.4839'. [ 1532.591777][T23326] netlink: 'syz.0.4839': attribute type 29 has an invalid length. [ 1532.642856][T23326] netlink: 'syz.0.4839': attribute type 29 has an invalid length. [ 1532.701631][T23327] netlink: 'syz.0.4839': attribute type 29 has an invalid length. [ 1534.494098][T23342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4845'. [ 1534.570973][T23345] netlink: 'syz.0.4845': attribute type 10 has an invalid length. [ 1534.578863][T23345] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4845'. [ 1534.641060][T23345] ¥: port 1(team0) entered disabled state [ 1535.945536][T23345] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1535.965410][T23342] netlink: 'syz.0.4845': attribute type 12 has an invalid length. [ 1535.973683][T23342] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4845'. [ 1536.433663][T23372] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4850'. [ 1536.451808][T23372] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 1536.634396][T23372] syzkaller0: entered promiscuous mode [ 1536.640248][T23372] syzkaller0: entered allmulticast mode [ 1538.544978][T23382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4853'. [ 1538.823444][T23394] netlink: 'syz.1.4855': attribute type 10 has an invalid length. [ 1538.854859][T23394] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1538.870857][T23394] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1538.879424][T23394] team0: Port device netdevsim0 added [ 1539.021539][T23405] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4856'. [ 1540.299728][T23438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1540.883253][T23449] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4867'. [ 1540.920731][T23449] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4867'. [ 1541.040288][T23441] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4867'. [ 1541.065169][T23453] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4870'. [ 1541.131537][T23443] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4867'. [ 1541.176894][T23453] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1541.261390][T23453] CPU: 0 PID: 23453 Comm: syz.2.4870 Not tainted syzkaller #0 [ 1541.268955][T23453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1541.279076][T23453] Call Trace: [ 1541.282382][T23453] [ 1541.285334][T23453] dump_stack_lvl+0x18c/0x250 [ 1541.290047][T23453] ? show_regs_print_info+0x20/0x20 [ 1541.295276][T23453] ? load_image+0x420/0x420 [ 1541.299817][T23453] sysfs_warn_dup+0x8e/0xa0 [ 1541.304346][T23453] sysfs_do_create_link_sd+0xc0/0x110 [ 1541.309755][T23453] device_add_class_symlinks+0x1cf/0x240 [ 1541.315417][T23453] device_add+0x4f9/0xc40 [ 1541.319769][T23453] wiphy_register+0x1d99/0x2ac0 [ 1541.324790][T23453] ? cfg80211_event_work+0x40/0x40 [ 1541.329958][T23453] ? minstrel_ht_alloc+0x88a/0x990 [ 1541.335205][T23453] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1541.341309][T23453] ieee80211_register_hw+0x2dd8/0x3b30 [ 1541.346867][T23453] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1541.352468][T23453] ? ieee80211_tasklet_handler+0x20/0x20 [ 1541.358131][T23453] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1541.364059][T23453] ? __debug_object_init+0xec/0x450 [ 1541.369293][T23453] ? __asan_memset+0x22/0x40 [ 1541.373944][T23453] ? __hrtimer_init+0x189/0x270 [ 1541.378825][T23453] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1541.384686][T23453] ? mac80211_hwsim_free+0x220/0x220 [ 1541.390013][T23453] ? rcu_is_watching+0x15/0xb0 [ 1541.394853][T23453] ? kstrndup+0xbd/0x140 [ 1541.399145][T23453] hwsim_new_radio_nl+0xdad/0x1a70 [ 1541.404295][T23453] ? __nla_validate+0x50/0x50 [ 1541.409019][T23453] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1541.415384][T23453] ? __nla_parse+0x40/0x50 [ 1541.419827][T23453] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1541.426278][T23453] genl_family_rcv_msg_doit+0x21a/0x310 [ 1541.431859][T23453] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1541.437782][T23453] ? bpf_lsm_capable+0x9/0x10 [ 1541.442497][T23453] ? security_capable+0x89/0xb0 [ 1541.447377][T23453] genl_rcv_msg+0x611/0x7a0 [ 1541.451907][T23453] ? genl_bind+0x360/0x360 [ 1541.456348][T23453] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1541.462709][T23453] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 1541.469401][T23453] ? ref_tracker_free+0x686/0x830 [ 1541.474455][T23453] netlink_rcv_skb+0x235/0x4c0 [ 1541.479240][T23453] ? genl_bind+0x360/0x360 [ 1541.483684][T23453] ? netlink_ack+0x1160/0x1160 [ 1541.488477][T23453] ? __lock_acquire+0x7d80/0x7d80 [ 1541.493531][T23453] ? down_read+0x1ac/0x2e0 [ 1541.497970][T23453] genl_rcv+0x28/0x40 [ 1541.501976][T23453] netlink_unicast+0x7b1/0x930 [ 1541.506779][T23453] netlink_sendmsg+0x8d0/0xbf0 [ 1541.511574][T23453] ? netlink_getsockopt+0x590/0x590 [ 1541.516790][T23453] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1541.522367][T23453] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1541.527759][T23453] ? security_socket_sendmsg+0x80/0xa0 [ 1541.533259][T23453] ? netlink_getsockopt+0x590/0x590 [ 1541.538500][T23453] ____sys_sendmsg+0x61b/0x980 [ 1541.543316][T23453] ? __asan_memset+0x22/0x40 [ 1541.547938][T23453] ? __sys_sendmsg_sock+0x30/0x30 [ 1541.552987][T23453] ? __import_iovec+0x5f2/0x850 [ 1541.557880][T23453] ? import_iovec+0x73/0xa0 [ 1541.562509][T23453] ___sys_sendmsg+0x2a6/0x360 [ 1541.567210][T23453] ? __lock_acquire+0x7d80/0x7d80 [ 1541.572355][T23453] ? __sys_sendmsg+0x2b0/0x2b0 [ 1541.577200][T23453] __se_sys_sendmsg+0x1d0/0x2c0 [ 1541.582076][T23453] ? __x64_sys_sendmsg+0x80/0x80 [ 1541.587105][T23453] ? lockdep_hardirqs_on+0x98/0x150 [ 1541.592355][T23453] do_syscall_64+0x55/0xb0 [ 1541.596909][T23453] ? clear_bhb_loop+0x40/0x90 [ 1541.601712][T23453] ? clear_bhb_loop+0x40/0x90 [ 1541.606412][T23453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1541.612330][T23453] RIP: 0033:0x7f0a7c39e159 [ 1541.616854][T23453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.636577][T23453] RSP: 002b:00007f0a7d2b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1541.645029][T23453] RAX: ffffffffffffffda RBX: 00007f0a7c626180 RCX: 00007f0a7c39e159 [ 1541.653026][T23453] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1541.661027][T23453] RBP: 00007f0a7c43506b R08: 0000000000000000 R09: 0000000000000000 [ 1541.669011][T23453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1541.677084][T23453] R13: 00007f0a7c626218 R14: 00007f0a7c626180 R15: 00007ffca9c8b138 [ 1541.685098][T23453] [ 1541.833012][T23456] netlink: 'syz.1.4872': attribute type 21 has an invalid length. [ 1542.291043][T23471] netlink: 'syz.2.4876': attribute type 13 has an invalid length. [ 1542.298960][T23471] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4876'. [ 1542.333262][T23471] syz_tun: refused to change device tx_queue_len [ 1542.381145][T23471] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1543.357547][T23490] netlink: 'syz.1.4881': attribute type 29 has an invalid length. [ 1543.387063][T23490] netlink: 'syz.1.4881': attribute type 29 has an invalid length. [ 1543.405056][T23484] tap0: tun_chr_ioctl cmd 2147767511 [ 1543.442949][T23498] netlink: 'syz.0.4880': attribute type 29 has an invalid length. [ 1543.547417][T23498] netlink: 'syz.0.4880': attribute type 29 has an invalid length. [ 1543.575041][T23503] netlink: 'syz.1.4882': attribute type 17 has an invalid length. [ 1543.587089][T23503] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4882'. [ 1544.646271][T23526] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1544.668294][T23526] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1544.677148][T23526] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1544.687766][T23526] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1544.696463][T23526] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1544.721014][T23526] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1545.559917][T23544] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.4890'. [ 1545.768787][T23523] chnl_net:caif_netlink_parms(): no params data found [ 1546.305424][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.312153][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.431001][T23523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1546.438533][T23523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1546.493132][T23523] bridge_slave_0: entered allmulticast mode [ 1546.531714][T23523] bridge_slave_0: entered promiscuous mode [ 1546.561613][T23523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1546.568863][T23523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1546.590913][T23523] bridge_slave_1: entered allmulticast mode [ 1546.599024][T23523] bridge_slave_1: entered promiscuous mode [ 1546.783291][T18370] Bluetooth: hci4: command tx timeout [ 1547.035584][T23523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.157572][T23523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.323244][T23523] team0: Port device team_slave_0 added [ 1547.343118][T23523] team0: Port device team_slave_1 added [ 1547.430854][T23523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1547.437910][T23523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.494858][T23523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1547.536699][T23523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1547.545844][T23523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1547.693917][T23523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.870664][T18370] Bluetooth: hci4: command tx timeout [ 1550.950777][T18370] Bluetooth: hci4: command tx timeout [ 1552.843565][T23523] hsr_slave_0: entered promiscuous mode [ 1553.020852][T18370] Bluetooth: hci4: command tx timeout [ 1554.828248][T23523] hsr_slave_1: entered promiscuous mode [ 1554.947203][T23574] netlink: 'syz.2.4895': attribute type 10 has an invalid length. [ 1554.960641][T23574] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4895'. [ 1554.969789][T23574] ipvlan1: entered promiscuous mode [ 1554.982678][T23574] ipvlan1: entered allmulticast mode [ 1554.995697][T23574] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1555.110158][T23579] netlink: 'syz.2.4897': attribute type 1 has an invalid length. [ 1555.118107][T23579] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4897'. [ 1570.551034][T23526] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1570.572015][T23526] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1570.580470][T23526] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1570.614804][T23526] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1570.631217][T23526] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1570.638639][T23526] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1570.793180][T18370] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1570.802639][T18370] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1570.810949][T18370] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1570.819932][T18370] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1570.832405][T18370] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1570.839723][T18370] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.486332][T23526] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1571.497493][T23526] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1571.511010][T23526] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1571.519985][T23526] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1571.535226][T23526] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1571.545055][T23526] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1572.710893][T23526] Bluetooth: hci3: command tx timeout [ 1572.860723][T23526] Bluetooth: hci5: command tx timeout [ 1573.580680][T23526] Bluetooth: hci6: command tx timeout [ 1633.380555][T23526] Bluetooth: hci3: command tx timeout [ 1633.387480][T18370] Bluetooth: hci5: command tx timeout [ 1633.394312][T18370] Bluetooth: hci6: command tx timeout [ 1635.397591][ T5831] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1635.410641][ T5831] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1635.418759][ T5831] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1635.430535][T23526] Bluetooth: hci3: command tx timeout [ 1635.435963][T23526] Bluetooth: hci6: command tx timeout [ 1635.442438][T23526] Bluetooth: hci5: command tx timeout [ 1635.449216][T18370] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1635.457900][T18370] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1635.470728][T18370] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1635.638881][T23594] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1635.649510][T23594] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1635.662003][T23594] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1635.685603][T23594] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1635.693478][T23594] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1635.701851][T23594] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1635.791486][T18370] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1635.807308][T18370] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1635.815818][T18370] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1635.824666][T18370] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1635.832624][T18370] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1635.839963][T18370] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1635.952104][T23594] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1635.962722][T23594] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1635.970887][T23594] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1635.985686][T23594] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1635.993784][T23594] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1636.001455][T23594] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1637.505499][ T5831] Bluetooth: hci3: command tx timeout [ 1637.511314][T18370] Bluetooth: hci6: command tx timeout [ 1637.516786][T23594] Bluetooth: hci5: command tx timeout [ 1637.591026][T23594] Bluetooth: hci7: command tx timeout [ 1637.740726][T23594] Bluetooth: hci8: command tx timeout [ 1637.900635][T23594] Bluetooth: hci9: command tx timeout [ 1638.060633][T23594] Bluetooth: hci10: command tx timeout [ 1653.740618][T23594] Bluetooth: hci7: command tx timeout [ 1653.746094][T23594] Bluetooth: hci8: command tx timeout [ 1653.752522][ T5831] Bluetooth: hci9: command tx timeout [ 1653.757957][ T5831] Bluetooth: hci10: command tx timeout [ 1655.830988][ T5831] Bluetooth: hci10: command tx timeout [ 1655.836631][ T5831] Bluetooth: hci8: command tx timeout [ 1655.842420][T18370] Bluetooth: hci9: command tx timeout [ 1655.847840][T18370] Bluetooth: hci7: command tx timeout [ 1657.900767][ T5831] Bluetooth: hci8: command tx timeout [ 1657.906234][ T5831] Bluetooth: hci7: command tx timeout [ 1657.911739][T18370] Bluetooth: hci9: command tx timeout [ 1657.917157][T18370] Bluetooth: hci10: command tx timeout [ 1660.060495][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1660.067431][ C0] rcu: 0-....: (8911 ticks this GP) idle=7cbc/1/0x4000000000000000 softirq=100324/100324 fqs=734 [ 1660.079273][ C0] rcu: hardirqs softirqs csw/system [ 1660.085702][ C0] rcu: number: 742315 0 0 [ 1660.092112][ C0] rcu: cputime: 8420 18270 23 ==> 26700(ms) [ 1660.099912][ C0] rcu: (t=10500 jiffies g=141145 q=1240 ncpus=2) [ 1660.106355][ C0] CPU: 0 PID: 23572 Comm: syz.1.4896 Not tainted syzkaller #0 [ 1660.113854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1660.123927][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 1660.130450][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3b f7 c1 f6 65 8b 05 ec b4 68 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1660.150178][ C0] RSP: 0018:ffffc90000006460 EFLAGS: 00000206 [ 1660.156260][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 4b02e335b1350900 [ 1660.164426][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: 0000000000000001 [ 1660.172405][ C0] RBP: ffffc900000064e8 R08: ffffffff911eb5c7 R09: 1ffffffff223d6b8 [ 1660.180382][ C0] R10: dffffc0000000000 R11: fffffbfff223d6b9 R12: dffffc0000000000 [ 1660.188366][ C0] R13: dffffc0000000000 R14: ffffffff8d22ea20 R15: 1ffff92000000c8c [ 1660.196350][ C0] FS: 00007f36485e26c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1660.205290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1660.211883][ C0] CR2: 0000000100000000 CR3: 0000000077744000 CR4: 00000000003506f0 [ 1660.219885][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1660.227863][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1660.235843][ C0] Call Trace: [ 1660.239132][ C0] [ 1660.241992][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1660.246950][ C0] ? check_canary+0x54c/0x950 [ 1660.251644][ C0] ? metadata_update_state+0x191/0x2d0 [ 1660.257376][ C0] kfence_guarded_free+0x363/0x4b0 [ 1660.262515][ C0] ? packet_rcv+0x172/0x1360 [ 1660.267139][ C0] kmem_cache_free+0x189/0x290 [ 1660.271923][ C0] packet_rcv+0x172/0x1360 [ 1660.276374][ C0] ? packet_sock_destruct+0x160/0x160 [ 1660.281758][ C0] dev_queue_xmit_nit+0xb0c/0xba0 [ 1660.286812][ C0] ? dev_queue_xmit_nit+0x2d/0xba0 [ 1660.291986][ C0] dev_hard_start_xmit+0x150/0x790 [ 1660.297118][ C0] sch_direct_xmit+0x251/0x4a0 [ 1660.301907][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1660.308080][ C0] ? mrp_pdu_parse_vecattr_event+0x230/0x230 [ 1660.314090][ C0] ? sch_direct_xmit+0xe/0x4a0 [ 1660.318875][ C0] __dev_queue_xmit+0x18b8/0x37e0 [ 1660.323917][ C0] ? __dev_queue_xmit+0x272/0x37e0 [ 1660.329046][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1660.334270][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1660.340443][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 1660.345750][ C0] ? neigh_resolve_output+0x4f7/0x710 [ 1660.351243][ C0] ? neigh_resolve_output+0x5f5/0x710 [ 1660.356638][ C0] ? ip_finish_output2+0x45a/0x1260 [ 1660.361857][ C0] ip_finish_output2+0xd97/0x1260 [ 1660.366896][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1660.373091][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1660.378326][ C0] ? ip_fragment+0x210/0x210 [ 1660.383029][ C0] ? ip_finish_output+0x3ec/0x4c0 [ 1660.388165][ C0] ip_output+0x29f/0x440 [ 1660.392480][ C0] ? ip_output+0x5a/0x440 [ 1660.396821][ C0] ? __ip_queue_xmit+0x5d/0x1960 [ 1660.401807][ C0] __ip_queue_xmit+0x1056/0x1960 [ 1660.406764][ C0] ? __ip_queue_xmit+0x5d/0x1960 [ 1660.411715][ C0] __tcp_transmit_skb+0x1dd6/0x3470 [ 1660.416994][ C0] ? __tcp_send_ack+0x5f0/0x5f0 [ 1660.421884][ C0] ? __tcp_send_ack+0x299/0x5f0 [ 1660.426775][ C0] tcp_rcv_established+0xb22/0x1d70 [ 1660.432017][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1660.438198][ C0] ? tcp_check_space+0xa80/0xa80 [ 1660.443238][ C0] ? tcp_v4_do_rcv+0x63c/0xba0 [ 1660.448018][ C0] tcp_v4_do_rcv+0x6d3/0xba0 [ 1660.452626][ C0] tcp_v4_rcv+0x2358/0x2a60 [ 1660.457141][ C0] ? tcp_v4_rcv+0x1071/0x2a60 [ 1660.462023][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1660.468196][ C0] ? tcp_filter+0x90/0x90 [ 1660.472540][ C0] ip_protocol_deliver_rcu+0x20a/0x3f0 [ 1660.478018][ C0] ? ip_local_deliver_finish+0x1c2/0x510 [ 1660.483661][ C0] ip_local_deliver_finish+0x2c3/0x510 [ 1660.489139][ C0] NF_HOOK+0x32d/0x3b0 [ 1660.493216][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1660.498448][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1660.502724][ C0] ? NF_HOOK+0x9f/0x3b0 [ 1660.506903][ C0] ? ip_local_deliver+0x180/0x180 [ 1660.511948][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 1660.516203][ C0] ? ip_local_deliver+0x62/0x180 [ 1660.521149][ C0] ? ip_local_deliver+0x10b/0x180 [ 1660.526185][ C0] ip_sublist_rcv+0xa36/0xd60 [ 1660.530942][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1660.538170][ C0] ? ip_list_rcv+0x440/0x440 [ 1660.542777][ C0] ? ip_rcv_core+0xd80/0xd80 [ 1660.547385][ C0] ? ip_rcv_core+0x898/0xd80 [ 1660.551993][ C0] ip_list_rcv+0x3ed/0x440 [ 1660.556428][ C0] ? ip_rcv_finish+0x250/0x250 [ 1660.561309][ C0] ? ip_rcv_finish+0x250/0x250 [ 1660.566105][ C0] __netif_receive_skb_list_core+0x2d9/0x770 [ 1660.572123][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 1660.576829][ C0] ? read_tsc+0x9/0x20 [ 1660.580943][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 1660.587113][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 1660.593467][ C0] ? netif_receive_skb_core+0x230/0x230 [ 1660.599036][ C0] ? dev_gro_receive+0x10b0/0x22a0 [ 1660.604170][ C0] ? eth_type_trans+0x3ab/0x770 [ 1660.609054][ C0] napi_gro_receive+0x553/0xaf0 [ 1660.613933][ C0] receive_buf+0x2109/0x3610 [ 1660.618567][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1660.623787][ C0] ? virtnet_poll_tx+0x530/0x530 [ 1660.628780][ C0] virtnet_poll+0x69e/0x1300 [ 1660.633391][ C0] ? refill_work+0x220/0x220 [ 1660.637998][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1660.643225][ C0] ? rcu_is_watching+0x15/0xb0 [ 1660.648018][ C0] __napi_poll+0xbb/0x460 [ 1660.652471][ C0] net_rx_action+0x65f/0xcc0 [ 1660.657103][ C0] ? net_tx_action+0x950/0x950 [ 1660.661885][ C0] ? detach_timer+0x2b0/0x2b0 [ 1660.666590][ C0] handle_softirqs+0x27d/0x820 [ 1660.671366][ C0] ? read_tsc+0x9/0x20 [ 1660.675448][ C0] ? ktime_get+0x24b/0x280 [ 1660.680049][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 1660.684830][ C0] ? do_softirq+0x1a0/0x1a0 [ 1660.689350][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1660.694586][ C0] __irq_exit_rcu+0xd3/0x190 [ 1660.699185][ C0] ? irq_exit_rcu+0x20/0x20 [ 1660.703704][ C0] irq_exit_rcu+0x9/0x20 [ 1660.707954][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1660.713603][ C0] [ 1660.716541][ C0] [ 1660.719484][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1660.725478][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 1660.731383][ C0] Code: 33 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 53 28 3d 09 e8 0e 23 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1660.751107][ C0] RSP: 0018:ffffc9000443f760 EFLAGS: 00000286 [ 1660.757205][ C0] RAX: 4b02e335b1350900 RBX: 0000000000000000 RCX: 4b02e335b1350900 [ 1660.765194][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffffffff8b1d3ba0 [ 1660.773180][ C0] RBP: ffffc9000443f7b0 R08: ffffffff911eb5ff R09: 1ffffffff223d6bf [ 1660.781165][ C0] R10: dffffc0000000000 R11: fffffbfff223d6c0 R12: ffff8880314d5a00 [ 1660.789162][ C0] R13: 1ffff110171c79a1 R14: dffffc0000000000 R15: ffff8880b8e3cd08 [ 1660.797257][ C0] __schedule+0x15b6/0x4660 [ 1660.801799][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1660.809037][ C0] ? lock_chain_count+0x20/0x20 [ 1660.813922][ C0] ? asan.module_dtor+0x20/0x20 [ 1660.818804][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1660.824990][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1660.830270][ C0] ? preempt_schedule+0xc0/0xd0 [ 1660.835592][ C0] preempt_schedule_common+0x82/0xc0 [ 1660.840899][ C0] preempt_schedule+0xc0/0xd0 [ 1660.845603][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 1660.851249][ C0] ? event_function+0x300/0x300 [ 1660.856130][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 1660.861965][ C0] preempt_schedule_thunk+0x1a/0x30 [ 1660.867213][ C0] ? smp_call_function_single+0x488/0x5a0 [ 1660.872947][ C0] smp_call_function_single+0x48d/0x5a0 [ 1660.878508][ C0] ? event_function+0x300/0x300 [ 1660.883369][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 1660.889533][ C0] ? event_function+0x300/0x300 [ 1660.894406][ C0] perf_install_in_context+0x5bb/0x920 [ 1660.899978][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 1660.906073][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 1660.911294][ C0] ? anon_inode_getfile+0xc5/0x1a0 [ 1660.916426][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 1660.921640][ C0] ? perf_event__header_size+0x165/0x220 [ 1660.927289][ C0] __se_sys_perf_event_open+0x1818/0x1d40 [ 1660.933034][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1660.938772][ C0] ? lock_chain_count+0x20/0x20 [ 1660.943733][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1660.949730][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1660.954935][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1660.960591][ C0] do_syscall_64+0x55/0xb0 [ 1660.965036][ C0] ? clear_bhb_loop+0x40/0x90 [ 1660.969728][ C0] ? clear_bhb_loop+0x40/0x90 [ 1660.974420][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1660.980330][ C0] RIP: 0033:0x7f364779e159 [ 1660.984760][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1661.004376][ C0] RSP: 002b:00007f36485e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1661.012814][ C0] RAX: ffffffffffffffda RBX: 00007f3647a26090 RCX: 00007f364779e159 [ 1661.020824][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 00002000000008c0 [ 1661.028803][ C0] RBP: 00007f364783506b R08: 0000000000000002 R09: 0000000000000000 [ 1661.036783][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1661.044765][ C0] R13: 00007f3647a26128 R14: 00007f3647a26090 R15: 00007ffd269b4ff8 [ 1661.052758][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1661.105496][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1661.111874][ T1292] ieee802154 phy1 wpan1: encryption failed: -22