last executing test programs: 2.938791395s ago: executing program 0 (id=1755): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183f000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x0, {0x4e20}}, 0x10, &(0x7f0000002080)=[{&(0x7f0000000300)="b52e5d6ec00854d7c86e003eec3e8d1cdc59ba1548da6f7c8ab5695bc8787ca5df6b7e4db5d190fa34849b580b79bbb38d544dfa41fb98f2e888849c02fcc9998f6d8dc49333783158cbe36fca6efb4b0a157f0101fa5a42aa3c09e861ea43bb1f7b245deae908d5fd027bc6fc3ca90df77d8824abfed0e5f8db1736c59dfb850ccb6aa793a18fbe6363fae71eb8524407f2c7c18e29a3d3d0e774dca85bead4235ca6308d8b6674ac49c3969c9f9226fe08f10c4a7a99540900ad11", 0xbc}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="80c8ee25e51d5e968ebcf9304d27aa42ad651b476ebdd08573280042b6e20129ac1ab1f9f873b1fc782ec2119ad20033d66193c1a5f494", 0x37}], 0x3, &(0x7f00000020c0)="fcb7366375177a92d4bf2ca5fe5f20113a6db8cf17c1f1cb6c313e4a6191f418006bba8e0204bffa70c870e60efc77949ab071b709cda42682aa6853e6983a98b9b7d77ec581688b715cf80439936cc7bd", 0x51, 0x4000000}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, 0x0, 0x0, 0x4}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0xfffffffd}, {}]}) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x10d101, 0x4, 0x3, 0x1, 0x0, 0x5, 0x1}, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000740)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, 0x0}, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a11800150004001401000000000000801000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) 2.697560781s ago: executing program 1 (id=1758): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) close(r0) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x5}) ioctl$TUNGETVNETLE(r0, 0x8955, &(0x7f0000000040)) 2.579271823s ago: executing program 0 (id=1759): r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x1f, 0xf8, 0x60, 0x45, 0x0, 0x7, 0x414, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x2, 0xfffffffe, 0x8, 0x0, 0x9, 0x3, 0x0, 0x31, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x5) r3 = syz_clone(0x5000000, &(0x7f00000001c0)="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", 0xfa, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="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") perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x9, 0x6, 0x0, 0xf, 0x0, 0xc20a, 0x8010, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x5, 0x5}, 0x3, 0xc, 0xfffeffff, 0x2, 0x80000001, 0x7f, 0x3fbb, 0x0, 0x1, 0x0, 0x3}, r3, 0x5, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@fallback=0xffffffffffffffff, 0x16, 0x1, 0x9, &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001380)=[0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000014c0)='syz1\x00', 0x200002, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001500), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001480)={@cgroup=r6, 0xffffffffffffffff, 0x35, 0x2000, 0x0, @value=r7, @void, @void, @void, r5}, 0x20) recvmsg$unix(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/197, 0xc5}, {&(0x7f0000001640)=""/118, 0x76}], 0x2, &(0x7f0000001700)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x1) socketpair(0x27, 0xa, 0x9, &(0x7f00000017c0)={0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001900)={@map=r9, 0xe, 0x0, 0xfffffffc, &(0x7f0000001800)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b00)=@bpf_tracing={0x1a, 0x3, &(0x7f0000001980)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000019c0)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000001a00)=""/4096, 0x41000, 0xa, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000002a00)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000002a40)={0x4, 0x7, 0x7, 0x4}, 0x10, 0x3, 0xffffffffffffffff, 0x2, &(0x7f0000002a80)=[r9, r4, r8, r10, r10, 0xffffffffffffffff, r8, r8], &(0x7f0000002ac0)=[{0x5, 0x1, 0xb, 0x7}, {0x3, 0x4, 0x3, 0x6}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001940)={@cgroup=r9, r10, 0x33, 0xe, r10, @void, @value=r15, @void, @void, r14}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003080)={r4, 0xe0, &(0x7f0000002f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002d80)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000002dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002e40)=[0x0], 0x0, 0x3f, &(0x7f0000002e80)=[{}, {}], 0x10, 0x10, &(0x7f0000002ec0), &(0x7f0000002f00), 0x8, 0x4a, 0x8, 0x8, &(0x7f0000002f40)}}, 0x10) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r10, 0x3, 0x3, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003240)=@bpf_ext={0x1c, 0x18, &(0x7f0000002bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x35a0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @map_fd={0x18, 0x4, 0x1, 0x0, r12}, @map_fd={0x18, 0x0, 0x1, 0x0, r13}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000002c80)='GPL\x00', 0x0, 0xb6, &(0x7f0000002cc0)=""/182, 0x41000, 0x0, '\x00', r16, 0x0, r10, 0x8, &(0x7f00000030c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000003100)={0x5, 0x3, 0x80000001, 0x2}, 0x10, 0x17dd0, r4, 0x1, &(0x7f00000031c0)=[r18, r4, r8], &(0x7f0000003200)=[{0x2, 0x5, 0x9, 0xc}], 0x10, 0x8}, 0x94) socketpair(0xf, 0x1, 0x42709159, &(0x7f0000003300)) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000003340)=r10, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003400)={{r9, 0xffffffffffffffff}, &(0x7f0000003380), &(0x7f00000033c0)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000034c0)={{r19, 0xffffffffffffffff}, &(0x7f0000003440), &(0x7f0000003480)=r15}, 0x20) write$cgroup_subtree(r9, &(0x7f0000003500)={[{0x2d, 'net_cls'}, {0x2b, 'cpuacct'}, {0x2b, 'rdma'}, {0x2d, 'cpuset'}, {0x3e, 'cpuacct'}, {0x2b, 'cpu'}, {0x2b, 'io'}, {0x2d, 'cpuacct'}, {0x2b, 'cpuacct'}]}, 0x44) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000003580)=r15, 0x4) r21 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003840)=r17, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003900)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000039c0)=@bpf_ext={0x1c, 0x22, &(0x7f00000035c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x306, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ldst={0x1, 0x0, 0x4755ace585f769e5, 0x3, 0x1, 0x22, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x95}, @call={0x85, 0x0, 0x0, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r19}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x7923b146a1addfe4}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r18, 0x0, 0x0, 0x0, 0x65}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003700)='syzkaller\x00', 0x8, 0xdc, &(0x7f0000003740)=""/220, 0x40f00, 0x11, '\x00', 0x0, 0x0, r21, 0x8, &(0x7f0000003880)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000038c0)={0x0, 0x7, 0x2, 0x8}, 0x10, 0x11f1, r10, 0x3, &(0x7f0000003940)=[r22, r10, r4, r19, r9, r4, r20, r8, r10, r11], &(0x7f0000003980)=[{0x3, 0x2, 0x3}, {0x5, 0x4, 0xb, 0x5}, {0x3, 0x2, 0xb, 0x8}], 0x10, 0x3ff}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000003c00)={r11, &(0x7f0000003a80)="d9296efb60e93cd7acf89206e8be8e28e145bfffb27d05fcf06457c7fd25397797f78c96af1ef55581cd359ae75c52dba81d54f1a722fd0f0c0621814fb81d2922147f161265cb4c4ea8816861a33cec5f9614c654c8de2708b8117f531146ab8a937f447faf0aceff18607a0dc422c9b62c72368046270f7f3a81cf23c862815b59848fb0ba8e7a7b0f739169c2fa32cb", &(0x7f0000003b40)=""/191, 0x4}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003c40)={@fallback, 0xffffffffffffffff, 0x0, 0x18, 0x0, @void, @value=r8, @void, @void, r14}, 0x20) 2.521902004s ago: executing program 3 (id=1760): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 2.459234656s ago: executing program 1 (id=1762): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="05000000080000000a00000008"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r5, &(0x7f00000001c0), 0x0}, 0x20) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000000)=r6, 0x10) socket$kcm(0x10, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9150ef78437e79364d6ef21aa00", 0x0, 0xcb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f0000000300), &(0x7f0000000340)='%ps \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32=r8], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x15, 0x0, 0x0, 0x48, '\x00', r9, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r13 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r13, 0x1, 0x3e, &(0x7f00000002c0)=r12, 0x161) sendmsg$inet(r13, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) 2.356930158s ago: executing program 0 (id=1763): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r1, r0}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x1, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r4, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x5, 0xffffffffffffffff, 0x0) close(r2) 2.225564491s ago: executing program 2 (id=1764): socketpair(0x21, 0xa, 0x80000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x0, 0x0, 0x3, 0x0, 0x100000801, 0x22804, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdffffff, 0x2, @perf_bp={0x0, 0x8}, 0xb219, 0x3, 0xfffffffd, 0x0, 0x40000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20009}, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000780)='pids.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000a0347ef199a400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000)=r5, 0x4) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0xffffffffffffffff, 0x1, 0x8}, 0xc) r8 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xe2, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0xf, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000005000000000000002900000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702010014000000b7030000000000008500000083000000bffcffffff00000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000a4b59a557de7622409f5d4ba29de0b2b68a84d25d3d81035018ab66617ffdd3592a486f31e3443cea54f8c89d26def3fc815c22d189848bb4e6e7ffc27419a424ece5f5afb0000000010df9bd40000000000e52a000000"], &(0x7f0000000980)='syzkaller\x00', 0x2, 0x51, &(0x7f00000009c0)=""/81, 0x40f00, 0x8, '\x00', r9, 0x25, r5, 0x8, &(0x7f0000000e00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000e40)={0x5, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fe000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(0xffffffffffffffff) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x1c) syz_clone(0x1a00, &(0x7f0000000100)="de52ed62858328ad9272a82e63c61006aa50e83669718c87caf7e8ef5b28408af40000867faab0", 0x27, &(0x7f0000000300), &(0x7f0000000740), &(0x7f0000000f40)="06000000000000002269235f870d022dfb59c0455aa99e369bd623b7a621f4f7f168cc92e4e948edc8a73394289ff6080000007d01e462278bce1e9fd234cfc34c646fe7ea21bfeab3b50726a2988354e4b30d1e2048774cdec584f83d9ceb85611fc5f438bb6105d00c9e055963be73") r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r12}, &(0x7f00000000c0), &(0x7f0000000000)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r6, r12}, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x12, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000000000008500000086000000186600000f00000000000000c0000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ba630000850000000600000018500000060000000000000000000000185800001000"/136], &(0x7f0000000140)='GPL\x00', 0x9, 0x93, &(0x7f0000000180)=""/147, 0x41100, 0x38, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x1, 0xa, 0x1, 0xfffffff1}, 0x10, 0x89ab, 0xffffffffffffffff, 0x0, &(0x7f0000000400)=[r6, r7, r11, r12], &(0x7f0000000440), 0x10, 0x1}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 2.160368302s ago: executing program 3 (id=1765): socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)={0x2, 0x4e26, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000002500)=ANY=[], 0x110}, 0x40000) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0xfffffffffffffffe, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xb, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000080c0000000c956302000000002e00"], 0x0, 0x27, 0x0, 0x0, 0xfffffffa}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b16000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000400ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x4, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0x240000, 0x0) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) close(r1) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x9, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000d99500000700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 1.995317636s ago: executing program 1 (id=1766): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x10, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) (async, rerun: 64) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x5, 0xb, 0x0, 0x28, 0x0, 0x2, 0x40c20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x100000002}, 0x8100, 0xc8, 0xd06, 0x0, 0xfffffffffffffffc, 0x341, 0x2, 0x0, 0xfffffe00, 0x0, 0x1}, 0x0, 0x7, 0xffffffffffffffff, 0xe) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r5) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, 0x0, 0x9a) (async) write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x2d, 'net'}, {0x2b, 'perf_event'}]}, 0x11) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000300e8fe55a1180015000600142603600e1209002100000004010100efffa40001", 0x37}], 0x1}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0xe0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], 0x0, 0xb6, &(0x7f0000000900)=[{}], 0x8, 0x10, &(0x7f0000000980), &(0x7f00000009c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000000a00)}}, 0x10) sendmsg$inet(r7, &(0x7f0000000c00)={&(0x7f0000000200)={0x2, 0x4e21, @empty}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000240)="f9d42cf4bdc204e857dd148f31ecc24a0a1b4b2bc876d10e8710baa0a254eb7bf7501e6ac9858101c239eb1084f6b5f4bfe1", 0x32}, {&(0x7f0000000400)="32694926dfff92dabf9f381789a6ce26e2951f9933f8fdb306202ae7d6c9d940c3a19a99c4ee53b1dfc7dbbec29b4631380ff3b731a7b00aa4f12804e0545628107fd0a1e6b3d3ee991f71fdacfad216554ce97266e0af7f40e77086f35923b2399950ef90a994028bb4cad0075c6ab3298926c71b71251d158d6d812ea9909bf3e82695dc2fb466c95d4a898e7da3a83621d5d643200f31ec5cfe568d", 0x9d}, {&(0x7f00000004c0)="3eaba494620a633321ae02693df4c93c28545e957a76f43ddb79de3c793cd6dd54db6c42e72128be7153489d34aa43554d0a342381b881bd4ce9c9e76d0ea96e36a1", 0x42}, {&(0x7f0000000540)="bf512562402caf0bb72f83439ad9149079f3d5f0b4d728ed1407ef6acf461cd999ccc8e9f7cc245aa7b762de1d4c494415ba292874d719401ef9889ebbaa7d8002f3fa534957186604ba28c67fd0425489f099b27cc0f8c21eae8a92272ae8b254040faa9fb72da17ec17ab0a3d57d6b441ef4f39f806ad9d56aa62048a5d45426acce7287102c1682112193059b1bf3a79e6b2e1a1ea609d50d51d51cedbcbd05e389b2a55dcaa03c08c21f17c6b24376c4bd4a84886c06d401d1b1320bf329e876858e98b97121bc2454acc6540e7b0023e268018e9c1d4cd4c15f5b996c13534bc16fbc1ca07f027cae3b86f35660ec32706a79cbba9e54a2143938f864", 0xff}, {&(0x7f0000000640)="99432b6a9015d37ad3302b", 0xb}, {&(0x7f0000000680)="f2ef1c02", 0x4}, {&(0x7f00000006c0)="26ea710ae3e72e8b4e499249c1dd5f39ddab9f48d044e76256fe675f28a976e8d4e0a3251b9d3aeb5b3690e6305b6dab4635dcbb8c871388910f33dfbd9e53726391cd31f9d407e0fdf42c44842d7311162de7340b94e963d3c2d9fac49f5f99e32e1bf4e4fac9b57dfe1fdd942bb60911a7fc4c3b3fe2d8cd51dab2ee9c6ee6f6f0c2d4c32e9f600a47597d3209d9e1414f074660c9d41f636e0f887bdaa93d1ef7641841f0b9ad6617645edcbb823466d9ea571e9aa471d4d967b76dfe1eadca456e5eeefc", 0xc6}], 0x7, &(0x7f0000000b80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x80}, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) (async) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388641f9c0e0a"], 0xfe33) 1.79621758s ago: executing program 3 (id=1767): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_ext={0x1c, 0x11, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000940)='syzkaller\x00', 0xa1, 0x87, &(0x7f0000000980)=""/135, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000d80)={0x0, 0x1, 0x5, 0x3ff}, 0x10, 0x9a79, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001100)=[{0x2, 0x3, 0x1, 0x1}, {0x0, 0x1, 0x4, 0x8}, {0x2, 0x2, 0x7, 0x1}], 0x10, 0x57}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x7c, 0x26, &(0x7f0000000480)="ddf3bc54b80519f8335c49863dd70ce6a1f42ccc740e76e49f4ca79238720152ecba20482747c40482d4ec44945bcb47e21ee920e7a8fe913a46a2ac160a7513f3bc0174d38b5243669ca7e717434f5e5bee8b0d0f5e076798fda5328ecf3bc15f5854802efc43575ba0d8eb0554a8208ce863a007d1d447306c4ced", &(0x7f0000000500)=""/38, 0xb, 0x0, 0xd, 0x48, &(0x7f0000000540)="ea087fe160e19793dee2dbfa04", &(0x7f0000000580)="98c9ebe51078be869363fd6fa01588e8a60e6694402669a0fbb2900962e7295d25a2ed376138cee247861fa2efa8d8c9d2edae524aab3841595deba449edf516c09257fde2272054", 0x6, 0x0, 0x1}, 0x50) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c23004a) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230007) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x6, 0x6, 0x2, 0x0, 0x1, 0x0, 0x102009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000000040)={0x2, 0x4e22, @rand_addr=0x64010105}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRES8=r0, @ANYRES32=r1, @ANYRES64=r0], 0x110}, 0x40080) socket$kcm(0x10, 0x2, 0x0) socketpair(0x10, 0x5, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='memory.current\x00', 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000580)=""/135, 0x0, 0x87, 0x0, 0xfffffffa}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x7, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'xfrm0\x00', 0x800}) close(r8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}, 0x41) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000), 0x10) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) 1.599512805s ago: executing program 1 (id=1768): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x3, '\x00', 0x0, r1, 0x5, 0x4, 0x1}, 0x50) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x9, &(0x7f0000000880)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8c}, @map_fd={0x18, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000780)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000001700)={&(0x7f00000014c0)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000001500)="b1256d0f8579948f1af090f65421964c23f3fcdddbb280918776c763f1571c4d3d27d0a17e7eea2c04a9d4decbb84ea6edccb675dcf09d015de6940027b8d72eda5c6b5234a6edbec3069efa7767dea571efb97410cee8790447bdfd859e2f9be40b14c965c65101b1425d7b6de5274f70585b82b967584f945cbfeaabbcb20141f45831d7211fedf169889f7d49dde4756bec5e678d2bb26cc074d1f1920b5c55341580cdc56cc2ebf4843e96f6ec19986cdefbf44d66873766bb50c32eb49469fc1d35c9284ac4", 0xc8}, {&(0x7f0000000180)="4a5a0f3374c4590d87026da0ae462f09670a58abd6597672a28c64b8a9132ed0c1747cbf45ed4ca2e56e7d3609ea0d9bbf05321de3a5afb98e3bdf77828a57465a88e0290c6a203e76686b6da7796bedc3ab6f3dee81c5bc0af0845a3a31fd34af434099a6b408d051fff11a60e09a89520ffd4a5d185c9cf5e813944d0510141a48da151331fcf756b8afe98ccb9cc14f44", 0x92}], 0x2, &(0x7f0000000040)=[@ip_ttl={{0x14, 0x0, 0x2, 0xa}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x740b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x3a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0xe0e0}]}}}], 0x38}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000ec6b5f"], 0x50) 1.33916054s ago: executing program 1 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x12100, 0xc8, 0x2, 0x4, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c106020022003505d25a806f8c6394f90435fc60040011000a74010005", 0x1d}], 0x1}, 0x4000804) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x7ca4, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}, {0x5, 0x21, 0x10, 0x8}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x3, 0xfffffffd, 0x1}, {0x5, 0x21, 0x10, 0x8}]}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c02000c0c0400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c02000c0c0400053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.238822242s ago: executing program 2 (id=1770): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/mnt\x00') ioctl$TUNSETIFF(r3, 0xb701, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRES8=r5], 0x12) (async, rerun: 64) write$cgroup_subtree(r4, &(0x7f0000000300)={[{0x2d, 'blkio'}, {0x0, 'rdma'}, {0x2b, 'memory'}, {0x2d, 'rlimit'}, {0x2d, 'perf_event'}, {0x2d, 'rlimit'}]}, 0x31) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='+cpu'], 0x5) (async) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[@ANYBLOB='-cpu'], 0x5) (async) r9 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000080), 0x9) socket$kcm(0x11, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.096759216s ago: executing program 0 (id=1771): bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r0, 0x20, &(0x7f0000000180)={&(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)=""/235, 0xeb}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pi6 \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x4, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x4, 0x5, 0x6, 0x2800, r1, 0xf, '\x00', r2, r0, 0x3, 0x4, 0x3}, 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000680)=@caif=@rfm={0x25, 0x7, "8a02255e48835449475635f67513c61c"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="b52b0931da8269402317b07c0563c04668dbffb59ce91fb5fca8efb3842ea7be51de5b1c9474a3c628a713538b293ef78119d70840d32305ba19211086467c04b0bb2b8d7b55f9abd63cf10acbf2e6ace549c514aae512fed56f07e59853", 0x5e}], 0x1, &(0x7f00000007c0)=[{0xc8, 0x0, 0x7, "a56e991dce9037ca39755f33eb6a5d8158d2e0b7aab360d1a48edb56d171de62016f31151931fb50ac95fdd855e235cb8c556063a7f7e9ad4945b7228dbefd21485845920aeca2863fd54f287462c42df9dd05aedbaf28c58caa62a88d88e470fef69f2dfb0840d98ed58db4cda79f93fd0b239f4ba618723190d608c1f9abef02c017658ab5700865c72e6e4a9fc138d7279d3cc173acf8dc2ee35c6d5855f5d208965947f030988518c9dbf316e813522279a3c72ff2d4"}, {0xf0, 0x112, 0x4, "6eb7e3404b0cd1ce3f478f90dbda7309323596a446a91e052bdfb2ab3c113a8fb4f2fad7c7fcd23806f9099ab40f2d232164c87ca15d28cf5cee1c7015384c7961dad907c3b76df76e934b0b6053275580c054db7f66ce43ac3f94141a7299cf0a91d496d8b3e816b2f30788c74934ecc52b9453bcd3aa9d9077218ddaf3c18a6f20546bf377ce7439d6d2d7bba7150ce0898d0306b59a0935048e2a97a83c8bfd0bf0ffd626b9c80a7d42a056f39dc8e00ae215a64ebec8737780e9c28ee030fbf5485408d31b5453e150db1391ad3fc4329382d8b68c89f2b7a8b6a5df"}, {0xc8, 0x117, 0x8, "2096940214e87031646aed40dff52fd3706750655cd2b715c85cc5ce5b146200c047a36569d13e1ad624caef848caa5fe4017f6d4d3134fe0b5794df279bf2655c60d528be022e9a7ee2bb588cf205031388634abdccbfaa2985250ee47c5cde6b450ed16dbe2700fe90829758a212898ce237113307677be0a9fe4c5d993ed78480639acf3493aa55500dd94693df759207edb35e043a3fb8b81241390599be47758a1f624afba723c3258c7f073237885d244c8f"}, {0x10, 0x118, 0x7}], 0x290}, 0x400d1) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000680)=@caif=@rfm={0x25, 0x7, "8a02255e48835449475635f67513c61c"}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="b52b0931da8269402317b07c0563c04668dbffb59ce91fb5fca8efb3842ea7be51de5b1c9474a3c628a713538b293ef78119d70840d32305ba19211086467c04b0bb2b8d7b55f9abd63cf10acbf2e6ace549c514aae512fed56f07e59853", 0x5e}], 0x1, &(0x7f00000007c0)=[{0xc8, 0x0, 0x7, "a56e991dce9037ca39755f33eb6a5d8158d2e0b7aab360d1a48edb56d171de62016f31151931fb50ac95fdd855e235cb8c556063a7f7e9ad4945b7228dbefd21485845920aeca2863fd54f287462c42df9dd05aedbaf28c58caa62a88d88e470fef69f2dfb0840d98ed58db4cda79f93fd0b239f4ba618723190d608c1f9abef02c017658ab5700865c72e6e4a9fc138d7279d3cc173acf8dc2ee35c6d5855f5d208965947f030988518c9dbf316e813522279a3c72ff2d4"}, {0xf0, 0x112, 0x4, "6eb7e3404b0cd1ce3f478f90dbda7309323596a446a91e052bdfb2ab3c113a8fb4f2fad7c7fcd23806f9099ab40f2d232164c87ca15d28cf5cee1c7015384c7961dad907c3b76df76e934b0b6053275580c054db7f66ce43ac3f94141a7299cf0a91d496d8b3e816b2f30788c74934ecc52b9453bcd3aa9d9077218ddaf3c18a6f20546bf377ce7439d6d2d7bba7150ce0898d0306b59a0935048e2a97a83c8bfd0bf0ffd626b9c80a7d42a056f39dc8e00ae215a64ebec8737780e9c28ee030fbf5485408d31b5453e150db1391ad3fc4329382d8b68c89f2b7a8b6a5df"}, {0xc8, 0x117, 0x8, "2096940214e87031646aed40dff52fd3706750655cd2b715c85cc5ce5b146200c047a36569d13e1ad624caef848caa5fe4017f6d4d3134fe0b5794df279bf2655c60d528be022e9a7ee2bb588cf205031388634abdccbfaa2985250ee47c5cde6b450ed16dbe2700fe90829758a212898ce237113307677be0a9fe4c5d993ed78480639acf3493aa55500dd94693df759207edb35e043a3fb8b81241390599be47758a1f624afba723c3258c7f073237885d244c8f"}, {0x10, 0x118, 0x7}], 0x290}, 0x400d1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r3, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x0, r3}, 0x18) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000bc0)=@o_path={&(0x7f0000000b80)='./file0\x00', 0x0, 0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x24, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7b}}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000d40)='GPL\x00', 0x2, 0x9f, &(0x7f0000000d80)=""/159, 0x41000, 0x1, '\x00', 0x0, @fallback=0xa, r0, 0x8, &(0x7f0000000e40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0xa, 0x15, 0x70000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000ec0)=[r3, r1, r1, r1, r1], &(0x7f0000000f00)=[{0x2, 0x2, 0x0, 0xc}, {0x3, 0x2, 0x6, 0x2}, {0x3, 0x4, 0x4, 0x8}, {0x5, 0x5, 0x10, 0xa}, {0x5, 0x4, 0xf}], 0x10, 0x2}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x24, &(0x7f0000000c00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7b}}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}]}, &(0x7f0000000d40)='GPL\x00', 0x2, 0x9f, &(0x7f0000000d80)=""/159, 0x41000, 0x1, '\x00', 0x0, @fallback=0xa, r0, 0x8, &(0x7f0000000e40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0xa, 0x15, 0x70000000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000ec0)=[r3, r1, r1, r1, r1], &(0x7f0000000f00)=[{0x2, 0x2, 0x0, 0xc}, {0x3, 0x2, 0x6, 0x2}, {0x3, 0x4, 0x4, 0x8}, {0x5, 0x5, 0x10, 0xa}, {0x5, 0x4, 0xf}], 0x10, 0x2}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001040)={r6, r4}, 0xc) socketpair(0x11, 0x1, 0x4, &(0x7f0000001080)) (async) socketpair(0x11, 0x1, 0x4, &(0x7f0000001080)) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xffffff5d, '\x00', r2, r0, 0x2, 0x3, 0x5}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001180)=@generic={&(0x7f00000010c0)='./file0\x00', r7}, 0x18) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001300), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380)={r7}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001380)={r7, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000013c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x40, '\x00', r2, r5, 0x1, 0x3, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_tracing={0x1a, 0x13, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001280)='GPL\x00', 0x6, 0x8, &(0x7f00000012c0)=""/8, 0x41100, 0x20, '\x00', r2, 0x19, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x5, 0x2, 0x5, 0xfff}, 0x10, 0x1c5a0, 0xffffffffffffffff, 0x4, &(0x7f0000001440)=[r5, r7, r9, r5, r10], &(0x7f0000001480)=[{0x4, 0x4, 0x0, 0x4}, {0x2, 0x3, 0x8, 0x2}, {0x3, 0x3, 0xc, 0x2}, {0x0, 0x1, 0xb, 0x4}], 0x10, 0x8}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000025c0)={&(0x7f0000001580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile={0x3, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x61, 0x2e, 0x2e, 0x0, 0x61]}}, &(0x7f00000015c0)=""/4096, 0x2b, 0x1000, 0x0, 0x6, 0x10000, @value=r8}, 0x28) bpf$LINK_DETACH(0x22, &(0x7f0000002600)=r8, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000002600)=r8, 0x4) r12 = perf_event_open$cgroup(&(0x7f0000002680)={0x5, 0x80, 0x48, 0x71, 0xe, 0x1, 0x0, 0x5, 0x48000, 0xc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000002640), 0xc}, 0x10, 0x7, 0xb9, 0x3, 0x95f, 0x1, 0xc, 0x0, 0x5, 0x0, 0x8}, r8, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r12, 0x2402, 0x3) getpid() (async) r13 = getpid() syz_open_procfs$namespace(r13, &(0x7f0000002700)='ns/cgroup\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002980)=@bpf_tracing={0x1a, 0x10, &(0x7f0000002740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x9}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000027c0)='syzkaller\x00', 0x4b6f5472, 0x80, &(0x7f0000002800)=""/128, 0x41100, 0x30, '\x00', 0x0, 0x1a, r11, 0x8, &(0x7f0000002880)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000028c0)={0x1, 0x7, 0x33cc5006, 0x5}, 0x10, 0xb30c, r6, 0x7, 0x0, &(0x7f0000002900)=[{0x5, 0x5, 0x8, 0x5}, {0x3, 0x3, 0x9}, {0x2, 0x2, 0x1, 0x5}, {0x1, 0x4, 0xb, 0x4}, {0x5, 0x2, 0xa, 0x5}, {0x0, 0x5, 0xf, 0xb}, {0x2, 0x1, 0x9, 0x6}]}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002a40)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002d00)={r6, 0x0, 0x0, 0x85, &(0x7f0000002a80), &(0x7f0000002ac0)=""/133, 0x5, 0x0, 0x9c, 0xa8, &(0x7f0000002b80)="590fa8124432cdd6d703950018575c438c81cc61c23141b123a648891a6f3f4530237747810d5064dd6b44525700ba57af4ec7ac78ed523b5a824cae949df3924d27fcf7de1e0d834a84069eb67f3bdc75cbb2724f660f2883a2328c2639fef9fa44a6f9a7f7c88894d44f08e420fe4188582ac7af038ce1cf17318161ad73cfab878b7615b86c266a000d5b147ef85b1ca5f1ab4d35aca8dcc1ef11", &(0x7f0000002c40)="7b9f4d04e325153c29a8800c9313be312fadc994352f09e8e4182dbe1c3df64fa06146eb57095c431832b02d410763fab7f62ad37491558524729a4b3055d79e6c3b501ecb7e1b4d74b36ff0c082246e6c0694504aced244d276bf97ae7cc6ccfd4b0dcb03e92dc09818344eb48302c437313f0811ec8f7b2991ee3ce9d934935bbdc4ece66324ce53b8bf87ea759855614eaf021a045e0d5a0451c7985edec1152200b365c0aaa5", 0x7, 0x0, 0x6}, 0x50) sendmsg$sock(r8, &(0x7f00000035c0)={&(0x7f0000002d80)=@nl=@unspec, 0x80, &(0x7f0000003480)=[{&(0x7f0000002e00)="1b9768264bc60263320cdeabd3759815beee0e9426dfa860e6205644e06d517afae495d95665a860e8194f5e5b5cd2c8789e7c8180b275aaf3a0f1375ac7c13d054ebc9eee81945bf7393b610ebc1a6179a2fc148a944c8d5743bb73a2eac20ec68b83e1804f72d18b32aaae8341da133d718cf764f20d2f72eae1c902068ca9745bf76a599e0981a4fd16f16f51e47958a672f8cd10d6302c20f9a56a4cc0707782b7c24f95e8bcf705", 0xaa}, {&(0x7f0000002ec0)="ced9e1b8f9e6a62326f2daf9664018cdd419ee7dd8fc550b387f8f0d51fa090faa2e", 0x22}, {&(0x7f0000002f00)="49e34a82546e0725fa40f96c685a1345d22b05bf2632beaa5a826bae96d9b866e3bd0caaaf82692cf476ade4ba518ecf33b279b46c188b011e563671527ab76bfc46918f195a64ec648ef99a21100211296917738d3dfddab3a36cdd6430980868df5e5c045edf24f6c42a0ece212f88c6ff23b33f9be4f199ec7b01c16935cdd750733e8a797cf67bc3b93983c9640684cb2bbc16ae3bca1366fb2e61d7c733b1ede28eab864f838dc75374ed2849e91968b95403fe511b66801706eab2be", 0xbf}, {&(0x7f0000002fc0)="ea66311d3fd62dc4ba03871382408a8b258b2c14267cc05aeb55a4caccba9bea737dd6ef20f1bdd521f5426b363e1e59416e5647b297d27c68eba09709ca4cb0c4fcf802b37bbe019e60f5fd3cd192bfa3e231d035d422464ec5705188d3deeb605473aa3582e18cc174c08368348f74ab489489b6fc88b13b9acb1e765c23eb71009ee1b0e0626d06388b57d9c5c60097582878392502868eacffe1baa83b69", 0xa0}, {&(0x7f0000003080)="17fa2637ba280163fd3c7d117d8fc86dd50fc9500f1db96a5ca3be5a32e222cf00740a0492f775abdc009df3221676a1bd855aa14e38524e42b7739babaad31cfdce920ff3d34ca85bbc5d0d08538bee93a09fe2e923263d65c7c66a9a1b2efff79e4253c147d843ef017a4f73227fc129577b383c80d46400b67e55151f71198357e2ef6244ad636a554f9c1c39e54e6221ca9f4016fc097fdcc235834b", 0x9e}, {&(0x7f0000003140)="329361d483f59515f30135a64ece7d9c00ca6c2e5382d94da3afc960cf79135ef02e798d920e35e7d440962d8049116aaf1479045a9b55797d4fdbb39a9d228eeff7145586548848f673b12e23f090ac33abea721835a2191622a91083ecc7309d3465fcf3f70713278dd44129c4e25cc255a8a268bedb1c631f3b1e273f4bd602033ffef4d80bf92cd670d3e64e3a5a0193613b034af06348fde484b22fd005aaeae89ae85a625153e1dcb21e381119d782357bd0387c4064243c6c6458e9ceb897640df7f2476ded", 0xc9}, {&(0x7f0000003240)="4d5ac9e3e9382ecfc2084179bcd8cac2b1acf83d1fd23ef275039ec9073a4a80d1351f554e6b48eb90a5852b9e073d7faae56c9ee6af92f2b504245369f62beed84f4defe4991378db6da753c578a1200c7febbd732d8e2731da965c8e2d3aefebfc8d3adab18864e236d902a26f2a0aab5639315c6de99af99c078cb79ba91c21f0e5d526c2737d4127ec9113", 0x8d}, {&(0x7f0000003300)="2a1cf34327f2ac88d20e32deeba9e24cf3b4bdfc04c07ab3c263498fe6067834969d6e17dfa4e1691728414351f293e666bcc801d38ab57b98bff682554fc2e1d48430eb3b640167748fa1c9280efe7bdddaa80a2aad717646e83c1df98f4b7a62bc500b3f0f3c5d7d3435b8be76a1cc35d22ef99808", 0x76}, {&(0x7f0000003380)="624feb2b48c0a7b01d5a3eeeeecb26446ee44216b0fbe138536a7e97c0217744c446563ca2e5f554ee32eee75d5e1c3738014188ab0f910a99780d3dc898b518f369ec19d390461dd746eb32375a5b511e5da8cd15ecc39fcda94239ab6a0ffc96db4ddbe3435960057fe51cca13cd1146a12f513f8b63f0f9b95bfcfbae0097031ce34eec1ef46bc0b918688797f673d63cdf9248e97244a8b9f30e9420000bac5bd58db509b1c60613ae2b7d4d0dc2f84b1dcf7d34f87ea7071e2c59a83b056da2be932ca62d", 0xc7}], 0x9, &(0x7f0000003540)=[@mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x1a}}], 0x60}, 0x200000c5) (async) sendmsg$sock(r8, &(0x7f00000035c0)={&(0x7f0000002d80)=@nl=@unspec, 0x80, &(0x7f0000003480)=[{&(0x7f0000002e00)="1b9768264bc60263320cdeabd3759815beee0e9426dfa860e6205644e06d517afae495d95665a860e8194f5e5b5cd2c8789e7c8180b275aaf3a0f1375ac7c13d054ebc9eee81945bf7393b610ebc1a6179a2fc148a944c8d5743bb73a2eac20ec68b83e1804f72d18b32aaae8341da133d718cf764f20d2f72eae1c902068ca9745bf76a599e0981a4fd16f16f51e47958a672f8cd10d6302c20f9a56a4cc0707782b7c24f95e8bcf705", 0xaa}, {&(0x7f0000002ec0)="ced9e1b8f9e6a62326f2daf9664018cdd419ee7dd8fc550b387f8f0d51fa090faa2e", 0x22}, {&(0x7f0000002f00)="49e34a82546e0725fa40f96c685a1345d22b05bf2632beaa5a826bae96d9b866e3bd0caaaf82692cf476ade4ba518ecf33b279b46c188b011e563671527ab76bfc46918f195a64ec648ef99a21100211296917738d3dfddab3a36cdd6430980868df5e5c045edf24f6c42a0ece212f88c6ff23b33f9be4f199ec7b01c16935cdd750733e8a797cf67bc3b93983c9640684cb2bbc16ae3bca1366fb2e61d7c733b1ede28eab864f838dc75374ed2849e91968b95403fe511b66801706eab2be", 0xbf}, {&(0x7f0000002fc0)="ea66311d3fd62dc4ba03871382408a8b258b2c14267cc05aeb55a4caccba9bea737dd6ef20f1bdd521f5426b363e1e59416e5647b297d27c68eba09709ca4cb0c4fcf802b37bbe019e60f5fd3cd192bfa3e231d035d422464ec5705188d3deeb605473aa3582e18cc174c08368348f74ab489489b6fc88b13b9acb1e765c23eb71009ee1b0e0626d06388b57d9c5c60097582878392502868eacffe1baa83b69", 0xa0}, {&(0x7f0000003080)="17fa2637ba280163fd3c7d117d8fc86dd50fc9500f1db96a5ca3be5a32e222cf00740a0492f775abdc009df3221676a1bd855aa14e38524e42b7739babaad31cfdce920ff3d34ca85bbc5d0d08538bee93a09fe2e923263d65c7c66a9a1b2efff79e4253c147d843ef017a4f73227fc129577b383c80d46400b67e55151f71198357e2ef6244ad636a554f9c1c39e54e6221ca9f4016fc097fdcc235834b", 0x9e}, {&(0x7f0000003140)="329361d483f59515f30135a64ece7d9c00ca6c2e5382d94da3afc960cf79135ef02e798d920e35e7d440962d8049116aaf1479045a9b55797d4fdbb39a9d228eeff7145586548848f673b12e23f090ac33abea721835a2191622a91083ecc7309d3465fcf3f70713278dd44129c4e25cc255a8a268bedb1c631f3b1e273f4bd602033ffef4d80bf92cd670d3e64e3a5a0193613b034af06348fde484b22fd005aaeae89ae85a625153e1dcb21e381119d782357bd0387c4064243c6c6458e9ceb897640df7f2476ded", 0xc9}, {&(0x7f0000003240)="4d5ac9e3e9382ecfc2084179bcd8cac2b1acf83d1fd23ef275039ec9073a4a80d1351f554e6b48eb90a5852b9e073d7faae56c9ee6af92f2b504245369f62beed84f4defe4991378db6da753c578a1200c7febbd732d8e2731da965c8e2d3aefebfc8d3adab18864e236d902a26f2a0aab5639315c6de99af99c078cb79ba91c21f0e5d526c2737d4127ec9113", 0x8d}, {&(0x7f0000003300)="2a1cf34327f2ac88d20e32deeba9e24cf3b4bdfc04c07ab3c263498fe6067834969d6e17dfa4e1691728414351f293e666bcc801d38ab57b98bff682554fc2e1d48430eb3b640167748fa1c9280efe7bdddaa80a2aad717646e83c1df98f4b7a62bc500b3f0f3c5d7d3435b8be76a1cc35d22ef99808", 0x76}, {&(0x7f0000003380)="624feb2b48c0a7b01d5a3eeeeecb26446ee44216b0fbe138536a7e97c0217744c446563ca2e5f554ee32eee75d5e1c3738014188ab0f910a99780d3dc898b518f369ec19d390461dd746eb32375a5b511e5da8cd15ecc39fcda94239ab6a0ffc96db4ddbe3435960057fe51cca13cd1146a12f513f8b63f0f9b95bfcfbae0097031ce34eec1ef46bc0b918688797f673d63cdf9248e97244a8b9f30e9420000bac5bd58db509b1c60613ae2b7d4d0dc2f84b1dcf7d34f87ea7071e2c59a83b056da2be932ca62d", 0xc7}], 0x9, &(0x7f0000003540)=[@mark={{0x14, 0x1, 0x24, 0x400}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @mark={{0x14, 0x1, 0x24, 0x1a}}], 0x60}, 0x200000c5) r14 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003600), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000003640)=r14, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r8) 1.019189367s ago: executing program 2 (id=1772): r0 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30a44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) sendmsg$unix(r1, 0x0, 0x20000000) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (rerun: 32) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000004000000080100000c00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000b93fc666d4eeed36000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000100010000696c002300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000181100"/84, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) (async, rerun: 64) close(r4) (rerun: 64) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000002280)=ANY=[], 0x31) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) (async) r10 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x24005001) (async, rerun: 64) sendmsg(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x398}, 0x40) (rerun: 64) ioctl$TUNGETVNETLE(r4, 0x40107447, &(0x7f0000000180)) 1.018090898s ago: executing program 3 (id=1773): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 956.262859ms ago: executing program 1 (id=1774): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x410, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0xffffffff}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@map=r2, 0x37, 0x1, 0x4, &(0x7f0000000940)=[0x0], 0x1, 0x0, &(0x7f0000000980)=[0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@map=r2, r5, 0x14, 0x16, r5, @void, @value=r4, @void, @void, r9}, 0x20) r10 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x14, &(0x7f0000000000)=r8, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f0000000680)=""/255, 0xff, 0x0, &(0x7f0000000780)=""/109, 0x6d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0x17, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a7}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x2}]}, &(0x7f0000000380)='GPL\x00', 0x2e3, 0x66, &(0x7f00000003c0)=""/102, 0x41000, 0x1, '\x00', r6, @fallback=0x2d, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x699, 0x8, 0x5, 0x1}, 0x10, r11, r4, 0x6, &(0x7f0000000880)=[r3, r2, r2, r1], &(0x7f00000008c0)=[{0x3, 0x1, 0x2, 0x1}, {0x3, 0x5, 0x10, 0x6}, {0x1, 0x5, 0x0, 0x4}, {0x3, 0x5, 0x10, 0x5}, {0x1, 0x5, 0x9, 0x7}, {0x1, 0x2, 0xa, 0xc}], 0x10, 0x3}, 0x94) 830.292671ms ago: executing program 0 (id=1775): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r4], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) setsockopt$sock_attach_bpf(r2, 0x6, 0x6, &(0x7f0000000200), 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = getpid() perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4000000000000000, 0x2510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x100, 0x2, 0x9e4, 0x5, 0x8000, 0x20005, 0x0, 0x0, 0x2, 0x0, 0x20000006}, r6, 0xffffffffffffffff, r0, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000300"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="5eaa000000000000711013000000000095f4699c4ade0000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r1}, 0x38) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000040)=[{&(0x7f00000005c0)="3504000041000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00400000", 0x2e}, {&(0x7f0000000600)="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"/1013, 0x401}, {&(0x7f0000000a40)="47f72fedcd1d", 0x6}], 0x3}, 0x10049014) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r1, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x5, 0x80, 0x2, 0xa, 0xac, 0x4, 0x0, 0x9, 0x90, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xffff, 0x0, @perf_bp={&(0x7f0000000080)}, 0x100200, 0x4, 0x8, 0x3, 0x5, 0x8, 0x6, 0x0, 0x3, 0x0, 0x31fb}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 825.703731ms ago: executing program 2 (id=1776): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) r1 = socket$kcm(0xf, 0x3, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x1, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], &(0x7f00000001c0)='GPL\x00', 0x6, 0x19, &(0x7f0000000200)=""/25, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x35, r2, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x8, 0x3b2, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000003c0)={r0, r4}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000440)={r0}) r5 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89ef, &(0x7f0000000000)) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000480)={r1, r3}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000a00"], 0x10b8}, 0x8000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c00000012006bab9e3fe3d86e17aa31076b876c1d0000037ea60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000000), 0xfdef) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r8}, 0x18) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="0213020902000000e4a17c4e2ca18baa", 0x10}], 0x1}, 0x0) 779.515043ms ago: executing program 3 (id=1777): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r0, 0xa, 0x92912d49314e5d3d}, 0xc) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x3, [@decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x5}, @float={0x2, 0x0, 0x0, 0x10, 0x10}, @decl_tag={0x3, 0x0, 0x0, 0x11, 0x5, 0xffffffffffffffff}]}, {0x0, [0x0]}}, &(0x7f0000000500)=""/60, 0x47, 0x3c, 0x1, 0x5, 0x10000}, 0x28) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x800}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x5, 0x75, &(0x7f0000000340)=""/117, 0x41000, 0x2, '\x00', r1, 0x18, r3, 0x8, &(0x7f0000000580)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xc, 0x7, 0x9}, 0x10, 0x25ef0, r5, 0x0, &(0x7f0000000600)=[r2, r2, r2, r2], 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @exit, @alu={0x5, 0x1, 0xc, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) 539.460718ms ago: executing program 2 (id=1778): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c7000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0xfffffffffffffffe, 0x60) write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c7000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x6, 0xd, 0xfffffffffffffffe, 0x60) (async) write$cgroup_devices(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) (async) 538.735238ms ago: executing program 3 (id=1779): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003540)="1400000037000b0fd25a806c8c7394f90924fc60", 0x14}], 0x50, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4030582a, &(0x7f0000000040)) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000400)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@generic={0x3, 0x9, 0xc, 0x7f, 0x9}]}, &(0x7f0000000280)='syzkaller\x00', 0x4, 0xfe, &(0x7f0000000700)=""/254, 0x41100, 0x77, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x9, 0x5, 0x7ff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a00)=[r3, r4], &(0x7f0000000a40)=[{0x3, 0x1, 0x8, 0x2}, {0x1, 0x2, 0x1, 0x2}], 0x10, 0x10000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x400000, 0x3, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r8}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r9, @ANYBLOB="000000000000004095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x19}, 0x94) r10 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 320.462853ms ago: executing program 2 (id=1780): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x0, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4080) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) write$cgroup_subtree(r0, &(0x7f0000000000), 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r8) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) 0s ago: executing program 0 (id=1781): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000017000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x21}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000180)=""/109, 0x6d}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/149, 0x95}, {&(0x7f0000001700)=""/163, 0xa3}, {&(0x7f00000017c0)=""/41, 0x29}, {&(0x7f0000001800)=""/147, 0x93}, {&(0x7f00000018c0)=""/107, 0x6b}, {&(0x7f0000001980)=""/13, 0xd}, {&(0x7f00000019c0)=""/227, 0xe3}], 0x9}, 0x40002142) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) kernel console output (not intermixed with test programs): : renamed from eth3 [ 90.112704][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.125599][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.153130][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.180309][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.240932][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.259528][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.283107][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.295002][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.402087][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.413121][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.434465][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.446761][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.524945][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.586336][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.612522][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.648274][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.655812][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.686338][ T1077] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.693739][ T1077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.720368][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.755665][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.762925][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.775747][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.782937][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.875505][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.947286][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.958801][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.976657][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.983945][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.012839][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.020051][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.094696][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.101710][ T5784] Bluetooth: hci3: command tx timeout [ 91.133741][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.140978][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.161618][ T5784] Bluetooth: hci1: command tx timeout [ 91.167203][ T5784] Bluetooth: hci2: command tx timeout [ 91.216530][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.223813][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.241233][ T5784] Bluetooth: hci0: command tx timeout [ 91.484656][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.642770][ T5774] veth0_vlan: entered promiscuous mode [ 91.676374][ T5774] veth1_vlan: entered promiscuous mode [ 91.756597][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.769513][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.803858][ T5774] veth0_macvtap: entered promiscuous mode [ 91.844398][ T5774] veth1_macvtap: entered promiscuous mode [ 91.935174][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.963823][ T5773] veth0_vlan: entered promiscuous mode [ 91.985991][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.012322][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.028006][ T5772] veth0_vlan: entered promiscuous mode [ 92.048644][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.059123][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.069332][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.079386][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.099488][ T5772] veth1_vlan: entered promiscuous mode [ 92.115856][ T5773] veth1_vlan: entered promiscuous mode [ 92.184035][ T5771] veth0_vlan: entered promiscuous mode [ 92.219449][ T5772] veth0_macvtap: entered promiscuous mode [ 92.265871][ T5771] veth1_vlan: entered promiscuous mode [ 92.297346][ T23] cfg80211: failed to load regulatory.db [ 92.315620][ T5772] veth1_macvtap: entered promiscuous mode [ 92.377863][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.393496][ T5773] veth0_macvtap: entered promiscuous mode [ 92.404749][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.416523][ T5773] veth1_macvtap: entered promiscuous mode [ 92.442165][ T5771] veth0_macvtap: entered promiscuous mode [ 92.479471][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.491570][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.505063][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.535906][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.547004][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.563608][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.573571][ T5771] veth1_macvtap: entered promiscuous mode [ 92.597133][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.608784][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.619050][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.629848][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.642830][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.657849][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.668655][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.679141][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.691144][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.703550][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.715184][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724808][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.734781][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.743986][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.757787][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.773143][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.784843][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.794789][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.799522][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.804743][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.842467][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.859171][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.869977][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.881204][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.897569][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.908511][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.921888][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.982799][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.010276][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.020751][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.032148][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.042370][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.053225][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.066344][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.145838][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.162035][ T5784] Bluetooth: hci3: command tx timeout [ 93.170775][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.179553][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.228679][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.243003][ T5784] Bluetooth: hci2: command tx timeout [ 93.249231][ T5784] Bluetooth: hci1: command tx timeout [ 93.302072][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.309990][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.320880][ T5784] Bluetooth: hci0: command tx timeout [ 93.331735][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.339639][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.460661][ C0] hrtimer: interrupt took 55813 ns [ 93.484089][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.528327][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.560187][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.601108][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.706053][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.749031][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.873142][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.902567][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.051343][ T5844] syzkaller0: entered promiscuous mode [ 94.056925][ T5844] syzkaller0: entered allmulticast mode [ 94.152594][ T5847] syz.2.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 94.192714][ T5847] CPU: 0 PID: 5847 Comm: syz.2.3 Not tainted syzkaller #0 [ 94.199927][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 94.210106][ T5847] Call Trace: [ 94.213577][ T5847] [ 94.216841][ T5847] dump_stack_lvl+0x18c/0x250 [ 94.221634][ T5847] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.227878][ T5847] ? show_regs_print_info+0x20/0x20 [ 94.233160][ T5847] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.239411][ T5847] warn_alloc+0x246/0x340 [ 94.243820][ T5847] ? stack_trace_save+0xaa/0x100 [ 94.248841][ T5847] ? zone_watermark_ok_safe+0x230/0x230 [ 94.254478][ T5847] ? kasan_set_track+0x5f/0x70 [ 94.259297][ T5847] ? kasan_set_track+0x4e/0x70 [ 94.264124][ T5847] ? __kasan_kmalloc+0x8f/0xa0 [ 94.268953][ T5847] ? xsk_init_queue+0xad/0x100 [ 94.273836][ T5847] ? xsk_setsockopt+0x4c9/0x750 [ 94.278752][ T5847] ? do_sock_setsockopt+0x175/0x1a0 [ 94.284017][ T5847] ? __x64_sys_setsockopt+0x182/0x200 [ 94.289467][ T5847] __vmalloc_node_range+0x129/0x1320 [ 94.294857][ T5847] ? free_vm_area+0x50/0x50 [ 94.299452][ T5847] vmalloc_user+0x74/0x80 [ 94.303858][ T5847] ? xskq_create+0xbf/0x170 [ 94.308434][ T5847] xskq_create+0xbf/0x170 [ 94.312927][ T5847] xsk_init_queue+0xad/0x100 [ 94.317678][ T5847] xsk_setsockopt+0x4c9/0x750 [ 94.322428][ T5847] ? xsk_poll+0x670/0x670 [ 94.326839][ T5847] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 94.333075][ T5847] ? xsk_poll+0x670/0x670 [ 94.337470][ T5847] ? do_sock_setsockopt+0x15e/0x1a0 [ 94.342721][ T5847] ? xsk_poll+0x670/0x670 [ 94.347455][ T5847] do_sock_setsockopt+0x175/0x1a0 [ 94.352536][ T5847] ? __fdget+0x180/0x210 [ 94.356893][ T5847] __x64_sys_setsockopt+0x182/0x200 [ 94.362149][ T5847] do_syscall_64+0x55/0xb0 [ 94.366719][ T5847] ? clear_bhb_loop+0x40/0x90 [ 94.371487][ T5847] ? clear_bhb_loop+0x40/0x90 [ 94.376218][ T5847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 94.382171][ T5847] RIP: 0033:0x7fc529d9de59 [ 94.386807][ T5847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.406458][ T5847] RSP: 002b:00007fc52ac95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 94.414924][ T5847] RAX: ffffffffffffffda RBX: 00007fc52a025fa0 RCX: 00007fc529d9de59 [ 94.422938][ T5847] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 94.430958][ T5847] RBP: 00007fc529e33e6f R08: 0000000000000004 R09: 0000000000000000 [ 94.438983][ T5847] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 94.446999][ T5847] R13: 00007fc52a026038 R14: 00007fc52a025fa0 R15: 00007ffd54123888 [ 94.455047][ T5847] [ 94.561250][ T5847] Mem-Info: [ 94.567781][ T5847] active_anon:5634 inactive_anon:0 isolated_anon:0 [ 94.567781][ T5847] active_file:756 inactive_file:39948 isolated_file:0 [ 94.567781][ T5847] unevictable:768 dirty:1504 writeback:0 [ 94.567781][ T5847] slab_reclaimable:9902 slab_unreclaimable:91662 [ 94.567781][ T5847] mapped:24026 shmem:1361 pagetables:561 [ 94.567781][ T5847] sec_pagetables:0 bounce:0 [ 94.567781][ T5847] kernel_misc_reclaimable:0 [ 94.567781][ T5847] free:1366437 free_pcp:9517 free_cma:0 [ 94.711135][ T5847] Node 0 active_anon:22836kB inactive_anon:0kB active_file:3124kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96304kB dirty:6008kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10660kB pagetables:2344kB sec_pagetables:0kB all_unreclaimable? no [ 94.801095][ T5847] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 94.871646][ T5847] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.024438][ T5847] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 95.039771][ T5847] Node 0 DMA32 free:1557916kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22596kB inactive_anon:0kB active_file:3324kB inactive_file:158768kB unevictable:1536kB writepending:5992kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:3648kB free_cma:0kB [ 95.128404][ T5847] lowmem_reserve[]: 0 0 0 0 0 [ 95.167389][ T5847] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:16kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 95.223569][ T5847] lowmem_reserve[]: 0 0 0 0 0 [ 95.229945][ T5847] Node 1 Normal free:3890356kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:8kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21340kB local_pcp:10724kB free_cma:0kB [ 95.264085][ T5784] Bluetooth: hci3: command tx timeout [ 95.270556][ T5847] lowmem_reserve[]: 0 0 0 0 0 [ 95.319871][ T5847] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 95.354491][ T51] Bluetooth: hci2: command tx timeout [ 95.360021][ T5784] Bluetooth: hci1: command tx timeout [ 95.384094][ T5847] Node 0 DMA32: 1*4kB (M) 1*8kB (U) 1*16kB (E) 2*32kB (UE) 1*64kB (M) 2*128kB (ME) 2*256kB (UE) 1*512kB (U) 2*1024kB (UM) 1*2048kB (M) 379*4096kB (M) = 1557916kB [ 95.408887][ T5847] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 95.422389][ T5784] Bluetooth: hci0: command tx timeout [ 95.435356][ T5847] Node 1 Normal: 193*4kB (UME) 58*8kB (UME) 34*16kB (UME) 52*32kB (UME) 15*64kB (UME) 7*128kB (UME) 2*256kB (ME) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3890356kB [ 95.468829][ T5847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.480103][ T5847] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.501809][ T5847] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 95.515370][ T5847] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 95.526673][ T5847] 42147 total pagecache pages [ 95.536325][ T5847] 0 pages in swap cache [ 95.540559][ T5847] Free swap = 124996kB [ 95.547169][ T5847] Total swap = 124996kB [ 95.557154][ T5847] 2097051 pages RAM [ 95.570431][ T5847] 0 pages HighMem/MovableOnly [ 95.580300][ T5847] 416953 pages reserved [ 95.586271][ T5847] 0 pages cma reserved [ 97.003435][ T5870] netlink: 'syz.2.7': attribute type 10 has an invalid length. [ 97.019920][ T5870] veth1_macvtap: left promiscuous mode [ 97.384302][ T5877] netlink: 'syz.3.9': attribute type 9 has an invalid length. [ 97.435858][ T5877] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.9'. [ 97.509521][ T5879] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.10'. [ 97.547046][ T5879] netlink: 8446 bytes leftover after parsing attributes in process `syz.0.10'. [ 97.647918][ T5885] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12'. [ 97.692822][ T5885] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 97.946220][ T5890] netlink: 'syz.1.14': attribute type 21 has an invalid length. [ 98.005625][ T5890] netlink: 'syz.1.14': attribute type 2 has an invalid length. [ 98.028778][ T5890] netlink: 'syz.1.14': attribute type 8 has an invalid length. [ 98.051833][ T5890] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14'. [ 98.160030][ T5891] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 98.614487][ T5898] syzkaller0: entered promiscuous mode [ 98.620290][ T5898] syzkaller0: entered allmulticast mode [ 99.054558][ T5912] syzkaller0: entered promiscuous mode [ 99.070864][ T5912] syzkaller0: entered allmulticast mode [ 100.492685][ T5915] netlink: 168 bytes leftover after parsing attributes in process `syz.1.22'. [ 100.537937][ T5916] netlink: 'syz.1.22': attribute type 10 has an invalid length. [ 100.547982][ T5916] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 100.557559][ T5916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.958176][ T5918] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 101.966896][ T5918] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23'. [ 101.977035][ T5918] team0: entered promiscuous mode [ 101.982505][ T5918] team_slave_0: entered promiscuous mode [ 101.988487][ T5918] team_slave_1: entered promiscuous mode [ 101.995219][ T5918] team0: entered allmulticast mode [ 102.000503][ T5918] team_slave_0: entered allmulticast mode [ 102.009565][ T5918] team_slave_1: entered allmulticast mode [ 102.018856][ T5918] bridge0: port 3(team0) entered blocking state [ 102.026060][ T5918] bridge0: port 3(team0) entered disabled state [ 102.036891][ T5918] bridge0: port 3(team0) entered blocking state [ 102.043605][ T5918] bridge0: port 3(team0) entered forwarding state [ 105.466991][ T5961] netlink: 197808 bytes leftover after parsing attributes in process `syz.0.36'. [ 106.898883][ T5965] syzkaller0: entered promiscuous mode [ 106.921635][ T5965] syzkaller0: entered allmulticast mode [ 107.058631][ T5973] syzkaller0: entered promiscuous mode [ 107.071600][ T5973] syzkaller0: entered allmulticast mode [ 107.275159][ T5980] netlink: 'syz.2.42': attribute type 21 has an invalid length. [ 107.287929][ T5980] netlink: 100 bytes leftover after parsing attributes in process `syz.2.42'. [ 107.619842][ T5986] netlink: 16358 bytes leftover after parsing attributes in process `syz.0.46'. [ 110.240202][ T5992] team0: Port device team_slave_0 removed [ 110.687937][ T6003] warning: `syz.0.52' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.745882][ T6003] tap0: tun_chr_ioctl cmd 1074025677 [ 110.764322][ T6003] tap0: linktype set to 780 [ 110.994524][ T6013] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 (while UP) [ 111.799169][ T6029] syzkaller0: entered promiscuous mode [ 111.805146][ T6029] syzkaller0: entered allmulticast mode [ 114.153501][ T6046] syz.1.73: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 114.174340][ T6046] CPU: 0 PID: 6046 Comm: syz.1.73 Not tainted syzkaller #0 [ 114.181638][ T6046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.191759][ T6046] Call Trace: [ 114.195082][ T6046] [ 114.198044][ T6046] dump_stack_lvl+0x18c/0x250 [ 114.202782][ T6046] ? show_regs_print_info+0x20/0x20 [ 114.208032][ T6046] ? load_image+0x420/0x420 [ 114.212587][ T6046] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 114.219045][ T6046] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 114.225595][ T6046] warn_alloc+0x246/0x340 [ 114.229974][ T6046] ? stack_trace_save+0xaa/0x100 [ 114.234960][ T6046] ? zone_watermark_ok_safe+0x230/0x230 [ 114.240557][ T6046] ? kasan_set_track+0x5f/0x70 [ 114.245357][ T6046] ? kasan_set_track+0x4e/0x70 [ 114.250155][ T6046] ? __kasan_kmalloc+0x8f/0xa0 [ 114.254957][ T6046] ? xsk_init_queue+0xad/0x100 [ 114.259763][ T6046] ? xsk_setsockopt+0x4c9/0x750 [ 114.264646][ T6046] ? do_sock_setsockopt+0x175/0x1a0 [ 114.269888][ T6046] ? __x64_sys_setsockopt+0x182/0x200 [ 114.275305][ T6046] __vmalloc_node_range+0x129/0x1320 [ 114.280706][ T6046] ? free_vm_area+0x50/0x50 [ 114.285266][ T6046] vmalloc_user+0x74/0x80 [ 114.289641][ T6046] ? xskq_create+0xbf/0x170 [ 114.294196][ T6046] xskq_create+0xbf/0x170 [ 114.298586][ T6046] xsk_init_queue+0xad/0x100 [ 114.303219][ T6046] xsk_setsockopt+0x4c9/0x750 [ 114.307941][ T6046] ? xsk_poll+0x670/0x670 [ 114.312319][ T6046] ? __fget_files+0x28/0x460 [ 114.316952][ T6046] ? aa_sock_opt_perm+0x74/0x100 [ 114.321961][ T6046] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 114.327543][ T6046] ? security_socket_setsockopt+0x7e/0xa0 [ 114.333302][ T6046] ? xsk_poll+0x670/0x670 [ 114.337674][ T6046] do_sock_setsockopt+0x175/0x1a0 [ 114.342740][ T6046] ? __fdget+0x180/0x210 [ 114.347022][ T6046] __x64_sys_setsockopt+0x182/0x200 [ 114.352263][ T6046] do_syscall_64+0x55/0xb0 [ 114.356723][ T6046] ? clear_bhb_loop+0x40/0x90 [ 114.361431][ T6046] ? clear_bhb_loop+0x40/0x90 [ 114.366136][ T6046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.372070][ T6046] RIP: 0033:0x7f357279de59 [ 114.376520][ T6046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.396174][ T6046] RSP: 002b:00007f35736f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 114.404644][ T6046] RAX: ffffffffffffffda RBX: 00007f3572a25fa0 RCX: 00007f357279de59 [ 114.412653][ T6046] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 114.420671][ T6046] RBP: 00007f3572833e6f R08: 0000000000000004 R09: 0000000000000000 [ 114.428692][ T6046] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 114.436708][ T6046] R13: 00007f3572a26038 R14: 00007f3572a25fa0 R15: 00007ffccf87bf68 [ 114.444734][ T6046] [ 114.519683][ T6046] Mem-Info: [ 114.524806][ T6055] netlink: 'syz.2.68': attribute type 4 has an invalid length. [ 114.524837][ T6055] netlink: 152 bytes leftover after parsing attributes in process `syz.2.68'. [ 114.539548][ T6055] .`: renamed from bond0 (while UP) [ 114.607135][ T6046] active_anon:5616 inactive_anon:0 isolated_anon:0 [ 114.607135][ T6046] active_file:1117 inactive_file:39955 isolated_file:0 [ 114.607135][ T6046] unevictable:768 dirty:140 writeback:0 [ 114.607135][ T6046] slab_reclaimable:9651 slab_unreclaimable:91277 [ 114.607135][ T6046] mapped:24101 shmem:1361 pagetables:572 [ 114.607135][ T6046] sec_pagetables:0 bounce:0 [ 114.607135][ T6046] kernel_misc_reclaimable:0 [ 114.607135][ T6046] free:1367977 free_pcp:7689 free_cma:0 [ 114.701272][ T6046] Node 0 active_anon:22464kB inactive_anon:0kB active_file:4468kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96404kB dirty:560kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10588kB pagetables:2288kB sec_pagetables:0kB all_unreclaimable? no [ 114.772319][ T6060] netlink: 'syz.3.64': attribute type 3 has an invalid length. [ 114.793107][ T6060] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.64'. [ 114.868242][ T6046] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 115.019222][ T6046] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.089428][ T6046] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 115.101881][ T6046] Node 0 DMA32 free:1564668kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22624kB inactive_anon:0kB active_file:4468kB inactive_file:158796kB unevictable:1536kB writepending:560kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:10060kB local_pcp:3108kB free_cma:0kB [ 115.147669][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 115.156889][ T6046] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 115.196470][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 115.208128][ T6046] Node 1 Normal free:3890556kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21224kB local_pcp:10788kB free_cma:0kB [ 115.253187][ T6046] lowmem_reserve[]: 0 0 0 0 0 [ 115.260060][ T6046] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.290809][ T6046] Node 0 DMA32: 1073*4kB (UE) 1107*8kB (UM) 520*16kB (UME) 317*32kB (UME) 86*64kB (UME) 22*128kB (UME) 12*256kB (UME) 6*512kB (ME) 5*1024kB (UM) 5*2048kB (UM) 367*4096kB (UM) = 1564668kB [ 115.329968][ T6046] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 115.346632][ T6046] Node 1 Normal: 256*4kB (UME) 58*8kB (UME) 34*16kB (UME) 52*32kB (UME) 15*64kB (UME) 7*128kB (UME) 2*256kB (ME) 1*512kB (E) 1*1024kB (U) 2*2048kB (UE) 947*4096kB (M) = 3890608kB [ 115.384779][ T6046] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.397861][ T6046] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.416096][ T6046] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 115.445334][ T6046] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 115.459555][ T6046] 42450 total pagecache pages [ 115.470300][ T6046] 0 pages in swap cache [ 115.479713][ T6046] Free swap = 124996kB [ 115.493483][ T6046] Total swap = 124996kB [ 115.499079][ T6046] 2097051 pages RAM [ 115.507964][ T6046] 0 pages HighMem/MovableOnly [ 115.517122][ T6046] 416953 pages reserved [ 115.532033][ T6046] 0 pages cma reserved [ 115.982752][ T6066] Zero length message leads to an empty skb [ 116.446211][ T6067] Ÿë: port 1(veth0_to_team) entered blocking state [ 116.466314][ T6067] Ÿë: port 1(veth0_to_team) entered disabled state [ 116.478199][ T6067] veth0_to_team: entered allmulticast mode [ 116.487813][ T6067] veth0_to_team: entered promiscuous mode [ 116.776151][ T6073] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 116.794105][ T6073] netlink: 156 bytes leftover after parsing attributes in process `syz.1.74'. [ 117.398014][ T6095] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.431604][ T6090] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 117.492354][ T6090] veth1_macvtap: left promiscuous mode [ 117.727791][ T6099] netlink: 'syz.1.84': attribute type 21 has an invalid length. [ 117.762082][ T6099] netlink: 164 bytes leftover after parsing attributes in process `syz.1.84'. [ 117.922247][ T6103] netlink: 188 bytes leftover after parsing attributes in process `syz.2.85'. [ 117.947920][ T6104] netlink: 188 bytes leftover after parsing attributes in process `syz.2.85'. [ 117.987300][ T6106] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 118.647408][ T6114] mac80211_hwsim hwsim6 ..ãc¤±: renamed from wlan1 (while UP) [ 119.933578][ T6141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.97'. [ 119.958276][ T6141] netlink: 60 bytes leftover after parsing attributes in process `syz.1.97'. [ 123.129732][ T6164] mac80211_hwsim hwsim7 ..ãc¤±: renamed from wlan1 (while UP) [ 123.340793][ T6169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.350172][ T6169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.383745][ T6169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.414570][ T6169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.876972][ T6171] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.105'. [ 124.994635][ T6197] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.364515][ T6200] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.113'. [ 126.444167][ T6223] netlink: 'syz.2.120': attribute type 21 has an invalid length. [ 126.826916][ T6235] netlink: 164 bytes leftover after parsing attributes in process `syz.2.124'. [ 126.951190][ T6237] sit0: entered allmulticast mode [ 127.025611][ T6239] netlink: 'syz.1.125': attribute type 21 has an invalid length. [ 127.036598][ T6239] netlink: 156 bytes leftover after parsing attributes in process `syz.1.125'. [ 127.050905][ T6240] sit0: entered promiscuous mode [ 127.874597][ T6256] delete_channel: no stack [ 130.379514][ T6291] netlink: 'syz.3.143': attribute type 58 has an invalid length. [ 130.401026][ T6291] netlink: 144 bytes leftover after parsing attributes in process `syz.3.143'. [ 131.731834][ T6306] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.148'. [ 132.033667][ T6315] netlink: 'syz.2.150': attribute type 16 has an invalid length. [ 132.095244][ T6315] netlink: 164 bytes leftover after parsing attributes in process `syz.2.150'. [ 132.142402][ T6316] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.150'. [ 132.184117][ T6316] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 132.497933][ T5784] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 133.246146][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.260817][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.350944][ T6380] netlink: 'syz.2.173': attribute type 6 has an invalid length. [ 136.359203][ T6380] netlink: 168 bytes leftover after parsing attributes in process `syz.2.173'. [ 136.833437][ T6384] netlink: 'syz.0.175': attribute type 21 has an invalid length. [ 140.509577][ T6403] syzkaller0: entered promiscuous mode [ 140.570760][ T6403] syzkaller0: entered allmulticast mode [ 141.823659][ T6396] netlink: 'syz.0.178': attribute type 21 has an invalid length. [ 141.851698][ T6396] netlink: 'syz.0.178': attribute type 6 has an invalid length. [ 141.924651][ T6396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.178'. [ 143.414235][ T6429] delete_channel: no stack [ 144.536649][ T6431] netlink: 'syz.1.187': attribute type 21 has an invalid length. [ 144.544942][ T6431] netlink: 'syz.1.187': attribute type 6 has an invalid length. [ 144.557772][ T6432] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 144.580899][ T6432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.186'. [ 144.610891][ T6432] team0: entered promiscuous mode [ 144.616024][ T6432] team_slave_0: entered promiscuous mode [ 144.654800][ T6432] team_slave_1: entered promiscuous mode [ 144.663192][ T6432] team0: entered allmulticast mode [ 144.676183][ T6432] team_slave_0: entered allmulticast mode [ 144.682592][ T6432] team_slave_1: entered allmulticast mode [ 144.689296][ T6432] bridge0: port 3(team0) entered blocking state [ 144.697758][ T6432] bridge0: port 3(team0) entered disabled state [ 144.720547][ T6432] bridge0: port 3(team0) entered blocking state [ 144.727157][ T6432] bridge0: port 3(team0) entered forwarding state [ 146.307869][ T6456] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.194'. [ 146.790960][ T6468] netlink: 128 bytes leftover after parsing attributes in process `syz.0.198'. [ 146.843506][ T6468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.846167][ T6483] netlink: 'syz.0.200': attribute type 33 has an invalid length. [ 147.868633][ T6483] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.200'. [ 148.053323][ T6494] netlink: 'syz.2.203': attribute type 9 has an invalid length. [ 148.065616][ T6494] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.203'. [ 148.532873][ T6511] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.207'. [ 149.569125][ T6519] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.210'. [ 149.664105][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.040476][ T6536] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.214'. [ 150.785059][ T6559] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.227'. [ 150.833559][ T6559] bridge_slave_1: default FDB implementation only supports local addresses [ 150.968708][ T6561] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.219'. [ 151.068750][ T6561] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 151.895597][ T6565] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.221'. [ 152.163412][ T6568] netlink: 'syz.2.222': attribute type 10 has an invalid length. [ 152.176268][ T6568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.222'. [ 152.219416][ T6568] ipvlan1: entered promiscuous mode [ 152.231474][ T6568] ipvlan1: entered allmulticast mode [ 152.241501][ T6568] veth0_vlan: entered allmulticast mode [ 152.295004][ T6568] bridge0: port 4(ipvlan1) entered blocking state [ 152.304244][ T6568] bridge0: port 4(ipvlan1) entered disabled state [ 152.331878][ T6568] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 152.382665][ T6568] syz.2.222 (6568) used greatest stack depth: 18536 bytes left [ 152.753691][ T6586] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.226'. [ 152.920002][ T6587] netlink: 'syz.3.229': attribute type 9 has an invalid length. [ 152.928659][ T6587] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.229'. [ 153.532625][ T6596] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 153.540451][ T6596] netlink: 40 bytes leftover after parsing attributes in process `syz.1.231'. [ 153.576264][ T6596] batman_adv: batadv0: Adding interface: vlan1 [ 153.590022][ T6596] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.647579][ T6596] batman_adv: batadv0: Interface activated: vlan1 [ 154.141305][ T6608] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.235'. [ 154.209257][ T6619] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.234'. [ 154.278058][ T6619] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 155.443091][ T6641] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.242'. [ 155.460727][ T6641] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 156.165545][ T6662] netlink: 'syz.1.248': attribute type 46 has an invalid length. [ 156.178090][ T6662] netlink: 2 bytes leftover after parsing attributes in process `syz.1.248'. [ 156.267537][ T6662] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.248'. [ 156.281090][ T6662] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.248'. [ 156.308469][ T6663] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.247'. [ 158.017177][ T6692] netlink: 15894 bytes leftover after parsing attributes in process `syz.0.254'. [ 158.499691][ T6705] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.257'. [ 158.747739][ T6716] netlink: 'syz.2.259': attribute type 46 has an invalid length. [ 158.790741][ T6716] netlink: 2 bytes leftover after parsing attributes in process `syz.2.259'. [ 158.966593][ T6716] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.259'. [ 158.999726][ T6716] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.259'. [ 162.953401][ T6757] netlink: 'syz.0.272': attribute type 46 has an invalid length. [ 162.993127][ T6757] netlink: 2 bytes leftover after parsing attributes in process `syz.0.272'. [ 163.069376][ T6757] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.272'. [ 163.079015][ T6757] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.272'. [ 163.164012][ T6762] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.274'. [ 163.472156][ T6767] €Â0: renamed from batadv_slave_1 (while UP) [ 163.629482][ T6770] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.276'. [ 163.787752][ T6771] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.275'. [ 163.899688][ T5784] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 164.351968][ T6785] netlink: 132 bytes leftover after parsing attributes in process `syz.1.280'. [ 164.803389][ T6793] netlink: 'syz.3.284': attribute type 46 has an invalid length. [ 164.829192][ T6793] netlink: 2 bytes leftover after parsing attributes in process `syz.3.284'. [ 164.968502][ T6793] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.284'. [ 164.996332][ T6793] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.284'. [ 165.039616][ T6803] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.286'. [ 165.367745][ T6806] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 165.976150][ T6820] netlink: 'syz.3.294': attribute type 33 has an invalid length. [ 166.021454][ T6817] netlink: 'syz.1.293': attribute type 1 has an invalid length. [ 167.256743][ T6853] netlink: 'syz.2.303': attribute type 10 has an invalid length. [ 167.273491][ T6853] bridge0: port 4(ipvlan1) entered blocking state [ 167.281979][ T6853] bridge0: port 4(ipvlan1) entered disabled state [ 167.306814][ T6853] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 168.029084][ T6878] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 168.679376][ T6895] __nla_validate_parse: 6 callbacks suppressed [ 168.679397][ T6895] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.317'. [ 168.729515][ T6896] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.317'. [ 168.811420][ T6895] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 171.634079][ T6905] netlink: 'syz.1.321': attribute type 11 has an invalid length. [ 171.690278][ T6905] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.321'. [ 171.922418][ T6918] netlink: 'syz.0.326': attribute type 9 has an invalid length. [ 171.970898][ T6918] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.326'. [ 172.336083][ T6929] netlink: 'syz.0.329': attribute type 21 has an invalid length. [ 173.918728][ T6938] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.333'. [ 174.185983][ T6950] netlink: 'syz.3.336': attribute type 3 has an invalid length. [ 174.199494][ T6950] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.336'. [ 174.459798][ T6957] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.338'. [ 174.730361][ T6964] sit0: left promiscuous mode [ 175.451962][ T6966] netlink: 180 bytes leftover after parsing attributes in process `syz.1.341'. [ 175.514173][ T6968] vlan0: entered allmulticast mode [ 175.519430][ T6968] veth0_vlan: entered allmulticast mode [ 175.626073][ T6988] netlink: 'syz.0.343': attribute type 6 has an invalid length. [ 175.654337][ T6988] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.343'. [ 175.849551][ T6995] netlink: 'syz.1.344': attribute type 1 has an invalid length. [ 175.878636][ T6995] netlink: 'syz.1.344': attribute type 4 has an invalid length. [ 175.896302][ T6995] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.344'. [ 175.911067][ T7002] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.346'. [ 176.104648][ T7005] netlink: 'syz.0.347': attribute type 2 has an invalid length. [ 176.131508][ T7005] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.347'. [ 176.263291][ T7009] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 176.755277][ T7027] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.354'. [ 176.864918][ T7027] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.354'. [ 177.932735][ T7042] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 177.953780][ T7042] CPU: 0 PID: 7042 Comm: syz.1.360 Not tainted syzkaller #0 [ 177.961178][ T7042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.971291][ T7042] Call Trace: [ 177.974621][ T7042] [ 177.977599][ T7042] dump_stack_lvl+0x18c/0x250 [ 177.982351][ T7042] ? show_regs_print_info+0x20/0x20 [ 177.987618][ T7042] ? load_image+0x420/0x420 [ 177.992198][ T7042] sysfs_warn_dup+0x8e/0xa0 [ 177.996754][ T7042] sysfs_do_create_link_sd+0xc0/0x110 [ 178.002188][ T7042] device_add_class_symlinks+0x1cf/0x240 [ 178.007896][ T7042] device_add+0x4f9/0xc40 [ 178.012301][ T7042] wiphy_register+0x1d99/0x2ac0 [ 178.017235][ T7042] ? cfg80211_event_work+0x40/0x40 [ 178.022417][ T7042] ? minstrel_ht_alloc+0x88a/0x990 [ 178.027619][ T7042] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 178.033763][ T7042] ieee80211_register_hw+0x2dd8/0x3b30 [ 178.039302][ T7042] ? ieee80211_register_hw+0xef1/0x3b30 [ 178.044923][ T7042] ? ieee80211_tasklet_handler+0x20/0x20 [ 178.050616][ T7042] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 178.056573][ T7042] ? __debug_object_init+0xec/0x450 [ 178.061839][ T7042] ? __asan_memset+0x22/0x40 [ 178.066493][ T7042] ? __hrtimer_init+0x189/0x270 [ 178.071407][ T7042] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 178.077228][ T7042] ? mac80211_hwsim_free+0x220/0x220 [ 178.082591][ T7042] ? rcu_is_watching+0x15/0xb0 [ 178.087424][ T7042] ? kstrndup+0xbd/0x140 [ 178.091737][ T7042] hwsim_new_radio_nl+0xdad/0x1a70 [ 178.096926][ T7042] ? __nla_validate+0x50/0x50 [ 178.101684][ T7042] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 178.108096][ T7042] ? __nla_parse+0x40/0x50 [ 178.112589][ T7042] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 178.119004][ T7042] genl_family_rcv_msg_doit+0x21a/0x310 [ 178.124718][ T7042] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 178.130694][ T7042] ? bpf_lsm_capable+0x9/0x10 [ 178.135442][ T7042] ? security_capable+0x89/0xb0 [ 178.140358][ T7042] genl_rcv_msg+0x611/0x7a0 [ 178.144936][ T7042] ? genl_bind+0x360/0x360 [ 178.149422][ T7042] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 178.155843][ T7042] netlink_rcv_skb+0x235/0x4c0 [ 178.160674][ T7042] ? genl_bind+0x360/0x360 [ 178.165189][ T7042] ? netlink_ack+0x1160/0x1160 [ 178.170037][ T7042] ? __lock_acquire+0x7d80/0x7d80 [ 178.175152][ T7042] ? down_read+0x1ac/0x2e0 [ 178.179628][ T7042] genl_rcv+0x28/0x40 [ 178.183674][ T7042] netlink_unicast+0x7b1/0x930 [ 178.188524][ T7042] netlink_sendmsg+0x8d0/0xbf0 [ 178.193374][ T7042] ? netlink_getsockopt+0x590/0x590 [ 178.198648][ T7042] ? apparmor_socket_sendmsg+0x8e/0x330 [ 178.204260][ T7042] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.209608][ T7042] ? security_socket_sendmsg+0x80/0xa0 [ 178.215137][ T7042] ? netlink_getsockopt+0x590/0x590 [ 178.220410][ T7042] ____sys_sendmsg+0x61b/0x980 [ 178.225249][ T7042] ? __asan_memset+0x22/0x40 [ 178.229904][ T7042] ? __sys_sendmsg_sock+0x30/0x30 [ 178.234995][ T7042] ? __import_iovec+0x5f2/0x850 [ 178.239920][ T7042] ? import_iovec+0x73/0xa0 [ 178.244499][ T7042] ___sys_sendmsg+0x2a6/0x360 [ 178.249253][ T7042] ? __sys_sendmsg+0x2b0/0x2b0 [ 178.254155][ T7042] __se_sys_sendmsg+0x1d0/0x2c0 [ 178.259076][ T7042] ? __x64_sys_sendmsg+0x80/0x80 [ 178.264122][ T7042] ? lockdep_hardirqs_on+0x98/0x150 [ 178.269388][ T7042] do_syscall_64+0x55/0xb0 [ 178.273906][ T7042] ? clear_bhb_loop+0x40/0x90 [ 178.278633][ T7042] ? clear_bhb_loop+0x40/0x90 [ 178.283371][ T7042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.289333][ T7042] RIP: 0033:0x7f357279de59 [ 178.293821][ T7042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.313497][ T7042] RSP: 002b:00007f35736f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.322167][ T7042] RAX: ffffffffffffffda RBX: 00007f3572a25fa0 RCX: 00007f357279de59 [ 178.330194][ T7042] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 178.338225][ T7042] RBP: 00007f3572833e6f R08: 0000000000000000 R09: 0000000000000000 [ 178.346249][ T7042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.354287][ T7042] R13: 00007f3572a26038 R14: 00007f3572a25fa0 R15: 00007ffccf87bf68 [ 178.362346][ T7042] [ 178.896906][ T7054] netlink: 'syz.1.363': attribute type 10 has an invalid length. [ 179.641100][ T7053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.953431][ T7054] team0: Port device ..ãc¤± added [ 181.960319][ T7054] syz.1.363 (7054) used greatest stack depth: 17192 bytes left [ 182.576806][ T7088] netlink: 'syz.0.370': attribute type 1 has an invalid length. [ 182.609713][ T7088] __nla_validate_parse: 2 callbacks suppressed [ 182.609751][ T7088] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.370'. [ 184.773951][ T7133] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.385'. [ 184.786782][ T7137] netlink: 'syz.3.386': attribute type 39 has an invalid length. [ 184.925214][ T7133] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.385'. [ 185.010802][ T7139] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.385'. [ 185.455379][ T7161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.739417][ T7172] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.395'. [ 185.754907][ T7172] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 185.770529][ T7172] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 185.862446][ T7172] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.395'. [ 186.116152][ T7177] netlink: 14 bytes leftover after parsing attributes in process `syz.1.397'. [ 186.217082][ T7180] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 186.479279][ T7177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.546137][ T7177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.606115][ T7177] bond0 (unregistering): Released all slaves [ 186.656725][ T7180] netlink: 132 bytes leftover after parsing attributes in process `syz.2.398'. [ 187.023295][ T7198] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.403'. [ 187.073757][ T7198] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.403'. [ 188.615846][ T7213] netlink: 'syz.1.403': attribute type 5 has an invalid length. [ 188.748358][ T7213] netlink: 'syz.1.403': attribute type 1 has an invalid length. [ 188.759729][ T7213] __nla_validate_parse: 2 callbacks suppressed [ 188.759745][ T7213] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.403'. [ 190.453919][ T7225] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.409'. [ 190.517744][ T7227] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.409'. [ 192.723479][ T7252] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.416'. [ 193.054719][ T7264] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.419'. [ 193.081053][ T7256] netlink: 'syz.3.417': attribute type 10 has an invalid length. [ 193.103753][ T7256] hsr_slave_0: left promiscuous mode [ 193.115269][ T7267] syz.1.420 uses obsolete (PF_INET,SOCK_PACKET) [ 193.125200][ T7256] hsr_slave_1: left promiscuous mode [ 194.143932][ T7306] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.430'. [ 194.689381][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.695895][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.998247][ T7329] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 195.010800][ T7329] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 195.907612][ T7350] netlink: 'syz.1.443': attribute type 10 has an invalid length. [ 196.136165][ T7356] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.447'. [ 196.442712][ T7340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.130821][ T7343] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.443'. [ 199.162539][ T7380] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 199.168275][ T7380] pim6reg0: ignored: set checksum disabled [ 199.555189][ T7397] netlink: 'syz.2.459': attribute type 10 has an invalid length. [ 201.530258][ T5784] Bluetooth: hci2: ISO packet for unknown connection handle 4042 [ 201.816518][ T7430] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.721098][ T7480] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.477'. [ 205.835655][ T7499] netlink: 'syz.2.483': attribute type 21 has an invalid length. [ 205.865980][ T7499] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 205.914097][ T7499] netlink: 'syz.2.483': attribute type 13 has an invalid length. [ 205.932484][ T7499] netlink: 160 bytes leftover after parsing attributes in process `syz.2.483'. [ 206.122749][ T7499] erspan0: refused to change device tx_queue_len [ 206.129834][ T7499] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 206.481286][ T7504] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.486'. [ 207.233637][ T7524] netlink: 'syz.0.493': attribute type 4 has an invalid length. [ 207.250748][ T7524] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.493'. [ 207.828523][ T7536] netlink: 'syz.1.496': attribute type 2 has an invalid length. [ 207.847439][ T7536] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.496'. [ 210.182327][ T7548] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.500'. [ 210.208024][ T7529] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.494'. [ 210.230819][ T7548] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.500'. [ 210.254658][ T7547] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.500'. [ 210.360777][ T7548] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.500'. [ 210.934536][ T7571] netlink: 152 bytes leftover after parsing attributes in process `syz.1.505'. [ 210.961484][ T7571] netlink: 6 bytes leftover after parsing attributes in process `syz.1.505'. [ 211.626600][ T7580] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.509'. [ 211.877848][ T7589] netlink: 10 bytes leftover after parsing attributes in process `syz.0.511'. [ 212.088545][ T7594] netlink: 'syz.0.511': attribute type 2 has an invalid length. [ 212.120988][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 212.127619][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 212.133928][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 212.136321][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 212.197514][ T7594] netlink: 119 bytes leftover after parsing attributes in process `syz.0.511'. [ 212.493599][ T7605] netlink: 'syz.1.518': attribute type 11 has an invalid length. [ 212.669927][ T7610] netlink: 'syz.1.518': attribute type 11 has an invalid length. [ 213.966720][ T7644] netlink: 'syz.2.530': attribute type 3 has an invalid length. [ 214.060165][ T7649] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 214.320769][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 21 [ 215.039930][ T7683] -1: renamed from syzkaller0 [ 215.690028][ T7700] netlink: 'syz.0.544': attribute type 21 has an invalid length. [ 215.856033][ T7704] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 220.900500][ T7782] __nla_validate_parse: 5 callbacks suppressed [ 220.900541][ T7782] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.571'. [ 221.006918][ T7774] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.569'. [ 221.019340][ T7774] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 221.274785][ T7795] syzkaller0: entered promiscuous mode [ 221.280766][ T7795] syzkaller0: entered allmulticast mode [ 221.622574][ T7810] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.892606][ T7822] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.583'. [ 222.162577][ T7827] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.584'. [ 222.181067][ T7827] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 222.670267][ T7841] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.586'. [ 227.557115][ T7853] sit0: entered allmulticast mode [ 227.570389][ T7856] sit0: entered promiscuous mode [ 227.836581][ T7868] netlink: 763 bytes leftover after parsing attributes in process `syz.0.594'. [ 227.902717][ T7875] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.595'. [ 228.124271][ T7882] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 228.165489][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 16 [ 228.258219][ T7882] team0: Device vxcan1 is of different type [ 228.378832][ T7890] netlink: 'syz.2.599': attribute type 11 has an invalid length. [ 228.398464][ T7890] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.599'. [ 228.905065][ T7904] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.603'. [ 229.227640][ T7911] netlink: 10 bytes leftover after parsing attributes in process `syz.1.606'. [ 229.377507][ T7913] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.607'. [ 230.298000][ T7951] netlink: 'syz.3.618': attribute type 39 has an invalid length. [ 230.343485][ T7951] netlink: 'syz.3.618': attribute type 3 has an invalid length. [ 230.356675][ T7951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.618'. [ 230.566515][ T7965] netlink: 132 bytes leftover after parsing attributes in process `syz.1.622'. [ 233.984016][ T8001] netlink: 'syz.3.627': attribute type 12 has an invalid length. [ 233.992143][ T8001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.627'. [ 234.387578][ T8024] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.631'. [ 234.485674][ T8024] delete_channel: no stack [ 234.544314][ T8016] netlink: 64 bytes leftover after parsing attributes in process `syz.0.630'. [ 234.579731][ T8024] delete_channel: no stack [ 234.896677][ T8018] syzkaller0: entered promiscuous mode [ 234.914129][ T8018] syzkaller0: entered allmulticast mode [ 235.379884][ T8043] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.637'. [ 238.024821][ T8066] netlink: 'syz.2.642': attribute type 4 has an invalid length. [ 238.080357][ T8066] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.642'. [ 238.436172][ T8085] FAULT_INJECTION: forcing a failure. [ 238.436172][ T8085] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 238.480726][ T8085] CPU: 1 PID: 8085 Comm: syz.2.646 Not tainted syzkaller #0 [ 238.488134][ T8085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.498249][ T8085] Call Trace: [ 238.501576][ T8085] [ 238.504560][ T8085] dump_stack_lvl+0x18c/0x250 [ 238.509319][ T8085] ? show_regs_print_info+0x20/0x20 [ 238.514608][ T8085] ? load_image+0x420/0x420 [ 238.519184][ T8085] ? __might_fault+0xaa/0x120 [ 238.523925][ T8085] ? __lock_acquire+0x7d80/0x7d80 [ 238.529023][ T8085] should_fail_ex+0x394/0x4c0 [ 238.533769][ T8085] _copy_from_user+0x2f/0xe0 [ 238.538427][ T8085] ___sys_recvmsg+0x174/0x590 [ 238.543170][ T8085] ? __sys_recvmsg+0x2a0/0x2a0 [ 238.548042][ T8085] ? ksys_write+0x1d2/0x260 [ 238.552630][ T8085] ? __fget_files+0x3fc/0x460 [ 238.557381][ T8085] __x64_sys_recvmsg+0x21e/0x2f0 [ 238.562384][ T8085] ? ___sys_recvmsg+0x590/0x590 [ 238.567395][ T8085] ? lockdep_hardirqs_on+0x98/0x150 [ 238.572656][ T8085] do_syscall_64+0x55/0xb0 [ 238.577144][ T8085] ? clear_bhb_loop+0x40/0x90 [ 238.581930][ T8085] ? clear_bhb_loop+0x40/0x90 [ 238.586672][ T8085] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 238.592795][ T8085] RIP: 0033:0x7fc529d9de59 [ 238.597300][ T8085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.616991][ T8085] RSP: 002b:00007fc52ac95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 238.625516][ T8085] RAX: ffffffffffffffda RBX: 00007fc52a025fa0 RCX: 00007fc529d9de59 [ 238.633557][ T8085] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 238.641602][ T8085] RBP: 00007fc52ac95090 R08: 0000000000000000 R09: 0000000000000000 [ 238.649639][ T8085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.657695][ T8085] R13: 00007fc52a026038 R14: 00007fc52a025fa0 R15: 00007ffd54123888 [ 238.665754][ T8085] [ 238.845039][ T8095] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.650'. [ 238.874306][ T8095] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 239.049907][ T8099] netlink: 'syz.0.651': attribute type 3 has an invalid length. [ 239.066977][ T8099] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.651'. [ 239.413771][ T8102] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 239.615067][ T8111] netlink: 144 bytes leftover after parsing attributes in process `syz.3.656'. [ 239.626067][ T8111] team_slave_0: left promiscuous mode [ 239.652288][ T8111] team_slave_0: left allmulticast mode [ 239.870924][ T8111] team0: Port device team_slave_0 removed [ 239.892272][ T8111] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 240.481143][ T8120] syzkaller0: entered promiscuous mode [ 240.487223][ T8120] syzkaller0: entered allmulticast mode [ 240.788702][ T8131] vlan1: entered promiscuous mode [ 240.796896][ T8131] vlan1: entered allmulticast mode [ 241.006992][ T8141] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.663'. [ 243.397996][ T8171] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.669'. [ 243.548713][ T8141] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 243.558742][ T8141] netlink: 21820 bytes leftover after parsing attributes in process `syz.3.663'. [ 243.568634][ T8142] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.663'. [ 243.599842][ T8149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.647188][ T8171] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.669'. [ 243.675949][ T8175] netlink: 'syz.2.669': attribute type 10 has an invalid length. [ 243.685036][ T8175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.669'. [ 243.699917][ T8175] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 243.709559][ T8175] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.741143][ T8175] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 243.750083][ T8142] netlink: 'syz.3.663': attribute type 1 has an invalid length. [ 243.760703][ T8142] netlink: 21820 bytes leftover after parsing attributes in process `syz.3.663'. [ 243.770912][ T8173] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.669'. [ 244.144135][ T8192] netlink: 'syz.2.673': attribute type 21 has an invalid length. [ 244.164380][ T8192] __nla_validate_parse: 2 callbacks suppressed [ 244.164399][ T8192] netlink: 164 bytes leftover after parsing attributes in process `syz.2.673'. [ 244.182406][ T8196] netlink: 'syz.1.674': attribute type 9 has an invalid length. [ 244.200366][ T8196] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.674'. [ 244.250097][ T8198] netlink: 'syz.0.676': attribute type 3 has an invalid length. [ 244.257715][ T8200] netlink: 'syz.1.674': attribute type 9 has an invalid length. [ 244.257855][ T8200] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.674'. [ 244.314306][ T8198] netlink: 132 bytes leftover after parsing attributes in process `syz.0.676'. [ 245.222477][ T8223] netlink: 'syz.3.683': attribute type 1 has an invalid length. [ 245.265911][ T8223] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.683'. [ 245.542805][ T8220] syzkaller0: entered promiscuous mode [ 245.548789][ T8220] syzkaller0: entered allmulticast mode [ 245.559432][ T8232] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.685'. [ 245.571236][ T8233] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.685'. [ 245.581344][ T8236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.687'. [ 245.600646][ T8240] netlink: 'syz.3.687': attribute type 10 has an invalid length. [ 245.613935][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.687'. [ 245.645110][ T8240] ipvlan1: entered promiscuous mode [ 245.650416][ T8240] ipvlan1: entered allmulticast mode [ 245.674024][ T8240] bridge0: port 4(ipvlan1) entered blocking state [ 245.703675][ T8240] bridge0: port 4(ipvlan1) entered disabled state [ 245.724526][ T8240] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 247.015613][ T8270] netlink: 'syz.1.692': attribute type 3 has an invalid length. [ 247.047723][ T8270] netlink: 'syz.1.692': attribute type 8 has an invalid length. [ 247.078207][ T8270] netlink: 'syz.1.692': attribute type 6 has an invalid length. [ 247.098500][ T8270] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.692'. [ 249.317593][ T8279] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 249.326631][ T8279] IPv6: NLM_F_CREATE should be set when creating new route [ 249.335026][ T8279] IPv6: NLM_F_CREATE should be set when creating new route [ 249.343904][ T8279] IPv6: NLM_F_CREATE should be set when creating new route [ 249.420703][ T8278] netlink: 'syz.2.695': attribute type 21 has an invalid length. [ 249.471537][ T8278] netlink: 'syz.2.695': attribute type 7 has an invalid length. [ 249.621406][ T8278] netlink: 'syz.2.695': attribute type 2 has an invalid length. [ 249.635310][ T8278] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.695'. [ 249.839249][ T8288] netlink: 164 bytes leftover after parsing attributes in process `syz.3.698'. [ 250.042970][ T8303] netlink: 'syz.1.702': attribute type 1 has an invalid length. [ 250.404184][ T8309] syzkaller0: entered promiscuous mode [ 250.409819][ T8309] syzkaller0: entered allmulticast mode [ 250.702741][ T8325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.160086][ T8335] netlink: 'syz.1.709': attribute type 8 has an invalid length. [ 251.169792][ T8335] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.709'. [ 251.277026][ T8338] netlink: 'syz.1.710': attribute type 46 has an invalid length. [ 252.936165][ T8338] netlink: 'syz.1.710': attribute type 46 has an invalid length. [ 253.273950][ T8354] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.715'. [ 253.289038][ T8354] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.715'. [ 253.522548][ T8367] C: renamed from team_slave_0 (while UP) [ 253.551836][ T8367] netlink: 'syz.2.717': attribute type 3 has an invalid length. [ 253.590861][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.717'. [ 253.599751][ T8367] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 253.907997][ T8375] veth0_to_team: left allmulticast mode [ 253.923482][ T8375] veth0_to_team: left promiscuous mode [ 253.953580][ T8375] Ÿë: port 1(veth0_to_team) entered disabled state [ 254.699851][ T8389] netlink: 'syz.2.724': attribute type 25 has an invalid length. [ 254.708111][ T8389] netlink: 'syz.2.724': attribute type 6 has an invalid length. [ 255.043310][ T8406] netlink: 156 bytes leftover after parsing attributes in process `syz.3.727'. [ 256.133479][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.140039][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.672178][ T8435] netlink: 'syz.0.734': attribute type 21 has an invalid length. [ 257.772017][ T8443] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.735'. [ 258.078332][ T8450] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.738'. [ 258.512213][ T8466] netlink: 'syz.1.742': attribute type 9 has an invalid length. [ 258.576080][ T8466] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.742'. [ 258.814796][ T8475] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.745'. [ 258.849072][ T8475] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.745'. [ 258.924008][ T8475] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.745'. [ 259.221209][ T8483] netlink: 'syz.0.747': attribute type 4 has an invalid length. [ 259.229435][ T8483] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.747'. [ 259.604045][ T8492] delete_channel: no stack [ 260.580034][ T8537] netlink: 12591 bytes leftover after parsing attributes in process `syz.0.762'. [ 261.116387][ T8540] pimreg0: mtu greater than device maximum [ 261.290516][ T8546] netlink: 'syz.1.766': attribute type 28 has an invalid length. [ 261.300496][ T8546] netlink: 2 bytes leftover after parsing attributes in process `syz.1.766'. [ 262.385771][ T8567] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.770'. [ 262.975248][ T8584] netlink: 'syz.0.777': attribute type 29 has an invalid length. [ 263.114629][ T8588] netlink: 'syz.3.779': attribute type 3 has an invalid length. [ 263.133028][ T8588] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.779'. [ 264.268473][ T8612] netlink: 'syz.1.784': attribute type 25 has an invalid length. [ 264.287932][ T8612] netlink: 'syz.1.784': attribute type 6 has an invalid length. [ 265.321941][ T8641] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.791'. [ 265.591813][ T8649] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 265.606576][ T8649] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.794'. [ 265.617322][ T8651] can: request_module (can-proto-0) failed. [ 266.300084][ T8671] sctp: [Deprecated]: syz.0.800 (pid 8671) Use of int in maxseg socket option. [ 266.300084][ T8671] Use struct sctp_assoc_value instead [ 266.470175][ T8679] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.799'. [ 266.506012][ T8679] openvswitch: netlink: Key type 4112 is out of range max 32 [ 267.287381][ T8692] syzkaller0: entered promiscuous mode [ 267.301246][ T8692] syzkaller0: entered allmulticast mode [ 267.539800][ T8705] netlink: 'syz.2.807': attribute type 21 has an invalid length. [ 267.555110][ T8705] netlink: 156 bytes leftover after parsing attributes in process `syz.2.807'. [ 270.153821][ T8742] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.817'. [ 272.384320][ T8750] netlink: 'syz.3.819': attribute type 10 has an invalid length. [ 272.559831][ T8750] geneve1: entered promiscuous mode [ 272.572959][ T8750] geneve1: entered allmulticast mode [ 272.587239][ T8750] team0: Port device geneve1 added [ 272.941077][ T8774] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.825'. [ 273.895631][ T8792] netlink: 'syz.3.829': attribute type 6 has an invalid length. [ 274.025873][ T8792] netlink: 164 bytes leftover after parsing attributes in process `syz.3.829'. [ 274.714041][ T8816] netlink: 'syz.1.836': attribute type 2 has an invalid length. [ 274.761654][ T8816] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.836'. [ 274.969421][ T8825] netlink: 14 bytes leftover after parsing attributes in process `syz.2.838'. [ 275.009991][ T8825] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.025250][ T8828] netlink: 'syz.1.839': attribute type 11 has an invalid length. [ 275.033862][ T8828] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.839'. [ 275.052750][ T8825] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.077665][ T8825] .` (unregistering): Released all slaves [ 275.117012][ T8828] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 277.430379][ T8878] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.855'. [ 277.562500][ T8883] lo: entered allmulticast mode [ 277.626322][ T8885] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 277.641858][ T8885] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.858'. [ 277.810637][ T8892] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.859'. [ 277.945703][ T8892] syz.3.859[8892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.950150][ T8892] syz.3.859[8892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 278.475952][ T8899] netlink: 14 bytes leftover after parsing attributes in process `syz.0.869'. [ 278.879309][ T8899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.921466][ T8899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.964062][ T8899] bond0 (unregistering): Released all slaves [ 279.875974][ T8926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 279.883729][ T8926] IPv6: NLM_F_CREATE should be set when creating new route [ 279.891860][ T8926] IPv6: NLM_F_CREATE should be set when creating new route [ 279.899760][ T8926] IPv6: NLM_F_CREATE should be set when creating new route [ 280.110297][ T8931] syzkaller0: entered promiscuous mode [ 280.128642][ T8931] syzkaller0: entered allmulticast mode [ 280.162113][ T8931] syzkaller0: mtu less than device minimum [ 281.250060][ T8942] netlink: 14 bytes leftover after parsing attributes in process `syz.1.875'. [ 281.557410][ T8948] sctp: [Deprecated]: syz.2.877 (pid 8948) Use of int in max_burst socket option deprecated. [ 281.557410][ T8948] Use struct sctp_assoc_value instead [ 285.930308][ T8991] netlink: 'syz.2.890': attribute type 11 has an invalid length. [ 286.056385][ T8985] netlink: 'syz.0.891': attribute type 153 has an invalid length. [ 286.076028][ T8985] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.891'. [ 286.611543][ T9016] netlink: 'syz.1.898': attribute type 10 has an invalid length. [ 286.735462][ T9029] netlink: 183836 bytes leftover after parsing attributes in process `syz.3.900'. [ 286.949489][ T9031] netlink: 'syz.1.901': attribute type 21 has an invalid length. [ 286.961104][ T9031] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.975608][ T9031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.983292][ T9031] IPv6: NLM_F_CREATE should be set when creating new route [ 286.991074][ T9031] IPv6: NLM_F_CREATE should be set when creating new route [ 286.998679][ T9031] IPv6: NLM_F_CREATE should be set when creating new route [ 287.907214][ T9061] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.912'. [ 288.747672][ T9077] netlink: 'syz.2.917': attribute type 39 has an invalid length. [ 288.966862][ T9086] sit0: entered promiscuous mode [ 289.207278][ T9091] netlink: 'syz.2.921': attribute type 29 has an invalid length. [ 289.221294][ T9091] netlink: 'syz.2.921': attribute type 29 has an invalid length. [ 289.238292][ T9091] netlink: 'syz.2.921': attribute type 29 has an invalid length. [ 289.262048][ T9091] netlink: 'syz.2.921': attribute type 29 has an invalid length. [ 289.380339][ T9097] syzkaller0: entered promiscuous mode [ 289.387295][ T9097] syzkaller0: entered allmulticast mode [ 289.982045][ T9118] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.927'. [ 291.652807][ T9109] netlink: 'syz.2.925': attribute type 2 has an invalid length. [ 291.661212][ T9109] netlink: 16094 bytes leftover after parsing attributes in process `syz.2.925'. [ 291.678513][ T9123] syzkaller0: entered promiscuous mode [ 291.691712][ T9123] syzkaller0: entered allmulticast mode [ 292.946218][ T9155] netlink: 'syz.2.936': attribute type 8 has an invalid length. [ 292.964267][ T9155] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.936'. [ 292.989590][ T9152] netlink: 'syz.1.935': attribute type 2 has an invalid length. [ 293.026785][ T9152] netlink: 'syz.1.935': attribute type 1 has an invalid length. [ 293.052615][ T9152] netlink: 9 bytes leftover after parsing attributes in process `syz.1.935'. [ 293.133713][ T9157] netlink: 'syz.3.937': attribute type 21 has an invalid length. [ 293.159253][ T9157] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 293.171174][ T9157] netlink: 'syz.3.937': attribute type 2 has an invalid length. [ 293.178961][ T9157] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.937'. [ 293.349687][ T9160] syzkaller0: entered promiscuous mode [ 293.363475][ T9160] syzkaller0: entered allmulticast mode [ 293.371806][ T9157] netlink: 'syz.3.937': attribute type 21 has an invalid length. [ 297.118468][ T9190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.945'. [ 297.965825][ T9240] netdevsim netdevsim3: Direct firmware load for r failed with error -2 [ 298.001064][ T9240] netdevsim netdevsim3: Falling back to sysfs fallback for: r [ 298.765929][ T9246] syzkaller0: entered promiscuous mode [ 298.783210][ T9246] syzkaller0: entered allmulticast mode [ 300.862913][ T9257] netlink: 14 bytes leftover after parsing attributes in process `syz.2.965'. [ 300.933207][ T9257] C (unregistering): left promiscuous mode [ 300.939576][ T9257] C (unregistering): left allmulticast mode [ 300.956915][ T9257] team0: Port device C removed [ 301.415179][ T9270] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 301.430813][ T9270] syzkaller1: linktype set to 786 [ 302.254889][ T9294] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 302.292196][ T9294] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 302.536338][ T9300] syzkaller0: entered promiscuous mode [ 302.542313][ T9300] syzkaller0: entered allmulticast mode [ 302.548121][ T9312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.980'. [ 305.139329][ T9312] netlink: 60 bytes leftover after parsing attributes in process `syz.1.980'. [ 305.164114][ T9321] netlink: 'syz.1.980': attribute type 10 has an invalid length. [ 305.190021][ T9321] team0: Port device geneve1 added [ 305.235542][ T9337] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.986'. [ 305.257791][ T9327] netdevsim netdevsim0: Direct firmware load for r failed with error -2 [ 305.300224][ T9327] netdevsim netdevsim0: Falling back to sysfs fallback for: r [ 305.819511][ T9361] netlink: 'syz.2.991': attribute type 2 has an invalid length. [ 305.853060][ T9361] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 305.944977][ T9361] netlink: 'syz.2.991': attribute type 33 has an invalid length. [ 305.971825][ T9361] netlink: 152 bytes leftover after parsing attributes in process `syz.2.991'. [ 306.205679][ T9368] netlink: 'syz.1.994': attribute type 3 has an invalid length. [ 306.227866][ T9368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.994'. [ 306.489548][ T9373] syzkaller0: entered promiscuous mode [ 306.503880][ T9376] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.994'. [ 306.513166][ T9373] syzkaller0: entered allmulticast mode [ 306.558982][ T9376] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.994'. [ 306.875191][ T9382] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.994'. [ 306.902179][ T9376] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 306.919598][ T9376] netlink: 40 bytes leftover after parsing attributes in process `syz.1.994'. [ 306.947636][ T9376] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 306.956262][ T9376] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 307.288862][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.298247][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.307556][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.316828][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.326078][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.335345][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.344581][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.353820][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.363110][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.372341][ T9394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 307.901914][ T51] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 309.967020][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 310.256603][ T9391] netdevsim netdevsim1: Direct firmware load for r failed with error -2 [ 310.266007][ T9391] netdevsim netdevsim1: Falling back to sysfs fallback for: r [ 310.504222][ T9416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1008'. [ 310.540345][ T9416] netlink: 'syz.2.1008': attribute type 12 has an invalid length. [ 310.553244][ T9416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1008'. [ 310.590210][ T9419] netlink: 'syz.1.1009': attribute type 3 has an invalid length. [ 310.603993][ T9419] netlink: 174112 bytes leftover after parsing attributes in process `syz.1.1009'. [ 311.191060][ T9438] syzkaller0: entered promiscuous mode [ 311.196677][ T9438] syzkaller0: entered allmulticast mode [ 312.736228][ T9466] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1022'. [ 313.495666][ T9466] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1022'. [ 313.822598][ T9478] netlink: 'syz.2.1024': attribute type 20 has an invalid length. [ 313.834678][ T9475] netlink: 'syz.1.1026': attribute type 19 has an invalid length. [ 313.850705][ T9478] netlink: 'syz.2.1024': attribute type 21 has an invalid length. [ 313.858609][ T9478] netlink: 'syz.2.1024': attribute type 23 has an invalid length. [ 313.862477][ T9475] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1026'. [ 313.889381][ T9478] netlink: 'syz.2.1024': attribute type 25 has an invalid length. [ 313.900148][ T9478] netlink: 'syz.2.1024': attribute type 27 has an invalid length. [ 313.910081][ T9478] netlink: 'syz.2.1024': attribute type 28 has an invalid length. [ 313.927012][ T9478] netlink: 'syz.2.1024': attribute type 29 has an invalid length. [ 313.964111][ T9479] veth1_macvtap: left promiscuous mode [ 314.029310][ T9476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1025'. [ 314.166047][ T9486] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1028'. [ 314.495770][ T9499] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.1032'. [ 314.836346][ T9505] syzkaller0: entered promiscuous mode [ 314.851085][ T9505] syzkaller0: entered allmulticast mode [ 314.872234][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1035'. [ 315.006077][ T9513] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 317.165365][ T9533] validate_nla: 3 callbacks suppressed [ 317.165381][ T9533] netlink: 'syz.1.1042': attribute type 21 has an invalid length. [ 317.179927][ T9533] __nla_validate_parse: 3 callbacks suppressed [ 317.179942][ T9533] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1042'. [ 317.196319][ T9533] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1042'. [ 317.564217][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.571883][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.688719][ T9565] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1049'. [ 318.097052][ T9575] syzkaller0: entered promiscuous mode [ 318.105574][ T9575] syzkaller0: entered allmulticast mode [ 323.944259][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 323.953851][ T9593] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 324.010639][ T9593] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1057'. [ 324.809506][ T9633] syzkaller0: entered promiscuous mode [ 324.819154][ T9633] syzkaller0: entered allmulticast mode [ 325.509600][ T9639] netlink: 'syz.0.1069': attribute type 3 has an invalid length. [ 325.519562][ T9639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1069'. [ 325.699454][ T9647] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.1072'. [ 330.785239][ T9659] syzkaller0: entered promiscuous mode [ 330.801263][ T9659] syzkaller0: entered allmulticast mode [ 331.542788][ T9684] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1082'. [ 333.448791][ T9674] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1076'. [ 333.486571][ T9686] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1082'. [ 333.735518][ T9693] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 333.750691][ T9693] pim6reg0: ignored: set checksum disabled [ 334.098371][ T9696] syzkaller0: entered promiscuous mode [ 334.127794][ T9696] syzkaller0: entered allmulticast mode [ 337.199215][ T9732] syzkaller0: entered promiscuous mode [ 337.204941][ T9732] syzkaller0: entered allmulticast mode [ 337.214221][ T9740] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1094'. [ 339.674729][ T9763] netlink: 'syz.0.1101': attribute type 21 has an invalid length. [ 339.683700][ T9763] netlink: 'syz.0.1101': attribute type 11 has an invalid length. [ 339.696335][ T9770] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1103'. [ 339.734970][ T9770] net_ratelimit: 3319 callbacks suppressed [ 339.734988][ T9770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.039188][ T9772] syzkaller0: entered promiscuous mode [ 340.076951][ T9772] syzkaller0: entered allmulticast mode [ 340.309212][ T9779] bridge_slave_0: mtu less than device minimum [ 342.615897][ T9790] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1110'. [ 342.846023][ T9808] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1123'. [ 343.003177][ T9811] syzkaller0: entered promiscuous mode [ 343.008761][ T9811] syzkaller0: entered allmulticast mode [ 343.703758][ T9843] netlink: 'syz.2.1125': attribute type 2 has an invalid length. [ 343.711896][ T9843] netlink: 155796 bytes leftover after parsing attributes in process `syz.2.1125'. [ 345.156084][ T9860] delete_channel: no stack [ 345.793434][ T9861] netlink: 'syz.0.1130': attribute type 33 has an invalid length. [ 345.804972][ T9861] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1130'. [ 346.918718][ T9892] syzkaller0: entered promiscuous mode [ 346.937373][ T9892] syzkaller0: entered allmulticast mode [ 347.164377][ T9890] netlink: 135056 bytes leftover after parsing attributes in process `syz.2.1139'. [ 347.204847][ T9890] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 347.518040][ T9902] netlink: 192188 bytes leftover after parsing attributes in process `syz.3.1143'. [ 347.557786][ T9902] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 349.947003][ T9927] netlink: 'syz.3.1149': attribute type 1 has an invalid length. [ 349.992823][ T9927] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1149'. [ 350.329879][ T9937] netlink: 135056 bytes leftover after parsing attributes in process `syz.3.1153'. [ 350.374791][ T9937] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 350.587072][ T9944] netlink: 'syz.0.1154': attribute type 10 has an invalid length. [ 351.214083][ T9949] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1156'. [ 351.255264][ T9950] netlink: 'syz.2.1155': attribute type 3 has an invalid length. [ 351.290094][ T9950] netlink: 'syz.2.1155': attribute type 1 has an invalid length. [ 351.575930][ T9959] syzkaller0: entered promiscuous mode [ 351.586037][ T9959] syzkaller0: entered allmulticast mode [ 351.794383][ T9971] netlink: 'syz.2.1163': attribute type 19 has an invalid length. [ 354.273776][ T9985] netlink: 'syz.1.1168': attribute type 22 has an invalid length. [ 354.718781][ T9992] netlink: 'syz.3.1169': attribute type 3 has an invalid length. [ 354.826021][ T9992] netlink: 'syz.3.1169': attribute type 1 has an invalid length. [ 354.925893][ T9979] netlink: 135056 bytes leftover after parsing attributes in process `syz.0.1165'. [ 354.935725][ T9979] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 355.007614][ T9995] netlink: 'syz.1.1170': attribute type 27 has an invalid length. [ 355.015830][ T9995] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1170'. [ 355.383328][T10010] syzkaller0: entered promiscuous mode [ 355.388907][T10010] syzkaller0: entered allmulticast mode [ 355.416639][T10006] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1174'. [ 355.719474][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 815 [ 357.591337][T10024] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 357.609437][T10024] vxcan1: entered promiscuous mode [ 357.614838][T10024] vxcan1: entered allmulticast mode [ 357.620089][T10024] team0: Device vxcan1 is of different type [ 357.696871][T10020] syzkaller0: entered promiscuous mode [ 357.702861][T10020] syzkaller0: entered allmulticast mode [ 357.775713][T10035] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1181'. [ 357.812208][T10032] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1180'. [ 358.170761][T10038] netlink: 'syz.1.1182': attribute type 3 has an invalid length. [ 358.208301][T10038] netlink: 'syz.1.1182': attribute type 1 has an invalid length. [ 360.257247][T10035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1181'. [ 360.281490][T10049] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1184'. [ 360.774027][T10066] syzkaller0: entered promiscuous mode [ 360.779610][T10066] syzkaller0: entered allmulticast mode [ 361.013110][T10083] netlink: 'syz.3.1194': attribute type 20 has an invalid length. [ 361.041075][T10083] netlink: 'syz.3.1194': attribute type 21 has an invalid length. [ 361.066098][T10083] netlink: 'syz.3.1194': attribute type 23 has an invalid length. [ 361.087888][T10083] netlink: 'syz.3.1194': attribute type 25 has an invalid length. [ 361.111605][T10083] netlink: 'syz.3.1194': attribute type 27 has an invalid length. [ 361.134416][T10083] netlink: 'syz.3.1194': attribute type 28 has an invalid length. [ 361.144352][T10083] netlink: 'syz.3.1194': attribute type 29 has an invalid length. [ 362.025135][T10106] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1201'. [ 364.111509][T10093] validate_nla: 2 callbacks suppressed [ 364.111531][T10093] netlink: 'syz.3.1197': attribute type 10 has an invalid length. [ 364.184957][T10118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1203'. [ 364.940189][T10141] syzkaller0: entered promiscuous mode [ 364.945821][T10141] syzkaller0: entered allmulticast mode [ 365.208211][T10147] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 368.932518][T10190] syzkaller0: entered promiscuous mode [ 368.938163][T10190] syzkaller0: entered allmulticast mode [ 371.542376][T10206] netlink: 'syz.1.1230': attribute type 58 has an invalid length. [ 371.550296][T10206] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1230'. [ 371.961330][T10226] syzkaller0: entered promiscuous mode [ 371.966946][T10226] syzkaller0: entered allmulticast mode [ 374.936311][T10261] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1244'. [ 374.979944][T10254] syzkaller0: entered promiscuous mode [ 375.001905][T10254] syzkaller0: entered allmulticast mode [ 377.143353][T10266] syz.0.1245 (10266) used obsolete PPPIOCDETACH ioctl [ 377.986400][T10297] netlink: 'syz.2.1253': attribute type 13 has an invalid length. [ 378.023351][T10297] netlink: 'syz.2.1253': attribute type 58 has an invalid length. [ 378.040777][T10297] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1253'. [ 378.218588][T10304] syzkaller0: entered promiscuous mode [ 378.224794][T10304] syzkaller0: entered allmulticast mode [ 379.019410][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.028898][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.608377][T10323] netlink: 'syz.2.1260': attribute type 16 has an invalid length. [ 379.621207][T10323] netlink: 'syz.2.1260': attribute type 3 has an invalid length. [ 379.629582][T10323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1260'. [ 382.465106][T10373] syzkaller0: entered promiscuous mode [ 382.509006][T10373] syzkaller0: entered allmulticast mode [ 382.896544][T10379] netlink: 'syz.0.1275': attribute type 10 has an invalid length. [ 382.937434][T10379] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1275'. [ 382.981554][T10379] batman_adv: batadv0: Adding interface: virt_wifi0 [ 383.008873][T10379] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.059191][T10379] batman_adv: batadv0: Interface activated: virt_wifi0 [ 384.245012][T10391] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1278'. [ 386.202420][T10392] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1278'. [ 386.435841][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 62 [ 387.371406][T10417] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1287'. [ 387.407924][T10417] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 387.506771][T10423] syzkaller0: entered promiscuous mode [ 387.520755][T10423] syzkaller0: entered allmulticast mode [ 390.341890][T10439] netlink: 'syz.1.1291': attribute type 21 has an invalid length. [ 391.304803][T10468] netlink: 'syz.1.1301': attribute type 13 has an invalid length. [ 391.313062][T10468] netlink: 'syz.1.1301': attribute type 58 has an invalid length. [ 391.420686][T10468] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1301'. [ 392.266133][T10484] syzkaller0: entered promiscuous mode [ 392.283393][T10484] syzkaller0: entered allmulticast mode [ 395.955034][T10509] netlink: 'syz.0.1313': attribute type 25 has an invalid length. [ 395.965841][T10509] netlink: 'syz.0.1313': attribute type 6 has an invalid length. [ 395.975599][T10511] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 395.990747][T10511] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1314'. [ 396.474604][T10535] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1321'. [ 396.701152][T10546] pim6reg1: entered promiscuous mode [ 396.707205][T10546] pim6reg1: entered allmulticast mode [ 397.230257][T10552] syzkaller0: entered promiscuous mode [ 397.252021][T10552] syzkaller0: entered allmulticast mode [ 397.278330][T10555] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1327'. [ 399.668904][T10571] erspan0: mtu less than device minimum [ 400.075340][T10593] netlink: 'syz.1.1339': attribute type 21 has an invalid length. [ 400.185184][T10593] netlink: 'syz.1.1339': attribute type 21 has an invalid length. [ 400.203211][T10593] netlink: 'syz.1.1339': attribute type 6 has an invalid length. [ 400.991651][T10604] raw_sendmsg: syz.1.1344 forgot to set AF_INET. Fix it! [ 401.266566][T10611] syzkaller0: entered promiscuous mode [ 401.272621][T10611] syzkaller0: entered allmulticast mode [ 401.439407][T10617] netlink: 'syz.1.1347': attribute type 21 has an invalid length. [ 401.452525][T10617] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1347'. [ 401.469379][T10613] netlink: 'syz.1.1347': attribute type 7 has an invalid length. [ 404.485519][T10666] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1360'. [ 405.177985][T10666] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1360'. [ 405.189178][T10666] tipc: Started in network mode [ 405.196798][T10666] tipc: Node identity b, cluster identity 73 [ 405.203955][T10666] tipc: Node number set to 11 [ 405.455284][T10673] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1364'. [ 405.656441][T10679] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.126561][T10702] netlink: 'syz.2.1372': attribute type 21 has an invalid length. [ 406.127629][T10704] sock: sock_timestamping_bind_phc: sock not bind to device [ 406.156231][T10702] netlink: 'syz.2.1372': attribute type 4 has an invalid length. [ 406.183819][T10700] netlink: 'syz.1.1371': attribute type 10 has an invalid length. [ 406.419821][T10708] syzkaller0: entered promiscuous mode [ 406.432070][T10708] syzkaller0: entered allmulticast mode [ 406.448751][T10710] netlink: 'syz.1.1376': attribute type 16 has an invalid length. [ 406.465772][T10710] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1376'. [ 406.517562][T10711] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1374'. [ 408.870838][T10727] netlink: 'syz.3.1382': attribute type 2 has an invalid length. [ 408.879124][T10727] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1382'. [ 408.892522][T10728] netlink: 'syz.3.1382': attribute type 29 has an invalid length. [ 408.906033][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1382'. [ 409.123047][T10735] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 409.146988][T10735] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1383'. [ 409.195288][T10734] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode [ 409.241641][T10734] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 409.434226][T10744] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1387'. [ 409.567215][T10749] netlink: 'syz.3.1391': attribute type 2 has an invalid length. [ 409.593082][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1391'. [ 409.607482][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1391'. [ 409.646744][T10749] netlink: 'syz.3.1391': attribute type 12 has an invalid length. [ 409.657452][T10746] netlink: 'syz.0.1389': attribute type 2 has an invalid length. [ 409.665416][T10749] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1391'. [ 409.756860][T10746] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1389'. [ 409.895198][T10761] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1393'. [ 409.952782][T10757] syzkaller0: entered promiscuous mode [ 409.959160][T10757] syzkaller0: entered allmulticast mode [ 410.008807][T10759] team0: Port device team_slave_0 removed [ 410.422948][T10774] netlink: 196804 bytes leftover after parsing attributes in process `syz.3.1397'. [ 412.706178][T10781] netlink: 'syz.3.1399': attribute type 2 has an invalid length. [ 412.979776][T10789] FAULT_INJECTION: forcing a failure. [ 412.979776][T10789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.027055][T10789] CPU: 1 PID: 10789 Comm: syz.2.1401 Not tainted syzkaller #0 [ 413.035316][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.046423][T10789] Call Trace: [ 413.049762][T10789] [ 413.052855][T10789] dump_stack_lvl+0x18c/0x250 [ 413.057798][T10789] ? show_regs_print_info+0x20/0x20 [ 413.063975][T10789] ? load_image+0x420/0x420 [ 413.068616][T10789] ? __might_fault+0xaa/0x120 [ 413.073662][T10789] ? __lock_acquire+0x7d80/0x7d80 [ 413.078951][T10789] should_fail_ex+0x394/0x4c0 [ 413.083741][T10789] _copy_from_user+0x2f/0xe0 [ 413.088561][T10789] ___sys_recvmsg+0x174/0x590 [ 413.093491][T10789] ? __sys_recvmsg+0x2a0/0x2a0 [ 413.098940][T10789] ? ksys_write+0x1d2/0x260 [ 413.103728][T10789] ? __fget_files+0x3fc/0x460 [ 413.108830][T10789] __x64_sys_recvmsg+0x21e/0x2f0 [ 413.113992][T10789] ? ___sys_recvmsg+0x590/0x590 [ 413.119068][T10789] ? lockdep_hardirqs_on+0x98/0x150 [ 413.124354][T10789] do_syscall_64+0x55/0xb0 [ 413.129094][T10789] ? clear_bhb_loop+0x40/0x90 [ 413.134129][T10789] ? clear_bhb_loop+0x40/0x90 [ 413.139021][T10789] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 413.145119][T10789] RIP: 0033:0x7fc529d9de59 [ 413.149663][T10789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.169572][T10789] RSP: 002b:00007fc52ac95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 413.178476][T10789] RAX: ffffffffffffffda RBX: 00007fc52a025fa0 RCX: 00007fc529d9de59 [ 413.186948][T10789] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000004 [ 413.195275][T10789] RBP: 00007fc52ac95090 R08: 0000000000000000 R09: 0000000000000000 [ 413.203380][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.211934][T10789] R13: 00007fc52a026038 R14: 00007fc52a025fa0 R15: 00007ffd54123888 [ 413.220077][T10789] [ 413.466667][T10791] netlink: 'syz.2.1402': attribute type 4 has an invalid length. [ 413.500813][T10791] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1402'. [ 413.614271][T10791] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 413.703654][T10798] netlink: 'syz.1.1405': attribute type 4 has an invalid length. [ 413.730652][T10798] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1405'. [ 413.979858][T10808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1408'. [ 414.041380][ T51] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 414.065736][T10805] syzkaller0: entered promiscuous mode [ 414.072438][T10805] syzkaller0: entered allmulticast mode [ 414.083315][T10808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1408'. [ 414.361704][T10812] FAULT_INJECTION: forcing a failure. [ 414.361704][T10812] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.397615][T10812] CPU: 1 PID: 10812 Comm: syz.1.1411 Not tainted syzkaller #0 [ 414.405626][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.416072][T10812] Call Trace: [ 414.419572][T10812] [ 414.422544][T10812] dump_stack_lvl+0x18c/0x250 [ 414.427503][T10812] ? show_regs_print_info+0x20/0x20 [ 414.432808][T10812] ? load_image+0x420/0x420 [ 414.437373][T10812] ? __might_fault+0xaa/0x120 [ 414.442217][T10812] ? __lock_acquire+0x7d80/0x7d80 [ 414.447747][T10812] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 414.453831][T10812] ? lockdep_hardirqs_on+0x98/0x150 [ 414.459076][T10812] should_fail_ex+0x394/0x4c0 [ 414.463924][T10812] _copy_to_iter+0x1ce/0x1110 [ 414.468867][T10812] ? __skb_try_recv_datagram+0x3e4/0x4e0 [ 414.474708][T10812] ? iov_iter_init+0x1e0/0x1e0 [ 414.480682][T10812] ? __check_object_size+0x8a/0xa40 [ 414.486853][T10812] packet_recvmsg+0x5cf/0x1650 [ 414.495142][T10812] ? __perf_event_account_interrupt+0x187/0x280 [ 414.502739][T10812] ? verify_lock_unused+0x140/0x140 [ 414.508950][T10812] ? packet_sendmsg+0x4c70/0x4c70 [ 414.514611][T10812] ? aa_af_perm+0x330/0x330 [ 414.521444][T10812] ? perf_trace_lock+0xfc/0x3b0 [ 414.526762][T10812] ? aa_sock_msg_perm+0x94/0x150 [ 414.531791][T10812] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 414.537570][T10812] ? security_socket_recvmsg+0x89/0xb0 [ 414.543582][T10812] ? packet_sendmsg+0x4c70/0x4c70 [ 414.548879][T10812] ____sys_recvmsg+0x2bd/0x5d0 [ 414.553892][T10812] ? __sys_recvmsg_sock+0x50/0x50 [ 414.561257][T10812] ? import_iovec+0x73/0xa0 [ 414.566266][T10812] ___sys_recvmsg+0x214/0x590 [ 414.571110][T10812] ? __sys_recvmsg+0x2a0/0x2a0 [ 414.575973][T10812] ? ksys_write+0x1d2/0x260 [ 414.580822][T10812] ? __fget_files+0x3fc/0x460 [ 414.588219][T10812] __x64_sys_recvmsg+0x21e/0x2f0 [ 414.593779][T10812] ? perf_trace_preemptirq_template+0x269/0x330 [ 414.601359][T10812] ? ___sys_recvmsg+0x590/0x590 [ 414.609958][T10812] ? lockdep_hardirqs_on+0x98/0x150 [ 414.615793][T10812] do_syscall_64+0x55/0xb0 [ 414.621241][T10812] ? clear_bhb_loop+0x40/0x90 [ 414.626736][T10812] ? clear_bhb_loop+0x40/0x90 [ 414.631855][T10812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.639601][T10812] RIP: 0033:0x7f357279de59 [ 414.644766][T10812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.671421][T10812] RSP: 002b:00007f35736f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 414.681033][T10812] RAX: ffffffffffffffda RBX: 00007f3572a25fa0 RCX: 00007f357279de59 [ 414.692009][T10812] RDX: 0000000000000002 RSI: 0000200000000440 RDI: 0000000000000004 [ 414.700548][T10812] RBP: 00007f35736f4090 R08: 0000000000000000 R09: 0000000000000000 [ 414.710577][T10812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.721255][T10812] R13: 00007f3572a26038 R14: 00007f3572a25fa0 R15: 00007ffccf87bf68 [ 414.730753][T10812] [ 417.932131][T10818] netlink: 'syz.2.1413': attribute type 1 has an invalid length. [ 417.940283][T10818] __nla_validate_parse: 1 callbacks suppressed [ 417.940300][T10818] netlink: 60179 bytes leftover after parsing attributes in process `syz.2.1413'. [ 418.122837][T10852] FAULT_INJECTION: forcing a failure. [ 418.122837][T10852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.159319][T10852] CPU: 0 PID: 10852 Comm: syz.2.1423 Not tainted syzkaller #0 [ 418.166984][T10852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.177293][T10852] Call Trace: [ 418.180712][T10852] [ 418.183692][T10852] dump_stack_lvl+0x18c/0x250 [ 418.188841][T10852] ? show_regs_print_info+0x20/0x20 [ 418.194525][T10852] ? load_image+0x420/0x420 [ 418.199289][T10852] ? __lock_acquire+0x7d80/0x7d80 [ 418.204545][T10852] ? snprintf+0xe9/0x140 [ 418.210114][T10852] should_fail_ex+0x394/0x4c0 [ 418.215090][T10852] _copy_to_user+0x2f/0xa0 [ 418.219669][T10852] simple_read_from_buffer+0xe7/0x150 [ 418.225236][T10852] proc_fail_nth_read+0x1e8/0x260 [ 418.230525][T10852] ? proc_fault_inject_write+0x360/0x360 [ 418.236271][T10852] ? fsnotify_perm+0x271/0x5e0 [ 418.241099][T10852] ? proc_fault_inject_write+0x360/0x360 [ 418.246978][T10852] vfs_read+0x298/0x990 [ 418.251585][T10852] ? kernel_read+0x1e0/0x1e0 [ 418.257155][T10852] ? __fget_files+0x28/0x460 [ 418.262038][T10852] ? __fget_files+0x3fc/0x460 [ 418.267822][T10852] ? __fdget_pos+0x2a3/0x330 [ 418.272502][T10852] ? ksys_read+0x74/0x260 [ 418.277982][T10852] ksys_read+0x151/0x260 [ 418.282509][T10852] ? vfs_write+0x9a0/0x9a0 [ 418.287696][T10852] ? lockdep_hardirqs_on+0x98/0x150 [ 418.292956][T10852] do_syscall_64+0x55/0xb0 [ 418.297799][T10852] ? clear_bhb_loop+0x40/0x90 [ 418.302650][T10852] ? clear_bhb_loop+0x40/0x90 [ 418.307507][T10852] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 418.313572][T10852] RIP: 0033:0x7fc529d5e68e [ 418.318126][T10852] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 418.338568][T10852] RSP: 002b:00007fc52ac94fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.347489][T10852] RAX: ffffffffffffffda RBX: 00007fc52ac956c0 RCX: 00007fc529d5e68e [ 418.357964][T10852] RDX: 000000000000000f RSI: 00007fc52ac950a0 RDI: 0000000000000005 [ 418.368982][T10852] RBP: 00007fc52ac95090 R08: 0000000000000000 R09: 0000000000000000 [ 418.377817][T10852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.386884][T10852] R13: 00007fc52a026038 R14: 00007fc52a025fa0 R15: 00007ffd54123888 [ 418.395550][T10852] [ 419.939883][T10904] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1437'. [ 420.180082][T10888] syzkaller0: entered promiscuous mode [ 420.186453][T10888] syzkaller0: entered allmulticast mode [ 420.401082][T10899] syzkaller0: entered promiscuous mode [ 420.407114][T10899] syzkaller0: entered allmulticast mode [ 420.848972][T10920] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1442'. [ 424.803995][T10923] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1442'. [ 425.881599][ T51] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 425.965375][T10955] syzkaller0: entered promiscuous mode [ 425.972203][T10955] syzkaller0: entered allmulticast mode [ 426.142772][T10961] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1454'. [ 426.280307][T10958] syzkaller0: entered promiscuous mode [ 426.286578][T10958] syzkaller0: entered allmulticast mode [ 428.769187][T10972] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1458'. [ 432.434063][T10986] netlink: 'syz.2.1462': attribute type 21 has an invalid length. [ 432.446094][T10986] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1462'. [ 433.122109][T11009] netlink: 'syz.0.1469': attribute type 3 has an invalid length. [ 433.132986][T11009] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1469'. [ 433.304993][T11015] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1471'. [ 433.325318][T11015] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1471'. [ 433.556781][T11018] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1472'. [ 433.590791][T11018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 434.128045][T11031] syzkaller0: entered promiscuous mode [ 434.169446][T11031] syzkaller0: entered allmulticast mode [ 434.192906][T11033] netlink: 'syz.0.1477': attribute type 10 has an invalid length. [ 434.281377][T11033] veth0_vlan: left promiscuous mode [ 434.308280][T11033] veth0_vlan: entered promiscuous mode [ 434.340447][T11033] team0: Device veth0_vlan failed to register rx_handler [ 438.990667][T11068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 439.013926][T11068] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1485'. [ 439.182612][T11074] netlink: 'syz.0.1486': attribute type 9 has an invalid length. [ 439.216387][T11074] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1486'. [ 439.427062][T11073] netlink: 'syz.3.1487': attribute type 2 has an invalid length. [ 439.445941][T11073] netlink: 'syz.3.1487': attribute type 1 has an invalid length. [ 439.480811][T11073] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1487'. [ 439.491690][T11077] netlink: 'syz.0.1486': attribute type 9 has an invalid length. [ 439.515964][T11077] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1486'. [ 440.479904][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.487125][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.543342][T11111] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1494'. [ 440.571118][T11111] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1494'. [ 440.625786][T11114] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1495'. [ 441.255065][T11115] delete_channel: no stack [ 441.416293][T11127] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1500'. [ 441.437658][T11127] bridge_slave_1: default FDB implementation only supports local addresses [ 441.459814][T11129] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1501'. [ 442.203525][T11143] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 442.299804][T11144] netlink: 'syz.1.1506': attribute type 11 has an invalid length. [ 442.991179][ T51] Bluetooth: hci1: ISO packet too small [ 445.471148][T11175] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 18 [ 446.065945][T11184] __nla_validate_parse: 1 callbacks suppressed [ 446.065964][T11184] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1514'. [ 446.104428][T11185] sit0: left promiscuous mode [ 446.222330][T11190] netlink: 'syz.2.1516': attribute type 10 has an invalid length. [ 446.263034][T11190] bridge0: port 3(team0) entered disabled state [ 446.270799][T11190] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.279820][T11190] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.144699][T11220] netlink: 135856 bytes leftover after parsing attributes in process `syz.1.1526'. [ 447.169129][T11220] netlink: 8442 bytes leftover after parsing attributes in process `syz.1.1526'. [ 447.319220][T11218] netlink: 'syz.2.1525': attribute type 19 has an invalid length. [ 447.555095][T11227] netlink: 'syz.0.1527': attribute type 2 has an invalid length. [ 447.624699][T11227] netlink: 'syz.0.1527': attribute type 8 has an invalid length. [ 447.637960][T11227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1527'. [ 449.388692][T11232] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1532'. [ 449.412168][T11232] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 451.135854][T11268] syzkaller0: entered promiscuous mode [ 451.168904][T11268] syzkaller0: entered allmulticast mode [ 454.779600][T11282] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1544'. [ 455.254074][T11309] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 455.291457][T11309] netlink: 'syz.3.1552': attribute type 4 has an invalid length. [ 455.299961][T11309] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1552'. [ 455.418036][T11318] netlink: 'syz.2.1554': attribute type 13 has an invalid length. [ 455.462585][T11318] netlink: 'syz.2.1554': attribute type 58 has an invalid length. [ 455.480792][T11318] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1554'. [ 455.614181][T11321] netlink: 'syz.3.1556': attribute type 10 has an invalid length. [ 455.640800][T11321] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1556'. [ 455.671809][T11321] bridge0: port 4(ipvlan1) entered blocking state [ 455.696806][T11321] bridge0: port 4(ipvlan1) entered disabled state [ 455.723469][T11321] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 456.062211][T11330] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1558'. [ 456.090806][T11330] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 456.187782][T11334] syzkaller0: entered promiscuous mode [ 456.206927][T11334] syzkaller0: entered allmulticast mode [ 457.098737][T11362] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 457.114726][T11362] netlink: 'syz.0.1568': attribute type 1 has an invalid length. [ 457.166091][T11364] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 457.179235][T11364] netlink: 'syz.0.1568': attribute type 1 has an invalid length. [ 459.095535][T11371] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1570'. [ 459.299683][T11375] netlink: 'syz.1.1573': attribute type 9 has an invalid length. [ 459.323969][T11375] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1573'. [ 459.720055][T11389] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1580'. [ 460.219662][T11401] syzkaller0: entered promiscuous mode [ 460.230545][T11401] syzkaller0: entered allmulticast mode [ 465.546922][T11409] syzkaller0: entered promiscuous mode [ 465.556600][T11409] syzkaller0: entered allmulticast mode [ 465.685728][T11427] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1588'. [ 468.238356][T11421] syzkaller0: entered promiscuous mode [ 468.244011][T11421] syzkaller0: entered allmulticast mode [ 470.680003][T11446] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1593'. [ 470.714765][T11455] sit0: entered allmulticast mode [ 470.830995][T11469] validate_nla: 1 callbacks suppressed [ 470.831013][T11469] netlink: 'syz.3.1596': attribute type 21 has an invalid length. [ 470.879403][T11469] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1596'. [ 470.889199][T11469] netlink: 'syz.3.1596': attribute type 5 has an invalid length. [ 470.897498][T11469] netlink: 'syz.3.1596': attribute type 6 has an invalid length. [ 470.907282][T11469] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1596'. [ 470.962632][T11459] syzkaller0: entered promiscuous mode [ 470.972139][T11459] syzkaller0: entered allmulticast mode [ 473.811895][T11476] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1598'. [ 473.842016][T11486] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 473.848082][T11486] pim6reg1: linktype set to 776 [ 474.045369][T11489] syzkaller0: entered promiscuous mode [ 474.062463][T11489] syzkaller0: entered allmulticast mode [ 474.101046][T11500] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1605'. [ 474.191485][T11504] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1605'. [ 474.859543][T11497] netlink: 'syz.0.1604': attribute type 10 has an invalid length. [ 475.005767][T11497] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.028600][T11497] bridge_slave_1: left allmulticast mode [ 475.035612][T11497] bridge_slave_1: left promiscuous mode [ 475.042073][T11497] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.428324][T11525] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.1610'. [ 475.814615][T11539] netlink: 'syz.0.1614': attribute type 1 has an invalid length. [ 475.830689][T11539] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1614'. [ 476.906505][T11546] netlink: 'syz.1.1616': attribute type 3 has an invalid length. [ 476.914930][T11546] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1616'. [ 478.278281][T11535] netlink: 'syz.0.1614': attribute type 39 has an invalid length. [ 479.857273][T11586] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1628'. [ 480.046491][T11584] syzkaller0: entered promiscuous mode [ 480.064760][T11584] syzkaller0: entered allmulticast mode [ 480.194347][T11600] netlink: 'syz.3.1634': attribute type 10 has an invalid length. [ 480.203036][T11600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1634'. [ 480.214176][T11600] dummy0: entered promiscuous mode [ 480.220050][T11600] bridge0: port 4(dummy0) entered blocking state [ 480.230379][T11600] bridge0: port 4(dummy0) entered disabled state [ 480.241778][T11600] dummy0: entered allmulticast mode [ 480.249528][T11600] bridge0: port 4(dummy0) entered blocking state [ 480.256173][T11600] bridge0: port 4(dummy0) entered forwarding state [ 482.686880][T11634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.095586][T11644] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1649'. [ 486.356433][T11660] ÿÿÿÿÿÿ: renamed from bridge_slave_0 (while UP) [ 486.650161][T11676] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1659'. [ 486.985160][T11676] netlink: 'syz.2.1659': attribute type 1 has an invalid length. [ 486.993951][T11676] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.1659'. [ 487.008129][T11674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.011444][T11679] netlink: 'syz.0.1658': attribute type 9 has an invalid length. [ 487.030785][T11679] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1658'. [ 487.196642][T11682] netlink: 'syz.2.1660': attribute type 41 has an invalid length. [ 487.374189][T11682] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1660'. [ 488.357250][T11707] netlink: 'syz.1.1668': attribute type 1 has an invalid length. [ 488.416731][T11707] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1668'. [ 488.812011][T11710] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1669'. [ 489.822617][T11721] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 489.851605][T11721] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 489.872767][T11721] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 489.891811][T11721] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 489.914196][T11721] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 492.236913][T11749] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1680'. [ 493.126902][T11757] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1682'. [ 493.148075][T11760] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1684'. [ 493.163349][T11760] hsr_slave_0: left promiscuous mode [ 493.174779][T11760] hsr_slave_1: left promiscuous mode [ 493.481993][T11775] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1688'. [ 494.948647][T11810] syzkaller0: entered promiscuous mode [ 494.973938][T11813] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1699'. [ 494.986456][T11810] syzkaller0: entered allmulticast mode [ 495.963977][T11828] netlink: 'syz.0.1703': attribute type 29 has an invalid length. [ 496.035175][T11828] netlink: 'syz.0.1703': attribute type 29 has an invalid length. [ 496.156614][T11829] netlink: 'syz.0.1703': attribute type 29 has an invalid length. [ 496.234870][T11828] netlink: 'syz.0.1703': attribute type 29 has an invalid length. [ 496.244163][T11832] netlink: 'syz.0.1703': attribute type 29 has an invalid length. [ 496.669591][T11842] netlink: 'syz.0.1707': attribute type 21 has an invalid length. [ 497.091889][T11849] netlink: 'syz.1.1709': attribute type 11 has an invalid length. [ 497.259813][T11849] netlink: 'syz.1.1709': attribute type 10 has an invalid length. [ 497.310101][T11849] team0: Device ipvlan1 failed to register rx_handler [ 498.116882][T11869] netlink: 'syz.2.1714': attribute type 29 has an invalid length. [ 500.121665][T11869] netlink: 'syz.2.1714': attribute type 29 has an invalid length. [ 500.141017][T11877] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1716'. [ 500.174020][T11879] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1716'. [ 500.228556][T11880] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1716'. [ 500.269003][T11884] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.1718'. [ 500.417648][T11893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1722'. [ 501.090192][T11912] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 501.154037][T11910] validate_nla: 8 callbacks suppressed [ 501.154057][T11910] netlink: 'syz.1.1728': attribute type 4 has an invalid length. [ 501.177661][T11912] netlink: 'syz.0.1735': attribute type 3 has an invalid length. [ 501.252445][T11912] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1735'. [ 501.264440][T11910] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1728'. [ 501.885785][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.910623][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.047574][T11946] syzkaller0: entered promiscuous mode [ 503.056203][T11946] syzkaller0: entered allmulticast mode [ 503.242208][ T7675] wlan1: Trigger new scan to find an IBSS to join [ 503.712486][T11963] netlink: 'syz.2.1743': attribute type 21 has an invalid length. [ 503.737916][T11963] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1743'. [ 504.211322][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 504.278953][T11981] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1751'. [ 505.131687][T12003] netlink: 'syz.3.1756': attribute type 29 has an invalid length. [ 505.169135][T12003] netlink: 'syz.3.1756': attribute type 29 has an invalid length. [ 505.192283][T12002] __nla_validate_parse: 2 callbacks suppressed [ 505.192320][T12002] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1757'. [ 505.221755][T12001] netlink: 'syz.3.1756': attribute type 29 has an invalid length. [ 505.980993][T12029] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1766'. [ 506.282164][ T7672] wlan1: Trigger new scan to find an IBSS to join [ 506.549079][T12041] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 506.580661][T12041] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1769'. [ 506.627694][T12040] netlink: 'syz.1.1769': attribute type 1 has an invalid length. [ 506.651009][T12040] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1769'. [ 507.123228][T12061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1776'. [ 507.365383][T12066] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1775'. [ 507.465509][T12070] netlink: 'syz.3.1779': attribute type 9 has an invalid length. [ 507.476910][T12070] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1779'. [ 507.941527][ C0] [ 507.941536][ C0] ================================ [ 507.941541][ C0] WARNING: inconsistent lock state [ 507.941560][ C0] syzkaller #0 Not tainted [ 507.941567][ C0] -------------------------------- [ 507.941572][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 507.941578][ C0] syz.2.1780/12075 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 507.941595][ C0] ffff8880303cfa38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x95/0x680 [ 507.941643][ C0] {INITIAL USE} state was registered at: [ 507.941648][ C0] lock_acquire+0x19e/0x420 [ 507.941665][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 507.941685][ C0] trie_update_elem+0xcd/0xdf0 [ 507.941703][ C0] bpf_map_update_value+0x64b/0x710 [ 507.941716][ C0] map_update_elem+0x586/0x710 [ 507.941731][ C0] __sys_bpf+0x6b5/0x890 [ 507.941744][ C0] __x64_sys_bpf+0x7c/0x90 [ 507.941756][ C0] do_syscall_64+0x55/0xb0 [ 507.941779][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.941814][ C0] irq event stamp: 934 [ 507.941821][ C0] hardirqs last enabled at (933): [] __local_bh_enable_ip+0x13a/0x1c0 [ 507.941882][ C0] hardirqs last disabled at (934): [] exc_debug+0x73/0x140 [ 507.941903][ C0] softirqs last enabled at (932): [] udpv6_sendmsg+0xa04/0x2350 [ 507.941994][ C0] softirqs last disabled at (930): [] lock_sock_nested+0x6a/0x100 [ 507.942025][ C0] [ 507.942025][ C0] other info that might help us debug this: [ 507.942031][ C0] Possible unsafe locking scenario: [ 507.942031][ C0] [ 507.942036][ C0] CPU0 [ 507.942039][ C0] ---- [ 507.942042][ C0] lock(&trie->lock); [ 507.942057][ C0] [ 507.942060][ C0] lock(&trie->lock); [ 507.942070][ C0] [ 507.942070][ C0] *** DEADLOCK *** [ 507.942070][ C0] [ 507.942074][ C0] 1 lock held by syz.2.1780/12075: [ 507.942084][ C0] #0: ffff88802378b130 (sk_lock-AF_INET6){+.+.}-{0:0}, at: udpv6_sendmsg+0xa04/0x2350 [ 507.942130][ C0] [ 507.942130][ C0] stack backtrace: [ 507.942137][ C0] CPU: 0 PID: 12075 Comm: syz.2.1780 Not tainted syzkaller #0 [ 507.942156][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.942168][ C0] Call Trace: [ 507.942176][ C0] <#DB> [ 507.942184][ C0] dump_stack_lvl+0x18c/0x250 [ 507.942217][ C0] ? show_regs_print_info+0x20/0x20 [ 507.942249][ C0] ? print_usage_bug+0x43d/0x6a0 [ 507.942272][ C0] ? verify_lock_unused+0x15/0x140 [ 507.942296][ C0] lock_acquire+0x2c2/0x420 [ 507.942318][ C0] ? trie_delete_elem+0x95/0x680 [ 507.942344][ C0] ? read_lock_is_recursive+0x20/0x20 [ 507.942367][ C0] ? get_user_pages_fast_only+0xa0/0xa0 [ 507.942397][ C0] ? __perf_cgroup_move+0x60/0x60 [ 507.942416][ C0] ? look_up_lock_class+0x75/0x140 [ 507.942441][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 507.942467][ C0] ? trie_delete_elem+0x95/0x680 [ 507.942493][ C0] ? _raw_spin_lock+0x40/0x40 [ 507.942519][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 507.942543][ C0] trie_delete_elem+0x95/0x680 [ 507.942570][ C0] ? perf_callchain+0x220/0x220 [ 507.942595][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 507.942615][ C0] bpf_overflow_handler+0x1fc/0x510 [ 507.942644][ C0] ? look_up_lock_class+0x75/0x140 [ 507.942667][ C0] ? bpf_overflow_handler+0xde/0x510 [ 507.942695][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 507.942721][ C0] ? rcu_is_watching+0x15/0xb0 [ 507.942748][ C0] ? lock_release+0xb5/0x8c0 [ 507.942772][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 507.942797][ C0] __perf_event_overflow+0x461/0x660 [ 507.942823][ C0] perf_swevent_event+0x319/0x570 [ 507.942848][ C0] ? perf_tp_event+0x1550/0x1550 [ 507.942869][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 507.942898][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 507.942940][ C0] perf_bp_event+0x319/0x430 [ 507.942962][ C0] ? look_up_lock_class+0x75/0x140 [ 507.942987][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 507.943009][ C0] ? rcu_is_watching+0x15/0xb0 [ 507.943035][ C0] ? lock_release+0xb5/0x8c0 [ 507.943072][ C0] ? lock_acquire+0x2c2/0x420 [ 507.943098][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 507.943141][ C0] notifier_call_chain+0x18f/0x380 [ 507.943175][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 507.943200][ C0] atomic_notifier_call_chain+0xda/0x180 [ 507.943227][ C0] notify_die+0x145/0x1a0 [ 507.943253][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 507.943282][ C0] ? rcu_is_watching+0x15/0xb0 [ 507.943309][ C0] notify_debug+0x2e/0x50 [ 507.943340][ C0] exc_debug+0xde/0x140 [ 507.943361][ C0] asm_exc_debug+0x1e/0x40 [ 507.943389][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 507.943411][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 507.943430][ C0] RSP: 0018:ffffc9000fb87458 EFLAGS: 00050206 [ 507.943447][ C0] RAX: ffffffff842eee01 RBX: 00000000000004f8 RCX: 00000000000004f7 [ 507.943463][ C0] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffff88802b6f3049 [ 507.943477][ C0] RBP: ffffc9000fb87588 R08: ffff88802b6f353f R09: 1ffff110056de6a7 [ 507.943491][ C0] R10: dffffc0000000000 R11: ffffed10056de6a8 R12: ffff88802b6f3048 [ 507.943505][ C0] R13: 0000200000000300 R14: ffffc9000fb87c18 R15: 1ffff92001f70f83 [ 507.943525][ C0] ? _copy_from_iter+0x1b1/0x1290 [ 507.943555][ C0] [ 507.943561][ C0] [ 507.943567][ C0] _copy_from_iter+0x242/0x1290 [ 507.943596][ C0] ? copyout_mc+0x70/0x70 [ 507.943618][ C0] ? __virt_addr_valid+0x10c/0x380 [ 507.943647][ C0] ? __virt_addr_valid+0x10c/0x380 [ 507.943673][ C0] ? __virt_addr_valid+0x10c/0x380 [ 507.943698][ C0] ? __check_object_size+0x4fc/0xa40 [ 507.943720][ C0] udplite_getfrag+0x4d/0xa0 [ 507.943743][ C0] __ip6_append_data+0x20f6/0x3d40 [ 507.943815][ C0] ? udpv6_sendmsg+0x2350/0x2350 [ 507.943843][ C0] ? ip6_setup_cork+0xff0/0xff0 [ 507.943869][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 507.943892][ C0] ip6_append_data+0x1b0/0x350 [ 507.943926][ C0] ? udpv6_sendmsg+0x2350/0x2350 [ 507.943950][ C0] udpv6_sendmsg+0xc34/0x2350 [ 507.943980][ C0] ? udpv6_sendmsg+0x2350/0x2350 [ 507.944002][ C0] ? __might_sleep+0xe0/0xe0 [ 507.944027][ C0] ? udp_v6_early_demux+0xf90/0xf90 [ 507.944063][ C0] ? aa_af_perm+0x330/0x330 [ 507.944092][ C0] ? sock_rps_record_flow+0x19/0x3f0 [ 507.944131][ C0] ? inet_send_prepare+0x5b/0x250 [ 507.944155][ C0] ? inet6_sendmsg+0x5f/0xd0 [ 507.944177][ C0] sock_write_iter+0x2dc/0x420 [ 507.944199][ C0] ? sock_read_iter+0x3f0/0x3f0 [ 507.944224][ C0] ? common_file_perm+0x198/0x1f0 [ 507.944248][ C0] vfs_write+0x474/0x9a0 [ 507.944277][ C0] ? file_end_write+0x250/0x250 [ 507.944306][ C0] ? __fget_files+0x3fc/0x460 [ 507.944336][ C0] ? __fdget_pos+0x1d8/0x330 [ 507.944361][ C0] ? ksys_write+0x74/0x260 [ 507.944388][ C0] ksys_write+0x151/0x260 [ 507.944414][ C0] ? __ia32_sys_read+0x90/0x90 [ 507.944444][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 507.944468][ C0] do_syscall_64+0x55/0xb0 [ 507.944496][ C0] ? clear_bhb_loop+0x40/0x90 [ 507.944513][ C0] ? clear_bhb_loop+0x40/0x90 [ 507.944531][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 507.944559][ C0] RIP: 0033:0x7fc529d9de59 [ 507.944576][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.944592][ C0] RSP: 002b:00007fc52ac74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 507.944610][ C0] RAX: ffffffffffffffda RBX: 00007fc52a026090 RCX: 00007fc529d9de59 [ 507.944624][ C0] RDX: 000000000000fe33 RSI: 0000200000000300 RDI: 0000000000000005 [ 507.944637][ C0] RBP: 00007fc529e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 507.944650][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.944662][ C0] R13: 00007fc52a026128 R14: 00007fc52a026090 R15: 00007ffd54123888 [ 507.944685][ C0] [ 508.393929][T12068] caif:caif_disconnect_client(): nothing to disconnect [ 509.240703][ T7670] wlan1: Creating new IBSS network, BSSID 82:90:2b:d7:73:47