last executing test programs: 29.377325014s ago: executing program 3 (id=2334): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\xb0\xe0p\xfc\xc5\fPd\xe2\xc6n\xe9\v(\xdd\xe1]\x10\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000240), 0x6}, 0x100, 0x0, 0xa482, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r2, 0x20, &(0x7f0000000a00)={&(0x7f00000008c0)=""/44, 0x2c, 0x0, &(0x7f0000000900)=""/206, 0xce}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0xb, 0x0, 0x0, 0x8000000006, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x114441, 0xfffc, 0x137, 0x3, 0x582, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200004000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r13, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) 29.052335672s ago: executing program 3 (id=2335): r0 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xad, 0x7, 0x0, 0x0, 0x0, 0xb53, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0xcd, 0x9, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40001ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x9) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000f04abb8a244ce4471054bea90fa7e2ddadfb54f829b0f31f91763f3a32f345401c548e626059149ce2e0be894015fafa0e85fb1d3cc241dece077879b5570532c289fcf44d6e4360913b2f8afa07733002bc91ccc6fb3fe7dcd4434db3a84bee6901e3265c6aad7eb96a3f69baff3543307fd7e71c0abfb3ecba0c916676e77e55bc5af139cbd37f536c1991ace7f55e87b388452e05b938106e49e4e6bc592a6a9a8b7c"]) close(r0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="aee1b65e3babc7ae5897", 0xa}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000000), 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000080)) 28.35081944s ago: executing program 3 (id=2339): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401", 0x30}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x8015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x500, 0x1000000, 0x0, 0x0, 0x10, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair(0x15, 0x5, 0x0, &(0x7f0000000500)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) (async) r4 = socket$kcm(0xf, 0x3, 0x2) (async) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r4, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) (async) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000070000004404a60007036f001c000000000000000000000008000000", @ANYRESOCT], 0x38}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x23, &(0x7f0000000000), 0x4) (async) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) (async) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000900)={&(0x7f0000000380)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000440)='Zb', 0x2}], 0x1}, 0x10) (async) sendmsg$inet(r7, &(0x7f0000000b00)={&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000740)='!', 0x1}], 0x1}, 0x54) 28.008651728s ago: executing program 3 (id=2341): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x9, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x13, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x9, 0x9, 0x1, 0x0, 0x9, 0x21002, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x5, 0x8}, 0x102, 0x10000, 0x0, 0x2, 0x9, 0x6, 0x0, 0x0, 0x120, 0x0, 0xc79d}, 0xffffffffffffffff, 0xb, r0, 0x1) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r6, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004", @ANYRESOCT=0x0, @ANYBLOB, @ANYRES32=r7, @ANYRES64=r2, @ANYRES16=0x0], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@ifindex=r7, 0x35, 0x0, 0xfffffffd, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0]}, 0x40) r8 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[], 0xfe33) r9 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{}]}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r12) recvmsg$unix(r11, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0x12, &(0x7f0000000340)=r13, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) r15 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r15, 0x1, 0x2a, 0x0, 0x0) 27.49815084s ago: executing program 3 (id=2345): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0xffffffffffffff80}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async, rerun: 32) r2 = socket$kcm(0x1e, 0x1, 0x0) (rerun: 32) sendmsg$kcm(r2, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800e8b40000000000000000000000d456bef400000000019500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xf}, 0x90208, 0x2, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a", 0x23}], 0x1}, 0x0) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) (rerun: 32) perf_event_open(0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) (async, rerun: 64) socket$kcm(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x4b, 0x0, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8917, &(0x7f0000000980)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xbd\\b\x00\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(\x04\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x02\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188008ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) write$cgroup_devices(r1, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRES32=0x0], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="8401000000000000003903a4e600000100000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000030000000200"/28], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000c0000dbf649d800000800000040", @ANYRES16=r4, @ANYRES32, @ANYRES16], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000c0000dbf649d800000800000040", @ANYRES16=r4, @ANYRES32, @ANYRES16], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1080, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1080, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r5, &(0x7f0000001940), &(0x7f0000001940)=""/92}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000006c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$unix(r3, &(0x7f0000000880)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000700)="88b12ec97a26f8598b52daf295127569e2301c4f5dca4813a1ed745732a2114b56f1b78ae47742f7a368321f4fbe269ba4b49e1952d83c35bfd56acd042611898ae284eeba19308df01ccadfe14c60a09b604e6018ee4fac4c947e162e1a7c3c502298c74f5ca1922bfb932994b6ee08d70a1de80b26d6b9829db4fe96dccf0f7bbd4a5a9e09dd8cab94ca013d033c8be10b63d0283889650cfd3d3da940eb9d910dee901eebc449b03b47ac4c1a8bd4bc9c6dbb412e", 0xb6}, {&(0x7f00000007c0)="0572c75794272a54000b1c110768a27a8c35da213618a29fbecf053107d9b58feb6300c913eb01c5b28a79d395e694eb7d5f019181f6d6f99930c35745e136e88680026c2ca35c6539f73e95a8843d8f18d6f61e1ec0f7ef167ffe0ca3fe3b90d7cf8dec65f899d3937f965c11182d52253d4243fd7824d2af10ee", 0x7b}], 0x2, 0x0, 0x0, 0x4}, 0x800) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x94, 0x3, 0x5, 0xffffffff}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{}, {0x94, 0x3, 0x5, 0xffffffff}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000040000000400000022"], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="08000000040000000400000022"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r7, &(0x7f0000000140), 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r7, &(0x7f0000000140), 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a80)={{0x1}, &(0x7f0000000a00), &(0x7f0000000a40)='%ps \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 22.044699335s ago: executing program 1 (id=2369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xda, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x20, &(0x7f0000000840)={&(0x7f0000000700)=""/168, 0xa8, 0x0, &(0x7f00000007c0)=""/102, 0x66}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000090000000000000008000000af3b0200ffffffff18300000010000000000000000000000185700000a000000000000000000000018160000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000004820c00010000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xff, 0x2c, &(0x7f0000000240)=""/44, 0x41100, 0x66, '\x00', r4, @cgroup_skb=0x1, r5, 0x8, &(0x7f00000006c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, r6, r0, 0x6, &(0x7f00000008c0), &(0x7f0000000900)=[{0x4, 0x4, 0x8, 0xc}, {0x0, 0x1, 0xa, 0xa}, {0x0, 0x4, 0x2, 0x2}, {0x2, 0x4, 0x9, 0xc}, {0x24, 0x4, 0xe, 0xa}, {0x1, 0x1, 0x1, 0x3}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 21.790946992s ago: executing program 2 (id=2370): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) r1 = gettid() r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x7, 0x4, 0x6, 0x0, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x4}, 0x1, 0xfffffffffffffff8, 0xf, 0x4, 0x42b6c57e, 0x90, 0x100, 0x0, 0x80, 0x0, 0x1}, r0, 0xf, 0xffffffffffffffff, 0x3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r2, 0x0, 0x5, &(0x7f0000000100)='syz0\x00'}, 0x30) socket$kcm(0x29, 0x0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000180)='pids.current\x00', 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x400200, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000200)={'veth1_to_bond\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x15, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@alu={0x7, 0x0, 0x3, 0x4, 0x2, 0x40, 0xffffffffffffffff}, @generic={0x8, 0x7, 0xd, 0x0, 0xd3}, @jmp={0x5, 0x0, 0xa, 0x6, 0x5, 0xfffffffffffffff0, 0x1df6c2edf54e1571}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @generic={0x7, 0x5, 0x2, 0x8, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x18, r3, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x15ab9, r4, 0x9, &(0x7f0000000380)=[0xffffffffffffffff, r3, r3], &(0x7f00000003c0)=[{0x1, 0x5, 0xf, 0x3}, {0x1, 0x3, 0x1, 0x3}, {0x0, 0x1, 0xc, 0x1}, {0x0, 0x1, 0x0, 0x5}, {0x3, 0x4, 0x3, 0x8}, {0x0, 0x2, 0x4, 0x1}, {0x4, 0x3, 0x4, 0xb}, {0x5, 0x4, 0xd, 0x9}, {0x2, 0x2, 0xf}], 0x10, 0x10001}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={0xffffffffffffffff, r3, 0x4, r5}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r5, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], 0x0, 0x88, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x1, 0xd, 0x3, 0x4, 0xffffffffffffffff, 0x8}, @alu={0x7, 0x0, 0x6, 0xb, 0xb, 0xfffffffffffffff8, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x45, '\x00', 0x0, @fallback=0x9, r6, 0x8, &(0x7f0000000640)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x6, 0x10, 0xeb}, 0x10, r8, r5, 0x2, &(0x7f00000009c0)=[r3, r3, 0x1, r3, r3, r3], &(0x7f0000000a00)=[{0x0, 0x1, 0x2, 0xe}, {0x0, 0x2, 0x9, 0x3}], 0x10, 0x10}, 0x94) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000b00)={r3}, 0x8) ioctl$TUNSETVNETLE(r9, 0x400454dc, &(0x7f0000000b40)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x1, '\x00', r7, r6, 0x4, 0x1, 0x37}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r9, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)=r5}, 0x20) r11 = perf_event_open$cgroup(&(0x7f0000000d00)={0x4, 0x80, 0xf, 0x6, 0x7, 0x8, 0x0, 0x1, 0x10000, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000cc0), 0xa}, 0x24, 0x45a, 0x0, 0x7, 0x3, 0x7, 0x3, 0x0, 0x4, 0x0, 0x5719}, r0, 0xc, r2, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, 0xffffffffffffffff) ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000d80)={r9}, 0x8) ioctl$PERF_EVENT_IOC_RESET(r12, 0x2403, 0xca5f707) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000dc0)={r10, r12, 0x0, r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r12}, &(0x7f0000000e00), &(0x7f0000000e40)=r5}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000ec0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f00)={r9, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={r13}, 0x4) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000fc0)=0x1) 21.566506167s ago: executing program 0 (id=2371): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x19, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000000000000f37538e486dd630080fc09042c00db5bffffffffff000000060300060023000000000000000000000000ac1414aa2c"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x0, 0x2d, 0x0, 0x1, 0x2}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000040000000000000700000000030000000000000801000000000000000000000d0200000000002e2e2e"], 0x0, 0x44}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x8000, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0xddcb, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x25, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x30004081) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c"], 0xfdef) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf8000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='syzkaller\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.510193529s ago: executing program 2 (id=2372): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003a000b12d25a80648c2594f90324fc60100c0340", 0x18}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r2, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6f, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000980)='blkio.bfq.io_serviced\x00', 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0x8, 0x0, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) (async) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_lsm={0x1d, 0x10, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}]}, &(0x7f0000000400)='syzkaller\x00', 0xd, 0x81, &(0x7f00000004c0)=""/129, 0x41100, 0xe, '\x00', r5, 0x1b, r6, 0x8, &(0x7f00000009c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[r7, r8, r9, r10, r1], &(0x7f0000000b00)=[{0x3, 0x3, 0xa, 0x5}, {0x5, 0x3, 0x2, 0xd}, {0x4, 0x5, 0xb}, {0x0, 0x3, 0x8, 0x3}, {0x5, 0x1, 0xb, 0x2}], 0x10, 0x80}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r11 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0xfffffffe, 0x0, 0x7, 0x80000001, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x6e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x24}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) 21.326311313s ago: executing program 2 (id=2373): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18c2541074bb8273c9b7f2694ee2971a71800bac0f000300", 0x3e}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000300)}, 0x20) 21.324663763s ago: executing program 1 (id=2380): socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x7, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x4}, 0x102, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.117779392s ago: executing program 0 (id=2374): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000004edffff030000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) close(0x3) 18.109826873s ago: executing program 1 (id=2375): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5411, &(0x7f00000000c0)) setsockopt$sock_attach_bpf(r1, 0x29, 0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00"/13], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xf, @perf_config_ext={0x9, 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000080)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0xb, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0x8, 0x2}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x800000, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x5c441, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x9}, 0x2098, 0x3, 0x5, 0x0, 0x10, 0x2, 0xc007, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r5, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x59, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000bd, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x2000000000000045, &(0x7f0000000a40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000e95"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x4, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1831000004000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300009d7100008500000006000000b7080000000000007b8af8ff0000006eb7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000001000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000740)=""/4096, 0x41100, 0x54, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001880)={0x2, 0x0, 0x86e7, 0x9}, 0x10, r8, r0, 0x4, &(0x7f00000018c0)=[r3, r3], &(0x7f0000001900)=[{0x1, 0x4, 0x4}, {0x5, 0x2, 0xf, 0xa}, {0x4, 0x5, 0xd, 0x2}, {0x1, 0x5, 0x10, 0x7}], 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, 0xfffffffffffffffe}, 0x0) close(r7) 17.946380567s ago: executing program 0 (id=2376): openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x94) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r2, r0, 0x4, r0}, 0x10) 17.901342748s ago: executing program 2 (id=2377): r0 = gettid() r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x5, 0xad, 0xdc, 0x9, 0x0, 0x10, 0x42040, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000000), 0xc}, 0x4000, 0x10001, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x6, 0x0, 0x773}, r0, 0x7, 0xffffffffffffffff, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000480)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000340)=""/206, 0xce}], 0x3}, 0x41) r3 = syz_clone(0x800, &(0x7f00000004c0)="8e9cde5fc0505c88a51f24ff91b9c573faa943a612a69ffdb2a657912efc3df716c947a8ac431fbe8c9736e6d89da8a4485ba6046f29990254ec42b98be9b6120c19ff5db41c03b5e03eaf616de5759564442c99be597f4311a7ccde435bf4570bb11e80a3a9f3e73863bd33638dab99852424faaee4a6e614c89596f58f463d7a4361d5e9bb639c052ca4df37de6b7a77dd5bd44e27560f16f0ea8d10e0621ff381d5387ecd707570c2cd19f69dee95877afa63e2d16b3844effc16d27956a73c2ea5d81addb7b2370d042bb87d6ef87e6bf96e07aca7f9be6634782206ab74806235f661105a3b3b3ac054f6bf3b94573ba134f11f4d9b345d262a56", 0xfd, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="c709dffc5846a20d9c7c3383dc8441ea8e3e025d3eb035e29b1352ec8c208bd7fc0d3c690b69fddbd69af7f49972e0a9ffdb69155331d4c25ff7e45830") r4 = syz_open_procfs$namespace(r3, &(0x7f0000000680)='ns/time\x00') sendmsg$tipc(r2, &(0x7f0000000880)={&(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x2}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000700)="34b2e0b920d2a030", 0x8}, {&(0x7f0000000740)="544f1f4803a328549f9cd1a5db0ba68e89ce5dee2856476fb1e3688eaf464ad188ff41774fa6a88d97a8da6193f616cd3a6dda7b1ffc22005322a9a414d10afab87c2e16f49a80e4b9a414177624464cb61a7309aea1c1d9d9e856984bfdaa4820ee69c5d4ce1ee99f947c96ab06bddabaca95fbaeba0c51eaa2324876c1a39e3c5a381b1d23610b1e44b32a8bb05c33375f2deaf033d938efd3e47fa6d4013a457e5776055d", 0xa6}], 0x2, &(0x7f0000000840)="1401d5d01b99", 0x6, 0x8001}, 0x4000010) sendmsg$kcm(r2, &(0x7f0000000e00)={&(0x7f00000008c0)=@sco, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000940)="9cbae579fc769b38bd862fe1057bd05af721c8a24ecda31803f38cc15f063e9e5438ac86adb33f283b3a45bbda0a72e71d0f9846c9974e01933f078f3b5e3b7739794a23674d92f8f7f7f17c438a283dcd1fa1bc60492f3d1b452c2fe458ef058d50f7f73a4366f8c659bf30a4eedf967d9dfc2083287a5b2522fe2dfe3e171d32bfb1fc496b4765ff1af0c2695770ce789cd6c6410c1d0aaacc61dafac3c8d672e81022e419ae09f1ec0bc4abf6defb8294686a4279d7ba27a8908ee62e2515e1a1bf122b56961a3198223523d64fc24c3b27e203a712605c0f283c6b7293ce83", 0xe1}, {&(0x7f0000000a40)="3b14087af2e5f2476fc9d659365601f744ce7d9790b5a651fa13e56f74461c141dd5deef9c58a6e102131420f9da81ee58f8cee1daca23ab158858549ce1b006a4ab0b544ee68ea0144b935e292c34bac217bea9", 0x54}, {&(0x7f0000000ac0)="e0b3cfa3e4c8c60f73b0deeb7fd6559e", 0x10}, {&(0x7f0000000b00)="8fb4f6f1228f735f9b34c0328477c0c9ca2108e1d19000b7fcc64137850f6ff0f3613e185467904fd80141cf8e72115d0fb137ad9d4cc6d8789aa428c526819ddae8c30dcb588ad239a453277138311b3bd95d28e32097ca0b5f81f9730a67926ba33806de27f01f87888410e92dc5fe18879f97667264fbf505d11b421172a0d33a2d58c6065fe2710a24df3ae40efcbfa55a97", 0x94}, {&(0x7f0000000bc0)="24967c2531dd46260a0610642e89b82ef6de9d75a0a0fe985a6c09a2ad18a5968028b5b2aed9085d1957", 0x2a}, {&(0x7f0000000c00)="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", 0xff}, {&(0x7f0000000d00)="1e6d3a505e433dc037822f393a591222cede6f67a4fbc2af5769b43234c782b12b3bffd335801c9303a6f913ee50c6eee0a891e42f3e1d5eedd5a4b294ed98519cbe8f29cfba8ed277579bf9f48899c618fb9df74e3165fd9efd", 0x5a}], 0x7}, 0x20040800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x17, 0x16, &(0x7f0000000e40)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @exit, @alu={0x4, 0x0, 0x2, 0x3, 0x7, 0xc, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5b}, @alu={0x7, 0x0, 0x8, 0x5, 0xb, 0x0, 0x1}, @jmp={0x5, 0x1, 0xa, 0x2, 0x9, 0x18, 0x10}, @call={0x85, 0x0, 0x0, 0x2e}, @generic={0xe4, 0x8, 0x8, 0x8, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}], &(0x7f0000000f00)='syzkaller\x00', 0x3, 0x47, &(0x7f0000000f40)=""/71, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, r2, 0x8, &(0x7f0000000fc0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001000)={0x1, 0x6, 0x8, 0x882f}, 0x10, 0x0, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000001040)=[{0x3, 0x1, 0xd, 0xc}, {0x3, 0x5, 0x5, 0x2}, {0x3, 0x3, 0xc, 0x4}, {0x5, 0x5, 0x3, 0x4}, {0x4, 0x2, 0x1, 0x1}, {0x3, 0x1, 0x4, 0xe}], 0x10, 0xffff}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001180)={@fallback=r4, r2, 0xa, 0x8, r5, @void, @value=r2}, 0x20) sendmsg$unix(r2, &(0x7f0000001500)={&(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001240)="d1a2e18313325942fe5f7ce6f2d337a5e9dcc14768d5273005b7c35c2d632c5c", 0x20}, {&(0x7f0000001280)="509959a191c87a47d1b335bb77a499beec15a2", 0x13}, {&(0x7f00000012c0)="61f4b20895b7557fea4c8e85673f7c528f121e6813658cd77d83e148e611543f3e4ce6e1dd6f9c264d7fca5329838ffa01435a2cea881f4c393f079ca2c89eaa7a691bb6276222499672771bfa5c4a82d881cee00d5649f3fec4b58076ebf624ade5e67abbb22cd3a97287d07ec0cdad9f257b73c5f17d63e64aa4f6bd4192a69fae75911e2d649db43cbf3d845546c49703846fd67334356871433614663d2c03cf82cff25ec50e178172d9c6c9042c779a2bef7d1110a91ffc8852173421f8b28299603e3d60e886674391b07c7e0aadf71f96ec295f66d827b1", 0xdb}], 0x3, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xffffffffffffffff}}}], 0xd8, 0x24040000}, 0x4008041) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001540)={r2}) recvmsg$unix(r6, &(0x7f0000001780)={&(0x7f0000001580), 0x6e, &(0x7f0000001740)=[{&(0x7f0000001600)=""/76, 0x4c}, {&(0x7f0000001680)=""/168, 0xa8}], 0x2}, 0x12022) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000018c0)={@fallback=r4, 0x3, 0x0, 0x5, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001800)=[0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r7, &(0x7f0000001900)={[{0x2b, 'cpuacct'}, {0x2b, 'rlimit'}, {0x0, 'hugetlb'}, {0x2b, 'cpuacct'}, {0x2b, 'blkio'}, {0x2b, 'devices'}]}, 0x33) socket$kcm(0x29, 0x2, 0x0) syz_clone(0x40010000, &(0x7f0000001940)="5687e671fe4c269e22a975961a356f795c0817ac9de9ba46434a7846ca596f4773cbe21cb56dbdf82e18d51f3332c56c93c2fbf204457f2044b4246a2853a0098d5a9c212cfb80e4739dcbf0a598f9da01b64f", 0x53, &(0x7f00000019c0), &(0x7f0000001a00), &(0x7f0000001a40)="0dd89952622ab6a596d57b127d1a40702410e9612e9a2f7bd1303619c18fc9bf6416a031b20a2ff807f4c6370ec823161fb56630c2b4154aaf883b5e25462c3ff9430c5bbea34c000d4a1ebe84c9b03ed1f69faa6ffc83a9a892053df06078a5f37660799726342f23fccb2067288f") r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x16, &(0x7f0000001ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @alu={0x7, 0x0, 0xa, 0x6, 0xb, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b80)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001c00)={0x4, 0x7, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[r2], 0x0, 0x10, 0xcc}, 0x94) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001d40)={0x0, r8}, 0x8) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000001d80)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PERF_EVENT_IOC_DISABLE(r9, 0x2401, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r7, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001dc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000001e00)=[0x0, 0x0], &(0x7f0000001e40)=[0x0], 0x0, 0x37, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x28, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) sendmsg$sock(r6, &(0x7f0000004600)={&(0x7f00000020c0)=@xdp={0x2c, 0x2, r10, 0x15}, 0x80, &(0x7f0000004480)=[{&(0x7f0000002140)="43910bd1c68ee4a9abb18d13abed6052db76967fab37c5603ddf5068f7b53704f59b413ad7bcbf00fa31747fbad8faadc05cf450fcdcd5cf0f642bd8a8356974b6b0ad79d61d7ab25be88e6b75a698e4552eebbca1d6e94ae938eb4a6e5bb2fcb01089f99c4a098de156cb08b69dfaf613142ad2410d503bbb4f39dc2d068891c1883eed977138f5a3ae57aa74f635ec771c37bfd519f787cfd4f2e7ac8a6e", 0x9f}, {&(0x7f0000002200)="d0afb17640b485581d61606fe6a6e5636be0c83a8a102d36ac6da0e7bc81a61013fecce615a532966dbe016a267d8e168e2adb43c83b9f1d36daac1b1b0c950c35177a2635a622a15affed92106fd5ab9fa0b66795504ba67d7dc751420f5a312c60debcca6e0b8bafb5ee9cefa1be0116d5820560da48552089975495f2581867f7f7512a3cc0b777769c27d833cf16026ac9c88988", 0x96}, {&(0x7f00000022c0)="061dc2c84d4737162f1e3954fffba692a683d73008d5049d081b1cdefac7403197d1c5c98ef0cf69647412dd6888833ea98976b2b707babd88078a5a8a378d0ce02765118b2ea9e3379ee10eda021de96d5ac308ac23d67a846f9d2a692a2651e5fc43f1c04ba4aa6d02081ae97fc6ee18db5d5a4cd1f14225624a16e9c032556705cf9c89d16b7eda0d5a80432fd5f3399929929821aaed3ef377107d32839b1b8022fe26fee02eaff44a3d7dfa540454b50e80c0d9ff3f8b12", 0xba}, {&(0x7f0000002380)="9b2f61c05739da52aeb9f2f5b729c9da57214d8a3892a775c60203a268ab550e789fd5", 0x23}, {&(0x7f00000023c0)="aef3b2cf9ce879adbb1ce388d2c0d373b38866e0c9cec987d299e4b574107f17364dc4a7a853e064aeff445d0ac099a4e19c5461e99300483884f10d482d88d977739ae1d6649700c58aac5554dc853118a404874f149b3a731a48d9eb365ec07aa85249f49444c78b54bbac0cc6b92113d1e723f9e01374b11e3f2df691a2c338be5dd14f51a1ea4f8552b892c68c942747ee36614c43ec5203216b105c748e5a0a5d5beadf6f6bd7f73f8b3b0b05ffc6b09dfc3ebfe75d953b9269b1213f22ba54205f9884af2c6cb32b892d0f12b60e754236a004c9ebd10d52ec3bb0de2333e157aaaef101522f0d7bb891c1303edfc0b51a99bb30413af611048eed72f4134d85d900cf897d5088a4e65ed7df6b133d0941fa782c42e85a391a627fdcef8049959bf743f5fe2ef53b3eb462a390860cf864485eba75b4faa5c1dad211dcb33ccd80c2c74fcab6440fa1c237c9777a3674b0b65869f8da0ee0cddeeb311a2471bd6c7f4666c67633d1bf4f885d37f44abe55b4be5dce501fad76b32a89826f5a09fe5217196874adc4d1d47968d3cc0dc3fada6b6d80e417c58350638c55231717579bd55e2054db87601599d3264562c51ae3f26ac9f50f844c6c6271168af4598133dda1f53898597bd60ce448cede2a9be30721d99596d97c6f29530376591aeda3a30ce3d551d34004170e397005d29acf103b173cef3fd0209691ccc8b12c33f4a715b0846acc043e2817048c34f77217f4469afa820b4001dff9de92121d38f0eec269c0e3af3d6e178d5db05a48d4270abe7c21c9249cff0c9c7ee335c5eb5aff8883500c1bf34b1364b951793ed1232a72a5d82fe4e51607ce786a2c0611992f052514bd97b38eb25fe5a38a52873a48ce39605be846d0cf9f9484b9f167a994230cce947db7374cce6b1ec4bbf292536052ec65ba0cff5d53e04667ee995e716b330a916c195fd594a5fa279f666c3610d13a9cb47396735a4ecf97abb9af28b9f61eb1bb9113268384e8721853614751531378c64f0d79cf1c062caf7aec85f1715fe74f6b43fbbe7a4a65907b39e78f5fe6f6bde49d78a56844ce60bd793e7b120f7b7b7adc2595577d65ad6af3db05abeb17d47e267e4ad158ad948ff7c720b34d260c395013950754d449be3cbada937612cfebee4d3bc03e0704f7c5285dee8a9d82b65e304a7b3e984f5fa68a41c37a6110aae1be077707d6533fa0ada8c32e7d1542bcf573e1b5746e008ac672ee804ed7f9326ba1df2e382649ca3046fc2e9b9a9ca8736026a07c1e3ac66409d70674555889492881a8ec447eb9e21d1797fb067d44c9d4cd17bb18a5f1c8694642ea5e4b0591f0b917b8941eacd2fc87050c5c03fbf4aa4f988ded60780df60a15cb276ebc9ca8f3dff1716a6b7bb0c501d84a9ac9764c9c2aca2689e55a06d689256b9fcfd051e19261bc2b519807e43a6e57d27d709feacb09e843b0e408712194c7e8dc4d3c204cd6e7e14795d13d434592aa8a0ac619af8348789719a1b64927a27b63a3170b606ec2ec61499db0e54a52d302fd87abc611a1d307004099ddca6da24ceffd122d6acc4407bc3ac52e47664fd2f8c294acff496b33e747a34639bd1721b5d405f4d3ac5eef4c2f32d12f8c4611bfc8513a770d4d5489ad68c6533799a944f1435b6668783a4fe85ae42167a16bed0279fbe7bd68a82c87f6477be01d8512423ffa1dcdb1d4f7ed7e03d99decfd64769444693fcf667b0b5ce2ee522cd39b882f088af497f49b19c59e93825fbb8a08c6b79be303becbcd9c2abbe449f71c569303196485fb518e1067f63fca7563754b0932c7296162694281efe1ed46d8bf6f8276c3986c69da2622dd25db0e60d225926429482998e9e5b509949f245a27cd455ffd35fe888b009e9893e677211e6170f0eafbd4f1a884a7a22ef04ca765cb7926cf1b128313501559444ac8e1477a78dbd4c0200c6726dc02c58ccd1dca1b41408f4133539a95c952720e2bb6bd28da3d92e818c9e0a644a01a7a944c8007593e6ed276b1773705480995c9f3c02fdbabc60f027b1262bbf5cc485f73650a504f265e1650f0b5735cbd9d12f9f4f8b3681d577747e56eccdbd2d0579f44a5cc6ab30affad783af77c8bfb9f33c128ac26c4bbfbfe731f39f4eb0ca8e30cb0b3fc199de5dbe2659831392913ccea6d4e1bbe554d6597d0fbc541445c651d8d039e5074fc5ee96f4eddf3dde1f12757fc6fd73ba66373f0f14a4ce177b654b11604cf95c3d95eeabd00a35e1571f651976ce9e38f045f1426093862b6c803b1c32d1c3c93dbd6e3f2fe74ac60ec9130d4626a7f001af434e4dd422198040293515fbd1c55f149aa6b6fad4f979337799e8ab9265ad40ae4bd6cced6b142c21d979c2af331b679c5f097741d771bf84618fb1176d3b74a550173eb5585c606ee9aa7efcdcb3d4141aa21449f402207110999bb5a455df436ef3174de52e7fee8cb60c70ca3a779b79d5821e48f1ff07e1ddab80793ac163e8d2f16344090761d8f149fff0ae3585741a09557faab5d07977065c2ca6dd12ae0794ebe3b550ce48a1bcd934d3be39baa99b23fa9d2f961f6436db6f008bacb5da109c678692030e1f106cbd6bf28128474a9076c807d0c4dfa078d60917689a6a24a9b7a6c04fa6afbf1e4341d15c60b65d4adc62c140de38b577d9efd1e57d2d4ebba85205b13a797fbd6e9db4117120ab850826a2995f87aa8e7b53fd6ffb3000fd2a9be607dd99cbfb7afe5d5a87c505245f7d0a4330e8297fee5da3a21671f87c1c4dde6726de71623f9e6075faf46beb337cc417fc96f680fd932641d446fae11bd0a3e495298daeeaddff3bd88623fa0950f0fd9265e49e0d6844ebe57b8d3b63010274abc8bac2fb80be41c8796c4df2800c052c85523a27b1d46134c0de8f5ca5fb5ae57becf7b13ba2345869d1661b72f4dc04da87245da32aab0767c6909deee78c6cba94d6c646942b247e89ca9f93a92cc57a6ac01c94adf61066f8152eb783131086698ed6943f60ebadfcb5d6865da521529513f4accee108c4da93012e3b918ab340053dc876c6d34c5b1cdabad7758837ed2a1395dcc33615eeb3007d61c4099c7106bc0132994ff575f2543a010f8e9c2804fbb0efafbb2b5b3090efb8168602abe2bdabbbd2d1fdccbe8ae560ebad5d867173eee1aeb3df16856b83a5f92df878bbe0122dccf8df2bf45a5f484ddd30bbf35c3b8c3b0295738f1e3572da77551527a9650493f55ccd54bd129573f45ce027fe60361e59073ec49a62eee5afab822efe0bc5ef03590ad2918d171be47121814d807f11276fb7c6948b618192015b516ec54ea47099861f929cf6d95a084b1e1197aa7cfe15e1cdc3a705821e1f7a5b6e522a121029cc67bfd4980c8a26d28635a3a6dd687099e06b27449656ee3bc9e7b2e6798aa3e8c53030c44b05b19eaf15b9753c90e3e8c2a37ccdd594a8a4aa961626f50a80b6658b085e3693ba15570fd379dd0374af3d991479a7bf3dba7b46dd0d5056086627a36230965f4b8a85d28f91390010b9750080a6ab651d0ae50f27f052df5f542eac0e2cf580d876e41fdd82290d09cc4680405715e7993c26e1b986040017c9d30c2878a3c290d503755d171b15edd8d9a29b79bc4275cf2fc65ed63112c4e262416e8aeb8c962c8fb2144daa260e3a26a34561bc3572200c6f3ccc47975b69b1178588f3e7769f58c9a3b124100dc4e910950192a214cb369ecfd962f66a63e44ddfac22176059921d32b36ee2feb9191dbb2f7d78671e93b1e7e80f4749e6a56360035970de02897d125dedd1514476a417bd21059a8864f5a9e499bb1abe88664ca9935fff78c14f340c475bf295d52d0e1b6ebcfd48ebeb4f34657af02a75c3e6c9ab0a4451af1815be161530ab7755def3bb599f40b84e494664856b3d843fe8062ed352471e8adbeb2678be12549c1dd23681f1df32f55276c22e82fc2070814fd5b20fae37e7c159412f5b485ab2c43f0eb67e8392bf313ff908d2ac63bf03872709c8f7330ea80d9a00294a4df5e757a8d3f5520c91efe1468941f28475eb934efcf1658c37eb77ceed1ada87e69a6000590cae48cdce47a680ed6281fba60905ef823cc996d4ee326a253f0e473cc54bcd999f479dd321b6b7fdc14aa624c713fe99f85c2430f90f6f0f007b30c4e1a55acc3f715ebbb6de776760d7039ae1172950b899fc9026e2bf9ce8722f6bceb7a2ca5ad71369561c61186a55a9b51aa5859f837e9f921cacd604e095ad188d1089361e39620e8f48b9fdf5dba81a29f96ce84e5671b385e7586e2dd100fdbd9ad7880ced24b1c0e5a72f239d6cea4465f09748ef066f2f7a36cdb09544fa390f136c8af504e511bf599582ebbce35a9e4a30f45612406a3009c257bce465aefc4404bdf66aff0adcf95447f65c12ece8815ae961da1418fe40459872c4cd017ae829184735cdff87d6a6edd6a06f4e22913e001395e4e95d8459c7051d75624b8baea1f3287d05f0f75c97806cd22841e1ea19515bdb8d57b4e214649017e10c862ea65798e078905ad8b027f0c9c8c92bfa24f9250fdfd6dc4c40816c152d832bf4875769d6031d5d23713651cb9dd627fc6c6819c6c8390b1a317810d932931ca4234556779163e6bcba43f5a0620dfe9bbf8b5bbfec6099fe7499f3654b3f93e54d33f0665d310206e6842daa911d9a40494c1130f92ce84d0440ab785901633983342e4ac4aa7a6143848c0ea53353651ba30ac30b36eff50cd8cab0aea42d8af942af68b4ef9b47468794ea84824e9b2338c24615739b1bb8d4042e596eda509ddeb440e647714c66190414a2c38a866100189f1f2ed32ef190aadf6df4a124d0cf54d5ddf23020bd860894ac6c1472e1a0ab2617161a419a9d77c48b0c4733f6bb314d1206a9b7768a502356ddfdebaaee3310af55ab3550a6b260ca21d5ca42e2b76ca650c43ece4c37751b1d1568ce1e2c48087d428c31c86317176b7fc743fa4b4b8d8026dc64d7acd7ed212d04f057765f770062f727fb18d755ccca2e1d1e37128e63c80ad57834d47c74805c7f49d417490ccdea8915efec6233e7e5175ca5775d5a355292ae05b62dde90e6b812c64af7aabf5af6e09d191f2e6961ae7da18a1bb524e5d0b4e2f4ba0b9c7be17af625401d5db918478552855c1a4b7857ea933bcca2beb915ce58844a06233fa44dd3bb1d0531e1bb034d13c620057b75f53a5e68b4660aae83f57da835957ae31fbf05e7b497eda1ebb780e070c2694cafa5f3107a6237f6a054ad0c572095c0cf5a3b625c322a4b57619e3f071622e0bc2298860c891bf115f0935b6fe5edd8c7a0ca3aba8b43dbc199c0a6bbb76be69b32390fc9ea1c9e9a9b68f9459918afd5d89342724b4104ef9de4635fd35c9937feefd1d9231f28b4d1a071b6ef17322e16e96aa0188c319d5257a87907a3e91fe73496304f10dad18dc29a30445d31237da0587476dab38738493a72c42c1e8a57aeee67699efc90ff171dca28fcfa2d9dfab5b3997fc41a3e345df0d9bfd1d153565214444d35f216601f9c53978988e3b02409a6ff549e1759e77389575dff027e358e58b66db9a870773b3bb87648f0614e6dc13ed56f22a9ab333ed81a5bd4aea12f0b1f729c7049df7ba40b3b92c5299e2c23463c1509c3875cf50f4a11a591bcbec24b3e600a2518b568164b8fcb417ba4fe29b6d083f5348030a532bea5a2fa6b78015c706e05d519ad68071ca2485341647784631597a02", 0x1000}, {&(0x7f00000033c0)="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", 0x1000}, {&(0x7f00000043c0)="c81192d1b052bbd584b49849d59067fc334d9b405a510c3a07d638ddb4ad6f8f177cd1d36b94f5df369ff4349759920bbce508d237d54f3614a115ee65789ffb61ae059aa8df1156c15e3b53d0443cc95f4a7301493f083662cd32a4ff40c478e7d4bacb1e7fb9077e07398bf935d5472cc609f1d8a433900328dc66a87e77daa137f22e84a86fb4d97b58163a78567b0660aa319d07c1b89393d1c5152be0ad55478148", 0xa4}], 0x7, &(0x7f0000004500)=[@timestamping={{0x14, 0x1, 0x25, 0x7fdf2746}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xb2b}}, @txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x9}}], 0xd8}, 0x20000850) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000004640)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000004680)={r7, r11}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004800)={{r7, 0xffffffffffffffff}, &(0x7f0000004780), &(0x7f00000047c0)=r7}, 0x20) sendmsg$unix(r2, &(0x7f00000048c0)={&(0x7f00000046c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004740), 0x0, &(0x7f0000004840)=[@rights={{0x2c, 0x1, 0x1, [r4, r5, r1, 0xffffffffffffffff, r5, r12, r11]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xffffffffffffffff}}}], 0x50, 0x10}, 0x40) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000004900)=0xa) r13 = perf_event_open(&(0x7f0000004980)={0x1, 0x80, 0x3, 0x0, 0x8, 0xc, 0x0, 0x7, 0x10021, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x65, 0x0, @perf_bp={&(0x7f0000004940), 0xc}, 0x11100, 0xfffffffffffffff9, 0x0, 0x2, 0xfff, 0x9, 0xc, 0x0, 0x53, 0x0, 0x80000001}, r3, 0xf, r7, 0x8) ioctl$PERF_EVENT_IOC_RESET(r13, 0x2403, 0x1) 17.80941254s ago: executing program 0 (id=2378): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x31, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x10, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x2f, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006", 0x15}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@typedef={0x2, 0x0, 0x0, 0x8, 0x3}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x22, 0x1}]}, {0x0, [0x61, 0x5f, 0x6f, 0x5f, 0x30, 0x61]}}, 0x0, 0x3c, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000080)={'batadv_slave_0', 0x32, 0x32}, 0x11) 17.674563983s ago: executing program 2 (id=2379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x884d, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000001200)={&(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000080)='\n', 0x1}], 0x1}, 0x24004091) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x24, 0x0, 0x0) close(r0) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0x20000000, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) r3 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8918, &(0x7f0000000000)={r3}) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0xfffff010}]}) (async) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) (async) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="180000007f000000000000007f58000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009f31e0ffffffffffbf91000000000000b7020000000000009500"/104], &(0x7f0000000600)='syzkaller\x00', 0x6b5, 0x8e, &(0x7f0000000640)=""/142, 0x40f00, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0x0, 0x2, 0x1482}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0x1, 0x1], 0x0, 0x10, 0xfffff801}, 0x94) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000008c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0c00000011000000", @ANYRES32=r6, @ANYBLOB="259486ac84e6f9d33f8e36560d19f74f7c26e8014e364214a6f92e86b2d1a1290ba4bcdeff82fd7c003aa1d8d758f81a82a4956a40568210bb97c4c1e4dd7dfdfd9fd2f35243de130734f6694213d0adc3a633034e0000000000729bcf6dc1f65411f08971039fbd5962c3de69880c67e64cefd263e61e45e13b704f31d4e6e9c57b42b13c83b768cee28d5233dda419bad9447401b3133e8266c94b660113de350a8eb56236b522c3ae296ceef47c33fae7f3bbe3b78f88877694b2dd80954472dc2772eb912f33db4333cdbc", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000140)) (async) ioctl$TUNSETOFFLOAD(r8, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000090401000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000020130180000000000000000000000000000009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 17.669599473s ago: executing program 1 (id=2381): mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_tracing={0x1a, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbc0b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xe, 0x6, 0xb, 0x9, 0x3ff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x32, &(0x7f0000000100)=""/50, 0x41100, 0x60, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x0, 0xd, 0x2, 0x3}, 0x10, 0x12de3, 0xffffffffffffffff, 0x1, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000001c0)=[{0x5, 0x2, 0xa, 0xb}], 0x10, 0x8000}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf6f, 0x0, 0x0, 0x0, 0x9a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000380)='syzkaller\x00', 0x4, 0x1, &(0x7f00000003c0)=""/1, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x3, 0xd, 0x3300, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x1, 0x4, 0x6, 0x5}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map=0x1, 0x33, 0x0, 0xe, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex=r4, r0, 0x37, 0x11, r1, @void, @value=r5, @void, @void, r3}, 0x20) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000880)='io.stat\x00', 0x0, 0x0) sendmsg$unix(r7, &(0x7f0000000d00)={&(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000940)="012587f928c4aed63569cf68fb0d2fa634adcd76b19b3f95d177fd0fbbbde228fe5b2bc9f16b2c204048a3ea895a70b3c972e7d95265ccfc91fd3e29215e5d788269fb784ec0f5e191344243b8e42906", 0x50}, {&(0x7f00000009c0)="ce36d07ab3394e74a67a5adadee3d124d201d2d5ed3ca37be1685d132e5b47cfa2c546c8c6ebd05066d41119a75221ba32a09b398bd6c1e42652926380b0dc8d2c052d93959cc6a0da65e054fe9a22e6045d7031a3b82079bfe87f94f644331279e35850ecb45dc684cc58921b4ccefb476e7d2f1f33a1fb2ee234b2a2eb1e630a9d00ebbc50bfa3e1498cc4b8b50bfe30e499f7a57f764bade86af9653559044db7957b488feb8279e0990a", 0xac}, {&(0x7f0000000a80)="238d7d3b2bd1b4f44834659e60ef98770c1feb0df85cc520c67cdc82f1011ae1fe82a143411e25486134f358d424c9c7b3af390b3f549fe09844dda51eff155c23c0c1c068c0990473cb4f8187f9e7ac8964c4301008ab0feb2e1a9fabe132172dd30cc2969c9044bed97252b8db948115505aec612100789a4cb8e02eadfe177d58e7594725d53d6f36fc9f2cc02c52a6a9eba39e098591f4121ac54cc91b65b73bad76ecd87084a4d772ca66aeb0a2ec05931203ac76f1cc0769fcbe0343901a574ac348e8ab0dd5ee03016cfa3c00d2670d1f48a8efb49235adb34d15c94c274d5a8dddc473b12d551378ee461b", 0xef}, {&(0x7f0000000b80)="83324b5abe498e5b68c94b5e035d7c151118c2e0b77d82f8f758a650e5110c7e5e081223731da479b925e52cc39772a96cd2cbf803cd1814aeaba93707360272fc37c9b50709ec3b01c19a5ff3a147847c2549ed94430f00fe2ef5", 0x5b}, {&(0x7f0000000c00)="9c735d0b567ba009e7752ed9d2891f6fa6b229720746727b78e63b4946e08eff8ede6e4b5767138d537a97557ab737bf", 0x30}], 0x5, &(0x7f0000000cc0), 0x0, 0x814}, 0x8000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r8, &(0x7f0000000d80)='memory.pressure\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r2, 0x58, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e80)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x171, '\x00', r9, r7, 0x4, 0x3, 0x2}, 0x50) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x1) openat$cgroup_freezer_state(r8, &(0x7f0000000f00), 0x2, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f40)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x1, '\x00', r4, r7, 0x5}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x8, 0x8, 0xda12, 0x5, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001280)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x22, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0xa, 0x1, 0x0, r11}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa, 0x4, 0x1, 0x2, 0xffffffffffffffff}]}, &(0x7f0000001100)='syzkaller\x00', 0x4, 0x66, &(0x7f0000001140)=""/102, 0x40f00, 0x80, '\x00', r9, 0x25, r7, 0x8, &(0x7f00000011c0)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000012c0)=[r10, r12, r2, r10, r13], &(0x7f0000001300)=[{0x4, 0x1, 0x3, 0x1}, {0x3, 0x1, 0x4, 0x11}, {0x0, 0x3, 0x0, 0x8}, {0x3, 0x2, 0x7, 0x7}, {0x4, 0x5, 0xc, 0x5}, {0x5, 0x5, 0xa, 0x9}, {0x3, 0x1, 0x10, 0xa}, {0x2, 0x3, 0x3, 0xb}, {0x0, 0x2, 0xf, 0x6}, {0x2, 0x2, 0x0, 0x8}], 0x10, 0x3}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001580)={r12, &(0x7f0000001480)="47401089f6d437c6c1097443b22c23701c1bad0dc89c7c5591381bc9e612826ec6f16e0b5e2cdf68089900d08f6049457bedfe771300d1cbe380e4c05c1d7bba4254b053ffd70358d5cf417743788a66e3fd013d500f120da5241c62a098ae26b933aeced62b105cfb1fc26e26684cde6f24e16101c6616ed70ae6cce57826a0200770f775b9760eba7cd5e4f485bbe8c562c0dfc54d735d0e46175b6cba71d7dd64bd3d8b1b9764cbdd49d0eaccb3b52e263aea1827602e831958e4541975f9f8b1f3a496a6e14c0d8cc3d68a0b3ffda47820680c56fc"}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001680)={{r12, 0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)='%pB \x00'}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@bloom_filter={0x1e, 0xf, 0x6, 0x4, 0x2c000, r14, 0x7d, '\x00', r9, r7, 0x5, 0x2, 0x2, 0xa, @value=r7}, 0x50) openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000001740), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000018c0)={r15, 0x58, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001980), &(0x7f00000019c0)=r7}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ac0)={0x6, 0x6, &(0x7f0000001780)=@raw=[@jmp={0x5, 0x1, 0xd, 0x2, 0xa, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x1, 0x1, 0x1, 0x2, 0x4, 0x20, 0xffffffffffffffff}, @exit, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], &(0x7f00000017c0)='syzkaller\x00', 0x0, 0x40, &(0x7f0000001800)=""/64, 0x40f00, 0x1a, '\x00', r16, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001940)={0x3, 0x4, 0x7f, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001a40)=[r11, r17, r13, 0xffffffffffffffff, r15, r13, r13], &(0x7f0000001a80)=[{0x1, 0x5, 0x1, 0x8}, {0x3, 0x3, 0xb, 0xa}, {0x1, 0x1, 0x9, 0xa}], 0x10, 0xc}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c00)={r2, 0x58, &(0x7f0000001b80)}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002000)={&(0x7f0000001c80), 0x6e, &(0x7f0000001f40)=[{&(0x7f0000001d00)=""/189, 0xbd}, {&(0x7f0000001dc0)=""/76, 0x4c}, {&(0x7f0000001e40)=""/238, 0xee}], 0x3, &(0x7f0000001f80)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x40) 17.181103956s ago: executing program 1 (id=2382): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20460, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x202, 0x1, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6349, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0504000004000000040000000400000040100900", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc4ab, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x3, 0x6, 0x0, 0xa, 0x30, 0x50}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x4}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x2a}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.355801841s ago: executing program 0 (id=2383): r0 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4a5a0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x102500, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cpuset.effective_cpus\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0x2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x11164) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x5, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r6}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290350be400457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xdc}, {&(0x7f0000000280)}, {&(0x7f0000000280)="b57829f68b28870e1a37fa5d414d6f", 0xf}, {&(0x7f0000000300)="79c753ee2edb8d204fc0f3f0a44e4b50c8e0cad28130ff3e88667f13a236efece3dbf11d644f0eadf559e539df2238e7d82b1a1675f3e06059d48648a259450112805270d1017e9bf8be2c30113bb84d35d935b6106885ae7221674aaf3e12ddb3277a2f6f0d46d41b2e8ca211227ed567", 0x71}, {&(0x7f0000000500)="7eee1f26788a27b3116e9e6dcb168af7057a28484b4479b0ab7984dace82d7bb31c648e46f1028674919394a22331481653b4e8276efdb972659cf4ccd735925d40b4f50370205265185409ab90506a6eaac997dd4f962419a9fb20e35c24352d2f1ef59c9993c30dfcda79aa96a468d1d1bf7df3f435f1a541aa264f1ab31a9723804aca6d1d55282f69654efa92f97e7c81d30eb069e07bc36d3c0625e53382119912ca6ffef3008bbab39e59edf3d548964deca43e428a95e6de11c468881", 0xc0}], 0x5}, 0x4000050) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan0\x00', @random="ee9a1b44f1b0"}) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) 15.278462983s ago: executing program 1 (id=2384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x18, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5}]}, &(0x7f00000005c0)='GPL\x00', 0x6, 0xa1, &(0x7f0000000600)=""/161, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x5, 0x7ff, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x2, 0x2, 0xb, 0x1}, {0x4, 0x2, 0xc, 0x9}, {0x3, 0x2, 0x5}], 0x10, 0x4}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x6, 0x511c7f75, 0x1, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0xa, 0x2, 0x3a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac14"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r5, &(0x7f0000000380)="90abe8d51f2006915afbf7f25ec1b1e749fa40207789b7b311a84ed2ebc7dda7b06e3ff70cc119c8e433af0c424b227e171588cdb320bfa3782e04e5bee842b42497b4ce4b8683df644607ff2c8fd935881680be836f344d564843a5af886a298c563fa04409944b79ec38bce375a90e7bf1fb584c529cc285a401a76528aa9bfbf4e50662662a1ddfb7ede063972e705de9953f7c8833", &(0x7f0000000440)=""/107, 0x4}, 0x20) 15.275470563s ago: executing program 2 (id=2391): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c00000004000000090000000600000020000000", @ANYRES32, @ANYBLOB="fdffffff000000001b4334970000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x22, &(0x7f0000000ac0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x8a}, @ldst={0x1, 0x2, 0x6, 0x3, 0xe, 0xffffffffffffffff, 0x10}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000000c00)='syzkaller\x00', 0x3, 0x3a, &(0x7f0000000c40)=""/58, 0x41100, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000cc0)=[r2, r2, r2, 0x1, r2], &(0x7f0000000d00)=[{0x0, 0x3, 0x2, 0x3}, {0x5, 0x3, 0x1, 0x7}, {0x1, 0x2, 0xb, 0xc}, {0x0, 0x5, 0xf, 0x3}, {0x0, 0x4, 0xe, 0x8}, {0x0, 0x2, 0x10, 0x5}, {0x0, 0x5, 0xd, 0xc}], 0x10, 0x10001}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000e40)=@raw=[@call={0x85, 0x0, 0x0, 0x69}, @generic={0x2, 0x8, 0x0, 0xfffb, 0xa}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000e80)='GPL\x00', 0x8, 0x56, &(0x7f0000000ec0)=""/86, 0x40f00, 0x1c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000f40)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000f80)=[{0x0, 0x4, 0x5, 0x9}, {0x0, 0x5, 0x4, 0x1}, {0x0, 0x3, 0x0, 0x6}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000011c0)={@cgroup, 0x3a, 0x0, 0x8ba, &(0x7f0000001080)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001240)={0x9, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001200)={@fallback=r1, r3, 0x4, 0x2022, r4, @void, @void, @value=r6, @void, r5}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002e00810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {&(0x7f0000001440)="f6e14ee68a9418", 0x7}], 0x2}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = gettid() socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000000780)={&(0x7f0000000180)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000300)="1554e8f0c87042e3824fea75312911528d3dd1e86d1e7faa0f31479cc781bbc7b700000000000000008c00a3f7fa18d1b652bef4fd90c89275c28a5c9db90ac376f77d508942b16450c7687f4a21259c00fc8c6f02dcc7547f8a32328286abc661eb1b888f75f229099b9d3a6187e8d80b50c7c4016e9b4873a4f474effe45a3565102ddec652d995b37dda487349eb31c740bca29d0a4e045b2b8f8f2ebb54f2742bb181ef03875b470d0bcb60b710ca7f3281c8cf70ea122bfebb79b59f44d107bdba089af7528a3e55821adbf8c9a7ae944eafe56a4187a770f6d2383cc381ed75dc7a6bc14b184d756fd4a7997e5fe8bdbda9d6c", 0xf6}, {&(0x7f0000000840)="2c9b208d4abd1160d715f4786a1e2c072d7c82cdb822afe5b5dc27ce942f4295e78119012c57fb3716546d9ecd2f6d9654cefa25b50eb558bbcbe10d2697a4889a2b97d5fe9349928834b1ba99785ef75e38612cc02676804f0dbfab7f", 0x5d}, {&(0x7f00000008c0)="2834f79eec12143d5fcefa9f2cbb202681b807232e3b586e250eba262a80e0f201b2bf634ee5b6f5046ae23d72aa8826fcf88c9db60b188e6d2bcf44e53d287a4318bfc0", 0x44}], 0x3, &(0x7f0000000680)="11da40c5d30c65f9eddfe866e57a09c434b63d298679e2c60a567d54474b6693157772561fd2df1cb048b4f752a794fa7087ca7338e22fec7bdc2602b5c7b298ff3470b4e9c541a6734ddefbec7a697df36cb5ccbc56829ed22d301064e6b853930482289b065b44c790283d47ef35aeab9a99715f16e9c0e2960bd799a308d1d7a7b117a17e4625a7e5a337c296aeedda4a344fe218ae80b23d7a4e62cf63d80f069120e19afb8a80bc7bb42c5e911aa58387", 0xb3}, 0x4) sendmsg$unix(r8, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x50, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="01d33a420553babe20aaa7f215c7936301d47166927bc7d2f1a168a0fa346a6d2dc146b547ecabfdd240bc512286f83c60e595eabea9ffee2cec52bf1c145bb777fb2ab7bf585c8b26cfb92ff1396c266962b51f0729ee7911dd0bbeb6bc78ae8b6f7e819f479eaa6ae410234f3f75707e43daac615cedb53c68d899cf87b886a674fb004911023d1e77fb3fecacd55924dc953d19e3351cc9162d1ea3e5743998de5740a519c0876900fa7083b04fbe00f759dde7f208966dd00feb6377fdd84c636c20bd5da71c0b608398516dca34bb234ba4e562c3bc0ee7f365ef65f4917b8f23e57280882979b52cb3d0ba"], 0x38, 0x800}, 0x40800) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x11, 0x2, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d", 0xca}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x3, 0x10) 211.074105ms ago: executing program 32 (id=2383): r0 = socket$kcm(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x4a5a0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x102500, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='cpuset.effective_cpus\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10e, 0x2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x11164) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x5, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10, r6}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000680)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290350be400457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xdc}, {&(0x7f0000000280)}, {&(0x7f0000000280)="b57829f68b28870e1a37fa5d414d6f", 0xf}, {&(0x7f0000000300)="79c753ee2edb8d204fc0f3f0a44e4b50c8e0cad28130ff3e88667f13a236efece3dbf11d644f0eadf559e539df2238e7d82b1a1675f3e06059d48648a259450112805270d1017e9bf8be2c30113bb84d35d935b6106885ae7221674aaf3e12ddb3277a2f6f0d46d41b2e8ca211227ed567", 0x71}, {&(0x7f0000000500)="7eee1f26788a27b3116e9e6dcb168af7057a28484b4479b0ab7984dace82d7bb31c648e46f1028674919394a22331481653b4e8276efdb972659cf4ccd735925d40b4f50370205265185409ab90506a6eaac997dd4f962419a9fb20e35c24352d2f1ef59c9993c30dfcda79aa96a468d1d1bf7df3f435f1a541aa264f1ab31a9723804aca6d1d55282f69654efa92f97e7c81d30eb069e07bc36d3c0625e53382119912ca6ffef3008bbab39e59edf3d548964deca43e428a95e6de11c468881", 0xc0}], 0x5}, 0x4000050) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan0\x00', @random="ee9a1b44f1b0"}) write$cgroup_subtree(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000039c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/87, 0x57}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000b00)=""/157, 0x9d}, {&(0x7f00000008c0)=""/210, 0xd2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x42) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 33 (id=2384): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x18, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xc5}]}, &(0x7f00000005c0)='GPL\x00', 0x6, 0xa1, &(0x7f0000000600)=""/161, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x5, 0x7ff, 0x2}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000780)=[{0x2, 0x2, 0xb, 0x1}, {0x4, 0x2, 0xc, 0x9}, {0x3, 0x2, 0x5}], 0x10, 0x4}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x1, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x6, 0x511c7f75, 0x1, 0x40, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0xa, 0x2, 0x3a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907003675f37538e486dd6317ce623900fe800000002000e0865a6596aff57b00000000000000000000000000ac14"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x400c080) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r5, &(0x7f0000000380)="90abe8d51f2006915afbf7f25ec1b1e749fa40207789b7b311a84ed2ebc7dda7b06e3ff70cc119c8e433af0c424b227e171588cdb320bfa3782e04e5bee842b42497b4ce4b8683df644607ff2c8fd935881680be836f344d564843a5af886a298c563fa04409944b79ec38bce375a90e7bf1fb584c529cc285a401a76528aa9bfbf4e50662662a1ddfb7ede063972e705de9953f7c8833", &(0x7f0000000440)=""/107, 0x4}, 0x20) kernel console output (not intermixed with test programs): ytes leftover after parsing attributes in process `syz.2.726'. [ 265.512086][ T8371] netlink: 'syz.2.726': attribute type 21 has an invalid length. [ 265.546059][ T8371] netlink: 156 bytes leftover after parsing attributes in process `syz.2.726'. [ 265.642839][ T8373] sit0: left promiscuous mode [ 265.732950][ T8370] netlink: 'syz.3.725': attribute type 10 has an invalid length. [ 265.765745][ T8370] netlink: 2 bytes leftover after parsing attributes in process `syz.3.725'. [ 265.880632][ T8369] sit0: entered promiscuous mode [ 266.315953][ T8374] netlink: 'syz.3.725': attribute type 2 has an invalid length. [ 266.852621][ T8399] netlink: 'syz.2.729': attribute type 29 has an invalid length. [ 269.569382][ T8399] netlink: 'syz.2.729': attribute type 29 has an invalid length. [ 269.950081][ T8414] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 272.672967][ T8414] netlink: 'syz.2.735': attribute type 29 has an invalid length. [ 273.977803][ T8459] macvlan1: entered promiscuous mode [ 273.993643][ T8459] macvlan1: entered allmulticast mode [ 274.000236][ T8459] veth1_vlan: entered allmulticast mode [ 278.096371][ T8493] netlink: 14 bytes leftover after parsing attributes in process `syz.0.754'. [ 278.674200][ T8493] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.710227][ T8493] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.738968][ T8493] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 278.767411][ T8493] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 278.778016][ T8493] veth1_vlan: left allmulticast mode [ 278.797146][ T8493] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 278.819927][ T8493] bond0 (unregistering): Released all slaves [ 278.849086][ T7987] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.056733][ T8525] netlink: 'syz.2.764': attribute type 10 has an invalid length. [ 280.154698][ T8525] team0: Port device macvlan0 added [ 282.337753][ T8534] netlink: 826 bytes leftover after parsing attributes in process `syz.2.768'. [ 282.347752][ T8531] netlink: 14 bytes leftover after parsing attributes in process `syz.1.767'. [ 282.415776][ T8531] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.440233][ T8531] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.461252][ T8531] bond0 (unregistering): Released all slaves [ 283.341565][ T8554] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.775'. [ 292.800260][ T8620] netlink: 132 bytes leftover after parsing attributes in process `syz.2.797'. [ 293.046271][ T8628] netlink: 'syz.1.798': attribute type 33 has an invalid length. [ 293.084033][ T8628] netlink: 152 bytes leftover after parsing attributes in process `syz.1.798'. [ 293.109851][ T8628] `: renamed from ip6tnl0 (while UP) [ 293.142229][ T8628] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 293.159066][ T8624] netlink: 14 bytes leftover after parsing attributes in process `syz.3.795'. [ 293.757997][ T8624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.894151][ T8624] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 293.909036][ T8641] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 294.014142][ T8624] bond0 (unregistering): Released all slaves [ 294.046412][ T8641] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.808'. [ 294.193321][ T8643] netlink: 'syz.1.801': attribute type 21 has an invalid length. [ 294.344020][ T8643] delete_channel: no stack [ 294.349908][ T8643] delete_channel: no stack [ 294.382893][ T8643] netlink: 'syz.1.801': attribute type 17 has an invalid length. [ 294.391502][ T8643] netlink: 152 bytes leftover after parsing attributes in process `syz.1.801'. [ 294.459116][ T8643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.518606][ T8657] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.805'. [ 294.651099][ T8664] netlink: 63591 bytes leftover after parsing attributes in process `syz.3.807'. [ 295.548809][ T8685] syzkaller0: entered promiscuous mode [ 295.558953][ T8685] syzkaller0: entered allmulticast mode [ 295.807057][ T8697] netlink: 'syz.0.817': attribute type 21 has an invalid length. [ 295.819895][ T8697] netlink: 176 bytes leftover after parsing attributes in process `syz.0.817'. [ 296.146224][ T8709] netlink: 'syz.3.818': attribute type 9 has an invalid length. [ 296.165852][ T8709] netlink: 152092 bytes leftover after parsing attributes in process `syz.3.818'. [ 296.401933][ T8719] syzkaller0: entered promiscuous mode [ 296.408773][ T8719] syzkaller0: entered allmulticast mode [ 298.765518][ T8735] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.825'. [ 298.792623][ T8734] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.825'. [ 298.971737][ T8739] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.826'. [ 299.418244][ T8753] netlink: 'syz.1.830': attribute type 1 has an invalid length. [ 299.545954][ T8755] netlink: 'syz.0.831': attribute type 9 has an invalid length. [ 299.571259][ T8755] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.831'. [ 300.034077][ T8764] bridge_slave_1: left allmulticast mode [ 300.040281][ T8764] bridge_slave_1: left promiscuous mode [ 300.049613][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.075012][ T8764] bridge_slave_0: left allmulticast mode [ 300.086625][ T8764] bridge_slave_0: left promiscuous mode [ 300.134370][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.703900][ T8774] netlink: 'syz.2.835': attribute type 10 has an invalid length. [ 300.845921][ T8774] veth1_macvtap: left promiscuous mode [ 301.345769][ T8795] netlink: 'syz.2.843': attribute type 17 has an invalid length. [ 301.354323][ T8795] netlink: 'syz.2.843': attribute type 16 has an invalid length. [ 301.362189][ T8795] netlink: 152 bytes leftover after parsing attributes in process `syz.2.843'. [ 301.400763][ T8798] netlink: 'syz.0.841': attribute type 1 has an invalid length. [ 301.760888][ T8806] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.846'. [ 301.772377][ T8808] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.847'. [ 302.010186][ T8821] syzkaller0: left promiscuous mode [ 302.025867][ T8821] syzkaller0: left allmulticast mode [ 302.052325][ T8824] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 302.082290][ T8824] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.850'. [ 302.102124][ T8824] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 302.334309][ T8827] netlink: 'syz.1.852': attribute type 10 has an invalid length. [ 302.366867][ T8827] veth1_macvtap: left promiscuous mode [ 303.064096][ T8831] netlink: 'syz.3.854': attribute type 1 has an invalid length. [ 303.426850][ T8840] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.856'. [ 303.607377][ T8847] batman_adv: batadv0: Adding interface: netdevsim0 [ 303.662832][ T8847] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.723105][ T8847] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 304.099364][ T8853] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.862'. [ 304.135259][ T8853] netlink: zone id is out of range [ 304.140687][ T8853] netlink: zone id is out of range [ 304.160928][ T8853] netlink: zone id is out of range [ 304.183364][ T8853] netlink: zone id is out of range [ 304.188937][ T8853] netlink: zone id is out of range [ 304.213262][ T8853] netlink: zone id is out of range [ 304.218647][ T8853] netlink: zone id is out of range [ 304.234878][ T8853] netlink: zone id is out of range [ 304.240319][ T8853] netlink: zone id is out of range [ 304.263341][ T8853] netlink: zone id is out of range [ 304.645849][ T8865] validate_nla: 1 callbacks suppressed [ 304.645932][ T8865] netlink: 'syz.0.864': attribute type 10 has an invalid length. [ 304.732436][ T8865] veth1_macvtap: left promiscuous mode [ 305.970164][ T8884] netlink: 'syz.3.871': attribute type 29 has an invalid length. [ 306.395268][ T8884] netlink: 'syz.3.871': attribute type 29 has an invalid length. [ 309.904831][ T8888] netlink: 'syz.3.871': attribute type 29 has an invalid length. [ 309.922134][ T8900] netlink: 'syz.2.874': attribute type 21 has an invalid length. [ 309.930133][ T8900] netlink: 152 bytes leftover after parsing attributes in process `syz.2.874'. [ 311.600369][ T8926] netlink: 'syz.0.876': attribute type 4 has an invalid length. [ 311.629217][ T8926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.876'. [ 311.900572][ T8940] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.887'. [ 311.910976][ T5780] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 312.019628][ T8940] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.887'. [ 316.280293][ T8971] netlink: 'syz.0.895': attribute type 4 has an invalid length. [ 316.293301][ T8971] netlink: 152 bytes leftover after parsing attributes in process `syz.0.895'. [ 316.349758][ T8975] netlink: 212424 bytes leftover after parsing attributes in process `syz.0.895'. [ 316.366803][ T8971] net_ratelimit: 35 callbacks suppressed [ 316.366907][ T8971] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 316.571272][ T8981] netlink: 'syz.1.894': attribute type 10 has an invalid length. [ 317.244572][ T8996] netlink: 'syz.0.898': attribute type 39 has an invalid length. [ 317.381213][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.388157][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.787078][ T8999] veth1_macvtap: mtu less than device minimum [ 318.737650][ T9018] netlink: 'syz.1.904': attribute type 29 has an invalid length. [ 318.784570][ T9018] netlink: 'syz.1.904': attribute type 29 has an invalid length. [ 318.833264][ T9018] netlink: 'syz.1.904': attribute type 29 has an invalid length. [ 322.151329][ T9032] syzkaller0: entered promiscuous mode [ 322.157133][ T9032] syzkaller0: entered allmulticast mode [ 322.430837][ T9050] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.914'. [ 323.435870][ T9072] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.917'. [ 323.852031][ T9078] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.912'. [ 324.522475][ T9096] sctp: [Deprecated]: syz.3.921 (pid 9096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.522475][ T9096] Use struct sctp_sack_info instead [ 324.957008][ T9106] netlink: 'syz.3.925': attribute type 3 has an invalid length. [ 324.969128][ T9106] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.925'. [ 329.985310][ T9115] netlink: 'syz.1.927': attribute type 7 has an invalid length. [ 330.193310][ T9123] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 330.225536][ T9123] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 330.245002][ T9125] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 330.264803][ T9125] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 330.293826][ T9123] netlink: 'syz.3.930': attribute type 29 has an invalid length. [ 330.875037][ T9140] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.937'. [ 330.958951][ T9140] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 331.034031][ T9139] syzkaller0: entered promiscuous mode [ 331.039674][ T9139] syzkaller0: entered allmulticast mode [ 331.454353][ T9147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.939'. [ 331.613157][ T9149] syzkaller0: left promiscuous mode [ 331.690486][ T9149] syzkaller0: left allmulticast mode [ 332.458650][ T9162] netlink: 'syz.1.942': attribute type 10 has an invalid length. [ 332.568919][ T9162] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 332.583287][ T9162] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 332.670016][ T9162] team0: Port device wlan1 added [ 332.727261][ T9162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.350610][ T9180] TCP: TCP_TX_DELAY enabled [ 333.386870][ T5812] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 334.261863][ T9206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.633427][ T9216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.889633][ T9205] bridge0: entered allmulticast mode [ 337.895483][ T9206] bridge_slave_1: left allmulticast mode [ 337.901543][ T9206] bridge_slave_1: left promiscuous mode [ 337.909415][ T9206] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.920147][ T9206] bridge_slave_0: left allmulticast mode [ 337.926284][ T9206] bridge_slave_0: left promiscuous mode [ 337.932101][ T9206] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.986715][ T9206] team0: Port device bridge0 removed [ 338.088225][ T9221] netlink: 'syz.0.958': attribute type 10 has an invalid length. [ 338.135761][ T9221] team0: Port device wlan1 added [ 338.289363][ T9241] netlink: 161116 bytes leftover after parsing attributes in process `syz.1.966'. [ 338.313474][ T9241] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 338.533889][ T9245] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.968'. [ 338.575448][ T9245] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 338.590620][ T9250] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.970'. [ 338.775486][ T9247] delete_channel: no stack [ 339.002689][ T9259] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.971'. [ 340.554079][ T9277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.530548][ T9284] netlink: 'syz.2.976': attribute type 10 has an invalid length. [ 343.541685][ T9284] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 343.548525][ T9284] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 343.569427][ T9284] bond0: (slave wlan1): Releasing backup interface [ 343.591987][ T9284] team0: Port device wlan1 added [ 343.613937][ T9281] netlink: 'syz.1.977': attribute type 2 has an invalid length. [ 343.621652][ T9281] netlink: 'syz.1.977': attribute type 8 has an invalid length. [ 343.646476][ T9281] netlink: 132 bytes leftover after parsing attributes in process `syz.1.977'. [ 343.657836][ T9287] netlink: 'syz.1.977': attribute type 11 has an invalid length. [ 343.666738][ T9290] netlink: 132 bytes leftover after parsing attributes in process `syz.1.977'. [ 345.457111][ T9322] netlink: 'syz.0.985': attribute type 21 has an invalid length. [ 345.469572][ T9322] netlink: 156 bytes leftover after parsing attributes in process `syz.0.985'. [ 345.946745][ T9330] netlink: 'syz.1.989': attribute type 21 has an invalid length. [ 345.970601][ T9330] netlink: 156 bytes leftover after parsing attributes in process `syz.1.989'. [ 346.199971][ T9330] netlink: 'syz.1.989': attribute type 8 has an invalid length. [ 346.269806][ T9330] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.989'. [ 351.103317][ T9352] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.991'. [ 358.963040][ T9406] delete_channel: no stack [ 361.461778][ T9445] netlink: 'syz.2.1023': attribute type 21 has an invalid length. [ 361.542725][ T9445] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1023'. [ 361.615773][ T9445] netlink: 'syz.2.1023': attribute type 8 has an invalid length. [ 361.663618][ T9445] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1023'. [ 364.715280][ T9459] €Â0: renamed from batadv_slave_1 (while UP) [ 365.783087][ T9472] netlink: 'syz.3.1028': attribute type 9 has an invalid length. [ 366.391930][ T9481] netlink: 'syz.2.1031': attribute type 3 has an invalid length. [ 366.419618][ T9481] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1031'. [ 366.454708][ T9481] netlink: 'syz.2.1031': attribute type 21 has an invalid length. [ 366.462605][ T9481] netlink: 'syz.2.1031': attribute type 20 has an invalid length. [ 366.964312][ T9493] netlink: 'syz.1.1037': attribute type 10 has an invalid length. [ 367.019524][ T9493] team0: Port device netdevsim0 added [ 368.130644][ T9514] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1043'. [ 370.672614][ T9513] netlink: 'syz.0.1041': attribute type 9 has an invalid length. [ 370.795656][ T9522] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 370.867395][ T9522] team0: Port device hsr_slave_0 added [ 371.851044][ T9552] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1054'. [ 371.974640][ T9553] netlink: 'syz.2.1055': attribute type 9 has an invalid length. [ 372.893302][ T9575] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1064'. [ 372.924659][ T9575] sock: sock_timestamping_bind_phc: sock not bind to device [ 376.993705][ T9595] netlink: 'syz.3.1069': attribute type 21 has an invalid length. [ 377.010472][ T9595] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1069'. [ 377.277948][ T9603] netlink: 'syz.1.1070': attribute type 39 has an invalid length. [ 377.506266][ T9613] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 378.288067][ T9629] netlink: 'syz.0.1077': attribute type 9 has an invalid length. [ 378.343430][ T9629] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1077'. [ 378.828488][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.835123][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.058080][ T9648] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1081'. [ 384.556560][ T9697] netlink: 'syz.3.1094': attribute type 10 has an invalid length. [ 384.676857][ T9697] team0: Device wg1 is of different type [ 384.687275][ T9699] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1094'. [ 384.746080][ T9699] openvswitch: netlink: Flow key attribute not present in set flow. [ 384.758817][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 384.806036][ T9703] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 384.859714][ T9697] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 384.894328][ T9697] netlink: 'syz.3.1094': attribute type 4 has an invalid length. [ 384.932542][ T9697] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1094'. [ 385.020783][ T9699] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1094'. [ 385.033968][ T9708] netlink: 'syz.0.1097': attribute type 8 has an invalid length. [ 385.048513][ T9708] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1097'. [ 385.371435][ T9724] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1100'. [ 385.422738][ T9719] tun0: tun_chr_ioctl cmd 1074025681 [ 388.165119][ T9740] netlink: 'syz.0.1105': attribute type 2 has an invalid length. [ 388.173315][ T9740] netlink: 'syz.0.1105': attribute type 8 has an invalid length. [ 388.181097][ T9740] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1105'. [ 388.191305][ T9741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1105'. [ 388.698568][ T9765] netlink: 'syz.2.1115': attribute type 27 has an invalid length. [ 388.716273][ T9765] netlink: 'syz.2.1115': attribute type 25 has an invalid length. [ 389.079813][ T9774] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 389.169017][ T9774] netlink: 'syz.2.1117': attribute type 29 has an invalid length. [ 389.180449][ T9774] netlink: 'syz.2.1117': attribute type 29 has an invalid length. [ 389.632751][ T9784] validate_nla: 3 callbacks suppressed [ 389.632880][ T9784] netlink: 'syz.0.1119': attribute type 19 has an invalid length. [ 393.338786][ T9838] û: renamed from bond_slave_0 [ 395.117401][ T9842] veth1_vlan (unregistering): left allmulticast mode [ 395.799531][ T9875] netlink: 'syz.1.1144': attribute type 10 has an invalid length. [ 395.815171][ T9875] __nla_validate_parse: 4 callbacks suppressed [ 395.815235][ T9875] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1144'. [ 395.872617][ T9879] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1146'. [ 396.101261][ T9875] netlink: 'syz.1.1144': attribute type 29 has an invalid length. [ 396.159228][ T9875] netlink: 'syz.1.1144': attribute type 29 has an invalid length. [ 396.179531][ T9882] netlink: 'syz.1.1144': attribute type 29 has an invalid length. [ 396.269140][ T9885] netlink: 'syz.1.1144': attribute type 29 has an invalid length. [ 396.450688][ T9886] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1148'. [ 397.939255][ T9900] syz.3.1150 (9900) used greatest stack depth: 18592 bytes left [ 399.395781][ T9961] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 399.490303][ T9961] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 399.762333][ T9967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1174'. [ 399.824071][ T9969] netlink: 'syz.1.1176': attribute type 2 has an invalid length. [ 399.831883][ T9969] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1176'. [ 399.846267][ T9967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1174'. [ 399.884569][ T9965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1174'. [ 400.236281][ T9979] netlink: 'syz.2.1180': attribute type 21 has an invalid length. [ 400.266183][ T9979] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 400.294326][ T9979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1180'. [ 400.464590][ T9977] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1177'. [ 400.531383][ T9987] netlink: set zone limit has 8 unknown bytes [ 400.553832][ T9977] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1177'. [ 401.876147][T10013] netlink: 'syz.2.1192': attribute type 10 has an invalid length. [ 401.924852][T10013] __nla_validate_parse: 2 callbacks suppressed [ 401.924869][T10013] netlink: 183836 bytes leftover after parsing attributes in process `syz.2.1192'. [ 401.994459][T10013] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 402.891933][T10035] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1200'. [ 403.723380][T10049] netlink: 'syz.2.1204': attribute type 2 has an invalid length. [ 403.731190][T10049] netlink: 'syz.2.1204': attribute type 8 has an invalid length. [ 403.790821][T10049] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1204'. [ 404.845773][T10080] netlink: 'syz.2.1218': attribute type 6 has an invalid length. [ 404.857679][T10080] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1218'. [ 405.046760][T10071] tap0: tun_chr_ioctl cmd 35111 [ 405.112216][T10080] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.817851][T10095] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1222'. [ 407.845293][T10095] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 408.026030][T10103] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1227'. [ 408.272247][T10117] sctp: [Deprecated]: syz.3.1231 (pid 10117) Use of int in maxseg socket option. [ 408.272247][T10117] Use struct sctp_assoc_value instead [ 408.901636][T10127] netlink: 'syz.1.1235': attribute type 10 has an invalid length. [ 408.961507][T10127] team0: Device nlmon0 is of different type [ 409.026009][T10125] netlink: 'syz.3.1234': attribute type 2 has an invalid length. [ 409.050467][T10125] netlink: 'syz.3.1234': attribute type 8 has an invalid length. [ 409.083276][T10125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1234'. [ 409.535621][T10142] delete_channel: no stack [ 409.555172][T10142] delete_channel: no stack [ 409.983182][T10150] delete_channel: no stack [ 410.593838][T10168] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1249'. [ 411.056432][T10177] netlink: 'syz.1.1250': attribute type 2 has an invalid length. [ 411.100105][T10177] netlink: 'syz.1.1250': attribute type 8 has an invalid length. [ 411.144360][T10177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1250'. [ 411.457417][T10188] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1254'. [ 411.493264][T10186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1251'. [ 411.502487][T10188] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1254'. [ 411.810681][T10196] delete_channel: no stack [ 412.261840][T10186] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1251'. [ 412.784560][T10209] netlink: 'syz.2.1261': attribute type 2 has an invalid length. [ 412.933385][T10209] netlink: 'syz.2.1261': attribute type 1 has an invalid length. [ 413.033260][T10209] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1261'. [ 413.063090][T10213] netlink: 'syz.2.1261': attribute type 2 has an invalid length. [ 413.070907][T10213] netlink: 'syz.2.1261': attribute type 1 has an invalid length. [ 413.089592][T10213] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1261'. [ 416.705241][T10249] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1271'. [ 416.896484][T10253] FAULT_INJECTION: forcing a failure. [ 416.896484][T10253] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 416.933119][T10253] CPU: 1 PID: 10253 Comm: syz.0.1273 Not tainted syzkaller #0 [ 416.940663][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 416.950773][T10253] Call Trace: [ 416.954153][T10253] [ 416.957170][T10253] dump_stack_lvl+0x18c/0x250 [ 416.962083][T10253] ? show_regs_print_info+0x20/0x20 [ 416.967368][T10253] ? load_image+0x420/0x420 [ 416.971970][T10253] ? __might_fault+0xaa/0x120 [ 416.976780][T10253] ? __lock_acquire+0x7d80/0x7d80 [ 416.981879][T10253] should_fail_ex+0x394/0x4c0 [ 416.986819][T10253] _copy_from_user+0x2f/0xe0 [ 416.991465][T10253] __sys_bpf+0x23e/0x890 [ 416.995780][T10253] ? bpf_link_show_fdinfo+0x390/0x390 [ 417.001224][T10253] ? lock_chain_count+0x20/0x20 [ 417.006135][T10253] __x64_sys_bpf+0x7c/0x90 [ 417.010599][T10253] do_syscall_64+0x55/0xb0 [ 417.015065][T10253] ? clear_bhb_loop+0x40/0x90 [ 417.019914][T10253] ? clear_bhb_loop+0x40/0x90 [ 417.024641][T10253] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 417.030568][T10253] RIP: 0033:0x7f2db5b9e0d9 [ 417.035077][T10253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.054743][T10253] RSP: 002b:00007f2db6abe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.063234][T10253] RAX: ffffffffffffffda RBX: 00007f2db5e25fa0 RCX: 00007f2db5b9e0d9 [ 417.071227][T10253] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 417.079245][T10253] RBP: 00007f2db6abe090 R08: 0000000000000000 R09: 0000000000000000 [ 417.087241][T10253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.095260][T10253] R13: 00007f2db5e26038 R14: 00007f2db5e25fa0 R15: 00007ffe2cc960d8 [ 417.103271][T10253] [ 417.372088][T10257] netlink: 'syz.2.1275': attribute type 2 has an invalid length. [ 417.393123][T10257] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1275'. [ 418.000558][T10274] netlink: 'syz.2.1280': attribute type 2 has an invalid length. [ 418.054030][T10274] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.1280'. [ 421.896800][T10301] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1288'. [ 421.999330][T10305] netlink: 14556 bytes leftover after parsing attributes in process `syz.0.1287'. [ 422.474600][T10315] FAULT_INJECTION: forcing a failure. [ 422.474600][T10315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.488066][T10315] CPU: 0 PID: 10315 Comm: syz.1.1286 Not tainted syzkaller #0 [ 422.495671][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.505811][T10315] Call Trace: [ 422.509143][T10315] [ 422.512122][T10315] dump_stack_lvl+0x18c/0x250 [ 422.516871][T10315] ? show_regs_print_info+0x20/0x20 [ 422.522135][T10315] ? load_image+0x420/0x420 [ 422.526701][T10315] ? __might_fault+0xaa/0x120 [ 422.531439][T10315] ? __lock_acquire+0x7d80/0x7d80 [ 422.536525][T10315] should_fail_ex+0x394/0x4c0 [ 422.541267][T10315] _copy_to_user+0x2f/0xa0 [ 422.545770][T10315] bpf_prog_test_run_syscall+0x33f/0x4b0 [ 422.551595][T10315] ? sock_gen_cookie+0x60/0x60 [ 422.556520][T10315] ? sock_gen_cookie+0x60/0x60 [ 422.561329][T10315] bpf_prog_test_run+0x31f/0x390 [ 422.566317][T10315] __sys_bpf+0x49d/0x890 [ 422.570615][T10315] ? bpf_link_show_fdinfo+0x390/0x390 [ 422.576038][T10315] ? lock_chain_count+0x20/0x20 [ 422.580930][T10315] __x64_sys_bpf+0x7c/0x90 [ 422.585375][T10315] do_syscall_64+0x55/0xb0 [ 422.589822][T10315] ? clear_bhb_loop+0x40/0x90 [ 422.594527][T10315] ? clear_bhb_loop+0x40/0x90 [ 422.599267][T10315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.605186][T10315] RIP: 0033:0x7ffa7419e0d9 [ 422.609625][T10315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.629421][T10315] RSP: 002b:00007ffa723f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 422.637875][T10315] RAX: ffffffffffffffda RBX: 00007ffa74425fa0 RCX: 00007ffa7419e0d9 [ 422.645889][T10315] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 422.653892][T10315] RBP: 00007ffa723f6090 R08: 0000000000000000 R09: 0000000000000000 [ 422.661918][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.669930][T10315] R13: 00007ffa74426038 R14: 00007ffa74425fa0 R15: 00007ffcc79ef1a8 [ 422.677960][T10315] [ 424.236473][T10344] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1297'. [ 424.390358][T10344] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1297'. [ 424.410304][T10344] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.1297'. [ 424.459353][T10351] netlink: 'syz.0.1299': attribute type 2 has an invalid length. [ 424.533750][T10346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1300'. [ 424.860843][T10358] FAULT_INJECTION: forcing a failure. [ 424.860843][T10358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.904895][T10358] CPU: 1 PID: 10358 Comm: syz.3.1301 Not tainted syzkaller #0 [ 424.912452][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.922566][T10358] Call Trace: [ 424.925889][T10358] [ 424.928865][T10358] dump_stack_lvl+0x18c/0x250 [ 424.933605][T10358] ? show_regs_print_info+0x20/0x20 [ 424.938849][T10358] ? load_image+0x420/0x420 [ 424.943400][T10358] ? __lock_acquire+0x7d80/0x7d80 [ 424.948461][T10358] ? snprintf+0xe9/0x140 [ 424.952739][T10358] should_fail_ex+0x394/0x4c0 [ 424.957460][T10358] _copy_to_user+0x2f/0xa0 [ 424.961913][T10358] simple_read_from_buffer+0xe7/0x150 [ 424.967361][T10358] proc_fail_nth_read+0x1e8/0x260 [ 424.972448][T10358] ? proc_fault_inject_write+0x360/0x360 [ 424.978152][T10358] ? fsnotify_perm+0x271/0x5e0 [ 424.982984][T10358] ? proc_fault_inject_write+0x360/0x360 [ 424.988661][T10358] vfs_read+0x298/0x990 [ 424.992884][T10358] ? kernel_read+0x1e0/0x1e0 [ 424.997517][T10358] ? __fget_files+0x28/0x460 [ 425.002146][T10358] ? __fget_files+0x3fc/0x460 [ 425.006862][T10358] ? __fdget_pos+0x2a3/0x330 [ 425.011485][T10358] ? ksys_read+0x74/0x260 [ 425.015933][T10358] ksys_read+0x151/0x260 [ 425.020210][T10358] ? vfs_write+0x9a0/0x9a0 [ 425.024664][T10358] ? lockdep_hardirqs_on+0x98/0x150 [ 425.029900][T10358] do_syscall_64+0x55/0xb0 [ 425.034365][T10358] ? clear_bhb_loop+0x40/0x90 [ 425.039078][T10358] ? clear_bhb_loop+0x40/0x90 [ 425.043789][T10358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.049708][T10358] RIP: 0033:0x7f376e95e90e [ 425.054146][T10358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 425.073781][T10358] RSP: 002b:00007f376f8cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.082223][T10358] RAX: ffffffffffffffda RBX: 00007f376f8cf6c0 RCX: 00007f376e95e90e [ 425.090249][T10358] RDX: 000000000000000f RSI: 00007f376f8cf0a0 RDI: 0000000000000006 [ 425.098247][T10358] RBP: 00007f376f8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 425.106249][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.114267][T10358] R13: 00007f376ec26038 R14: 00007f376ec25fa0 R15: 00007ffc20014fa8 [ 425.122285][T10358] [ 425.605567][T10364] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1303'. [ 426.010686][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 426.172337][T10374] C: renamed from team_slave_0 (while UP) [ 426.230555][T10374] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 426.253879][T10374] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1307'. [ 426.285855][T10374] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 431.397943][T10435] netlink: 'syz.3.1325': attribute type 6 has an invalid length. [ 431.459964][T10435] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1325'. [ 432.132125][T10436] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1325'. [ 432.293725][T10436] netlink: 'syz.3.1325': attribute type 2 has an invalid length. [ 439.264196][T10532] netlink: 'syz.1.1349': attribute type 10 has an invalid length. [ 439.272532][T10532] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1349'. [ 439.380263][T10532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.405495][T10535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1350'. [ 439.424035][T10535] : renamed from caif0 [ 439.478978][T10535] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 439.769276][T10547] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.1352'. [ 440.284913][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.291342][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.358898][T10571] netlink: 'syz.0.1360': attribute type 29 has an invalid length. [ 440.393649][T10571] netlink: 'syz.0.1360': attribute type 29 has an invalid length. [ 440.460976][T10578] netlink: 'syz.3.1361': attribute type 9 has an invalid length. [ 440.483327][T10578] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1361'. [ 440.699631][T10582] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1363'. [ 441.002388][T10586] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1364'. [ 441.245266][T10592] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1365'. [ 442.354211][T10634] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1375'. [ 444.711384][T10648] netlink: 'syz.2.1378': attribute type 10 has an invalid length. [ 444.719807][T10648] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1378'. [ 445.568245][T10655] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1380'. [ 446.055798][T10672] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1386'. [ 446.177948][T10656] netlink: 'syz.0.1387': attribute type 10 has an invalid length. [ 446.195504][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.223823][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.239680][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.314110][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.344531][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.365120][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.378847][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.408233][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.442778][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.463492][T10656] netlink: 'syz.0.1387': attribute type 11 has an invalid length. [ 446.471527][T10656] netlink: 'syz.0.1387': attribute type 4 has an invalid length. [ 446.496479][T10656] netlink: 'syz.0.1387': attribute type 5 has an invalid length. [ 446.543126][T10656] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.1387'. [ 446.608750][T10683] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.1390'. [ 448.824010][T10725] netlink: 'syz.0.1401': attribute type 10 has an invalid length. [ 448.918842][T10727] netlink: 'syz.0.1401': attribute type 9 has an invalid length. [ 448.996504][T10727] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1401'. [ 449.819955][T10725] team0 (unregistering): Port device team_slave_0 removed [ 449.863802][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1404'. [ 449.878086][T10725] team0 (unregistering): Port device team_slave_1 removed [ 449.900627][T10725] team0 (unregistering): Port device wlan1 removed [ 449.958411][T10739] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1404'. [ 449.981957][T10737] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 450.042773][T10737] netlink: 'syz.3.1400': attribute type 4 has an invalid length. [ 450.073589][T10737] netlink: 'syz.3.1400': attribute type 5 has an invalid length. [ 450.101561][T10737] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.1400'. [ 450.120453][T10744] netlink: 'syz.1.1405': attribute type 11 has an invalid length. [ 450.131268][T10744] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.1405'. [ 450.969047][T10777] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 451.023314][T10777] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 451.030345][T10779] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1417'. [ 451.052552][T10779] ksmbd: Unknown IPC event: 0, ignore. [ 451.170223][T10775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1416'. [ 453.892667][T10793] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1419'. [ 454.574924][T10811] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1426'. [ 454.823721][T10820] netlink: 'syz.2.1427': attribute type 10 has an invalid length. [ 455.051369][T10821] netlink: 'syz.2.1427': attribute type 9 has an invalid length. [ 455.145027][T10820] team0 (unregistering): Port device C removed [ 455.163195][T10821] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1427'. [ 455.308771][T10820] team0 (unregistering): Port device team_slave_1 removed [ 455.384001][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.392331][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.453958][T10820] team0 (unregistering): Port device bridge0 removed [ 455.630935][T10820] team0 (unregistering): Port device macvlan0 removed [ 455.964064][T10820] team0 (unregistering): Port device wlan1 removed [ 456.072280][T10820] team0 (unregistering): Port device hsr_slave_0 removed [ 456.166692][T10827] netlink: 'syz.3.1430': attribute type 3 has an invalid length. [ 456.177456][T10827] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1430'. [ 461.596184][T10879] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1443'. [ 461.694755][T10883] netlink: 'syz.3.1442': attribute type 10 has an invalid length. [ 461.887876][T10884] netlink: 'syz.3.1442': attribute type 9 has an invalid length. [ 461.946535][T10884] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1442'. [ 462.019526][T10883] team0 (unregistering): Port device team_slave_0 removed [ 462.154341][T10883] team0 (unregistering): Port device team_slave_1 removed [ 462.216844][T10883] team0 (unregistering): Port device geneve1 removed [ 462.425083][T10888] delete_channel: no stack [ 463.480272][T10912] netlink: 'syz.0.1451': attribute type 2 has an invalid length. [ 463.552713][T10909] netlink: 'syz.2.1448': attribute type 21 has an invalid length. [ 463.600113][T10909] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1448'. [ 464.496447][T10937] netlink: 'syz.3.1454': attribute type 15 has an invalid length. [ 464.556695][T10937] netlink: 11254 bytes leftover after parsing attributes in process `syz.3.1454'. [ 464.631297][T10928] netlink: 'syz.3.1454': attribute type 11 has an invalid length. [ 464.665460][T10928] netlink: 'syz.3.1454': attribute type 15 has an invalid length. [ 464.692588][T10928] netlink: 'syz.3.1454': attribute type 16 has an invalid length. [ 464.731518][T10928] netlink: 'syz.3.1454': attribute type 21 has an invalid length. [ 464.764006][T10928] netlink: 'syz.3.1454': attribute type 25 has an invalid length. [ 464.832379][T10936] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1456'. [ 465.249806][T10943] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1457'. [ 467.174679][T11019] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1465'. [ 467.496534][T11026] validate_nla: 5 callbacks suppressed [ 467.496572][T11026] netlink: 'syz.2.1468': attribute type 29 has an invalid length. [ 467.525597][T11026] netlink: 'syz.2.1468': attribute type 29 has an invalid length. [ 467.540273][T11031] netlink: 'syz.2.1468': attribute type 29 has an invalid length. [ 468.295132][T11051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1474'. [ 468.335222][T11053] netlink: 'syz.2.1477': attribute type 21 has an invalid length. [ 468.363299][T11053] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1477'. [ 468.903577][T11064] netlink: 166900 bytes leftover after parsing attributes in process `syz.1.1478'. [ 469.133185][ T8] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 469.431713][T11073] netlink: 'syz.0.1481': attribute type 10 has an invalid length. [ 469.484698][T11073] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1481'. [ 469.766601][T11081] netlink: 'syz.0.1481': attribute type 29 has an invalid length. [ 469.845088][T11080] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1483'. [ 470.066498][T11080] hsr_slave_0: left promiscuous mode [ 470.224885][T11080] hsr_slave_1: left promiscuous mode [ 470.366290][T11081] netlink: 'syz.0.1481': attribute type 29 has an invalid length. [ 470.387600][T11092] netlink: zone id is out of range [ 470.398740][T11092] netlink: set zone limit has 8 unknown bytes [ 470.416662][T11073] netlink: 'syz.0.1481': attribute type 29 has an invalid length. [ 471.138587][T11107] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1492'. [ 471.369061][T11109] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 471.630428][T11109] syzkaller0: entered promiscuous mode [ 471.666985][T11109] syzkaller0: entered allmulticast mode [ 471.723309][T11116] netlink: 'syz.0.1490': attribute type 15 has an invalid length. [ 471.823083][T11116] netlink: 11254 bytes leftover after parsing attributes in process `syz.0.1490'. [ 471.905303][T11119] netlink: 'syz.0.1490': attribute type 11 has an invalid length. [ 476.944282][ T7991] tipc: Subscription rejected, illegal request [ 477.296394][T11191] validate_nla: 8 callbacks suppressed [ 477.296425][T11191] netlink: 'syz.2.1501': attribute type 6 has an invalid length. [ 477.344792][T11191] netlink: 'syz.2.1501': attribute type 1 has an invalid length. [ 477.352855][T11191] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1501'. [ 477.489611][T11196] netlink: 'syz.3.1499': attribute type 10 has an invalid length. [ 477.526911][T11196] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1499'. [ 477.775953][T11196] netlink: 'syz.3.1499': attribute type 29 has an invalid length. [ 477.815425][T11196] netlink: 'syz.3.1499': attribute type 29 has an invalid length. [ 477.856205][T11200] netlink: 'syz.3.1499': attribute type 29 has an invalid length. [ 478.628117][T11213] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1509'. [ 478.719386][T11213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.816711][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1510'. [ 479.075393][ T7991] tipc: Subscription rejected, illegal request [ 480.474943][T11235] netlink: 'syz.0.1514': attribute type 6 has an invalid length. [ 480.494211][T11235] netlink: 'syz.0.1514': attribute type 1 has an invalid length. [ 480.513529][T11235] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1514'. [ 484.312591][ T1128] tipc: Subscription rejected, illegal request [ 484.338448][T11272] syz.0.1526[11272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.338762][T11272] syz.0.1526[11272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 484.659912][T11273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1525'. [ 485.060059][T11284] netlink: 'syz.3.1530': attribute type 10 has an invalid length. [ 485.077750][T11284] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1530'. [ 487.405301][T11311] netlink: 'syz.0.1537': attribute type 19 has an invalid length. [ 487.427029][T11311] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1537'. [ 487.855167][T11326] netlink: 'syz.2.1542': attribute type 10 has an invalid length. [ 487.865463][T11326] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1542'. [ 487.932779][T11326] netlink: 'syz.2.1542': attribute type 29 has an invalid length. [ 488.013101][T11326] netlink: 'syz.2.1542': attribute type 29 has an invalid length. [ 488.025051][T11329] netlink: 'syz.2.1542': attribute type 29 has an invalid length. [ 488.063722][T11333] netlink: 'syz.2.1542': attribute type 29 has an invalid length. [ 488.454098][T11335] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1546'. [ 490.951584][T11355] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.1549'. [ 491.705422][T11376] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 491.751110][T11365] netlink: 'syz.3.1552': attribute type 10 has an invalid length. [ 491.870016][T11365] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1552'. [ 491.880320][T11375] netlink: 'syz.0.1556': attribute type 10 has an invalid length. [ 491.910434][T11375] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1556'. [ 491.971735][T11376] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 492.004150][T11377] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 492.090083][T11378] netlink: 'syz.0.1556': attribute type 29 has an invalid length. [ 495.477520][T11438] netlink: 'syz.1.1569': attribute type 10 has an invalid length. [ 495.537847][T11444] netlink: 'syz.1.1569': attribute type 29 has an invalid length. [ 495.580221][T11438] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1569'. [ 495.861543][T11451] sctp: [Deprecated]: syz.0.1574 (pid 11451) Use of int in max_burst socket option deprecated. [ 495.861543][T11451] Use struct sctp_assoc_value instead [ 496.090073][T11453] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1575'. [ 496.113097][T11444] netlink: 'syz.1.1569': attribute type 29 has an invalid length. [ 496.264551][T11450] netlink: 'syz.0.1574': attribute type 10 has an invalid length. [ 496.435258][T11456] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1576'. [ 496.902080][T11462] validate_nla: 2 callbacks suppressed [ 496.902119][T11462] netlink: 'syz.3.1577': attribute type 6 has an invalid length. [ 496.979150][T11462] netlink: 'syz.3.1577': attribute type 1 has an invalid length. [ 497.023119][T11462] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1577'. [ 498.665447][T11482] netlink: 'syz.1.1581': attribute type 10 has an invalid length. [ 498.722681][T11485] netlink: 'syz.1.1581': attribute type 29 has an invalid length. [ 498.772362][T11482] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1581'. [ 498.989371][T11485] netlink: 'syz.1.1581': attribute type 29 has an invalid length. [ 499.512322][T11482] netlink: 'syz.1.1581': attribute type 29 has an invalid length. [ 500.101720][T11498] netlink: 'syz.3.1587': attribute type 10 has an invalid length. [ 500.118542][T11500] netlink: 'syz.3.1587': attribute type 29 has an invalid length. [ 500.233114][T11498] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1587'. [ 500.293096][T11500] netlink: 'syz.3.1587': attribute type 29 has an invalid length. [ 500.663318][T11501] netlink: 'syz.3.1587': attribute type 29 has an invalid length. [ 501.733646][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.740127][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.056869][T11519] syzkaller0: entered promiscuous mode [ 502.062433][T11519] syzkaller0: entered allmulticast mode [ 503.696753][T11546] validate_nla: 1 callbacks suppressed [ 503.696775][T11546] netlink: 'syz.0.1600': attribute type 29 has an invalid length. [ 507.543175][T11545] netlink: 'syz.0.1600': attribute type 10 has an invalid length. [ 507.551079][T11545] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1600'. [ 507.566941][T11546] netlink: 'syz.0.1600': attribute type 29 has an invalid length. [ 508.439391][T11590] netlink: 'syz.1.1611': attribute type 10 has an invalid length. [ 508.483488][T11590] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1611'. [ 508.625821][T11590] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 508.649723][T11590] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 508.742495][T11590] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 508.778527][T11590] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 509.379412][T11617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1622'. [ 511.672094][T11644] netlink: 'syz.0.1627': attribute type 29 has an invalid length. [ 513.537562][T11637] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1625'. [ 513.547191][T11634] netlink: 'syz.2.1625': attribute type 1 has an invalid length. [ 513.555845][T11634] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1625'. [ 513.566286][T11643] netlink: 'syz.0.1627': attribute type 10 has an invalid length. [ 513.576285][T11639] netlink: 'syz.2.1625': attribute type 9 has an invalid length. [ 513.584395][T11643] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1627'. [ 513.594805][T11639] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1625'. [ 513.609099][T11644] netlink: 'syz.0.1627': attribute type 29 has an invalid length. [ 513.835840][T11655] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1631'. [ 513.867424][T11655] tc_dump_action: action bad kind [ 514.009732][T11655] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1631'. [ 514.023751][T11655] tc_dump_action: action bad kind [ 514.159796][T11653] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1630'. [ 515.010300][T11692] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 518.569549][T11689] netlink: 'syz.0.1639': attribute type 10 has an invalid length. [ 518.577693][T11689] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1639'. [ 518.588249][T11692] netlink: 'syz.0.1639': attribute type 29 has an invalid length. [ 518.605746][T11704] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1642'. [ 519.630350][T11729] netlink: 'syz.3.1651': attribute type 10 has an invalid length. [ 519.639152][T11729] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1651'. [ 519.716949][T11729] netlink: 'syz.3.1651': attribute type 29 has an invalid length. [ 519.733063][T11729] netlink: 'syz.3.1651': attribute type 29 has an invalid length. [ 519.783535][T11735] netlink: 'syz.3.1651': attribute type 29 has an invalid length. [ 519.801229][T11729] netlink: 'syz.3.1651': attribute type 29 has an invalid length. [ 525.035127][T11777] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 525.047214][T11777] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 525.060264][T11783] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 525.075213][T11777] netlink: 'syz.0.1663': attribute type 29 has an invalid length. [ 525.571851][T11789] netlink: 'syz.2.1669': attribute type 10 has an invalid length. [ 525.582491][T11789] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1669'. [ 525.787490][ T5780] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 525.795273][ T5780] Bluetooth: hci0: Invalid handle: 0x5393 > 0x0eff [ 525.853678][T11799] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1673'. [ 525.901972][T11799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 525.964379][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 525.983517][T11797] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1672'. [ 526.088190][T11802] syzkaller0: left promiscuous mode [ 526.110806][T11802] syzkaller0: left allmulticast mode [ 526.653354][T11810] netlink: 'syz.3.1676': attribute type 29 has an invalid length. [ 526.692028][T11810] netlink: 'syz.3.1676': attribute type 29 has an invalid length. [ 526.717496][T11819] netlink: 'syz.3.1676': attribute type 29 has an invalid length. [ 526.732318][T11815] netlink: 'syz.3.1676': attribute type 29 has an invalid length. [ 526.791518][T11822] netlink: 'syz.0.1680': attribute type 10 has an invalid length. [ 526.808153][T11822] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1680'. [ 527.413733][T11837] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1685'. [ 527.435701][T11838] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1685'. [ 530.667172][T11844] validate_nla: 1 callbacks suppressed [ 530.667185][T11844] netlink: 'syz.3.1686': attribute type 29 has an invalid length. [ 531.055628][T11864] netlink: 'syz.0.1693': attribute type 10 has an invalid length. [ 531.081196][T11864] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1693'. [ 531.101466][T11864] vcan0: entered promiscuous mode [ 531.145537][T11864] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 532.004721][T11891] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 532.024627][T11891] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 532.060516][T11892] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 532.098787][T11891] netlink: 'syz.1.1691': attribute type 29 has an invalid length. [ 532.128868][T11896] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 532.160144][T11896] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 532.190939][T11896] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 532.229803][T11896] netlink: 'syz.0.1702': attribute type 29 has an invalid length. [ 535.166496][T11926] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1711'. [ 537.342208][T11967] validate_nla: 5 callbacks suppressed [ 537.342248][T11967] netlink: 'syz.2.1725': attribute type 10 has an invalid length. [ 537.429288][T11967] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1725'. [ 537.494385][T11969] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 537.681080][T11969] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 537.711770][T11967] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 537.766981][T11971] netlink: 'syz.2.1725': attribute type 29 has an invalid length. [ 538.410743][T11978] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.1728'. [ 539.227256][T11992] netlink: 'syz.1.1732': attribute type 2 has an invalid length. [ 539.273065][T11992] netlink: 'syz.1.1732': attribute type 8 has an invalid length. [ 539.280882][T11992] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1732'. [ 539.710105][T12005] netlink: 'syz.2.1737': attribute type 10 has an invalid length. [ 539.736305][T12005] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1737'. [ 539.832155][T12005] netlink: 'syz.2.1737': attribute type 29 has an invalid length. [ 539.846058][T12005] netlink: 'syz.2.1737': attribute type 29 has an invalid length. [ 539.916055][T12009] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1739'. [ 540.136035][T12011] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1739'. [ 540.384221][T12017] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1741'. [ 540.444659][T12017] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1741'. [ 540.552263][T12020] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1743'. [ 540.804548][T12029] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1744'. [ 545.490032][T12038] validate_nla: 9 callbacks suppressed [ 545.490049][T12038] netlink: 'syz.1.1748': attribute type 29 has an invalid length. [ 546.209875][T12064] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 546.223949][T12064] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 546.241379][T12064] syzkaller1: linktype set to 805 [ 546.629197][T12067] netlink: 'syz.1.1758': attribute type 29 has an invalid length. [ 546.685381][T12067] netlink: 'syz.1.1758': attribute type 29 has an invalid length. [ 546.707662][T12075] netlink: 'syz.1.1758': attribute type 29 has an invalid length. [ 546.746432][T12076] netlink: 'syz.1.1758': attribute type 29 has an invalid length. [ 548.148580][T12114] netlink: 'syz.1.1769': attribute type 29 has an invalid length. [ 550.044351][T12114] netlink: 'syz.1.1769': attribute type 29 has an invalid length. [ 550.396177][T12119] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1770'. [ 551.094649][T12147] netlink: 'syz.1.1780': attribute type 29 has an invalid length. [ 551.115184][T12147] netlink: 'syz.1.1780': attribute type 29 has an invalid length. [ 551.146361][T12148] netlink: 'syz.1.1780': attribute type 29 has an invalid length. [ 551.195890][T12147] netlink: 'syz.1.1780': attribute type 29 has an invalid length. [ 551.763862][T12169] netlink: 'syz.0.1786': attribute type 39 has an invalid length. [ 551.791872][T12168] netlink: 'syz.0.1786': attribute type 39 has an invalid length. [ 552.001697][T12178] netlink: 'syz.1.1787': attribute type 3 has an invalid length. [ 552.105835][T12178] netlink: 'syz.1.1787': attribute type 1 has an invalid length. [ 552.135365][T12178] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1787'. [ 552.535612][T12185] netlink: 'syz.0.1792': attribute type 29 has an invalid length. [ 552.547273][T12185] netlink: 'syz.0.1792': attribute type 29 has an invalid length. [ 553.733714][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1801'. [ 553.795392][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1801'. [ 553.815990][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1801'. [ 553.825977][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1801'. [ 553.863819][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1801'. [ 553.922979][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1801'. [ 553.973274][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1801'. [ 553.995265][T12212] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1801'. [ 558.732556][T12232] validate_nla: 68 callbacks suppressed [ 558.732578][T12232] netlink: 'syz.3.1805': attribute type 29 has an invalid length. [ 559.006386][T12262] netlink: 'syz.0.1815': attribute type 3 has an invalid length. [ 559.014687][T12262] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 559.022499][T12262] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 559.033752][T12262] netlink: 'syz.0.1815': attribute type 2 has an invalid length. [ 559.041588][T12262] __nla_validate_parse: 57 callbacks suppressed [ 559.041606][T12262] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.1815'. [ 559.144932][T12264] bridge_slave_1: left allmulticast mode [ 559.150885][T12264] bridge_slave_1: left promiscuous mode [ 559.191074][T12264] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.253556][T12264] bridge_slave_0: left allmulticast mode [ 559.283176][T12264] bridge_slave_0: left promiscuous mode [ 559.305042][T12264] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.162068][T12281] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1822'. [ 560.267427][T12281] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 560.336702][T12281] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 560.369483][T12283] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 560.537610][T12293] netlink: 'syz.3.1822': attribute type 29 has an invalid length. [ 561.178728][T12313] netlink: 'syz.1.1831': attribute type 15 has an invalid length. [ 561.206794][T12313] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1831'. [ 561.249415][T12319] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1833'. [ 563.135575][T12331] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1836'. [ 563.142591][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.151241][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.090402][T12360] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1844'. [ 564.120753][T12360] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 566.246169][T12351] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1841'. [ 566.268748][T12351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.284323][T12361] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1844'. [ 566.705301][T12373] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1849'. [ 566.741537][T12373] validate_nla: 4 callbacks suppressed [ 566.741555][T12373] netlink: 'syz.2.1849': attribute type 29 has an invalid length. [ 566.761717][T12373] netlink: 'syz.2.1849': attribute type 29 has an invalid length. [ 566.824202][T12373] netlink: 'syz.2.1849': attribute type 29 has an invalid length. [ 566.847280][T12373] netlink: 'syz.2.1849': attribute type 29 has an invalid length. [ 567.084119][T12378] FAULT_INJECTION: forcing a failure. [ 567.084119][T12378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.138093][T12378] CPU: 0 PID: 12378 Comm: syz.0.1851 Not tainted syzkaller #0 [ 567.145647][T12378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 567.155779][T12378] Call Trace: [ 567.159113][T12378] [ 567.162094][T12378] dump_stack_lvl+0x18c/0x250 [ 567.166835][T12378] ? show_regs_print_info+0x20/0x20 [ 567.172087][T12378] ? load_image+0x420/0x420 [ 567.176651][T12378] ? __might_fault+0xaa/0x120 [ 567.181396][T12378] ? __lock_acquire+0x7d80/0x7d80 [ 567.186481][T12378] should_fail_ex+0x394/0x4c0 [ 567.191223][T12378] _copy_from_user+0x2f/0xe0 [ 567.195863][T12378] ___sys_sendmsg+0x1c7/0x360 [ 567.200735][T12378] ? get_pid_task+0x20/0x1e0 [ 567.205420][T12378] ? __sys_sendmsg+0x2b0/0x2b0 [ 567.210294][T12378] ? __lock_acquire+0x7d80/0x7d80 [ 567.215405][T12378] __se_sys_sendmsg+0x1d0/0x2c0 [ 567.220311][T12378] ? __x64_sys_sendmsg+0x80/0x80 [ 567.225330][T12378] ? lockdep_hardirqs_on+0x98/0x150 [ 567.230595][T12378] do_syscall_64+0x55/0xb0 [ 567.235066][T12378] ? clear_bhb_loop+0x40/0x90 [ 567.239795][T12378] ? clear_bhb_loop+0x40/0x90 [ 567.244549][T12378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 567.250471][T12378] RIP: 0033:0x7f2db5b9e0d9 [ 567.254912][T12378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.274551][T12378] RSP: 002b:00007f2db6abe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.282998][T12378] RAX: ffffffffffffffda RBX: 00007f2db5e25fa0 RCX: 00007f2db5b9e0d9 [ 567.291001][T12378] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000004 [ 567.299013][T12378] RBP: 00007f2db6abe090 R08: 0000000000000000 R09: 0000000000000000 [ 567.307026][T12378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.315037][T12378] R13: 00007f2db5e26038 R14: 00007f2db5e25fa0 R15: 00007ffe2cc960d8 [ 567.323061][T12378] [ 568.127642][T12408] netlink: 'syz.1.1858': attribute type 2 has an invalid length. [ 568.159065][T12408] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1858'. [ 568.458681][T12413] netlink: 'syz.2.1860': attribute type 10 has an invalid length. [ 568.467912][T12413] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1860'. [ 568.627975][T12413] netlink: 'syz.2.1860': attribute type 29 has an invalid length. [ 568.641360][T12413] netlink: 'syz.2.1860': attribute type 29 has an invalid length. [ 568.668176][T12417] netlink: 'syz.2.1860': attribute type 29 has an invalid length. [ 568.700615][T12418] netlink: 'syz.2.1860': attribute type 29 has an invalid length. [ 568.792291][T12420] FAULT_INJECTION: forcing a failure. [ 568.792291][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 568.805532][T12420] CPU: 1 PID: 12420 Comm: syz.1.1862 Not tainted syzkaller #0 [ 568.813063][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.823193][T12420] Call Trace: [ 568.826542][T12420] [ 568.829538][T12420] dump_stack_lvl+0x18c/0x250 [ 568.834322][T12420] ? show_regs_print_info+0x20/0x20 [ 568.839629][T12420] ? load_image+0x420/0x420 [ 568.844228][T12420] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 568.850312][T12420] should_fail_ex+0x394/0x4c0 [ 568.855096][T12420] should_failslab+0x9/0x20 [ 568.859684][T12420] slab_pre_alloc_hook+0x59/0x300 [ 568.864807][T12420] ? do_raw_spin_lock+0x11f/0x2b0 [ 568.869946][T12420] ? reuseport_alloc+0x11f/0x430 [ 568.875076][T12420] __kmem_cache_alloc_node+0x53/0x250 [ 568.880529][T12420] ? __local_bh_enable_ip+0x13a/0x1c0 [ 568.885955][T12420] ? reuseport_alloc+0x11f/0x430 [ 568.890944][T12420] kmalloc_trace+0x2a/0xe0 [ 568.895419][T12420] reuseport_alloc+0x11f/0x430 [ 568.900245][T12420] udp_lib_get_port+0xf95/0x1c80 [ 568.905316][T12420] ? __might_sleep+0xe0/0xe0 [ 568.909983][T12420] ? lock_chain_count+0x20/0x20 [ 568.914881][T12420] ? raw_sysctl_init+0x50/0x50 [ 568.919709][T12420] ? __local_bh_enable_ip+0x13a/0x1c0 [ 568.925125][T12420] ? ipv6_portaddr_hash+0x1d8/0x330 [ 568.930446][T12420] ? udp_v6_get_port+0x7d/0xd0 [ 568.935283][T12420] inet_send_prepare+0x146/0x250 [ 568.940286][T12420] inet6_sendmsg+0x4b/0xd0 [ 568.944759][T12420] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 568.950003][T12420] ____sys_sendmsg+0x61b/0x980 [ 568.954826][T12420] ? __asan_memset+0x22/0x40 [ 568.959463][T12420] ? __sys_sendmsg_sock+0x30/0x30 [ 568.964538][T12420] ? __import_iovec+0x3fa/0x850 [ 568.969448][T12420] ? import_iovec+0x73/0xa0 [ 568.974005][T12420] ___sys_sendmsg+0x2a6/0x360 [ 568.978726][T12420] ? get_pid_task+0x20/0x1e0 [ 568.983405][T12420] ? __sys_sendmsg+0x2b0/0x2b0 [ 568.988246][T12420] ? __lock_acquire+0x7d80/0x7d80 [ 568.993356][T12420] __se_sys_sendmsg+0x1d0/0x2c0 [ 568.998262][T12420] ? __x64_sys_sendmsg+0x80/0x80 [ 569.003272][T12420] ? lockdep_hardirqs_on+0x98/0x150 [ 569.008526][T12420] do_syscall_64+0x55/0xb0 [ 569.012993][T12420] ? clear_bhb_loop+0x40/0x90 [ 569.017711][T12420] ? clear_bhb_loop+0x40/0x90 [ 569.022437][T12420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 569.028363][T12420] RIP: 0033:0x7ffa7419e0d9 [ 569.032816][T12420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.052462][T12420] RSP: 002b:00007ffa723f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.060949][T12420] RAX: ffffffffffffffda RBX: 00007ffa74425fa0 RCX: 00007ffa7419e0d9 [ 569.068962][T12420] RDX: 0000000000000800 RSI: 0000200000000240 RDI: 0000000000000004 [ 569.076975][T12420] RBP: 00007ffa723f6090 R08: 0000000000000000 R09: 0000000000000000 [ 569.084981][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.092985][T12420] R13: 00007ffa74426038 R14: 00007ffa74425fa0 R15: 00007ffcc79ef1a8 [ 569.101018][T12420] [ 573.819238][T12453] validate_nla: 2 callbacks suppressed [ 573.819260][T12453] netlink: 'syz.2.1872': attribute type 29 has an invalid length. [ 575.014085][T12452] netlink: 'syz.2.1872': attribute type 10 has an invalid length. [ 575.024085][T12452] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1872'. [ 575.037419][T12453] netlink: 'syz.2.1872': attribute type 29 has an invalid length. [ 575.125228][T12458] FAULT_INJECTION: forcing a failure. [ 575.125228][T12458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.150970][T12458] CPU: 0 PID: 12458 Comm: syz.0.1873 Not tainted syzkaller #0 [ 575.158551][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 575.168656][T12458] Call Trace: [ 575.171977][T12458] [ 575.174945][T12458] dump_stack_lvl+0x18c/0x250 [ 575.179686][T12458] ? show_regs_print_info+0x20/0x20 [ 575.184938][T12458] ? load_image+0x420/0x420 [ 575.189498][T12458] ? __lock_acquire+0x7d80/0x7d80 [ 575.194575][T12458] ? snprintf+0xe9/0x140 [ 575.198875][T12458] should_fail_ex+0x394/0x4c0 [ 575.203611][T12458] _copy_to_user+0x2f/0xa0 [ 575.208087][T12458] simple_read_from_buffer+0xe7/0x150 [ 575.213523][T12458] proc_fail_nth_read+0x1e8/0x260 [ 575.218607][T12458] ? proc_fault_inject_write+0x360/0x360 [ 575.224299][T12458] ? fsnotify_perm+0x271/0x5e0 [ 575.229112][T12458] ? proc_fault_inject_write+0x360/0x360 [ 575.234807][T12458] vfs_read+0x298/0x990 [ 575.239029][T12458] ? kernel_read+0x1e0/0x1e0 [ 575.243683][T12458] ? __fget_files+0x28/0x460 [ 575.248337][T12458] ? __fget_files+0x3fc/0x460 [ 575.253076][T12458] ? __fdget_pos+0x2a3/0x330 [ 575.257723][T12458] ? ksys_read+0x74/0x260 [ 575.262109][T12458] ksys_read+0x151/0x260 [ 575.266395][T12458] ? vfs_write+0x9a0/0x9a0 [ 575.270853][T12458] ? lockdep_hardirqs_on+0x98/0x150 [ 575.276089][T12458] do_syscall_64+0x55/0xb0 [ 575.280530][T12458] ? clear_bhb_loop+0x40/0x90 [ 575.285236][T12458] ? clear_bhb_loop+0x40/0x90 [ 575.289946][T12458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.295870][T12458] RIP: 0033:0x7f2db5b5e90e [ 575.300356][T12458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 575.320010][T12458] RSP: 002b:00007f2db6abdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 575.328474][T12458] RAX: ffffffffffffffda RBX: 00007f2db6abe6c0 RCX: 00007f2db5b5e90e [ 575.336477][T12458] RDX: 000000000000000f RSI: 00007f2db6abe0a0 RDI: 0000000000000005 [ 575.344560][T12458] RBP: 00007f2db6abe090 R08: 0000000000000000 R09: 0000000000000000 [ 575.352558][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.360556][T12458] R13: 00007f2db5e26038 R14: 00007f2db5e25fa0 R15: 00007ffe2cc960d8 [ 575.368576][T12458] [ 575.648500][T12472] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1878'. [ 575.734245][T12472] tc_dump_action: action bad kind [ 576.124991][T12492] netlink: 'syz.0.1884': attribute type 29 has an invalid length. [ 576.240294][T12488] netlink: 'syz.0.1884': attribute type 10 has an invalid length. [ 576.253365][T12488] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1884'. [ 581.062841][T12492] netlink: 'syz.0.1884': attribute type 29 has an invalid length. [ 581.083127][T12502] netlink: 'syz.3.1887': attribute type 21 has an invalid length. [ 581.091171][T12502] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 581.110621][T12502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1887'. [ 581.862340][T12525] FAULT_INJECTION: forcing a failure. [ 581.862340][T12525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.906665][T12525] CPU: 1 PID: 12525 Comm: syz.3.1891 Not tainted syzkaller #0 [ 581.914216][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.924329][T12525] Call Trace: [ 581.927654][T12525] [ 581.929425][T12527] netlink: 'syz.0.1896': attribute type 9 has an invalid length. [ 581.930608][T12525] dump_stack_lvl+0x18c/0x250 [ 581.943071][T12525] ? show_regs_print_info+0x20/0x20 [ 581.948327][T12525] ? load_image+0x420/0x420 [ 581.952896][T12525] ? __lock_acquire+0x7d80/0x7d80 [ 581.957974][T12525] ? snprintf+0xe9/0x140 [ 581.962269][T12525] should_fail_ex+0x394/0x4c0 [ 581.966992][T12525] _copy_to_user+0x2f/0xa0 [ 581.971438][T12525] simple_read_from_buffer+0xe7/0x150 [ 581.976846][T12525] proc_fail_nth_read+0x1e8/0x260 [ 581.981913][T12525] ? proc_fault_inject_write+0x360/0x360 [ 581.987590][T12525] ? fsnotify_perm+0x271/0x5e0 [ 581.992398][T12525] ? proc_fault_inject_write+0x360/0x360 [ 581.998065][T12525] vfs_read+0x298/0x990 [ 582.002261][T12525] ? kernel_read+0x1e0/0x1e0 [ 582.006884][T12525] ? __fget_files+0x28/0x460 [ 582.011532][T12525] ? __fget_files+0x3fc/0x460 [ 582.016253][T12525] ? __fdget_pos+0x2a3/0x330 [ 582.020906][T12525] ? ksys_read+0x74/0x260 [ 582.025268][T12525] ksys_read+0x151/0x260 [ 582.029543][T12525] ? vfs_write+0x9a0/0x9a0 [ 582.033995][T12525] ? lockdep_hardirqs_on+0x98/0x150 [ 582.039235][T12525] do_syscall_64+0x55/0xb0 [ 582.043680][T12525] ? clear_bhb_loop+0x40/0x90 [ 582.048382][T12525] ? clear_bhb_loop+0x40/0x90 [ 582.053089][T12525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 582.059010][T12525] RIP: 0033:0x7f376e95e90e [ 582.063451][T12525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 582.083093][T12525] RSP: 002b:00007f376f8cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 582.091537][T12525] RAX: ffffffffffffffda RBX: 00007f376f8cf6c0 RCX: 00007f376e95e90e [ 582.099535][T12525] RDX: 000000000000000f RSI: 00007f376f8cf0a0 RDI: 0000000000000004 [ 582.107528][T12525] RBP: 00007f376f8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 582.115521][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.123547][T12525] R13: 00007f376ec26038 R14: 00007f376ec25fa0 R15: 00007ffc20014fa8 [ 582.131578][T12525] [ 582.146891][T12527] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1896'. [ 582.226796][T12529] netlink: 'syz.1.1897': attribute type 10 has an invalid length. [ 582.240766][T12529] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1897'. [ 582.382689][T12529] netlink: 'syz.1.1897': attribute type 29 has an invalid length. [ 582.408659][T12529] netlink: 'syz.1.1897': attribute type 29 has an invalid length. [ 582.422020][T12532] netlink: 'syz.1.1897': attribute type 29 has an invalid length. [ 582.459128][T12529] netlink: 'syz.1.1897': attribute type 29 has an invalid length. [ 583.055328][T12555] nla_validate_range_unsigned: 60 callbacks suppressed [ 583.055375][T12555] netlink: 'syz.1.1905': attribute type 11 has an invalid length. [ 583.097229][T12553] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1905'. [ 583.113043][T12555] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1905'. [ 583.206884][T12561] netlink: 'syz.3.1909': attribute type 10 has an invalid length. [ 583.241056][T12561] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1909'. [ 584.387572][T12586] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1916'. [ 584.545498][T12586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1916'. [ 585.020684][T12601] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1921'. [ 585.903305][T12624] FAULT_INJECTION: forcing a failure. [ 585.903305][T12624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.039496][T12624] CPU: 0 PID: 12624 Comm: syz.2.1928 Not tainted syzkaller #0 [ 586.047063][T12624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 586.057174][T12624] Call Trace: [ 586.060492][T12624] [ 586.063463][T12624] dump_stack_lvl+0x18c/0x250 [ 586.068195][T12624] ? show_regs_print_info+0x20/0x20 [ 586.073450][T12624] ? load_image+0x420/0x420 [ 586.078114][T12624] ? __might_fault+0xaa/0x120 [ 586.082854][T12624] ? __lock_acquire+0x7d80/0x7d80 [ 586.088037][T12624] should_fail_ex+0x394/0x4c0 [ 586.092789][T12624] _copy_from_iter+0x1cd/0x1290 [ 586.097722][T12624] ? mark_lock+0x94/0x320 [ 586.102109][T12624] ? copyout_mc+0x70/0x70 [ 586.106486][T12624] ? __virt_addr_valid+0x10c/0x380 [ 586.111669][T12624] ? __virt_addr_valid+0x10c/0x380 [ 586.116813][T12624] ? __virt_addr_valid+0x10c/0x380 [ 586.121960][T12624] ? __check_object_size+0x4fc/0xa40 [ 586.127275][T12624] skb_copy_datagram_from_iter+0xf2/0x6f0 [ 586.133055][T12624] ? napi_get_frags+0x20/0x150 [ 586.137848][T12624] ? napi_get_frags+0xbb/0x150 [ 586.142641][T12624] tun_get_user+0xc84/0x3d70 [ 586.147322][T12624] ? rcu_read_unlock+0xa0/0xa0 [ 586.152131][T12624] ? tun_get+0x1c/0x2e0 [ 586.156329][T12624] ? __lock_acquire+0x7d80/0x7d80 [ 586.161390][T12624] ? tun_get+0x1c/0x2e0 [ 586.165598][T12624] tun_chr_write_iter+0x119/0x200 [ 586.170664][T12624] vfs_write+0x474/0x9a0 [ 586.174948][T12624] ? file_end_write+0x250/0x250 [ 586.179842][T12624] ? __fget_files+0x3fc/0x460 [ 586.184564][T12624] ? __fdget_pos+0x1d8/0x330 [ 586.189186][T12624] ? ksys_write+0x74/0x260 [ 586.193641][T12624] ksys_write+0x151/0x260 [ 586.198020][T12624] ? __ia32_sys_read+0x90/0x90 [ 586.202831][T12624] ? lockdep_hardirqs_on+0x98/0x150 [ 586.208077][T12624] do_syscall_64+0x55/0xb0 [ 586.212561][T12624] ? clear_bhb_loop+0x40/0x90 [ 586.217268][T12624] ? clear_bhb_loop+0x40/0x90 [ 586.221980][T12624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 586.227902][T12624] RIP: 0033:0x7fe135d9e0d9 [ 586.232370][T12624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.252028][T12624] RSP: 002b:00007fe136c46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.260483][T12624] RAX: ffffffffffffffda RBX: 00007fe136026090 RCX: 00007fe135d9e0d9 [ 586.268528][T12624] RDX: 0000000000000280 RSI: 0000200000000380 RDI: 0000000000000003 [ 586.276542][T12624] RBP: 00007fe136c46090 R08: 0000000000000000 R09: 0000000000000000 [ 586.284542][T12624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.292540][T12624] R13: 00007fe136026128 R14: 00007fe136026090 R15: 00007ffee96fb368 [ 586.300585][T12624] [ 586.652976][T12622] validate_nla: 9 callbacks suppressed [ 586.652996][T12622] netlink: 'syz.0.1925': attribute type 21 has an invalid length. [ 586.773116][T12622] netlink: 'syz.0.1925': attribute type 1 has an invalid length. [ 586.844620][T12622] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.1925'. [ 586.969754][T12633] syzkaller0: entered promiscuous mode [ 587.013271][T12633] syzkaller0: entered allmulticast mode [ 593.660786][T12650] netlink: 'syz.2.1935': attribute type 29 has an invalid length. [ 595.027535][T12649] netlink: 'syz.2.1935': attribute type 10 has an invalid length. [ 595.035694][T12649] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1935'. [ 595.049552][T12650] netlink: 'syz.2.1935': attribute type 29 has an invalid length. [ 596.400032][T12671] can: request_module (can-proto-0) failed. [ 598.118226][T12689] FAULT_INJECTION: forcing a failure. [ 598.118226][T12689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.183026][T12689] CPU: 1 PID: 12689 Comm: syz.1.1945 Not tainted syzkaller #0 [ 598.190579][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.200685][T12689] Call Trace: [ 598.204005][T12689] [ 598.206973][T12689] dump_stack_lvl+0x18c/0x250 [ 598.211710][T12689] ? show_regs_print_info+0x20/0x20 [ 598.216978][T12689] ? load_image+0x420/0x420 [ 598.221539][T12689] ? __lock_acquire+0x7d80/0x7d80 [ 598.226624][T12689] ? snprintf+0xe9/0x140 [ 598.230928][T12689] should_fail_ex+0x394/0x4c0 [ 598.235672][T12689] _copy_to_user+0x2f/0xa0 [ 598.240143][T12689] simple_read_from_buffer+0xe7/0x150 [ 598.245568][T12689] proc_fail_nth_read+0x1e8/0x260 [ 598.250655][T12689] ? proc_fault_inject_write+0x360/0x360 [ 598.256352][T12689] ? fsnotify_perm+0x271/0x5e0 [ 598.261170][T12689] ? proc_fault_inject_write+0x360/0x360 [ 598.266863][T12689] vfs_read+0x298/0x990 [ 598.271085][T12689] ? kernel_read+0x1e0/0x1e0 [ 598.275733][T12689] ? __fget_files+0x28/0x460 [ 598.280365][T12689] ? __fget_files+0x3fc/0x460 [ 598.285084][T12689] ? __fdget_pos+0x2a3/0x330 [ 598.289726][T12689] ? ksys_read+0x74/0x260 [ 598.294133][T12689] ksys_read+0x151/0x260 [ 598.298423][T12689] ? vfs_write+0x9a0/0x9a0 [ 598.302905][T12689] ? lockdep_hardirqs_on+0x98/0x150 [ 598.308156][T12689] do_syscall_64+0x55/0xb0 [ 598.312599][T12689] ? clear_bhb_loop+0x40/0x90 [ 598.317305][T12689] ? clear_bhb_loop+0x40/0x90 [ 598.322010][T12689] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 598.327949][T12689] RIP: 0033:0x7ffa7415e90e [ 598.332401][T12689] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 598.352045][T12689] RSP: 002b:00007ffa723d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.360494][T12689] RAX: ffffffffffffffda RBX: 00007ffa723d56c0 RCX: 00007ffa7415e90e [ 598.368497][T12689] RDX: 000000000000000f RSI: 00007ffa723d50a0 RDI: 0000000000000006 [ 598.376494][T12689] RBP: 00007ffa723d5090 R08: 0000000000000000 R09: 0000000000000000 [ 598.384487][T12689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.392611][T12689] R13: 00007ffa74426128 R14: 00007ffa74426090 R15: 00007ffcc79ef1a8 [ 598.400619][T12689] [ 598.492232][T12696] netlink: 'syz.2.1947': attribute type 29 has an invalid length. [ 598.743964][T12687] netlink: 'syz.2.1947': attribute type 10 has an invalid length. [ 598.752268][T12687] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1947'. [ 602.305645][T12696] netlink: 'syz.2.1947': attribute type 29 has an invalid length. [ 602.314834][T12699] syzkaller0: left promiscuous mode [ 602.320095][T12699] syzkaller0: left allmulticast mode [ 606.078375][T12740] netlink: 'syz.1.1960': attribute type 10 has an invalid length. [ 606.097240][T12740] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1960'. [ 606.179910][T12740] netlink: 'syz.1.1960': attribute type 29 has an invalid length. [ 606.215504][T12740] netlink: 'syz.1.1960': attribute type 29 has an invalid length. [ 606.245112][T12744] netlink: 'syz.1.1960': attribute type 29 has an invalid length. [ 606.265889][T12740] netlink: 'syz.1.1960': attribute type 29 has an invalid length. [ 606.834803][T12742] delete_channel: no stack [ 607.362590][T12757] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 607.385030][T12757] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 607.422794][T12757] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 607.456830][T12757] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 607.980997][T12776] netlink: 'syz.3.1976': attribute type 29 has an invalid length. [ 608.188343][T12774] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1974'. [ 608.688797][T12778] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1977'. [ 609.750928][ T51] Bluetooth: hci1: unknown advertising packet type: 0x20 [ 609.751027][ T51] Bluetooth: hci1: Malformed LE Event: 0x02 [ 610.878276][T12845] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1996'. [ 613.914487][T12857] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 614.009539][T12856] delete_channel: no stack [ 616.887922][T12928] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2020'. [ 617.894341][T12957] syzkaller0: entered promiscuous mode [ 617.900080][T12957] syzkaller0: entered allmulticast mode [ 618.155610][T12969] validate_nla: 8 callbacks suppressed [ 618.155630][T12969] netlink: 'syz.0.2030': attribute type 3 has an invalid length. [ 618.212967][T12969] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2030'. [ 622.452159][T12979] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2033'. [ 622.461636][T12979] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 622.691526][T12995] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2037'. [ 622.857474][T12998] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2045'. [ 622.867065][T12998] : renamed from caif0 [ 622.930845][T12998] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 622.985342][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2036'. [ 623.061736][T12990] netlink: 'syz.2.2036': attribute type 4 has an invalid length. [ 623.090688][T12990] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2036'. [ 623.964240][T13008] syzkaller0: entered promiscuous mode [ 623.969847][T13008] syzkaller0: entered allmulticast mode [ 624.225690][T13019] netlink: 'syz.3.2043': attribute type 29 has an invalid length. [ 624.414579][T13024] netlink: 'syz.3.2043': attribute type 10 has an invalid length. [ 624.442060][T13024] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.461426][T13024] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.472980][T13024] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.512526][T13024] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.535170][T13024] geneve0: entered promiscuous mode [ 624.578665][T13018] netlink: 'syz.3.2043': attribute type 21 has an invalid length. [ 624.587964][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.594604][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.648498][T13018] netlink: 'syz.3.2043': attribute type 10 has an invalid length. [ 624.681126][T13018] netlink: 'syz.3.2043': attribute type 12 has an invalid length. [ 624.694126][T13018] netlink: 'syz.3.2043': attribute type 13 has an invalid length. [ 624.712400][T13018] netlink: 'syz.3.2043': attribute type 14 has an invalid length. [ 624.730781][T13018] netlink: 'syz.3.2043': attribute type 15 has an invalid length. [ 624.763280][T13018] netlink: 'syz.3.2043': attribute type 16 has an invalid length. [ 624.785869][T13018] netlink: 'syz.3.2043': attribute type 19 has an invalid length. [ 624.803099][T13018] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.2043'. [ 624.865565][T13026] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2043'. [ 627.742166][T13039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2049'. [ 627.763367][T13039] bond0: entered promiscuous mode [ 627.768492][T13039] bond_slave_0: entered promiscuous mode [ 627.796231][T13039] bond_slave_1: entered promiscuous mode [ 627.802129][T13039] veth1_to_bridge: entered promiscuous mode [ 627.844148][T13039] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 628.777346][T13063] netlink: 12226 bytes leftover after parsing attributes in process `syz.0.2057'. [ 628.988425][T13067] geneve0: entered promiscuous mode [ 629.091677][T13063] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2057'. [ 629.118898][T13068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2051'. [ 629.128640][T13068] : renamed from caif0 [ 629.162423][T13068] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 629.477347][T13084] validate_nla: 22 callbacks suppressed [ 629.477365][T13084] netlink: 'syz.1.2064': attribute type 46 has an invalid length. [ 629.523967][T13084] netlink: 'syz.1.2064': attribute type 46 has an invalid length. [ 629.636614][T13085] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 629.651713][T13088] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2066'. [ 629.744655][T13085] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 630.409718][T13105] netlink: 'syz.3.2068': attribute type 9 has an invalid length. [ 630.461311][T13105] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2068'. [ 631.441198][T13121] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2073'. [ 631.477650][T13121] : renamed from caif0 [ 631.603335][T13121] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 631.851843][T13136] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2074'. [ 632.033397][T13136] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2074'. [ 632.099712][T13134] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2074'. [ 633.106631][T13145] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2074'. [ 633.278952][T13134] netlink: 'syz.0.2074': attribute type 10 has an invalid length. [ 633.333415][T13134] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2074'. [ 633.378864][T13134] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 635.646849][T13165] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.2085'. [ 635.670432][T13165] netlink: 'syz.1.2085': attribute type 21 has an invalid length. [ 635.680366][T13165] netlink: 'syz.1.2085': attribute type 25 has an invalid length. [ 635.693637][T13165] netlink: 'syz.1.2085': attribute type 27 has an invalid length. [ 635.701985][T13165] netlink: 'syz.1.2085': attribute type 28 has an invalid length. [ 635.717019][T13165] netlink: 'syz.1.2085': attribute type 29 has an invalid length. [ 635.732755][T13165] netlink: 'syz.1.2085': attribute type 30 has an invalid length. [ 636.194921][T13186] netlink: 'syz.1.2091': attribute type 21 has an invalid length. [ 636.233035][T13186] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2091'. [ 636.261389][T13186] netlink: 'syz.1.2091': attribute type 4 has an invalid length. [ 636.270080][T13186] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2091'. [ 636.593370][T13191] netlink: 'syz.3.2093': attribute type 10 has an invalid length. [ 636.731967][T13200] netlink: 'syz.0.2096': attribute type 1 has an invalid length. [ 636.773049][T13200] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2096'. [ 641.291024][T13242] validate_nla: 1 callbacks suppressed [ 641.291042][T13242] netlink: 'syz.0.2105': attribute type 21 has an invalid length. [ 641.344877][T13242] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 641.373621][T13242] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2105'. [ 641.387207][T13246] netlink: 'syz.0.2105': attribute type 21 has an invalid length. [ 641.445159][T13246] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2105'. [ 641.564147][T13251] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2109'. [ 641.670433][T13255] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2109'. [ 641.702688][T13253] netlink: 'syz.3.2110': attribute type 2 has an invalid length. [ 641.725541][T13253] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 641.745972][T13253] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2110'. [ 642.328426][T13264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 642.336518][T13264] IPv6: NLM_F_CREATE should be set when creating new route [ 642.344479][T13264] IPv6: NLM_F_CREATE should be set when creating new route [ 642.352095][T13264] IPv6: NLM_F_CREATE should be set when creating new route [ 642.473114][T13264] netlink: 'syz.1.2114': attribute type 9 has an invalid length. [ 642.497335][T13267] netlink: 'syz.3.2115': attribute type 10 has an invalid length. [ 642.506351][T13264] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2114'. [ 643.042578][T13283] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2119'. [ 643.128060][T13284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 643.259589][T13286] netlink: 'syz.3.2120': attribute type 9 has an invalid length. [ 643.312994][T13286] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2120'. [ 643.470336][T13268] netlink: 'syz.1.2114': attribute type 9 has an invalid length. [ 643.503106][T13268] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2114'. [ 643.532796][T13287] netlink: 'syz.3.2120': attribute type 3 has an invalid length. [ 643.553145][T13287] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.2120'. [ 644.150987][T13302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.286880][T13342] netlink: get zone limit has 4 unknown bytes [ 646.453058][T13330] team0 (unregistering): Port device team_slave_0 removed [ 646.797485][T13330] team0 (unregistering): Port device team_slave_1 removed [ 646.919056][T13330] team0 (unregistering): Port device wlan1 removed [ 647.140116][T13330] team0 (unregistering): Port device netdevsim0 removed [ 647.379106][T13335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 647.386530][T13335] IPv6: NLM_F_CREATE should be set when creating new route [ 647.393939][T13335] IPv6: NLM_F_CREATE should be set when creating new route [ 647.401214][T13335] IPv6: NLM_F_CREATE should be set when creating new route [ 647.444934][T13338] validate_nla: 9 callbacks suppressed [ 647.444954][T13338] netlink: 'syz.3.2133': attribute type 17 has an invalid length. [ 647.463625][T13338] __nla_validate_parse: 5 callbacks suppressed [ 647.463642][T13338] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2133'. [ 647.823035][T13343] netlink: 'syz.2.2132': attribute type 9 has an invalid length. [ 647.830858][T13343] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2132'. [ 648.226198][T13366] netlink: 'syz.2.2138': attribute type 9 has an invalid length. [ 648.265565][T13366] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2138'. [ 651.657457][T13363] netlink: 'syz.2.2138': attribute type 10 has an invalid length. [ 651.666161][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2138'. [ 651.677596][T13372] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 651.871243][T13378] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 651.901542][T13378] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 651.926536][T13378] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 651.948550][T13378] netlink: 'syz.0.2143': attribute type 29 has an invalid length. [ 651.981492][T13378] netlink: 'syz.0.2143': attribute type 1 has an invalid length. [ 652.017865][T13378] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2143'. [ 653.920183][T13404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 653.927911][T13404] IPv6: NLM_F_CREATE should be set when creating new route [ 653.936117][T13404] IPv6: NLM_F_CREATE should be set when creating new route [ 653.943799][T13404] IPv6: NLM_F_CREATE should be set when creating new route [ 654.026817][T13404] validate_nla: 1 callbacks suppressed [ 654.026857][T13404] netlink: 'syz.0.2148': attribute type 9 has an invalid length. [ 654.050523][T13404] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2148'. [ 654.602144][T13405] netlink: 'syz.0.2148': attribute type 9 has an invalid length. [ 654.618916][T13405] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2148'. [ 654.757191][T13415] netlink: 'syz.2.2153': attribute type 10 has an invalid length. [ 656.358471][T13424] netlink: 'syz.0.2155': attribute type 3 has an invalid length. [ 656.369214][T13424] netlink: 'syz.0.2155': attribute type 6 has an invalid length. [ 656.393005][T13424] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2155'. [ 659.076622][T13460] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2168'. [ 659.288877][T13464] netlink: 3076 bytes leftover after parsing attributes in process `syz.0.2168'. [ 659.352344][T13464] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2168'. [ 659.448988][T13469] netlink: 'syz.3.2170': attribute type 10 has an invalid length. [ 660.368322][T13496] netlink: 'syz.2.2177': attribute type 10 has an invalid length. [ 660.408327][T13496] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2177'. [ 660.460745][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 660.549648][T13496] netlink: 'syz.2.2177': attribute type 29 has an invalid length. [ 660.562540][T13496] netlink: 'syz.2.2177': attribute type 29 has an invalid length. [ 660.583643][T13496] netlink: 'syz.2.2177': attribute type 29 has an invalid length. [ 660.606360][T13496] netlink: 'syz.2.2177': attribute type 29 has an invalid length. [ 661.908021][T13529] netlink: 'syz.2.2187': attribute type 9 has an invalid length. [ 661.981311][T13526] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2185'. [ 662.074580][T13527] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2186'. [ 662.093291][T13529] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2187'. [ 662.163075][T13527] netlink: 'syz.3.2186': attribute type 21 has an invalid length. [ 662.227568][T13527] IPv6: NLM_F_CREATE should be specified when creating new route [ 662.236381][T13527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.243749][T13527] IPv6: NLM_F_CREATE should be set when creating new route [ 662.251109][T13527] IPv6: NLM_F_CREATE should be set when creating new route [ 662.258452][T13527] IPv6: NLM_F_CREATE should be set when creating new route [ 662.267267][T13530] netlink: 'syz.3.2186': attribute type 21 has an invalid length. [ 662.275547][T13530] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 662.350456][T13536] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.2185'. [ 662.381135][T13536] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2185'. [ 662.391453][T13538] netlink: 'syz.0.2189': attribute type 21 has an invalid length. [ 662.420702][T13538] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2189'. [ 664.479331][T13583] validate_nla: 12 callbacks suppressed [ 664.479353][T13583] netlink: 'syz.2.2205': attribute type 1 has an invalid length. [ 664.557387][T13583] __nla_validate_parse: 6 callbacks suppressed [ 664.557405][T13583] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.2205'. [ 664.630873][T13587] netlink: 'syz.2.2205': attribute type 10 has an invalid length. [ 664.665072][T13587] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2205'. [ 664.709648][T13588] netlink: 'syz.2.2205': attribute type 10 has an invalid length. [ 664.731229][T13588] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2205'. [ 666.345882][T13624] netlink: 'syz.1.2217': attribute type 7 has an invalid length. [ 666.382949][T13624] netlink: 'syz.1.2217': attribute type 1 has an invalid length. [ 666.390854][T13624] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2217'. [ 666.425680][T13628] netlink: 'syz.1.2217': attribute type 10 has an invalid length. [ 666.496030][T13624] netlink: 'syz.1.2217': attribute type 9 has an invalid length. [ 666.528722][T13624] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2217'. [ 666.762355][T13630] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.2218'. [ 666.863289][T13634] bridge_slave_0: entered allmulticast mode [ 667.490964][T13638] syzkaller0: entered promiscuous mode [ 667.503092][T13638] syzkaller0: entered allmulticast mode [ 671.259993][T13666] sock: sock_timestamping_bind_phc: sock not bind to device [ 671.706666][T13667] delete_channel: no stack [ 672.891395][T13662] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.281706][ T51] Bluetooth: hci3: Malformed LE Event: 0x0d [ 673.562598][T13710] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2238'. [ 673.637648][T13710] netlink: 'syz.3.2238': attribute type 2 has an invalid length. [ 673.660520][T13710] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2238'. [ 674.066531][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 678.232986][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2255'. [ 678.440228][T13772] netlink: 'syz.1.2256': attribute type 29 has an invalid length. [ 678.536139][T13772] netlink: 'syz.1.2256': attribute type 29 has an invalid length. [ 678.554598][T13774] netlink: 'syz.1.2256': attribute type 29 has an invalid length. [ 678.642746][T13772] netlink: 'syz.1.2256': attribute type 29 has an invalid length. [ 678.693127][T13774] netlink: 'syz.1.2256': attribute type 29 has an invalid length. [ 678.717575][T13781] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 678.726212][T13779] netlink: 'syz.3.2258': attribute type 10 has an invalid length. [ 678.763142][T13779] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2258'. [ 678.822780][T13781] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 678.846529][T13785] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 678.888099][T13779] netlink: 'syz.3.2258': attribute type 29 has an invalid length. [ 680.093488][T13824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2267'. [ 680.102621][T13824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2267'. [ 680.195657][T13818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2267'. [ 680.212318][T13813] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2267'. [ 680.953542][T13723] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 681.096832][T13855] netlink: 'syz.1.2280': attribute type 21 has an invalid length. [ 681.112887][T13855] netlink: 'syz.1.2280': attribute type 10 has an invalid length. [ 681.141467][T13855] netlink: 12202 bytes leftover after parsing attributes in process `syz.1.2280'. [ 681.208148][T13855] netlink: 'syz.1.2280': attribute type 29 has an invalid length. [ 681.241984][T13855] netlink: 'syz.1.2280': attribute type 29 has an invalid length. [ 681.319268][T13855] geneve0: entered promiscuous mode [ 681.835002][T13863] sit0: left promiscuous mode [ 682.410874][ T5780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 682.421846][ T5780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 682.430681][ T5780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 682.440017][ T5780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 682.454173][ T5780] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 682.462082][ T5780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 683.452100][T13886] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2289'. [ 683.529522][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.778488][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.820008][T13892] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2291'. [ 683.857169][T13894] validate_nla: 2 callbacks suppressed [ 683.857212][T13894] netlink: 'syz.1.2292': attribute type 10 has an invalid length. [ 683.871464][T13894] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2292'. [ 683.896741][T13894] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 683.921339][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.961691][T13894] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 683.983893][T13899] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 684.065106][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 684.091373][T13894] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 684.111099][T13873] chnl_net:caif_netlink_parms(): no params data found [ 684.351996][T13873] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.363032][T13873] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.370487][T13873] bridge_slave_0: entered allmulticast mode [ 684.378325][T13873] bridge_slave_0: entered promiscuous mode [ 684.387351][T13873] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.395051][T13873] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.402332][T13873] bridge_slave_1: entered allmulticast mode [ 684.409908][T13873] bridge_slave_1: entered promiscuous mode [ 684.573283][ T5780] Bluetooth: hci4: command tx timeout [ 684.636968][T13873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.685047][T13911] delete_channel: no stack [ 684.702761][T13873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.839170][T13873] team0: Port device team_slave_0 added [ 684.881145][T13873] team0: Port device team_slave_1 added [ 684.916900][T13923] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 684.966122][T13923] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2298'. [ 684.996520][T13873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 685.042653][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.160606][T13873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.017531][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.024287][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.451574][T13873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.467427][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.554126][T13873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.653134][ T5780] Bluetooth: hci4: command tx timeout [ 687.003169][T13873] hsr_slave_0: entered promiscuous mode [ 687.016172][T13873] hsr_slave_1: entered promiscuous mode [ 687.435008][T13958] netlink: 'syz.3.2304': attribute type 10 has an invalid length. [ 687.453324][T13958] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2304'. [ 687.499651][T13960] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 687.900310][T13960] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 687.960231][T13958] netlink: 'syz.3.2304': attribute type 29 has an invalid length. [ 688.379192][T13986] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 688.415075][T13989] IPv6: NLM_F_CREATE should be specified when creating new route [ 688.441250][T13989] IPv6: Can't replace route, no match found [ 688.743146][ T5780] Bluetooth: hci4: command tx timeout [ 688.826653][T14000] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2312'. [ 688.935650][T13997] delete_channel: no stack [ 689.214476][T13873] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 689.257774][T13873] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 689.352501][T13873] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 689.370423][T13873] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 689.501948][T14015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2317'. [ 690.815556][ T5780] Bluetooth: hci4: command tx timeout [ 691.709599][T14018] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2319'. [ 691.719122][T14018] bridge_slave_1: default FDB implementation only supports local addresses [ 692.698780][T14037] validate_nla: 2 callbacks suppressed [ 692.698801][T14037] netlink: 'syz.3.2323': attribute type 10 has an invalid length. [ 692.714821][T14037] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2323'. [ 692.781450][T13873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.805517][T14037] netlink: 'syz.3.2323': attribute type 29 has an invalid length. [ 692.880598][T14037] netlink: 'syz.3.2323': attribute type 29 has an invalid length. [ 692.918560][T14037] netlink: 'syz.3.2323': attribute type 29 has an invalid length. [ 692.930419][T14037] netlink: 'syz.3.2323': attribute type 29 has an invalid length. [ 692.977385][T13873] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.138323][ T9060] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.145667][ T9060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.241188][ T9060] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.248612][ T9060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.509927][ T11] veth0_macvtap: left promiscuous mode [ 693.518111][ T11] veth1_vlan: left promiscuous mode [ 693.524367][ T11] veth0_vlan: left promiscuous mode [ 693.894150][T14068] netlink: 'syz.3.2327': attribute type 29 has an invalid length. [ 696.616271][T14067] netlink: 'syz.3.2327': attribute type 10 has an invalid length. [ 696.627745][T14067] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2327'. [ 696.638275][T14068] netlink: 'syz.3.2327': attribute type 29 has an invalid length. [ 696.831434][T13873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 697.117868][T14083] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2331'. [ 697.179293][T14097] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2331'. [ 697.202268][T14092] netlink: 'syz.1.2332': attribute type 29 has an invalid length. [ 697.345284][T14083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.394801][T14083] bond_slave_0: left promiscuous mode [ 697.446449][T14083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.481647][T14083] bond_slave_1: left promiscuous mode [ 697.529276][T14083] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 697.554054][T14083] veth1_to_bridge: left promiscuous mode [ 697.591672][T14083] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 697.627413][T14083] bond0 (unregistering): Released all slaves [ 697.668873][T14088] netlink: 'syz.1.2332': attribute type 10 has an invalid length. [ 697.683009][T14088] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2332'. [ 697.706801][T14092] netlink: 'syz.1.2332': attribute type 29 has an invalid length. [ 697.773579][T14099] netlink: 'syz.1.2332': attribute type 29 has an invalid length. [ 697.788377][T14102] netlink: 'syz.1.2332': attribute type 29 has an invalid length. [ 697.885123][T14112] netlink: 'syz.3.2335': attribute type 21 has an invalid length. [ 697.912927][T14112] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2335'. [ 697.922164][T14112] netlink: 'syz.3.2335': attribute type 5 has an invalid length. [ 697.973144][T14112] netlink: 'syz.3.2335': attribute type 6 has an invalid length. [ 697.980957][T14112] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2335'. [ 698.126002][T14117] netlink: 'syz.1.2336': attribute type 10 has an invalid length. [ 698.172751][T14117] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2336'. [ 698.197566][T14121] netlink: 'syz.1.2336': attribute type 29 has an invalid length. [ 698.202046][T13873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.235238][T14120] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2337'. [ 698.248695][T14121] netlink: 'syz.1.2336': attribute type 29 has an invalid length. [ 698.289537][T14117] netlink: 'syz.1.2336': attribute type 29 has an invalid length. [ 698.378523][T13873] veth0_vlan: entered promiscuous mode [ 698.426276][T13873] veth1_vlan: entered promiscuous mode [ 698.537710][T13873] veth0_macvtap: entered promiscuous mode [ 698.572112][T13873] veth1_macvtap: entered promiscuous mode [ 698.602569][T14130] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2338'. [ 698.617065][T14133] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2340'. [ 698.695364][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.732775][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.762355][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 698.792872][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.823182][T13873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.888918][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 698.953881][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 698.984278][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.009340][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.027254][T13873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 699.051340][T13873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.072779][T13873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.130458][T13873] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.151654][T13873] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.237860][T13873] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.271673][T13873] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.553737][ T9060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.561630][ T9060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.686897][ T9061] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.702081][ T9061] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.475568][T13723] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 701.485749][T13723] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 701.498838][T13723] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 701.517577][T13723] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 701.526279][T13723] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 701.534118][T13723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 702.262626][T14210] chnl_net:caif_netlink_parms(): no params data found [ 702.436019][T14210] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.451567][T14210] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.461848][T14210] bridge_slave_0: entered allmulticast mode [ 702.483313][T14210] bridge_slave_0: entered promiscuous mode [ 702.494823][T14210] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.502159][T14210] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.519810][T14210] bridge_slave_1: entered allmulticast mode [ 702.528099][T14210] bridge_slave_1: entered promiscuous mode [ 702.599787][T14210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.622292][T14210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.711688][T14210] team0: Port device team_slave_0 added [ 702.727191][T14210] team0: Port device team_slave_1 added [ 702.788758][T14210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.808039][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.844466][T14210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.865926][T14210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.881964][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.921083][T14210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.521569][T14210] hsr_slave_0: entered promiscuous mode [ 703.537331][T14210] hsr_slave_1: entered promiscuous mode [ 703.553728][T14210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.562783][T14210] Cannot create hsr debugfs directory [ 703.613636][T13723] Bluetooth: hci0: command tx timeout [ 704.389381][ T11] batman_adv: batadv0: Removing interface: netdevsim0 [ 705.694073][T13723] Bluetooth: hci0: command tx timeout [ 707.784811][T13723] Bluetooth: hci0: command tx timeout [ 709.855705][T13723] Bluetooth: hci0: command tx timeout [ 711.344941][T14210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 711.374358][T14210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 711.502690][T14334] __nla_validate_parse: 6 callbacks suppressed [ 711.502709][T14334] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2391'. [ 711.733524][T14339] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2383'. [ 727.367094][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.377032][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.385084][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.394170][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.408959][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 727.416618][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.738857][ T5780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 727.753804][ T5780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 727.764708][ T5780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 727.773592][ T5780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 727.781424][ T5780] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 727.789654][ T5780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 728.350133][T13723] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 728.366124][T13723] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 728.376772][T13723] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 728.397517][T13723] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 728.408728][T13723] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 728.419010][T13723] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 729.463256][T13723] Bluetooth: hci2: command tx timeout [ 729.853061][T13723] Bluetooth: hci5: command tx timeout [ 730.509058][T13723] Bluetooth: hci6: command tx timeout [ 731.533071][T13723] Bluetooth: hci2: command tx timeout [ 731.933079][T13723] Bluetooth: hci5: command tx timeout [ 732.583109][T13723] Bluetooth: hci6: command tx timeout [ 733.623068][T13723] Bluetooth: hci2: command tx timeout [ 734.021585][T13723] Bluetooth: hci5: command tx timeout [ 734.653127][T13723] Bluetooth: hci6: command tx timeout [ 735.703082][T13723] Bluetooth: hci2: command tx timeout [ 736.103149][T13723] Bluetooth: hci5: command tx timeout [ 736.743087][T13723] Bluetooth: hci6: command tx timeout [ 747.457623][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.469646][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 761.338863][ T5780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 761.348834][ T5780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 761.357078][ T5780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 761.366141][ T5780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 761.374545][ T5780] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 761.381931][ T5780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 763.453179][ T5780] Bluetooth: hci7: command tx timeout [ 765.543278][ T5780] Bluetooth: hci7: command tx timeout [ 767.623217][ T5780] Bluetooth: hci7: command tx timeout [ 769.708617][ T5780] Bluetooth: hci7: command tx timeout [ 787.719170][T13723] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 787.729887][T13723] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 787.738357][T13723] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 787.747809][T13723] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 787.755933][T13723] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 787.763810][T13723] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 789.215861][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 789.233550][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 789.245076][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 789.253298][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 789.262487][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 789.270698][ T51] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 789.278238][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 789.288367][ T5780] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 789.304143][ T5780] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 789.313480][ T5780] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 789.321234][ T5780] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 789.330134][ T5780] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 789.853153][T14377] Bluetooth: hci8: command tx timeout [ 791.378808][T14376] Bluetooth: hci9: command tx timeout [ 791.385477][T14377] Bluetooth: hci10: command tx timeout [ 791.943126][T14376] Bluetooth: hci8: command tx timeout [ 793.453216][T14376] Bluetooth: hci9: command tx timeout [ 793.458709][T14376] Bluetooth: hci10: command tx timeout [ 794.023138][T14376] Bluetooth: hci8: command tx timeout [ 795.533125][T14377] Bluetooth: hci9: command tx timeout [ 795.539580][T14376] Bluetooth: hci10: command tx timeout [ 796.103197][T14376] Bluetooth: hci8: command tx timeout [ 797.613038][T14376] Bluetooth: hci10: command tx timeout [ 797.619207][T14376] Bluetooth: hci9: command tx timeout [ 808.897668][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.904116][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.522815][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 816.529571][ C0] rcu: 0-....: (1 GPs behind) idle=1c0c/1/0x4000000000000000 softirq=62918/62919 fqs=4336 [ 816.540846][ C0] rcu: hardirqs softirqs csw/system [ 816.547271][ C0] rcu: number: 1342799 0 0 [ 816.553700][ C0] rcu: cputime: 19285 33203 65 ==> 52490(ms) [ 816.561529][ C0] rcu: (t=10500 jiffies g=95857 q=6541 ncpus=2) [ 816.567865][ C0] CPU: 0 PID: 14331 Comm: syz.0.2383 Not tainted syzkaller #0 [ 816.575329][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.585402][ C0] RIP: 0010:stack_trace_save+0x0/0x100 [ 816.590898][ C0] Code: 89 cd 77 89 44 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b 45 31 e4 eb e7 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 0f 1e fa 55 48 89 e5 41 56 53 48 83 e4 e0 48 81 ec 80 00 00 00 [ 816.610526][ C0] RSP: 0018:ffffc900000076b8 EFLAGS: 00000246 [ 816.616623][ C0] RAX: ffffc900000076c0 RBX: 0000000000000820 RCX: 0000000000000000 [ 816.624608][ C0] RDX: 0000000000000000 RSI: 0000000000000040 RDI: ffffc900000076c0 [ 816.632582][ C0] RBP: ffffc900000078e8 R08: ffffc900000079a0 R09: 0000000000000000 [ 816.640579][ C0] R10: ffffc900000076c0 R11: ffffed10056b9f05 R12: 0000000000000001 [ 816.648560][ C0] R13: 00000000000000f0 R14: ffff88807d9ff9b0 R15: ffffc900000076c0 [ 816.656538][ C0] FS: 00007f88f21556c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 816.665489][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 816.672078][ C0] CR2: 000000110c340e6d CR3: 000000007bdcc000 CR4: 00000000003506f0 [ 816.680056][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 816.688036][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 816.696014][ C0] Call Trace: [ 816.699310][ C0] [ 816.702156][ C0] kasan_set_track+0x4e/0x70 [ 816.706804][ C0] __kasan_slab_alloc+0x6c/0x80 [ 816.711693][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 816.716828][ C0] kmem_cache_alloc_node+0x1af/0x310 [ 816.722142][ C0] ? __alloc_skb+0x103/0x2c0 [ 816.726757][ C0] __alloc_skb+0x103/0x2c0 [ 816.731217][ C0] ndisc_alloc_skb+0xa6/0x450 [ 816.735947][ C0] ndisc_send_rs+0x27d/0x690 [ 816.740570][ C0] addrconf_rs_timer+0x36b/0x640 [ 816.745602][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 816.751683][ C0] ? call_timer_fn+0x171/0x540 [ 816.756460][ C0] call_timer_fn+0x189/0x540 [ 816.761057][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 816.767132][ C0] ? call_timer_fn+0xd2/0x540 [ 816.771814][ C0] ? __run_timers+0x810/0x810 [ 816.776507][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 816.782587][ C0] __run_timers+0x570/0x810 [ 816.787109][ C0] ? detach_timer+0x2b0/0x2b0 [ 816.791805][ C0] run_timer_softirq+0x67/0xf0 [ 816.796576][ C0] handle_softirqs+0x27d/0x820 [ 816.801363][ C0] ? read_tsc+0x9/0x20 [ 816.805445][ C0] ? ktime_get+0x24b/0x280 [ 816.810049][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 816.814835][ C0] ? do_softirq+0x1a0/0x1a0 [ 816.819347][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 816.824579][ C0] __irq_exit_rcu+0xd3/0x190 [ 816.829178][ C0] ? irq_exit_rcu+0x20/0x20 [ 816.833693][ C0] irq_exit_rcu+0x9/0x20 [ 816.837939][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 816.843600][ C0] [ 816.846550][ C0] [ 816.849486][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 816.855477][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 816.861400][ C0] Code: 75 11 e8 6c 0f 0b 00 48 85 db 75 16 e8 62 0f 0b 00 eb 15 e8 5b 0f 0b 00 e8 56 83 10 09 48 85 db 74 ea e8 4c 0f 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 816.881010][ C0] RSP: 0018:ffffc90003527a00 EFLAGS: 00000246 [ 816.887100][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 816.895094][ C0] RDX: ffffc90019591000 RSI: 0000000000003d39 RDI: 0000000000003d3a [ 816.903090][ C0] RBP: ffffc90003527ad0 R08: ffffffff911eb5ff R09: 1ffffffff223d6bf [ 816.911067][ C0] R10: dffffc0000000000 R11: fffffbfff223d6c0 R12: 1ffff920006a4f44 [ 816.919061][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff920006a4f65 [ 816.927067][ C0] ? event_function+0x300/0x300 [ 816.931961][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 816.937694][ C0] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 816.943423][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 816.948632][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 816.954277][ C0] smp_call_function_single+0x36d/0x5a0 [ 816.959832][ C0] ? event_function+0x300/0x300 [ 816.964693][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 816.970870][ C0] ? event_function+0x300/0x300 [ 816.975756][ C0] perf_install_in_context+0x5bb/0x920 [ 816.981241][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 816.986364][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 816.992357][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 816.997584][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 817.002812][ C0] ? perf_event__header_size+0x165/0x220 [ 817.008462][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 817.014202][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 817.019850][ C0] ? lock_chain_count+0x20/0x20 [ 817.024706][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 817.030700][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 817.035909][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 817.041556][ C0] do_syscall_64+0x55/0xb0 [ 817.045983][ C0] ? clear_bhb_loop+0x40/0x90 [ 817.050668][ C0] ? clear_bhb_loop+0x40/0x90 [ 817.055357][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.061267][ C0] RIP: 0033:0x7f88f119e0d9 [ 817.065697][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.085331][ C0] RSP: 002b:00007f88f2155028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 817.093847][ C0] RAX: ffffffffffffffda RBX: 00007f88f1425fa0 RCX: 00007f88f119e0d9 [ 817.101828][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 817.109802][ C0] RBP: 00007f88f1235024 R08: 0000000000000002 R09: 0000000000000000 [ 817.117820][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 817.125807][ C0] R13: 00007f88f1426038 R14: 00007f88f1425fa0 R15: 00007ffefa4e46a8 [ 817.133805][ C0] [ 821.970176][T14377] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 821.980307][T14377] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 821.989216][T14377] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 821.998364][T14377] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 822.006851][T14377] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 822.014698][T14377] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 824.093243][T14377] Bluetooth: hci11: command tx timeout [ 826.173274][T14376] Bluetooth: hci11: command tx timeout [ 826.345282][T14376] Bluetooth: hci0: command 0x0406 tx timeout