last executing test programs: 16.018371705s ago: executing program 3 (id=2333): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x13f, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r2, &(0x7f0000000380), 0x2, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000002b00), 0x2, 0x0) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x77, 0xc}, @enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x3, [{0x10, 0x1, 0x3}]}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}]}, {0x0, [0x5f, 0x2e, 0x0]}}, &(0x7f0000000a40)=""/46, 0x61, 0x2e, 0x1, 0xfa}, 0x28) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r6, &(0x7f0000000980)={&(0x7f0000000300)=@ll={0x11, 0xf5, r7, 0x1, 0xb, 0x6, @random="77c0b499f3e1"}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="05c609dae5cdb0481eff587e765531b7a6a5fe71d25e220656c2c2486284c999bbb64802260b34277300db6e1177f347dfde0058aa159345017362ba750b8c363f4bd115162c2362b513a66a24ad39b59164890a8765a84414bea51c7e16e5841ec67953f9b9c5958b5b57a264a4e208c32d", 0x72}, {&(0x7f0000000640)="6489f11f32e6bb9409d3a5dd5c32873e76cae7b4162f4b06a33d858eaa569efc024572cacc0f523096911c744ebc7e8747859595e6427115972c17b7b2a3fc5777c7e34f9aa5975efc55679bead06e27fccc35d0bea4e9d1af7cbe6c0bfcc7ae27722f936aa904384866031a38f4b94437eedca24438ef1371e62c6f85047ee60a3833abc1ddbd3a0691ec7c04585d6882404921ad72661c363a33386d463a41785e35878db611fe02903cafb146d9ed99bca035d479e69b046c62a2ab2bae98079b5d7614ce38ca489703", 0xcb}, {&(0x7f0000000740)="34d6fcb1b68055e848b49e8c4fa5ffb34a98220711d30205cf481e00b229aa61c8c788aac7b26bdcf7c860400a4b1184dcf449799e4f2b878e5f35351d05509490d0dc0142f8b77ddb05fc4862e8a22dd6ca5be52776468edf54b8168c6e746aa7a60aa4074eb2d4a01ea4daacd9d57ced25a5de5a5c597f5dd0b7143b2572e6a3db5fc55ef215dbb02360f3123308c69005752d5c82f7a891046d8803f8ce23b1bb519940a2642ba2a3d4738ae0ef8123d5ed3f5e6788e803d3931c70bab339edc9212187e419a9499149de748a8470", 0xd0}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="a8000000000000002900000000000000378f5cc6522e228d59d27a1c3d3fb2bfc148ac4f0457f5193cf5945e7ed220fc675d3920fde8ea1946874271be5c9d7ef50bc76928b719fa9d5ef9"], 0xa8}, 0x8000) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0xa, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0xe}], '2'}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000bc0)=""/139, 0x4a, 0x8b, 0x1, 0x8}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0xfffffff9, '\x00', r7, r8, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x3, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x1, 0xa, 0x8, 0x800}], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x52, &(0x7f0000000ac0)=""/82, 0x41100, 0x60, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f0000000cc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x0, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[r1], &(0x7f0000000d80)=[{0x0, 0x5, 0x5, 0x5}], 0x10, 0xa}, 0x94) 15.707773612s ago: executing program 3 (id=2336): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000bacd32000000000000007fff92e", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x17, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x0, @mcast2}, 0x80, 0x0}, 0xb80b) sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="bd30bc791f4860246406f853f8f0eadad664503b45fdb7b5c366689c837fdcf97beeb608f932e7f6b1064bf8eb2988e5258f75bbfc67db851fd69e822e11ddbc831f38ec6042f83c6b19e118b1008b9773f855e5fbe4992597", 0x59}, {&(0x7f0000002740)="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", 0x554}], 0x2}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x100000, 0x8, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8100, 0x8, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r6) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 10.829592183s ago: executing program 3 (id=2343): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x12b100, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180040010200400", 0x33fe0}], 0x1}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x0, 0x0}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xa, 0x0, &(0x7f0000000080)="05804ab382844306d758", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0xa, 0x2, 0x73) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000100)) close(r8) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x17, &(0x7f0000000c40)=ANY=[@ANYBLOB="7da510000400000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000181b0000c397556c4a56e0350c54c868c3f48bd12d84a089561f160b442b99038306700f3d960c65fcaa742015e19e8601070244077bdf", @ANYRES32=r9, @ANYBLOB="000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000200000018490000fdffffff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f00000005c0)='syzkaller\x00', 0x9, 0x99, &(0x7f0000000600)=""/153, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x3}, 0x8, 0x10, &(0x7f00000007c0)={0x4, 0xa, 0x3, 0xfffffffb}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, r9, 0xffffffffffffffff, r9, r9], 0x0, 0x10, 0x2d9a}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES16], 0xfe33) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x5865}, 0x40800) r11 = socket$kcm(0x2, 0x1, 0x84) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000002df4c1068d1e577a1859224c3dddad5cd6fa97e5ad0e750ab39e6b402d7b17c0c4dce968dd11c762315eeb8f27823706eb1e6d483c854bcbc8a919bdf7ac30a5fbb54dd8f788e61dfa66c40734a22e3cfbaa28cd0652fcb904a", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000004000000000800000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000001a00)=""/4113, 0x41100, 0xd}, 0x94) sendmsg$inet(r11, &(0x7f0000000d80)={&(0x7f0000000b40)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000b80)="e0", 0x1}], 0x1}, 0x0) 9.74122854s ago: executing program 3 (id=2349): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) r1 = socket$kcm(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x24000800) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x11, 0x200000000000003, 0x300) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)="62042700590253000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de331656457048a7", 0xe0}, {&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7fbc0efaccca18e94b87dc586ee60baa55469755ab00e92b607f2aeee00ad72fb29c1847f85b2f8ec3a34864b18eaaa131a4940c9af11606e5d9360c3f4a2c8308d50c34b1bbaac018469ac346dc2a539e20350297097e7bf21ea0c2a0aa083b2b3543af05c7fb5391a1c81304b520fafb941b2dc3cfb03c3dd8567a459752a5ca573ee7cf4f518af508d141c98dc9914df1521e9ee49decdf2418e7f74adea9fda805bc75906dafd279aee363979", 0x1c1}, {0x0}], 0x3}, 0x8001) 9.215520263s ago: executing program 3 (id=2351): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002, 0x1, @perf_config_ext={0x6, 0x9}, 0xce6b9b20411c30f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="0000a2b7f66bf1c1a32c3d5661ec67", 0xf}], 0x1, 0x0, 0x0, 0x900}, 0x60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r5) write$cgroup_devices(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x394b, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000ac0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x25, 0x0, 0x0, 0x48850}, 0x0) recvmsg(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000005c0)=""/199, 0xc7}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) socket$kcm(0x29, 0x7, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0x9a) recvmsg$kcm(r10, &(0x7f00000008c0)={&(0x7f0000000140)=@can, 0x80, &(0x7f0000000880)=[{&(0x7f0000000540)=""/94, 0x5e}], 0x1}, 0x40000002) 7.743490899s ago: executing program 3 (id=2358): r0 = socket$kcm(0x29, 0x7, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0xf, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @ringbuf_query], &(0x7f00000003c0)='GPL\x00', 0x9, 0x31, &(0x7f0000000500)=""/49, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x4, 0xb, 0x3, 0x167a}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff], &(0x7f00000005c0)=[{0x0, 0x2, 0xf, 0xb}, {0x1, 0x3, 0xe, 0x4}], 0x10, 0x8}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000ec0)={0xffffffffffffffff, r1}) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000037000b63717a3c4a01d8b45b0808aa78", 0x14}], 0x1}, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1e3f}, 0x0, 0x0, 0x0, 0x9, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x40000000, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) (async) r3 = socket$kcm(0x2, 0x1, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) (async, rerun: 32) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) (async) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000002000020220df8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000b6e5c4fa41b795fb8a1f07ec96a2ef70564b2e1349a4e0126d894fb92b3acfe8681f933cf40d34471471685e4d7a33adde1a3bf46f2f4bd3c25bf5f2ce537b947f00bb436c18da470612005108fdffc3cb0dd5192db6481ffdd4e439cb874bc5"], 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='1-2:', @ANYRESDEC, @ANYRESHEX=r7], 0x31) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES16=r2], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) (rerun: 32) write$cgroup_int(r10, &(0x7f0000000100), 0x1001) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r10, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) (async, rerun: 64) write$cgroup_subtree(r10, 0x0, 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) 4.619817566s ago: executing program 2 (id=2373): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x94) 4.207694086s ago: executing program 2 (id=2376): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002, 0x1, @perf_config_ext={0x6, 0x9}, 0xce6b9b20411c30f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x6e, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000ee00000000000009000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r0, @ANYBLOB="3eca", @ANYRES32=r1], 0x9a) 3.511660544s ago: executing program 2 (id=2380): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32=0x0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a156437", 0x1a}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}], 0x20}, 0x4840) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES32=r1], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000040)='\x00') r8 = socket$kcm(0x18, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x40047452, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x10, 0x10001}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000240)=0x5) 3.300655759s ago: executing program 1 (id=2384): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000010051a409ed86813", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x98, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)=""/237, 0x1a, 0xed, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x29, 0x2, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41b2cc32b38d3440c6942cb76cab300"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 3.104203054s ago: executing program 1 (id=2385): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x2, 0x0}, 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0x6, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0x7, 0x9, 0x9, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @exit], &(0x7f0000000140)='GPL\x00', 0xd, 0x7f, &(0x7f00000002c0)=""/127, 0x40e00, 0x60, '\x00', r2, @fallback=0x22, r1, 0x8, &(0x7f0000000640)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x6, 0x5, 0xfffffffd}, 0x10, r3, r1, 0x0, &(0x7f0000000780)=[0x1, r4], 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xee, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x8, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9031, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x10c511, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffaf0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x4, 0x0, 0x0, 0xd, 0x0, 0xffffffffffffffff, 0xa0800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0xffff, 0x1}, 0x100274, 0xca, 0x0, 0x4, 0x8, 0x100, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYRES64=r7], 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x41, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r12 = perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r13, 0x0, 0x9) r14 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r14, 0x107, 0xd, &(0x7f00000000c0), 0x10) perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x80, 0x9, 0xa, 0x2, 0x1, 0x0, 0x9, 0x2009c, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfb4, 0x4, @perf_config_ext={0xd2f, 0x40}, 0x0, 0x2, 0xfff, 0x2, 0x8, 0x81, 0x4, 0x0, 0x9, 0x0, 0x8}, r12, 0xb, r0, 0xd) 2.930540738s ago: executing program 2 (id=2386): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2201c2, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r5}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x18, &(0x7f0000000000)=r7, 0x8) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000e00)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r7, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000e40)=ANY=[@ANYRES8=r6, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', r9, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r7, 0x0, 0x7f, 0x80, &(0x7f00000010c0)="45fd3ccd5393b5abe71565d676afd362a30b4313591b7adab9f9bb51f605b6d5d296a098743ef8e9199d7a1aba3b9b50dd4acec16afbe518064e76cd708f0bca83b84d2fb6b43a176b1a546f29767e45f848428e8bcd04ec6fa5ffcadb275220b6b3d105b33fa4e380eb9a8922776398a79c708e6640d7418ccfc8f88a817e", &(0x7f0000001140)=""/128, 0x9bde, 0x0, 0x48, 0x4f, &(0x7f00000011c0)="7a21c7326bcaf45b3b23eda5053fa69ad742a1d9d9ac101a03f45714af7dcfeeab6a14f06dcd353633b7633fd10b4d47950118bed594f9ddb2252c1756cac9a8d82040780a0839e4", &(0x7f0000001240)="55e2663c1174fe1370d6c070615c2365a4b5e9296c4336a7bca5ba7eca9f89f3b82b028e9523c99a1665203b4aa5e48fb7d81d6fe79f40b76a9b03701327bd7c525f99c892cf2ae973557b81fce616", 0x2, 0x0, 0x9}, 0x50) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f00000002c0)=r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5a, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x6, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESOCT=r11], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r12}, 0x94) sendmsg$inet(r1, &(0x7f0000000e80)={&(0x7f0000000400)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000005c0)="7362f9f3b161e365d9642ca43862ac3afa10a29053d532c7a317e55e7ed0a817c21751a7303f7b4a6fc87a8ab728537a2b34877ffa1422fc0bb07fadccb933106d3c34fb470f6091507c8b9b356038ffd6ce54b2e5d7d6537bb648050de735b3d5754f828bb75cd201dbf9a16a4fb60cbeb4f772240d1a7bf6128452024d0f76aef8835d9d9d14cb4fcb2dad4a1ac21f6dcd5d0b4f3844de70760e0ca1a2083cfeb313d2a737b46b997c0faab5774058a018b20741a0a55db221a71524f4e0ddb3f348961e53be517f64a84e9a", 0xcd}, {&(0x7f00000006c0)="07360f71f70e6a67a0a375ccd50399cb2120e9f2fa19a0d966049ac1443260b6929f8aa65998a05aa2672ca3ad270b03ffa6cfacdbd761b47b3496b91247bc16aebfbefe2c4b592c7ce70f7f2c4f85ccebb8eec89cc76ac6576c6d3038a7d3bff7362fa0ab8c0b45e86f0790ef9c6dba36fa865a170ab6adae574ec0c2a5825f3956bead51aea03a2f0cb04a68083ab5c01261f69a209626528203735971a7bec2a2f4b416f03b9a6c4a57a0acd5b55cba45209bfdd5933b48e000539f3f58359e1c667ee21420549eafdab995a60d5715419d633d79651a122f75ef3f50dadae485101cd9f245ea0eb578306490681853c3d24ad1203311", 0xf8}, {&(0x7f00000007c0)="a2ea466eb79a0a72d98033b2f705fa4f5a03dffd4e0416ae8f9db73ec9185e5364d4de2044082d101b92c0fd3c7bd01366fffc34be80a6879c9480b19d5219a80bb7e6839deacc07ef04573a0dd55b574ef0326e59e5d1b2b89145d0017404f1927d186fdb18f7ca2bd36d3cf44b65be93a2b168019e4e9f113001f7dc17105e4127687c1097515efd1d9c86ed2033", 0x8f}, {&(0x7f0000000880)="6673f5c23249700e35147a9f5bb0e8ad144334c663a3b5cccde7393e37e0814301886ad5144a25f4923bab62e7d50fc8ff4fe09141c41ab01fd29fecc88dcd0dd24fc672d218ae8e42a570d1294a0f1acda5e42669f3833b13cde0d15a3582d67503af4f34089bd435c446c50856e27f1b9d27cd4a35f658eb9b2a244dcb91f0fabc1db01d670f7695fe02c333a89a74c6fe6b1c6221fec7e295ae40266bf506dc1b1ef71b00b852462c96b88a7ac9de3f55d5d733adc93d39dd64bffa2fcd0097", 0xc1}, {&(0x7f0000000980)="32632642c2a9ba717da9f1a96b2b768ff543a9c6fbad71a5ead1c69616e491fc02e9c5447346a3f8e62703c50368fba029f4f9aad05b994444b30b74326c7bb667fd3ad57e500222b6ec920f7d7c21b5803076bb67619162aedbdd3832e12fecb42b3f7d36933fa5ab68192916c180a104b4f6b1ffd7241a6a78c4ab36b986da179cdc2566cc80f63a8950739032881c", 0x90}], 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1400000000000000000000000200000040000000000000001c000000000000000000000008000000", @ANYRES32=r9, @ANYBLOB="ffdfffffffac1414bb0000478bbfc000000000000000000000080800001b03bf66d87dcd6f23a75bb7139740a3c599bfb5f530cda42c44affea018e1ad0a4e1c540062883baf94701778695c288d1ebaafaccdccb4cd185d36ff5268a3385765994db293e1bd88f1dc27a6e2ba8b6ac2264b350700f5fe43cb1b62585d8c424570bf75237d7f1b6b86bef3666bf1834e476fc7150c4b0fd29ff86567f33ed7520df51a4348dffc3c0acebf5024aa7b21114ea2d86c4550274391c31c48ca590662617d", @ANYRESOCT=r10, @ANYBLOB="ffffffffe00000020000000030000000000000000000000007000000070f9164010102e00000020a01010194040100440cd6700000080300000000001c000000000000000000000008000000", @ANYRES64, @ANYBLOB="ac1e0101ac1414aa00000000"], 0xa8}, 0x8004) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r13, 0x20, &(0x7f0000000540)={&(0x7f0000000100)=""/10, 0xa, 0x0, &(0x7f0000000480)=""/138, 0x8a}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r13, @ANYBLOB="0100000002"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000440)={r14, &(0x7f0000000380)}, 0x20) r15 = socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r15, 0x5411, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000dc0)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4070000be7900017d05000000004000", @ANYRES16=r14], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x2}, 0x10}, 0x94) 2.894364689s ago: executing program 0 (id=2387): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000240), 0x4) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r4}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x16, 0x202c}, 0x20) sendmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}], 0x18}, 0x8841) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000000081400002d0301000000000095000000000000006916600000000000bf67000000000000260600000fff07906706000007000000170300000ee60060bf050000000000001d360000000000006507f9ff01000000a70700004c000000cc75000000000000bf54000000000000070400000400f9ffad4301000000000095000023000000000500000000000000950000000000000032ff7f5be95e09b67754bb12feffffff8ecf264e0f84f9f17d3c51e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f6f3be5b369289aa6812b8e007e733a9a4f16d0abbd5ad9381806ef08513e3d3778a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad5b803306b17cf4ef3f1d45f65727546e7c955ccefa1f6ab689fde4de4e63edf10271a5144ddc8da3aa5b0ab733a1b901627b562ed04ae76002d4519af619e3a2a4d69e0dee5eb106774a8f3e6916dfec88b5634ef79b02d2ca8ff54c158f0200000000eafb735fd552bdc206004aeb0743eb2dc819cf5c8ac86d8a297dff0445a13d00dce431e56723888fb126a163f16fb2ad9bc1172ba7cbebe174cecac4d03723f1c932b3faffffffffffffff5fc998e13b670e373e3e5897f7ad2e99e0e67a993716dbf580469f0f53acbb40b401e3738270b315d362ed834f2a0700000096649a462e7ee4bcf8b07a101c879730beb4000000000000000000000000000000bc00f674629709e7e78f4ddc3d1bc3ebf0bd9d42ca019dd5d022cf7468659fbe2562671cd47840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd313f3bea788ea2bcdc340ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d7039dd21be3f3767ce603c9d48cac052ca363f601ae899a53f67b63d20a268bb9f15a0a6e66ce4660fbee91629ab028acfc1d9260e9659a0f6a5480a55c22fe3ae5f562d0ae520c38d2bab6528000000596fb73a96b33c81cdbbd421a27f7f1db054cc7a0a4d372849c99a98822103b9851d924b85b1ca4b21b187db00000000000000066dead3b9670a7604a5ddd0fd2e4fb8a5749a8a8ad78454ba1eebeff1b528da294247d294d2487babb176fdfafeb3d492a325671e6b91afb41f87feda4ce2f468a3758750c0b8f151d4d8574bbbe027687a0e12311cdf3384a26ee3f6f2424b92e5be98ef1f8f2db9a4991e234f9f447e1730ceaf54cf25c0e3ad7cbb0de06d55db89d154c9d3fcd01c551b0ef5d5305845b9a8763b264e8f0bcd0f606fe92e511f122325ebc5fef1b67845d0eb8b8a4f97f83424221e94a5c4623feb8496ccdbc55b27773bfeffe6a91a20e0c27fc80262647f88d8d1123d199b2c7729bb7700e887ea963f00004a1d0851dbfb9308d16cadcc7b477c9a84e3d6bd82526898735552a203c4797228533b1a73ab44aa115136353964648abcc4adbe765556643842290a92eafea0ec2c000000000000000000000000000000e1f3518dc3fc2bbefe043804ac1b6b1c8b7e3afed045a3a808700bca61a39d5bfa83877803013e2d145e642253632f3a283c6eee0e22cb69fe7f94786220c31e9b2a82a9856e947bace74923e4740bf1c17cb41ef19161c3d417655517c28bd08dee32d77a40b834ba7a12223354e9321b8300f7d5d63fa0e8f074adc176285a8f41609ce040cec99943792f5443ca5292447b0f0f240743c4b2b8142ce0b43d4d1731ce11533f61ef241c83557f5aae58a848b5ccce86b8b0fb21fe369c90f06e2d9680003df72f3f0060e6c3415cc1026d342003bece09fbfd062efdd9b48377335903f3b4e87386915e3ac429a4db646da1cc6e29ad8650f4da326cbfdce12c8d5deba32549d6aefe422e0d665d62325c737fe76ec1f3c3670ed96f86738a2cf1c59b5f9b84ffd068f7b4509f53617910a41b811a3f7cd6251f8100008133af11a4db2d00c0ad86ce9f40f3e06b41b45f72"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) 2.587432717s ago: executing program 1 (id=2388): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@map, 0x11, 0x1, 0x44ec, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0], 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={0x1, 0x58, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)={@ifindex=r3, r0, 0x1, 0x2021, r0, @void, @void, @value=r4, @void, r2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x13f, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000f00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x5, [@volatile={0x7, 0x0, 0x0, 0x9, 0x2}, @enum64={0x4, 0x1, 0x0, 0x13, 0x0, 0x3, [{0x10, 0x1, 0x3}]}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}, @typedef={0xb, 0x0, 0x0, 0x8, 0x1}, @float={0x3, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f, 0x2e, 0x0]}}, &(0x7f0000000a40)=""/46, 0x75, 0x2e, 0x1, 0xfa}, 0x28) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) r8 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r8, &(0x7f0000002540)={&(0x7f0000001140)=@qipcrtr, 0x80, &(0x7f00000024c0)=[{&(0x7f00000011c0)=""/67, 0x43}, {&(0x7f0000001240)=""/118, 0x76}, {&(0x7f00000012c0)=""/201, 0xc9}, {&(0x7f00000013c0)=""/41, 0x29}, {&(0x7f0000001400)=""/149, 0x95}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x6}, 0x40000040) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r5, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r7, &(0x7f0000000980)={&(0x7f0000000300)=@ll={0x11, 0xf5, r9, 0x1, 0xb, 0x6, @random="77c0b499f3e1"}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="05c609dae5cdb0481eff587e765531b7a6a5fe71d25e220656c2c2486284c999bbb64802260b34277300db6e1177f347dfde0058aa159345017362ba750b8c363f4bd115162c2362b513a66a24ad39b59164890a8765a84414bea51c7e16e5841ec67953f9b9c5958b5b57a264a4e208c32d", 0x72}, {&(0x7f0000000640)="6489f11f32e6bb9409d3a5dd5c32873e76cae7b4162f4b06a33d858eaa569efc024572cacc0f523096911c744ebc7e8747859595e6427115972c17b7b2a3fc5777c7e34f9aa5975efc55679bead06e27fccc35d0bea4e9d1af7cbe6c0bfcc7ae27722f936aa904384866031a38f4b94437eedca24438ef1371e62c6f85047ee60a3833abc1ddbd3a0691ec7c04585d6882404921ad72661c363a33386d463a41785e35878db611fe02903cafb146d9ed99bca035d479e69b046c62a2ab2bae98079b5d7614ce38ca489703", 0xcb}, {&(0x7f0000000740)="34d6fcb1b68055e848b49e8c4fa5ffb34a98220711d30205cf481e00b229aa61c8c788aac7b26bdcf7c860400a4b1184dcf449799e4f2b878e5f35351d05509490d0dc0142f8b77ddb05fc4862e8a22dd6ca5be52776468edf54b8168c6e746aa7a60aa4074eb2d4a01ea4daacd9d57ced25a5de5a5c597f5dd0b7143b2572e6a3db5fc55ef215dbb02360f3123308c69005752d5c82f7a891046d8803f8ce23b1bb519940a2642ba2a3d4738ae0ef8123d5ed3f5e6788e803d3931c70bab339edc9212187e419a9499149de748a8470", 0xd0}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="a8000000000000002900000000000000378f5cc6522e228d59d27a1c3d3fb2bfc148ac4f0457f5193cf5945e7ed220fc675d3920fde8ea1946874271be5c9d7ef50bc76928b719fa9d5ef9"], 0xa8}, 0x8000) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0xa, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0xe}], '2'}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000bc0)=""/139, 0x4a, 0x8b, 0x1, 0x8}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)={0x1b, 0x0, 0x0, 0x3, 0x0, r5, 0xfffffff9, '\x00', r9, r10, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x3, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x1, 0xa, 0x8, 0x800}], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x52, &(0x7f0000000ac0)=""/82, 0x41100, 0x60, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000000cc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x0, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[r5], &(0x7f0000000d80)=[{0x0, 0x5, 0x5, 0x5}], 0x10, 0xa}, 0x94) 2.368109972s ago: executing program 0 (id=2389): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) setsockopt$sock_attach_bpf(r2, 0x0, 0x480, 0x0, 0x0) socketpair(0x21, 0x800, 0x6, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800002, 0x1, @perf_config_ext={0x6, 0x9}, 0xce6b9b20411c30f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0xf, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111519, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd4cf3, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x40000b, 0x3, 0x8, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r6, 0x0, 0x20000000) socket$kcm(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000002000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000ee00000000000009000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r5], 0x9a) 2.147800387s ago: executing program 1 (id=2390): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_devices(r0, &(0x7f0000000040)={'b', ' *:* ', 'rw\x00'}, 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r0}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0xb, &(0x7f0000000140)=@raw=[@map_idx={0x18, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000001c0)='syzkaller\x00', 0x3ff, 0x0, &(0x7f0000000200), 0x41100, 0x4, '\x00', r2, @fallback=0xe, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r0, 0x2, &(0x7f0000000340)=[r0, r0], &(0x7f0000000380)=[{0x2, 0x4, 0x2, 0x5}, {0x3, 0x1, 0xf, 0xb}], 0x10, 0xf7e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r4, 0x0, 0xf, 0x70, &(0x7f0000000480)="351d7cc1655b47fbdf6b927a23da1f", &(0x7f00000004c0)=""/112, 0x9, 0x0, 0x1000, 0xab, &(0x7f0000000540)="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", &(0x7f0000001540)="6335914934565871d7c31895e93620154263669418523721bc9f780270da556304bb4c5f6ffed3161e6b9f5a7c4f7086ccd9cf751ae068abc46efbdfbb72f5984b7a020fab589bf1de0f56968b499f988c619a7d11a12615a0f98160881ddb2d801fac855bab4a7c2e22aad379fe11d98305081d178395abd841be543af609f5c753f5505ecdf467a352362bdd1e25706beb329fe685b5ae5deca6a4cdd801fdc552dbb13ccfac10f32cd1", 0x2, 0x0, 0xb84}, 0x50) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3ff, '\x00', r2, r0, 0x2, 0x3, 0x2}, 0x50) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x3, [@enum={0x2, 0x9, 0x0, 0x6, 0x4, [{0x4, 0x1}, {0xa, 0x83}, {0xd, 0x7ab65717}, {0x10}, {0xc, 0x7f}, {0x1}, {0x5, 0x6}, {0x9, 0x8}, {0x5, 0x6}]}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x3, 0xc071}, {0x1, 0x2}, {0x9, 0xdc9}]}, @restrict={0xf}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0xa, [{0x8, 0x9, 0xfffffbff}, {0x3, 0xd, 0x2}]}]}, {0x0, [0x30]}}, &(0x7f0000001a40)=""/182, 0xc3, 0xb6, 0x1, 0x9, 0x10000, @value=r0}, 0x28) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001c80)=@bpf_tracing={0x1a, 0x23, &(0x7f0000001700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x3f3aed33}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @alu={0x7, 0x1, 0x6, 0x0, 0x1, 0x10, 0x10}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa4933c123f3f5221}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001840)='GPL\x00', 0x6, 0x83, &(0x7f0000001880)=""/131, 0x40f00, 0x20, '\x00', r2, 0x19, r6, 0x8, &(0x7f0000001b40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000001b80)={0x3, 0x2, 0x26ae6702, 0x9}, 0x10, 0x15df5, r4, 0x7, &(0x7f0000001bc0)=[r1, r0, r1], &(0x7f0000001c00)=[{0x2, 0x5, 0x1, 0x4}, {0x4, 0x1, 0x0, 0x6}, {0x3, 0x4, 0x9, 0xa}, {0x0, 0x1, 0xa, 0xc}, {0x2, 0x5, 0x3, 0x2}, {0x5, 0x1, 0xd, 0x7}, {0x4, 0x3, 0xa, 0xa}], 0x10, 0x1}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d40)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x15, 0x6, &(0x7f0000002040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000000}, [@jmp={0x5, 0x1, 0x6, 0x6, 0x8, 0xffffffffffffffc0, 0x1}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}]}, &(0x7f0000002080)='syzkaller\x00', 0x5, 0xb0, &(0x7f00000020c0)=""/176, 0x40f00, 0x16, '\x00', r2, @fallback=0x23, r6, 0x8, &(0x7f0000002180)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000021c0)={0x3, 0x8, 0x5, 0x8}, 0x10, r3, r7, 0x0, &(0x7f0000002200)=[r5], 0x0, 0x10, 0xe}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002380)={{r0, 0xffffffffffffffff}, &(0x7f0000002300), &(0x7f0000002340)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002440)=@bpf_ext={0x1c, 0x2a, &(0x7f0000001dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@generic={0xfa, 0x1, 0x5, 0xec4, 0x8}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0xb, 0xb, 0x1, 0xffffffffffffffe0, 0x8}, @call={0x85, 0x0, 0x0, 0xa2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x3, 0x1, 0x3, 0x8, 0x100, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001f40)='GPL\x00', 0x2, 0x64, &(0x7f0000001f80)=""/100, 0x40f00, 0x38, '\x00', r2, 0x0, r6, 0x8, &(0x7f0000002000)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x5d58, r9, 0x1, &(0x7f00000023c0)=[r10], &(0x7f0000002400)=[{0x5, 0x4, 0x10, 0x1}], 0x10, 0x8306}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f00000029c0)={&(0x7f0000002540), 0x6e, &(0x7f0000002800)=[{&(0x7f00000025c0)=""/204, 0xcc}, {&(0x7f00000026c0)=""/58, 0x3a}, {&(0x7f0000002700)=""/23, 0x17}, {&(0x7f0000002740)=""/134, 0x86}], 0x4, &(0x7f0000002840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}, 0x10000) (async) socketpair(0x10, 0x800, 0x3, &(0x7f0000002a00)) ioctl$PERF_EVENT_IOC_PERIOD(r14, 0x40082404, &(0x7f0000002a40)=0x2) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r12, 0x40042409, 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002b40)={{r10, 0xffffffffffffffff}, &(0x7f0000002ac0), &(0x7f0000002b00)='%pK \x00'}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002b80)=@o_path={&(0x7f0000002a80)='./file0\x00', r21, 0x4000, r5}, 0x18) r22 = bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@base={0x4, 0x1, 0x7, 0xfffffff7, 0x0, r16, 0x9, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50) r23 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002d80)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x6, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0xd, 0x1, &(0x7f0000002bc0)=@raw=[@call={0x85, 0x0, 0x0, 0x5c}], &(0x7f0000002c00)='syzkaller\x00', 0x10001, 0xb, &(0x7f0000002c40)=""/11, 0x40f00, 0x0, '\x00', r2, @sock_ops, r19, 0x8, &(0x7f0000002c80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002cc0)={0x3, 0x4, 0xfef0, 0xb1ab}, 0x10, r3, 0xffffffffffffffff, 0x9, &(0x7f0000002e00)=[r18, r22, r15, r23, r17, r16], &(0x7f0000002e40)=[{0x4, 0x2, 0xb, 0x4}, {0x5, 0x1, 0x1, 0x3}, {0x3, 0x3, 0x2, 0xc}, {0x4, 0x5, 0x5, 0x3}, {0x2, 0x4, 0x4, 0x9}, {0x3, 0x5, 0xe, 0xc}, {0x2, 0x2, 0x8, 0x5}, {0x3, 0x5, 0xf, 0x4}, {0x5, 0x1, 0xf, 0x6}], 0x10, 0x3}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003040)={r13, 0x58, &(0x7f0000002fc0)}, 0x10) (async) openat$cgroup_netprio_ifpriomap(r20, &(0x7f0000003080), 0x2, 0x0) (async) r24 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000030c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000033c0)={r24, 0xe0, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000003140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x1e, &(0x7f00000031c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000003200), &(0x7f0000003240), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000003280)}}, 0x10) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000003400)=""/184) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003500), 0x4) 2.011440651s ago: executing program 0 (id=2391): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) socket$kcm(0x2, 0x1, 0x84) (async) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005, 0x4, @perf_config_ext={0x1000000000000005, 0x6}, 0x4010, 0x0, 0x0, 0x8, 0x3, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x7fffffff, r1, 0x0) (async) perf_event_open$cgroup(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005, 0x4, @perf_config_ext={0x1000000000000005, 0x6}, 0x4010, 0x0, 0x0, 0x8, 0x3, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x7fffffff, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x100000, 0x4, 0x8, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r2, 0x0, 0x20000041) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, 0x0, 0x0) (async) sendmsg$kcm(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000c40)={0x0, 0x80, 0x3, 0x1, 0xa0, 0x1, 0x0, 0xfffffffffffff001, 0x42011, 0x9, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x400, 0x4, @perf_config_ext={0x4, 0x1}, 0x12e, 0x2, 0x7, 0x0, 0x3, 0x2098, 0x9, 0x0, 0x9}) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x64, 0x21, 0x0, 0x9}, {0x6, 0x6, 0x0, 0x3}]}) socket$kcm(0x2b, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x4}, 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x880) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x702, 0x37, 0x0, &(0x7f0000000540)="e4603339708da8fb9410e5e0ebdd4fec96f2497356660bcf8208e49a42b7229184109c33626c9d867bf3581ee9ce4b45eeae12cec3f32fb33563c12337ecabfbbbffb8e7ecd89dc794b04df248dedeefea2e2dcd5fa30b6242b5da9263e828933ce0420310f2d819dfdff135135ced2843e6d09cd86c78d668434fb1748d89878f1a56cb94dc25629099ed1ac41fba89f9ba516e019b85a201ce4ccdb16cb8cda59d9be8", 0x0, 0x1, 0x1000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720a06fef8ffffff71a400fe0000000071105800000000001d300200000000004704000001ed03040f030000000000001d440000000000006b0a04fe0000000072030000000a0000b500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/157}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)=""/157}, 0x20) 1.768901237s ago: executing program 2 (id=2392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2a740, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'veth0_to_batadv\x00', 0x20}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x114905, 0x4, 0xfffffffc, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xffdfffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x114003, 0x8, 0x7fff, 0x2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8417, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000003, 0x300) (async) r5 = socket$kcm(0x11, 0x200000000000003, 0x300) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x8, &(0x7f0000000040)=r6, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000ff0f000003", @ANYRESOCT=r5, @ANYRES16=r5], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0900000004000000ff0f000003", @ANYRESOCT=r5, @ANYRES16=r5], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x6, 0x0, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001008000000030000000000001103000000000000000000000001000004040000000000000002000000000000000061612e"], 0x0, 0x51}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000005000000030000000000001008000000030000000000001103000000000000000000000001000004040000000000000002000000000000000061612e"], 0x0, 0x51}, 0x28) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) openat$cgroup_procs(r10, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) (async) openat$cgroup_procs(r10, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r11, 0x6, 0xd, &(0x7f00000000c0), 0x4) (async) setsockopt$sock_attach_bpf(r11, 0x6, 0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x8a, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x14, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2100000006000000040000000000000004800200", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=r12, @ANYRES32=r6, @ANYBLOB="00120000040000001600"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2100000006000000040000000000000004800200", @ANYRES32=0x1, @ANYBLOB="0200"/20, @ANYRES32=r12, @ANYRES32=r6, @ANYBLOB="00120000040000001600"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$sock_attach_bpf(r11, 0x1, 0x31, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r11, 0x1, 0x31, &(0x7f0000000000), 0x4) 1.526634163s ago: executing program 0 (id=2393): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8b, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x81, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', r0, r2, 0x0, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x1, 0x1, 0xa, 0x4, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x7a}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000640)='GPL\x00', 0x6, 0x7f, &(0x7f0000000680)=""/127, 0x40f00, 0x0, '\x00', r0, 0x1b, r2, 0x8, &(0x7f0000000700)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x7, 0x0, 0x5}, 0x10, r1, 0x0, 0x2, &(0x7f0000000780)=[r3, r3], &(0x7f00000007c0)=[{0x2, 0x5, 0xf, 0x9}, {0x5, 0x1, 0xd, 0xc}], 0x10, 0x6}, 0x94) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7f}, @generic={0x10, 0x8, 0x5, 0xeae, 0xb44b}]}, &(0x7f0000000940)='syzkaller\x00', 0xb3eb, 0x8c, &(0x7f0000000980)=""/140, 0x40f00, 0x12, '\x00', r0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40)={0x4, 0x1, 0x1, 0xe}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a80)=[0xffffffffffffffff, r5, r4, r3, r5, r3, r3, r5], &(0x7f0000000ac0)=[{0x5, 0x2, 0x9, 0x6}], 0x10, 0x78}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r4, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x6, 0x1d, &(0x7f0000000cc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x738c, 0x0, 0x0, 0x0, 0x200}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x3, 0x2, 0x2, 0x0, 0x0, 0xc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x1, 0x1, 0x1, 0x3, 0x0, 0xfffffffffffffffc}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000dc0)='GPL\x00', 0x7ff, 0x0, &(0x7f0000000e00), 0x41000, 0x48, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56fde1f6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r8}, &(0x7f0000000c80), &(0x7f0000000f40)=r9}, 0x20) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001000)=@generic={&(0x7f0000000fc0)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@fallback=r2, 0xb, 0x0, 0x100, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@map=r3, r10, 0x1c, 0x0, 0x0, @void, @value=r9, @void, @void, r12}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001200)=@o_path={&(0x7f00000011c0)='./file0\x00', r7, 0x4000, r2}, 0x18) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001240)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001280)=r13, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000013c0)={@fallback=r4, 0x7, 0x1, 0x10000, &(0x7f00000012c0)=[0x0], 0x1, 0x0, &(0x7f0000001300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0, 0x0], &(0x7f0000001380)=[0x0]}, 0x40) ioctl$PERF_EVENT_IOC_QUERY_BPF(r14, 0xc008240a, &(0x7f0000001400)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)={0x1b, 0x0, 0x0, 0x800, 0x0, r3, 0x85ec, '\x00', 0x0, r2, 0x0, 0x3, 0x2}, 0x50) (async) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100, '\x00', r0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0xb, 0x1d, &(0x7f00000014c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x54cef0f3}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x1, 0x3, 0x5, 0x3, 0xffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000015c0)='GPL\x00', 0x4, 0xd4, &(0x7f0000001600)=""/212, 0x40f00, 0x0, '\x00', r0, @fallback=0x30, r11, 0x8, &(0x7f0000001700)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r1, r6, 0x2, &(0x7f00000017c0)=[r4, r8, r4, r16, r14], &(0x7f0000001800)=[{0x1, 0x5, 0x3, 0xc}, {0x3, 0x2, 0x7, 0xb}], 0x10, 0x2}, 0x94) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000001900)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r10, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0], 0x0, 0x27, &(0x7f0000001a00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001c40)={0xffffffffffffffff, r16}, 0xc) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000002e80)={&(0x7f0000001c80)="8280fdcf92c6a50eb511d585987b4b18a4f9ff0e64b31bab", &(0x7f0000001cc0)=""/4096, &(0x7f0000002cc0)="385a4f7f585257d11cac5652f098e110330df274ed232134cad35d30c23fc1124f952dfa23d71d607d51c62cd1b203c11b507f3f720230c7b20c09706f1a771d5e1d077aebda9a2dad0258ce311a3e72b0b6b97c50cd1d45e7cb78c27b0cddfc172916916682dd241ffcbe73e22e8603fba8cf6b2d9452f6a8363a59ab6c9ae5daae8b4bfd1dd79d27bb6f2580117c5559c6e95332fdbf5ccbf09fdb1e86a50fd2d9", &(0x7f0000002d80)="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", 0x7, r15}, 0x38) (async, rerun: 64) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000002ec0), 0x101000, 0x0) (rerun: 64) ioctl$TUNATTACHFILTER(r17, 0x401054d5, &(0x7f0000002f80)={0xa, &(0x7f0000002f00)=[{0x6a, 0x3d, 0x9, 0x40}, {0x0, 0x8, 0x81, 0xeb}, {0x3, 0x9, 0x0, 0x6}, {0x8, 0x8, 0x3, 0x40}, {0x800, 0x8, 0xdd, 0x1ff}, {0x4, 0x63, 0x6, 0x2}, {0x81, 0x1, 0x2, 0x100}, {0x10, 0xa, 0x5, 0x8}, {0x40, 0x4, 0x9, 0x1ff}, {0x3, 0x0, 0xd, 0x7}]}) (async, rerun: 32) r18 = openat$cgroup(r14, &(0x7f0000002fc0)='syz0\x00', 0x200002, 0x0) (rerun: 32) openat$cgroup_subtree(r18, &(0x7f0000003000), 0x2, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000003080)=0xc) 1.139496603s ago: executing program 1 (id=2394): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x13f, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x5, [@int={0x1, 0x0, 0x0, 0x1, 0x0, 0x57, 0x0, 0x77, 0xc}, @enum64={0x1, 0x1, 0x0, 0x13, 0x0, 0x3, [{0x10, 0x1, 0x3}]}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x1, 0xffffffffffffffff}]}, {0x0, [0x5f, 0x2e, 0x0]}}, &(0x7f0000000a40)=""/46, 0x61, 0x2e, 0x1, 0xfa}, 0x28) (fail_nth: 15) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r3, &(0x7f0000000980)={&(0x7f0000000300)=@ll={0x11, 0xf5, r4, 0x1, 0xb, 0x6, @random="77c0b499f3e1"}, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)="05c609dae5cdb0481eff587e765531b7a6a5fe71d25e220656c2c2486284c999bbb64802260b34277300db6e1177f347dfde0058aa159345017362ba750b8c363f4bd115162c2362b513a66a24ad39b59164890a8765a84414bea51c7e16e5841ec67953f9b9c5958b5b57a264a4e208c32d", 0x72}, {&(0x7f0000000640)="6489f11f32e6bb9409d3a5dd5c32873e76cae7b4162f4b06a33d858eaa569efc024572cacc0f523096911c744ebc7e8747859595e6427115972c17b7b2a3fc5777c7e34f9aa5975efc55679bead06e27fccc35d0bea4e9d1af7cbe6c0bfcc7ae27722f936aa904384866031a38f4b94437eedca24438ef1371e62c6f85047ee60a3833abc1ddbd3a0691ec7c04585d6882404921ad72661c363a33386d463a41785e35878db611fe02903cafb146d9ed99bca035d479e69b046c62a2ab2bae98079b5d7614ce38ca489703", 0xcb}, {&(0x7f0000000740)="34d6fcb1b68055e848b49e8c4fa5ffb34a98220711d30205cf481e00b229aa61c8c788aac7b26bdcf7c860400a4b1184dcf449799e4f2b878e5f35351d05509490d0dc0142f8b77ddb05fc4862e8a22dd6ca5be52776468edf54b8168c6e746aa7a60aa4074eb2d4a01ea4daacd9d57ced25a5de5a5c597f5dd0b7143b2572e6a3db5fc55ef215dbb02360f3123308c69005752d5c82f7a891046d8803f8ce23b1bb519940a2642ba2a3d4738ae0ef8123d5ed3f5e6788e803d3931c70bab339edc9212187e419a9499149de748a8470", 0xd0}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="a8000000000000002900000000000000378f5cc6522e228d59d27a1c3d3fb2bfc148ac4f0457f5193cf5945e7ed220fc675d3920fde8ea1946874271be5c9d7ef50bc76928b719fa9d5ef9"], 0xa8}, 0x8000) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c80)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x25, 0x25, 0xa, [@type_tag={0x10, 0x0, 0x0, 0x12, 0x3}, @datasec={0x7, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x0, 0xe}], '2'}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f, 0x30]}}, &(0x7f0000000bc0)=""/139, 0x4a, 0x8b, 0x1, 0x8}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0xfffffff9, '\x00', r4, r5, 0x0, 0x5, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x3, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @generic={0x1, 0xa, 0x8, 0x800}], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x52, &(0x7f0000000ac0)=""/82, 0x41100, 0x60, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000cc0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x4, 0x0, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d40)=[r1], &(0x7f0000000d80)=[{0x0, 0x5, 0x5, 0x5}], 0x10, 0xa}, 0x94) 442.22106ms ago: executing program 1 (id=2395): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000000c0), 0x4}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="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", 0x691}], 0x1}, 0x4000080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a63"], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='j', 0x1}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000"], 0xffffffffffffffc7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0, 0x0, 0xfffffffffffffdce}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x4000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="01160000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000950b10000400000002790c00ffffff7f"], &(0x7f0000000340)='GPL\x00', 0x401, 0xa6, &(0x7f0000000580)=""/166, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xe, 0x7}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)=[{0x3, 0x1, 0x9, 0x7}, {0x4, 0x1, 0x3, 0x9}], 0x10, 0x3}, 0x94) 361.951482ms ago: executing program 0 (id=2396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xbbf}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}, @jmp={0x5, 0x0, 0x9, 0x7, 0x4, 0xc, 0xfffffffffffffffc}, @map_val={0x18, 0xd, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xd1a5}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x0, 0x3, 0x6000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x0, 0x1, 0x0, 0x2}, {0x1, 0x2, 0x6, 0x4}, {0x3, 0x3, 0x10, 0x4}, {0x3, 0x4, 0x4, 0x7}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001540)={r1, 0x0, 0x1000, 0xc7, &(0x7f0000000300)="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", &(0x7f0000001300)=""/199, 0x7ff, 0x0, 0x59, 0x9f, &(0x7f0000001400)="4335b5478f01c9f1d7bb1d6bb83cc299b0082b6fcb78848a22bd07126da7a83889ae5c140c67e2de52bc05e4ba8f261be250e5f45d50cef8c51830885b1b1dfd666a93be4d0aea21fe386074a7ed152999aa69b3ed80d12a7c", &(0x7f0000001480)="3df2f3cb1f11bd981421c0486e6cc620f5b700af06cbc4ceb27a90702766206580fad3a5e3afffdf8424e343c5d014a51dcb15d00d5f9f6527b5ab06d55530af39d8dc9c50142ce1ba00125c5cfa6c370f6462f3260a69787101b3328a9b0c7aa3e421d348ea7a2e1d722509ac609d36b5351f60ad11468e127d3bcb207bf1c087c7f2160707b19ce48a8855f64233845739531dafdf82143ae19e632e80ae", 0x6, 0x0, 0xffff}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0x58, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001680)=0xffffffffffffffff, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, '\x00', r2, r3, 0x4, 0x5, 0x5}, 0x50) close(r1) r5 = perf_event_open(&(0x7f0000001780)={0x5, 0x80, 0x0, 0x4, 0x4, 0x3, 0x0, 0x8, 0x61a04, 0x4, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_bp={&(0x7f0000001740), 0x4}, 0x5, 0x8000000000000001, 0x3, 0x4, 0x5, 0x0, 0x8, 0x0, 0x3, 0x0, 0x5}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000001840)={0x4, 0x80, 0x7, 0x1, 0xf9, 0x7, 0x0, 0xfffffffffffffff8, 0x20000, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8000, 0x0, @perf_bp={&(0x7f0000001800), 0x4}, 0x1001b8, 0x1, 0x7, 0x1, 0x2, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x5754}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000018c0)={'bond_slave_0\x00', @remote}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001900)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{r6, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r1}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x15, 0x2c, &(0x7f0000001a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x51a5}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001b80)='syzkaller\x00', 0xfffffff8, 0x74, &(0x7f0000001bc0)=""/116, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x1a, r6, 0x8, &(0x7f0000001c40)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001c80)={0x4, 0x2, 0x0, 0x2}, 0x10, 0x0, r6, 0xa, &(0x7f0000001cc0)=[r7, r7, r7, r7, r4, r6], &(0x7f0000001d00)=[{0x3, 0x1, 0xc, 0x4}, {0x3, 0x2, 0x5}, {0x5, 0x5, 0xd, 0xc}, {0x1, 0x3, 0x8}, {0x1, 0x4, 0xe, 0x2}, {0x3, 0x3, 0x0, 0x16}, {0x4, 0x2, 0xc, 0x3}, {0x5, 0x5, 0x6, 0x4}, {0x2, 0x2, 0xb, 0xb}, {0x1, 0x4, 0xf, 0x6}], 0x10, 0x4}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000001e80)=r8) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000001ec0)=""/193) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002580)={r1, 0xe0, &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000002280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f0000002380)=[{}], 0x8, 0x10, &(0x7f00000023c0), &(0x7f0000002400), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000002440)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x6, 0x2c, &(0x7f0000001fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x93}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfb5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002140)='syzkaller\x00', 0x2, 0xda, &(0x7f0000002180)=""/218, 0x40f00, 0x4d, '\x00', r10, 0x25, r3, 0x8, &(0x7f00000025c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002600)={0x4, 0xb, 0x2825, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002640)=[r4, r6, r4, r7, r4], &(0x7f0000002680)=[{0x5, 0x2, 0x5}, {0x0, 0x3, 0x3}, {0x5, 0x2, 0x5, 0x7}], 0x10, 0x8}, 0x94) openat$cgroup_freezer_state(r6, &(0x7f0000002780), 0x2, 0x0) r11 = getpid() perf_event_open(&(0x7f0000002800)={0x4, 0x80, 0x10, 0xb, 0x3, 0x4, 0x0, 0x6, 0xb402, 0xe, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5639, 0x2, @perf_bp={&(0x7f00000027c0), 0x4}, 0x0, 0x7, 0x9, 0x1, 0x9, 0xc, 0x9, 0x0, 0x0, 0x0, 0x600000000000}, r11, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000002880)=r6) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) sendmsg(r7, &(0x7f0000002f80)={&(0x7f00000028c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000002940)="75f89dd8e36dccf00af5d94931bf612ea273ed73220f62f54eaa219ed3aae87e4740c15a3a77213bdab69a63f339c131c974c135406eebf7dee401a9ca137e4e2b47d2d0d56ac0a2b7342357700ef93c50067bbb004c990d486fa3e77660257c1de92e1d94088d3d2fb75581cca542ce43859805a9ff1e2ae291aef5d5168799427273601ca8f08ed366cfa2e80d8b853e731e1a3801cc", 0x97}, {&(0x7f0000002a00)="f90d1b4d37c0223de5890dd346c086f215bb08b0222e9cf756aea693e915e001e370c6c780cc8a5e1dd7b244144d17ce6c491674d7797b3925f7af9e98022d698e13aa4ff91ff8bc001196a5396a15b8a933454c86eecabe46a89c640b3ae37408936dec210f47d31091b418388b93d12c69c81ef9f1d0a6116a497ee2072ba31da92aae6b5db0ee254fe8b431b964e4ff47547c41b7dd5c061ae4fc0d68788ec6275e0a8ea75a217f7ccd17eb044d856a94a5c16ed2381c0df14daa078c8c2c9ef5000b406e04537f82b989a5b4738484a0b6e354058985847ccd6557ec8bdac3d9b3357b2554ba3b8d0b94a1a9", 0xee}, {&(0x7f0000002b00)="11b0af72e7074e1613d5cf187c3dfd4c468f32dbfa04ad45356512f0795188069264ba06cc78d7aa91216abfe358db0fe977de6600f1c2f250ce06084a50f34e88f82bb1ab89b81049406926c8a2ee975e2dedfd69fc44f6a0774c5e4c6df6b8aa9ef886538aea52bc79626e5eaef26f317b73a0afcf05d07bfb4de54c51a51e1f76f84547b4899c00009c29d8f6468cff8714fe0e2d2ad0", 0x98}, {&(0x7f0000002bc0)="2b3bb46f659188e0972c9c7514b230867e77a3491129b8a3459509a67851c64615000f2f8147f63998103e4e938dda1bd18207764581944558e3cad5f4f05e199b12816575cfb56139e3e2f1c6a1921c7ef35f9422584b9f629c454ae0bff4efa032a3253db7137566459916f07bfbf78b7f8ecf8d62252ffe9d2eda1eec7d9672d0b06055bc55886f2c0080684581ff2039e9f4707df28a3723b5a7f53f99aea7ee9bae5cdb8fbaadaa", 0xaa}, {&(0x7f0000002c80)="9c50ec31ebdcfee9249f7fc4f31efd182df130f8fa2f71907f6bb8733bdd1b5f2ea244834e3a6604d4f7d6b8a9906f736090c022f450c4ad78e19da23ca726b4770ee463c54e3515e4e7f6c4d0a6d2604f4415e940a66290a2735e8d7a475322803126ad58a5428210e082ff8fe89c87aa5769f193304d7c56753e910f53504f15b6d281f97518c2ee341748dfe44ee048a612a6645433df0da08d36298adc403e6f4120c7b59e0fa07d21bfead20741af56c4d5e3d75edc77d48c563ff84b64c4bb015719c1694d", 0xc8}, {&(0x7f0000002d80)="1cc1661992be93e6fcd905f9633323930136ba3ccb6b968522fefc4f5655c896f6737f800322cf26b394bd6e942661468fc0a93a23c2a5f19a32c95f8810100bdf0164c116d330f196fece74109ad41266cc423411eefc0aac35f87bb81fb247b378e82250c54193bdd4d741f8688efea231813b0194ca4fa37bd060ad2556489e93ff9a77827d172fb3b99dbd0e1098a14d88b71ba0b96bdd8c2e3dc1bd9070c8", 0xa1}, {&(0x7f0000002e40)="f49acd8f731b4f5eec210967d58a793b59000dc5c79f85a07ef7ca15ee611523cc4b629b1fd29e933838e67a5efd69814ee0e4cfeb9cabe03266229f9b64", 0x3e}, {&(0x7f0000002e80)="cee99a7dd5361b309780154d5b5fe6b97236d43c792ce988941b192160e5719d2b0bd002674842b143d559b25b0ffaa66dd96469034f4a7bf7787c77cc0caf2c2a853298a463721e0bb7017ad9654621963e4e1a1329e0c6e0c6c3e3d40a8af918b245233e5806169b8577507917", 0x6e}], 0x8}, 0x40080) r12 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002fc0)={r9}, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000003000)=r12, 0x4) openat$cgroup_procs(r6, &(0x7f0000003040)='cgroup.threads\x00', 0x2, 0x0) perf_event_open(&(0x7f00000030c0)={0x0, 0x80, 0x0, 0x2, 0xfe, 0x1, 0x0, 0x6, 0x40000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000003080), 0x4}, 0x100a0a, 0x7, 0x5, 0x2, 0x57f1, 0xfffffff8, 0x3, 0x0, 0x3, 0x0, 0x3}, r11, 0x5, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000003180)=r10) 251.357444ms ago: executing program 2 (id=2397): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)}, 0x40000140) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9fd509001804000000000000000000010c0000000200000000000000000000040000000000fe"], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x5, 0x111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x9006, 0xa, 0x4, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000740)="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", 0xfa}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB='-4'], 0xc) openat$cgroup(r3, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) close(r3) r6 = syz_clone(0x80881000, 0x0, 0x0, &(0x7f0000000700), 0x0, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x0, 0x3c, 0x0, 0xfffffffd, 0x8000001}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r7, @ANYBLOB="0100000002"], 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x40) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x9}, r6, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r8}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x5) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x23, &(0x7f00000002c0)=ANY=[@ANYBLOB="06a21e00090000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff010000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085009100a5000000851000000600000018400000f9ffffff0000000000000000"], &(0x7f0000000280)='GPL\x00', 0x205, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x8}, 0x10}, 0x94) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="d8000000120081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e1208002e0040001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bba020017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'batadv_slave_0\x00', @random="010000201000"}) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000001c0)) 0s ago: executing program 0 (id=2398): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000200000000000000000000000200"], 0x0, 0x1a}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x12, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x2, @perf_config_ext={0x62, 0x40}, 0x0, 0x8, 0x0, 0x5, 0x0, 0x7fff, 0xfffd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x880000000000, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRES32, @ANYRES16=r3, @ANYRES64=0x0], 0x20) r4 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x22, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x80044944, &(0x7f0000000200)) write$cgroup_int(r3, &(0x7f0000000040), 0x1) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRESOCT], &(0x7f0000000280)='GPL\x00', 0x10005, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="8046b92d97", 0x5}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1041aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9aaa45a259ffffdbc6e2", 0xa}], 0x3, 0x0, 0xfe86, 0x1f00c00e}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080)) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 61.051392][ T5437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.072872][ T5437] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. syzkaller login: [ 82.556105][ T5763] cgroup: Unknown subsys name 'net' [ 82.670569][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.551182][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.170330][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.190787][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.199099][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.223196][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.240973][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.249468][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.262021][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.270016][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.277593][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.293234][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.301591][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.309177][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.371268][ T5087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.379609][ T5087] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.388078][ T5087] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.396704][ T5087] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.410325][ T5087] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.425612][ T5087] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.497505][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.506115][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.514816][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.522942][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.531240][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.538682][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.820024][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 86.996711][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.006577][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.015186][ T5775] bridge_slave_0: entered allmulticast mode [ 87.025503][ T5775] bridge_slave_0: entered promiscuous mode [ 87.036630][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.046275][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.053914][ T5775] bridge_slave_1: entered allmulticast mode [ 87.063321][ T5775] bridge_slave_1: entered promiscuous mode [ 87.158525][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.178912][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.215328][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.237880][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 87.388834][ T5775] team0: Port device team_slave_0 added [ 87.405794][ T5775] team0: Port device team_slave_1 added [ 87.507948][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.523914][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.531075][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.557795][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.574316][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.581437][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.608127][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.719448][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.726992][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.739586][ T5779] bridge_slave_0: entered allmulticast mode [ 87.747537][ T5779] bridge_slave_0: entered promiscuous mode [ 87.824478][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.836089][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.843863][ T5779] bridge_slave_1: entered allmulticast mode [ 87.851550][ T5779] bridge_slave_1: entered promiscuous mode [ 87.879800][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.887210][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.895027][ T5783] bridge_slave_0: entered allmulticast mode [ 87.902571][ T5783] bridge_slave_0: entered promiscuous mode [ 87.938583][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.946075][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.953421][ T5783] bridge_slave_1: entered allmulticast mode [ 87.960863][ T5783] bridge_slave_1: entered promiscuous mode [ 88.002435][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.019166][ T5775] hsr_slave_0: entered promiscuous mode [ 88.026392][ T5775] hsr_slave_1: entered promiscuous mode [ 88.076120][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.099578][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.113526][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.124139][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.131957][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.139270][ T5786] bridge_slave_0: entered allmulticast mode [ 88.147314][ T5786] bridge_slave_0: entered promiscuous mode [ 88.185099][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.192987][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.200183][ T5786] bridge_slave_1: entered allmulticast mode [ 88.208183][ T5786] bridge_slave_1: entered promiscuous mode [ 88.280312][ T5779] team0: Port device team_slave_0 added [ 88.290013][ T5783] team0: Port device team_slave_0 added [ 88.299422][ T5783] team0: Port device team_slave_1 added [ 88.325846][ T5779] team0: Port device team_slave_1 added [ 88.362354][ T5781] Bluetooth: hci0: command tx timeout [ 88.368206][ T5781] Bluetooth: hci1: command tx timeout [ 88.381920][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.394358][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.427757][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.435111][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.461620][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.494535][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.503860][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.530150][ T5781] Bluetooth: hci2: command tx timeout [ 88.536563][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.548523][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.556086][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.582857][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.601556][ T5781] Bluetooth: hci3: command tx timeout [ 88.613508][ T5786] team0: Port device team_slave_0 added [ 88.627437][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.634726][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.663537][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.686596][ T5786] team0: Port device team_slave_1 added [ 88.727216][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.734433][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.760868][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.804566][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.812031][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.838467][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.897254][ T5783] hsr_slave_0: entered promiscuous mode [ 88.904337][ T5783] hsr_slave_1: entered promiscuous mode [ 88.911321][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.919264][ T5783] Cannot create hsr debugfs directory [ 88.935334][ T5779] hsr_slave_0: entered promiscuous mode [ 88.942766][ T5779] hsr_slave_1: entered promiscuous mode [ 88.949002][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.957354][ T5779] Cannot create hsr debugfs directory [ 89.024178][ T5786] hsr_slave_0: entered promiscuous mode [ 89.033849][ T5786] hsr_slave_1: entered promiscuous mode [ 89.040095][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.048094][ T5786] Cannot create hsr debugfs directory [ 89.225400][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.281358][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.319424][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.338931][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.523585][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.536097][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.547940][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.559693][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.698808][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.715398][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.727432][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.746076][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.816127][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.853484][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.865267][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.879692][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.894393][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.911993][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.966516][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.979821][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.005250][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.012847][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.039690][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.046916][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.062774][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.070019][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.089469][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.096730][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.247806][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.287377][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.358470][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.385469][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.392751][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.425293][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.441178][ T5781] Bluetooth: hci1: command tx timeout [ 90.446659][ T5781] Bluetooth: hci0: command tx timeout [ 90.465344][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.472572][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.575389][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.601162][ T5781] Bluetooth: hci2: command tx timeout [ 90.651758][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.659589][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.680697][ T5781] Bluetooth: hci3: command tx timeout [ 90.694056][ T983] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.701402][ T983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.928090][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.948182][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.122984][ T5783] veth0_vlan: entered promiscuous mode [ 91.165449][ T5775] veth0_vlan: entered promiscuous mode [ 91.182788][ T5783] veth1_vlan: entered promiscuous mode [ 91.224096][ T5775] veth1_vlan: entered promiscuous mode [ 91.305195][ T5783] veth0_macvtap: entered promiscuous mode [ 91.332895][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.347794][ T5783] veth1_macvtap: entered promiscuous mode [ 91.379326][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.403729][ T5775] veth0_macvtap: entered promiscuous mode [ 91.418915][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.442877][ T5775] veth1_macvtap: entered promiscuous mode [ 91.457829][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.472430][ T5783] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.483932][ T5783] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.493959][ T5783] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.504448][ T5783] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.578450][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.596932][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.610946][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.656917][ T5779] veth0_vlan: entered promiscuous mode [ 91.717915][ T5779] veth1_vlan: entered promiscuous mode [ 91.729978][ T5786] veth0_vlan: entered promiscuous mode [ 91.738135][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.754623][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.767932][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.807993][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.823797][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.834087][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.843208][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.912607][ T5786] veth1_vlan: entered promiscuous mode [ 91.949972][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.994060][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.039859][ T5779] veth0_macvtap: entered promiscuous mode [ 92.089209][ T5786] veth0_macvtap: entered promiscuous mode [ 92.102237][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.110256][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.127721][ T5779] veth1_macvtap: entered promiscuous mode [ 92.146881][ T5786] veth1_macvtap: entered promiscuous mode [ 92.179567][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.212518][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.266166][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.282298][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.313406][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.334266][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.344408][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.355479][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.370063][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.395541][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.428959][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.445601][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.456845][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.467479][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.484545][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.498788][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.513356][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.521367][ T5781] Bluetooth: hci0: command tx timeout [ 92.529282][ T5781] Bluetooth: hci1: command tx timeout [ 92.538475][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.551141][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.563431][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.575188][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.599096][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.623793][ C1] hrtimer: interrupt took 81237 ns [ 92.633206][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.643209][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.654318][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.670740][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.682133][ T5781] Bluetooth: hci2: command tx timeout [ 92.700547][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.717216][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.731474][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.740723][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.749513][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.758429][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.769484][ T5781] Bluetooth: hci3: command tx timeout [ 92.799243][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.838058][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.849748][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.860242][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.610988][ T5781] Bluetooth: hci1: command tx timeout [ 94.616479][ T5781] Bluetooth: hci0: command tx timeout [ 94.763912][ T5781] Bluetooth: hci2: command tx timeout [ 94.845870][ T5781] Bluetooth: hci3: command tx timeout [ 95.073730][ T5851] netlink: 'syz.1.5': attribute type 10 has an invalid length. [ 95.084706][ T5851] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5'. [ 95.251682][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.260313][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.352387][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.374798][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.440391][ T5856] netlink: 'syz.2.6': attribute type 29 has an invalid length. [ 95.449842][ T5855] netlink: 'syz.1.7': attribute type 4 has an invalid length. [ 95.465491][ T5855] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7'. [ 95.495148][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.503633][ T5856] netlink: 'syz.2.6': attribute type 29 has an invalid length. [ 95.518216][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.617637][ T5853] syz.2.6 (5853) used greatest stack depth: 20840 bytes left [ 95.646527][ T5855] warning: `syz.1.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.703867][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.725821][ T5855] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 95.736938][ T5855] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7'. [ 95.745803][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.843936][ T5859] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 95.856701][ T5859] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 96.181976][ T5859] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 96.367909][ T5859] team0: Device hsr_slave_0 failed to register rx_handler [ 96.455892][ T5862] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 96.596588][ T5859] syz.3.4 (5859) used greatest stack depth: 19688 bytes left [ 97.370294][ T23] cfg80211: failed to load regulatory.db [ 97.390676][ T5876] netlink: 'syz.0.13': attribute type 10 has an invalid length. [ 97.410786][ T5876] netlink: 55 bytes leftover after parsing attributes in process `syz.0.13'. [ 97.651581][ T5894] netlink: 164 bytes leftover after parsing attributes in process `syz.2.16'. [ 97.782889][ T5891] netlink: 116 bytes leftover after parsing attributes in process `syz.2.16'. [ 98.147877][ T5912] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.21'. [ 98.265585][ T5911] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.21'. [ 98.290906][ T5916] netlink: 132 bytes leftover after parsing attributes in process `syz.0.24'. [ 98.330247][ T5911] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 98.347279][ T5911] CPU: 1 PID: 5911 Comm: syz.3.21 Not tainted syzkaller #0 [ 98.354598][ T5911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.364788][ T5911] Call Trace: [ 98.368149][ T5911] [ 98.371152][ T5911] dump_stack_lvl+0x18c/0x250 [ 98.375944][ T5911] ? show_regs_print_info+0x20/0x20 [ 98.381249][ T5911] ? load_image+0x420/0x420 [ 98.385850][ T5911] sysfs_warn_dup+0x8e/0xa0 [ 98.390454][ T5911] sysfs_do_create_link_sd+0xc0/0x110 [ 98.395917][ T5911] device_add_class_symlinks+0x1cf/0x240 [ 98.401658][ T5911] device_add+0x4f9/0xc40 [ 98.406126][ T5911] wiphy_register+0x1d99/0x2ac0 [ 98.411162][ T5911] ? cfg80211_event_work+0x40/0x40 [ 98.416419][ T5911] ? minstrel_ht_alloc+0x88a/0x990 [ 98.421595][ T5911] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 98.427737][ T5911] ieee80211_register_hw+0x2f3d/0x3cb0 [ 98.433333][ T5911] ? ieee80211_register_hw+0xf51/0x3cb0 [ 98.438967][ T5911] ? ieee80211_tasklet_handler+0x20/0x20 [ 98.444676][ T5911] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 98.450665][ T5911] ? __debug_object_init+0xec/0x450 [ 98.455962][ T5911] ? __asan_memset+0x22/0x40 [ 98.460616][ T5911] ? __hrtimer_init+0x189/0x270 [ 98.465552][ T5911] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 98.471376][ T5911] ? mac80211_hwsim_free+0x220/0x220 [ 98.476730][ T5911] ? rcu_is_watching+0x15/0xb0 [ 98.481547][ T5911] ? kstrndup+0xbd/0x140 [ 98.485894][ T5911] hwsim_new_radio_nl+0xdad/0x1a70 [ 98.491168][ T5911] ? __nla_validate+0x50/0x50 [ 98.495937][ T5911] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 98.502344][ T5911] ? __nla_parse+0x40/0x50 [ 98.506822][ T5911] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 98.513220][ T5911] genl_family_rcv_msg_doit+0x21a/0x310 [ 98.518831][ T5911] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 98.524876][ T5911] ? bpf_lsm_capable+0x9/0x10 [ 98.529593][ T5911] ? security_capable+0x89/0xb0 [ 98.534508][ T5911] genl_rcv_msg+0x611/0x7a0 [ 98.539079][ T5911] ? genl_bind+0x360/0x360 [ 98.543543][ T5911] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 98.549953][ T5911] ? perf_trace_lock+0x303/0x3b0 [ 98.555131][ T5911] ? __kasan_kmalloc_large+0x8b/0xa0 [ 98.560492][ T5911] netlink_rcv_skb+0x235/0x4c0 [ 98.565310][ T5911] ? genl_bind+0x360/0x360 [ 98.569804][ T5911] ? netlink_ack+0x1160/0x1160 [ 98.574648][ T5911] ? __lock_acquire+0x7eb0/0x7eb0 [ 98.579741][ T5911] ? down_read+0x1ac/0x2e0 [ 98.584227][ T5911] genl_rcv+0x28/0x40 [ 98.588256][ T5911] netlink_unicast+0x7b1/0x930 [ 98.593118][ T5911] netlink_sendmsg+0x8d0/0xbf0 [ 98.597979][ T5911] ? netlink_getsockopt+0x590/0x590 [ 98.603236][ T5911] ? apparmor_socket_sendmsg+0x8e/0x330 [ 98.608888][ T5911] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 98.614242][ T5911] ? security_socket_sendmsg+0x80/0xa0 [ 98.619834][ T5911] ? netlink_getsockopt+0x590/0x590 [ 98.625093][ T5911] ____sys_sendmsg+0x61b/0x980 [ 98.629923][ T5911] ? __asan_memset+0x22/0x40 [ 98.634907][ T5911] ? __sys_sendmsg_sock+0x30/0x30 [ 98.640104][ T5911] ? __import_iovec+0x5f2/0x850 [ 98.645115][ T5911] ? import_iovec+0x73/0xa0 [ 98.649675][ T5911] ___sys_sendmsg+0x2a6/0x360 [ 98.654518][ T5911] ? __sys_sendmsg+0x2b0/0x2b0 [ 98.659461][ T5911] __se_sys_sendmsg+0x1d0/0x2c0 [ 98.664367][ T5911] ? __x64_sys_sendmsg+0x80/0x80 [ 98.669385][ T5911] ? lockdep_hardirqs_on+0x98/0x150 [ 98.674897][ T5911] do_syscall_64+0x55/0xb0 [ 98.679359][ T5911] ? clear_bhb_loop+0x40/0x90 [ 98.684076][ T5911] ? clear_bhb_loop+0x40/0x90 [ 98.688797][ T5911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.694749][ T5911] RIP: 0033:0x7fb0cdd9e159 [ 98.699207][ T5911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.718884][ T5911] RSP: 002b:00007fb0cbff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.727365][ T5911] RAX: ffffffffffffffda RBX: 00007fb0ce026090 RCX: 00007fb0cdd9e159 [ 98.735398][ T5911] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 98.743433][ T5911] RBP: 00007fb0cde3506b R08: 0000000000000000 R09: 0000000000000000 [ 98.751450][ T5911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.759552][ T5911] R13: 00007fb0ce026128 R14: 00007fb0ce026090 R15: 00007ffc481a6d08 [ 98.767600][ T5911] [ 99.414784][ T5935] netlink: 116 bytes leftover after parsing attributes in process `syz.0.29'. [ 100.196558][ T5950] validate_nla: 12 callbacks suppressed [ 100.196580][ T5950] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 100.297661][ T5950] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 100.496693][ T5950] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 100.638559][ T5950] team0: Device hsr_slave_0 failed to register rx_handler [ 101.060849][ T5950] netlink: 'syz.1.34': attribute type 29 has an invalid length. [ 105.051959][ T5957] syzkaller0: entered promiscuous mode [ 105.070569][ T5957] syzkaller0: entered allmulticast mode [ 105.480400][ T5975] netlink: 'syz.1.41': attribute type 9 has an invalid length. [ 105.498014][ T5983] Zero length message leads to an empty skb [ 105.523697][ T5975] __nla_validate_parse: 2 callbacks suppressed [ 105.523789][ T5975] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.41'. [ 107.737392][ T6006] netlink: 'syz.0.50': attribute type 29 has an invalid length. [ 107.756941][ T6006] netlink: 'syz.0.50': attribute type 29 has an invalid length. [ 107.780603][ T6009] netlink: 'syz.3.51': attribute type 21 has an invalid length. [ 107.790782][ T6009] netlink: 132 bytes leftover after parsing attributes in process `syz.3.51'. [ 107.866769][ T6009] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 107.951356][ T6006] netlink: 'syz.0.50': attribute type 10 has an invalid length. [ 108.029833][ T6006] team0: Device hsr_slave_0 failed to register rx_handler [ 108.070539][ T6014] netlink: 'syz.0.50': attribute type 29 has an invalid length. [ 108.117445][ T6022] netlink: 763 bytes leftover after parsing attributes in process `syz.2.53'. [ 108.345214][ T6027] netlink: 16222 bytes leftover after parsing attributes in process `syz.0.55'. [ 109.578334][ T6055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.62'. [ 110.072140][ T6064] syzkaller0: entered promiscuous mode [ 110.078479][ T6064] syzkaller0: entered allmulticast mode [ 110.157549][ T6072] netlink: 160 bytes leftover after parsing attributes in process `syz.3.68'. [ 110.175501][ T6072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.602958][ T6072] syz.3.68 (6072) used greatest stack depth: 19432 bytes left [ 113.259232][ T6131] netlink: 'syz.0.79': attribute type 21 has an invalid length. [ 113.329364][ T6131] netlink: 120 bytes leftover after parsing attributes in process `syz.0.79'. [ 113.548825][ T6135] netlink: 2 bytes leftover after parsing attributes in process `syz.1.81'. [ 114.472098][ T6159] netlink: 'syz.2.86': attribute type 3 has an invalid length. [ 114.480098][ T6159] netlink: 'syz.2.86': attribute type 4 has an invalid length. [ 114.492191][ T6152] syzkaller0: entered promiscuous mode [ 114.498183][ T6152] syzkaller0: entered allmulticast mode [ 114.507080][ T6159] netlink: 9067 bytes leftover after parsing attributes in process `syz.2.86'. [ 115.458115][ T6167] syz.3.92 uses obsolete (PF_INET,SOCK_PACKET) [ 115.555414][ T6168] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.834496][ T6158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.89'. [ 116.982749][ T6175] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.96'. [ 116.993480][ T6175] netlink: 'syz.3.96': attribute type 7 has an invalid length. [ 117.034864][ T6173] netlink: 'syz.2.95': attribute type 2 has an invalid length. [ 117.140959][ T6173] netlink: 13566 bytes leftover after parsing attributes in process `syz.2.95'. [ 117.325617][ T6187] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.100'. [ 117.629454][ T6193] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.102'. [ 117.758377][ T6195] nr0: port 1(hsr0) entered blocking state [ 117.782219][ T6195] nr0: port 1(hsr0) entered disabled state [ 117.790314][ T6195] hsr0: entered allmulticast mode [ 117.825834][ T6195] hsr_slave_0: entered allmulticast mode [ 117.839879][ T6195] hsr_slave_1: entered allmulticast mode [ 117.877942][ T6195] hsr0: entered promiscuous mode [ 118.271879][ T6211] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 118.289344][ T6211] macvlan0: entered promiscuous mode [ 118.298804][ T6211] macvlan0: entered allmulticast mode [ 118.335884][ T6211] veth1_vlan: entered allmulticast mode [ 118.355065][ T6211] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 118.562956][ T6214] netlink: 'syz.2.105': attribute type 10 has an invalid length. [ 118.571736][ T6214] veth1_vlan: left allmulticast mode [ 119.285591][ T6226] netlink: 13439 bytes leftover after parsing attributes in process `syz.2.109'. [ 119.556586][ T6234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.111'. [ 120.479760][ T6245] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 120.519499][ T6245] netlink: 'syz.3.115': attribute type 29 has an invalid length. [ 120.609028][ T6256] netlink: 'syz.1.116': attribute type 10 has an invalid length. [ 120.630781][ T6256] netlink: 132 bytes leftover after parsing attributes in process `syz.1.116'. [ 120.640476][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 120.738516][ T6259] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.116'. [ 121.380214][ T6272] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 121.803522][ T6272] syzkaller0: entered promiscuous mode [ 121.809534][ T6272] syzkaller0: entered allmulticast mode [ 123.375611][ T6297] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.128'. [ 123.655672][ T6303] netlink: 44 bytes leftover after parsing attributes in process `syz.0.130'. [ 125.133007][ T6322] netlink: 'syz.3.132': attribute type 29 has an invalid length. [ 125.141583][ T6322] netlink: 'syz.3.132': attribute type 29 has an invalid length. [ 125.150336][ T6322] netlink: 'syz.3.132': attribute type 29 has an invalid length. [ 125.160286][ T6322] netlink: 'syz.3.132': attribute type 29 has an invalid length. [ 126.544666][ T6341] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.140'. [ 126.615553][ T6343] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.140'. [ 127.221768][ T6355] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 127.248178][ T6355] syzkaller0: entered promiscuous mode [ 127.290850][ T6355] syzkaller0: entered allmulticast mode [ 128.811425][ T6377] netlink: 'syz.3.147': attribute type 3 has an invalid length. [ 128.819684][ T6377] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.147'. [ 132.432575][ T6376] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.147'. [ 133.171868][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.190807][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.865990][ T6422] netlink: 'syz.1.160': attribute type 3 has an invalid length. [ 134.910564][ T6422] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.160'. [ 135.017579][ T6421] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.160'. [ 135.223641][ T6435] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.163'. [ 135.505751][ T6438] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.165'. [ 135.566084][ T6443] netlink: 14 bytes leftover after parsing attributes in process `syz.1.164'. [ 135.751813][ T6443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.796733][ T6443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.835852][ T6443] bond0 (unregistering): Released all slaves [ 136.489269][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.0.168'. [ 136.580750][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.0.168'. [ 137.415284][ T6473] netlink: 763 bytes leftover after parsing attributes in process `syz.3.175'. [ 137.534247][ T6469] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.173'. [ 137.822121][ T6473] syzkaller0: entered promiscuous mode [ 137.851963][ T6473] syzkaller0: entered allmulticast mode [ 137.899443][ T6474] netlink: 'syz.2.173': attribute type 3 has an invalid length. [ 137.955697][ T6474] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.173'. [ 141.507647][ T6478] netlink: 'syz.1.176': attribute type 21 has an invalid length. [ 141.517156][ T6478] netlink: 168 bytes leftover after parsing attributes in process `syz.1.176'. [ 141.607027][ T6487] sit0: entered allmulticast mode [ 141.630745][ T6488] sit0: entered promiscuous mode [ 144.482058][ T6544] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 (while UP) [ 145.596879][ T6571] sit0: entered allmulticast mode [ 146.504798][ T6585] netlink: 'syz.0.205': attribute type 10 has an invalid length. [ 146.530576][ T6585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.205'. [ 146.595355][ T6585] batman_adv: batadv0: Adding interface: virt_wifi0 [ 146.619950][ T6585] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.653300][ T6585] batman_adv: batadv0: Interface activated: virt_wifi0 [ 146.691876][ T6586] netlink: 'syz.0.205': attribute type 2 has an invalid length. [ 146.699927][ T6586] netlink: 'syz.0.205': attribute type 8 has an invalid length. [ 146.730691][ T6586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.205'. [ 147.964115][ T6631] netlink: 132 bytes leftover after parsing attributes in process `syz.1.213'. [ 148.407626][ T6634] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.214'. [ 149.325216][ T6646] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 152.652191][ T6686] mac80211_hwsim hwsim5 .3ãc¤±: renamed from wlan1 (while UP) [ 153.987381][ T6703] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 154.016726][ T5781] Bluetooth: hci2: unexpected event 0x14 length: 151 > 6 [ 154.169214][ T6706] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 154.202327][ T6706] netlink: 'syz.3.236': attribute type 3 has an invalid length. [ 154.232367][ T6706] netlink: 132 bytes leftover after parsing attributes in process `syz.3.236'. [ 154.278206][ T6709] netlink: 'syz.3.236': attribute type 10 has an invalid length. [ 154.328268][ T6709] netlink: 168 bytes leftover after parsing attributes in process `syz.3.236'. [ 154.579049][ T6711] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.239'. [ 155.150605][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.367295][ T6718] bridge_slave_1 (unregistering): left allmulticast mode [ 155.410659][ T6718] bridge_slave_1 (unregistering): left promiscuous mode [ 155.427874][ T6718] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.595891][ T6721] netlink: 'syz.3.241': attribute type 27 has an invalid length. [ 156.043860][ T6732] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.244'. [ 156.851243][ T6730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.593394][ T5781] Bluetooth: hci2: unexpected event 0x14 length: 151 > 6 [ 158.823246][ T6752] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.249'. [ 159.112949][ T6758] netlink: 'syz.1.251': attribute type 10 has an invalid length. [ 159.139052][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.251'. [ 159.236566][ T6758] batman_adv: batadv0: Adding interface: veth0_vlan [ 159.341660][ T6758] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.583315][ T6758] batman_adv: batadv0: Interface activated: veth0_vlan [ 160.698140][ T6782] netlink: 'syz.1.255': attribute type 21 has an invalid length. [ 160.744745][ T6782] netlink: 156 bytes leftover after parsing attributes in process `syz.1.255'. [ 161.611056][ T6790] netlink: 'syz.1.258': attribute type 46 has an invalid length. [ 161.660322][ T6790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.258'. [ 161.779846][ T5781] Bluetooth: hci1: unexpected event 0x14 length: 151 > 6 [ 162.045891][ T6797] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.260'. [ 162.152558][ T6792] netlink: 152 bytes leftover after parsing attributes in process `syz.2.260'. [ 162.217288][ T6792] bond0: (slave bond_slave_0): Releasing backup interface [ 162.355931][ T6806] raw_sendmsg: syz.2.260 forgot to set AF_INET. Fix it! [ 162.364896][ T6792] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 162.568150][ T6798] netlink: 'syz.1.258': attribute type 46 has an invalid length. [ 162.590696][ T6810] netlink: 'syz.3.262': attribute type 3 has an invalid length. [ 162.598444][ T6810] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.262'. [ 162.624358][ T6798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.258'. [ 163.070959][ T6816] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.271'. [ 163.194169][ T6816] netlink: 152 bytes leftover after parsing attributes in process `syz.0.271'. [ 163.788450][ T6816] bond0: (slave bond_slave_0): Releasing backup interface [ 164.119377][ T6816] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 164.220134][ T6820] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 164.248951][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.264'. [ 164.291596][ T6820] batman_adv: batadv0: Adding interface: veth0_vlan [ 164.316533][ T6820] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.390818][ T6820] batman_adv: batadv0: Interface activated: veth0_vlan [ 164.837754][ T6842] À: port 1(vlan0) entered blocking state [ 164.847167][ T6842] À: port 1(vlan0) entered disabled state [ 164.871654][ T6842] vlan0: entered allmulticast mode [ 164.877311][ T6842] veth0_vlan: entered allmulticast mode [ 164.910733][ T6842] vlan0: entered promiscuous mode [ 164.935726][ T6844] netlink: 'syz.3.268': attribute type 8 has an invalid length. [ 164.965189][ T6844] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.268'. [ 167.635766][ T6877] veth1_macvtap: left promiscuous mode [ 167.653715][ T6877] macsec0: entered allmulticast mode [ 169.065647][ T6908] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 169.131311][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.259236][ T6908] bridge_slave_1: left allmulticast mode [ 169.270333][ T6908] bridge_slave_1: left promiscuous mode [ 169.296425][ T6908] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.449577][ T6908] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 169.665306][ T6918] syzkaller0: entered promiscuous mode [ 169.810967][ T6918] syzkaller0: entered allmulticast mode [ 172.447068][ T6960] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.305'. [ 172.544646][ T6961] netlink: 152 bytes leftover after parsing attributes in process `syz.2.305'. [ 173.547758][ T6969] netlink: 'syz.0.307': attribute type 27 has an invalid length. [ 173.584036][ T6970] netlink: 'syz.0.307': attribute type 27 has an invalid length. [ 173.628747][ T6970] netlink: 164 bytes leftover after parsing attributes in process `syz.0.307'. [ 173.694665][ T6969] netlink: 164 bytes leftover after parsing attributes in process `syz.0.307'. [ 178.095939][ T6996] netlink: 'syz.2.317': attribute type 3 has an invalid length. [ 178.110852][ T6996] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.317'. [ 179.776856][ T7019] netlink: 2099 bytes leftover after parsing attributes in process `syz.2.323'. [ 182.929530][ T7051] netlink: 'syz.1.332': attribute type 3 has an invalid length. [ 182.947504][ T7051] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.332'. [ 183.252319][ T7066] netlink: 132 bytes leftover after parsing attributes in process `syz.1.335'. [ 184.667937][ T7086] netlink: 'syz.2.343': attribute type 4 has an invalid length. [ 184.890989][ T7091] veth1_macvtap: left promiscuous mode [ 184.896946][ T7091] macsec0: entered allmulticast mode [ 184.941840][ T7096] netlink: 132 bytes leftover after parsing attributes in process `syz.2.347'. [ 185.291836][ T7111] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.351'. [ 185.308292][ T7103] netlink: 52395 bytes leftover after parsing attributes in process `syz.0.348'. [ 185.323547][ T7111] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.351'. [ 185.670841][ T7110] netlink: 'syz.1.350': attribute type 22 has an invalid length. [ 185.679584][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 186.679563][ T7141] netlink: 'syz.3.359': attribute type 16 has an invalid length. [ 186.707388][ T7141] netlink: 'syz.3.359': attribute type 3 has an invalid length. [ 186.751337][ T7141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.359'. [ 186.896111][ T7142] netlink: 132 bytes leftover after parsing attributes in process `syz.0.358'. [ 187.615916][ T7170] netlink: 'syz.1.368': attribute type 49 has an invalid length. [ 187.666047][ T7168] netlink: 48 bytes leftover after parsing attributes in process `syz.3.366'. [ 188.584117][ T7194] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 188.857086][ T7204] lo: entered allmulticast mode [ 189.256348][ T7214] netlink: 'syz.0.379': attribute type 16 has an invalid length. [ 189.267885][ T7214] netlink: 164 bytes leftover after parsing attributes in process `syz.0.379'. [ 189.339819][ T7214] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.379'. [ 191.157416][ T7253] netlink: 'syz.2.388': attribute type 10 has an invalid length. [ 191.190013][ T7253] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.388'. [ 191.768853][ T7274] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.394'. [ 191.819425][ T7277] netlink: set zone limit has 8 unknown bytes [ 192.450290][ T7285] netlink: 'syz.3.399': attribute type 21 has an invalid length. [ 192.479315][ T7285] netlink: 'syz.3.399': attribute type 1 has an invalid length. [ 194.008660][ T7307] netlink: set zone limit has 8 unknown bytes [ 194.023900][ T7309] netlink: 'syz.3.405': attribute type 2 has an invalid length. [ 194.032584][ T7309] netlink: 'syz.3.405': attribute type 3 has an invalid length. [ 194.040370][ T7309] netlink: 132 bytes leftover after parsing attributes in process `syz.3.405'. [ 194.053490][ T7309] netlink: 160 bytes leftover after parsing attributes in process `syz.3.405'. [ 194.063608][ T7309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 194.645200][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.654338][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.872511][ T7335] netlink: 'syz.2.409': attribute type 30 has an invalid length. [ 194.991656][ T5781] Bluetooth: hci0: unexpected event 0x3c length: 151 > 7 [ 195.189659][ T7373] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 195.270560][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'. [ 195.802511][ T7373] netlink: 'syz.0.410': attribute type 10 has an invalid length. [ 195.871720][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.0.410'. [ 196.555273][ T7390] netlink: 14 bytes leftover after parsing attributes in process `syz.0.416'. [ 196.565212][ T7390] ipvlan0: entered promiscuous mode [ 201.231807][ T7456] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 201.289549][ T7456] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 202.067875][ T7456] batman_adv: batadv0: Removing interface: veth0_vlan [ 202.331393][ T7456] team0: Device veth0_vlan failed to register rx_handler [ 202.493007][ T7456] syz.3.433 (7456) used greatest stack depth: 17896 bytes left [ 202.661285][ T7483] netlink: 'syz.3.439': attribute type 3 has an invalid length. [ 202.669247][ T7483] netlink: 132 bytes leftover after parsing attributes in process `syz.3.439'. [ 202.690773][ T7481] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.440'. [ 202.730686][ T7481] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.440'. [ 202.804690][ T7483] netlink: 21 bytes leftover after parsing attributes in process `syz.3.439'. [ 202.819918][ T7483] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 204.492969][ T7506] netlink: 'syz.0.447': attribute type 10 has an invalid length. [ 205.259928][ T7506] veth0_vlan: entered allmulticast mode [ 205.512980][ T7522] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.452'. [ 205.524104][ T7506] veth0_vlan: left promiscuous mode [ 205.532575][ T7506] veth0_vlan: entered promiscuous mode [ 205.545002][ T7506] team0: Device veth0_vlan failed to register rx_handler [ 205.648505][ T7526] -1: renamed from syzkaller0 [ 205.738883][ T7528] netlink: 209012 bytes leftover after parsing attributes in process `syz.1.453'. [ 206.790328][ T7543] team0: Port device team_slave_0 removed [ 207.019630][ T7554] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.461'. [ 207.448038][ T7554] netlink: 'syz.3.461': attribute type 23 has an invalid length. [ 208.282300][ T7577] netlink: 'syz.2.464': attribute type 10 has an invalid length. [ 208.336279][ T7577] veth0_vlan: entered allmulticast mode [ 208.556590][ T7577] veth0_vlan: left promiscuous mode [ 208.620301][ T7577] veth0_vlan: entered promiscuous mode [ 208.684609][ T7577] team0: Device veth0_vlan failed to register rx_handler [ 211.442729][ T7658] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.483'. [ 211.775624][ T7658] netlink: 'syz.0.483': attribute type 23 has an invalid length. [ 212.042328][ T7673] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 212.091218][ T7673] netlink: 'syz.3.487': attribute type 4 has an invalid length. [ 212.098951][ T7673] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.487'. [ 212.281350][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.287603][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 212.293926][ T5087] Bluetooth: hci2: command 0x0406 tx timeout [ 212.293944][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 212.427747][ T7692] netlink: 56 bytes leftover after parsing attributes in process `syz.1.490'. [ 213.509162][ T7700] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 213.549479][ T7700] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.493'. [ 213.599155][ T7700] netlink: 9 bytes leftover after parsing attributes in process `syz.2.493'. [ 216.602915][ T7687] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 216.611021][ T7687] netlink: 40 bytes leftover after parsing attributes in process `syz.1.490'. [ 216.619925][ T7687] team0: entered promiscuous mode [ 216.625337][ T7687] team_slave_0: entered promiscuous mode [ 216.631477][ T7687] team_slave_1: entered promiscuous mode [ 216.637418][ T7687] team0: entered allmulticast mode [ 216.642759][ T7687] team_slave_0: entered allmulticast mode [ 216.648533][ T7687] team_slave_1: entered allmulticast mode [ 216.655316][ T7687] bridge0: port 2(team0) entered blocking state [ 216.664761][ T7687] bridge0: port 2(team0) entered disabled state [ 216.678147][ T7687] bridge0: port 2(team0) entered blocking state [ 216.684729][ T7687] bridge0: port 2(team0) entered forwarding state [ 216.708787][ T7699] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.493'. [ 216.720554][ T7703] netlink: 'syz.0.494': attribute type 10 has an invalid length. [ 216.732198][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.494'. [ 216.760687][ T7703] bridge0: port 3(team0) entered blocking state [ 216.801124][ T7703] bridge0: port 3(team0) entered disabled state [ 216.807659][ T7703] team0: entered allmulticast mode [ 216.825498][ T7703] team_slave_0: entered allmulticast mode [ 216.842027][ T7703] team_slave_1: entered allmulticast mode [ 216.850259][ T7703] team0: entered promiscuous mode [ 216.881446][ T7703] team_slave_0: entered promiscuous mode [ 216.887400][ T7703] team_slave_1: entered promiscuous mode [ 216.926171][ T7703] bridge0: port 3(team0) entered blocking state [ 216.932694][ T7703] bridge0: port 3(team0) entered forwarding state [ 217.277969][ T7722] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.498'. [ 217.574959][ T7722] netlink: 'syz.1.498': attribute type 23 has an invalid length. [ 219.129053][ T7728] netlink: 'syz.3.500': attribute type 12 has an invalid length. [ 219.137241][ T7728] netlink: 132 bytes leftover after parsing attributes in process `syz.3.500'. [ 219.148702][ T7729] netlink: 'syz.3.500': attribute type 21 has an invalid length. [ 219.159579][ T7729] netlink: 14530 bytes leftover after parsing attributes in process `syz.3.500'. [ 219.939441][ T7744] netlink: 132 bytes leftover after parsing attributes in process `syz.3.505'. [ 220.717115][ T7764] netlink: 'syz.3.511': attribute type 10 has an invalid length. [ 220.985269][ T7764] team0: Port device netdevsim0 added [ 220.993350][ T7762] ±ÿ: renamed from lo (while UP) [ 221.528706][ T7771] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.512'. [ 221.735427][ T7771] netlink: 'syz.2.512': attribute type 23 has an invalid length. [ 222.736204][ T7812] netlink: 'syz.2.523': attribute type 10 has an invalid length. [ 222.776010][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.820112][ T7812] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.827587][ T7812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.875486][ T7812] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 223.247458][ T7822] netlink: 14 bytes leftover after parsing attributes in process `syz.3.527'. [ 223.465961][ T7822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.545726][ T7822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.616060][ T7822] bond0 (unregistering): Released all slaves [ 223.728000][ T7825] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.526'. [ 223.903274][ T7834] netlink: 156 bytes leftover after parsing attributes in process `syz.2.531'. [ 224.177228][ T7836] netlink: 'syz.3.532': attribute type 10 has an invalid length. [ 224.213492][ T7836] netlink: 40 bytes leftover after parsing attributes in process `syz.3.532'. [ 224.434446][ T7836] batman_adv: batadv0: Adding interface: veth0_vlan [ 224.511896][ T7836] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.514686][ T7842] netlink: 'syz.2.533': attribute type 29 has an invalid length. [ 224.670917][ T7836] batman_adv: batadv0: Interface activated: veth0_vlan [ 224.834287][ T7842] netlink: 'syz.2.533': attribute type 29 has an invalid length. [ 224.872394][ T7844] netlink: 'syz.2.533': attribute type 29 has an invalid length. [ 224.894475][ T7842] netlink: 'syz.2.533': attribute type 29 has an invalid length. [ 224.903813][ T7842] netlink: 'syz.2.533': attribute type 29 has an invalid length. [ 225.213095][ T7857] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.244594][ T7857] netlink: 'syz.3.536': attribute type 1 has an invalid length. [ 225.267031][ T7857] netlink: 'syz.3.536': attribute type 3 has an invalid length. [ 225.280808][ T7857] netlink: 132 bytes leftover after parsing attributes in process `syz.3.536'. [ 225.305375][ T7857] netlink: 'syz.3.536': attribute type 10 has an invalid length. [ 225.341893][ T7857] netlink: 168 bytes leftover after parsing attributes in process `syz.3.536'. [ 225.858827][ T7869] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 226.043658][ T7873] netlink: 132 bytes leftover after parsing attributes in process `syz.0.542'. [ 227.157505][ T7900] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.551'. [ 230.714111][ T7926] ±ÿ: renamed from lo [ 230.920360][ T7932] validate_nla: 4 callbacks suppressed [ 230.940735][ T7932] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 230.948695][ T7932] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.559'. [ 231.001868][ T7933] netlink: 'syz.3.559': attribute type 1 has an invalid length. [ 231.040589][ T7933] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.559'. [ 231.118727][ T7943] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 231.134642][ T7943] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.561'. [ 231.188253][ T7946] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.564'. [ 231.256759][ T7946] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.564'. [ 233.366699][ T7985] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.574'. [ 233.397877][ T7985] openvswitch: netlink: Flow key attribute not present in set flow. [ 233.427841][ T7984] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 233.439103][ T7984] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.572'. [ 234.757371][ T7959] netlink: 'syz.0.565': attribute type 4 has an invalid length. [ 234.784770][ T7980] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 234.793033][ T7980] netlink: 'syz.2.572': attribute type 9 has an invalid length. [ 234.805932][ T7980] netlink: 'syz.2.572': attribute type 10 has an invalid length. [ 234.814790][ T7980] netlink: 'syz.2.572': attribute type 11 has an invalid length. [ 234.826196][ T7980] netlink: 16 bytes leftover after parsing attributes in process `syz.2.572'. [ 235.008525][ T7995] netlink: 132 bytes leftover after parsing attributes in process `syz.1.577'. [ 235.164644][ T7998] netlink: 'syz.2.578': attribute type 10 has an invalid length. [ 236.146224][ T8012] netlink: 144 bytes leftover after parsing attributes in process `syz.3.580'. [ 236.162078][ T8011] netlink: 'syz.3.580': attribute type 21 has an invalid length. [ 236.350577][ T8018] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.582'. [ 237.288089][ T8040] netlink: 'syz.0.589': attribute type 2 has an invalid length. [ 237.314147][ T8040] netlink: 128 bytes leftover after parsing attributes in process `syz.0.589'. [ 237.476698][ T8054] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 237.483828][ T8054] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 237.909396][ T8068] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.594'. [ 237.920516][ T8068] nbd: must specify a device to reconfigure [ 237.956268][ T8068] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.059506][ T8087] netlink: 184 bytes leftover after parsing attributes in process `syz.0.600'. [ 239.819686][ T8095] netlink: 'syz.1.604': attribute type 2 has an invalid length. [ 239.847289][ T8095] netlink: 'syz.1.604': attribute type 4 has an invalid length. [ 239.871291][ T8095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.604'. [ 240.455779][ T8110] netlink: 'syz.2.608': attribute type 5 has an invalid length. [ 240.519149][ T8110] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 240.540875][ T8110] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.608'. [ 240.841921][ T5781] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 241.574037][ T8149] €Â0: renamed from batadv_slave_1 (while UP) [ 241.667456][ T8157] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.621'. [ 241.688306][ T8156] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.621'. [ 243.930806][ T8213] netlink: 'syz.0.636': attribute type 10 has an invalid length. [ 244.041001][ T8213] geneve0: entered promiscuous mode [ 244.100257][ T8213] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 244.259011][ T8220] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.640'. [ 244.741833][ T8233] netlink: 'syz.2.643': attribute type 10 has an invalid length. [ 244.767883][ T8233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.643'. [ 245.105832][ T8240] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 245.293971][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.420304][ T8240] bridge_slave_1: left allmulticast mode [ 245.428559][ T8240] bridge_slave_1: left promiscuous mode [ 245.483746][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.683859][ T8240] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 245.778464][ T8255] netlink: 'syz.2.648': attribute type 10 has an invalid length. [ 245.864173][ T8255] team0: Device hsr_slave_0 failed to register rx_handler [ 246.064617][ T8260] netlink: 13639 bytes leftover after parsing attributes in process `syz.3.650'. [ 246.104051][ T8259] netlink: 128 bytes leftover after parsing attributes in process `syz.3.650'. [ 246.180611][ T8259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.226863][ T8262] netlink: 10 bytes leftover after parsing attributes in process `syz.0.651'. [ 246.480772][ T5781] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 247.138461][ T8287] bridge0: port 3(team0) entered disabled state [ 247.152859][ T8287] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.228779][ T8287] bridge0: entered allmulticast mode [ 248.834718][ T8294] netlink: 176 bytes leftover after parsing attributes in process `syz.1.660'. [ 249.388790][ T8327] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.669'. [ 249.492447][ T8326] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.669'. [ 250.618134][ T8360] netlink: 'syz.3.674': attribute type 9 has an invalid length. [ 250.640809][ T8360] netlink: 175412 bytes leftover after parsing attributes in process `syz.3.674'. [ 251.841236][ T8381] syzkaller0: entered promiscuous mode [ 251.846835][ T8381] syzkaller0: entered allmulticast mode [ 252.001134][ T8396] netlink: 'syz.0.684': attribute type 29 has an invalid length. [ 252.067117][ T8390] netlink: 'syz.0.684': attribute type 21 has an invalid length. [ 252.100826][ T8396] netlink: 'syz.0.684': attribute type 29 has an invalid length. [ 252.133135][ T8400] netlink: 'syz.1.686': attribute type 3 has an invalid length. [ 252.139004][ T8404] netlink: 'syz.0.684': attribute type 29 has an invalid length. [ 252.161322][ T8400] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.686'. [ 254.411980][ T8399] netlink: 'syz.2.685': attribute type 12 has an invalid length. [ 254.419926][ T8390] netlink: 'syz.0.684': attribute type 29 has an invalid length. [ 255.179410][ T5781] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 255.944151][ T8444] netlink: 10 bytes leftover after parsing attributes in process `syz.2.695'. [ 256.068832][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.075643][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.450282][ T8454] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.698'. [ 256.500995][ T8453] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.698'. [ 256.917291][ T8466] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 256.942835][ T8466] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 256.963732][ T8467] netlink: 'syz.3.701': attribute type 29 has an invalid length. [ 258.213038][ T8506] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.711'. [ 258.262941][ T8506] netlink: 'syz.3.711': attribute type 2 has an invalid length. [ 258.415532][ T8510] syz.0.713[8510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.415696][ T8510] syz.0.713[8510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.661003][ T8523] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 258.704100][ T8523] netlink: 55 bytes leftover after parsing attributes in process `syz.2.717'. [ 258.975052][ T8527] netlink: 'syz.3.720': attribute type 10 has an invalid length. [ 258.998463][ T8527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.720'. [ 259.029737][ T8527] dummy0: entered promiscuous mode [ 259.036101][ T8527] dummy0: entered allmulticast mode [ 259.057086][ T8527] bridge0: port 3(dummy0) entered blocking state [ 259.089401][ T8527] bridge0: port 3(dummy0) entered disabled state [ 259.108013][ T8527] bridge0: port 3(dummy0) entered blocking state [ 259.114668][ T8527] bridge0: port 3(dummy0) entered forwarding state [ 259.173668][ T8538] netlink: 132 bytes leftover after parsing attributes in process `syz.2.724'. [ 259.186810][ T8541] netlink: 'syz.2.724': attribute type 4 has an invalid length. [ 260.527032][ T8576] netlink: 'syz.3.733': attribute type 29 has an invalid length. [ 260.551994][ T8577] netlink: 'syz.3.733': attribute type 29 has an invalid length. [ 260.570910][ T8576] netlink: 'syz.3.733': attribute type 29 has an invalid length. [ 261.296641][ T8611] netlink: 132 bytes leftover after parsing attributes in process `syz.2.743'. [ 261.368271][ T8613] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.743'. [ 261.474133][ T8616] tap0: tun_chr_ioctl cmd 1074025675 [ 261.480071][ T8616] tap0: persist enabled [ 261.487064][ T8616] tap0: tun_chr_ioctl cmd 1074025675 [ 261.495565][ T8616] tap0: persist enabled [ 261.626820][ T8616] tap0: tun_chr_ioctl cmd 1074025692 [ 262.540631][ T8650] netlink: 830 bytes leftover after parsing attributes in process `syz.2.755'. [ 263.039262][ T8660] validate_nla: 4 callbacks suppressed [ 263.039281][ T8660] netlink: 'syz.2.757': attribute type 4 has an invalid length. [ 263.058878][ T8660] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.757'. [ 263.109397][ T8663] netlink: 'syz.2.757': attribute type 4 has an invalid length. [ 263.160823][ T8663] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.757'. [ 263.292364][ T8667] macsec0: entered promiscuous mode [ 263.297892][ T8667] macsec0: entered allmulticast mode [ 263.314609][ T8667] veth1_macvtap: entered allmulticast mode [ 263.783977][ T8691] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.766'. [ 263.800605][ T8691] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.766'. [ 263.824181][ T8686] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.766'. [ 263.852560][ T8691] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.766'. [ 263.875069][ T8690] syz.0.767[8690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.875515][ T8690] syz.0.767[8690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.420634][ T8699] netlink: 'syz.1.770': attribute type 21 has an invalid length. [ 264.453502][ T8699] netlink: 128 bytes leftover after parsing attributes in process `syz.1.770'. [ 264.470643][ T8699] netlink: 'syz.1.770': attribute type 4 has an invalid length. [ 265.776299][ T8722] netlink: 'syz.0.778': attribute type 2 has an invalid length. [ 266.371244][ T8743] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 266.379351][ T8743] __nla_validate_parse: 1 callbacks suppressed [ 266.379366][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.783'. [ 266.490578][ T8743] caif0: entered promiscuous mode [ 266.495744][ T8743] caif0: entered allmulticast mode [ 266.524596][ T8743] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 266.927360][ T8754] netlink: 'syz.0.786': attribute type 3 has an invalid length. [ 266.957551][ T8758] netlink: 'syz.0.786': attribute type 3 has an invalid length. [ 266.991706][ T8758] netlink: 'syz.0.786': attribute type 16 has an invalid length. [ 267.010171][ T8754] netlink: 'syz.0.786': attribute type 16 has an invalid length. [ 267.030629][ T8758] netlink: 132 bytes leftover after parsing attributes in process `syz.0.786'. [ 267.081758][ T8754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.786'. [ 268.112126][ T8775] netlink: 2220 bytes leftover after parsing attributes in process `syz.2.792'. [ 268.512212][ T8769] team0: Port device geneve1 added [ 270.424934][ T8797] validate_nla: 1 callbacks suppressed [ 270.424956][ T8797] netlink: 'syz.3.798': attribute type 2 has an invalid length. [ 270.451369][ T8797] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 271.260059][ T8791] netlink: 'syz.2.797': attribute type 10 has an invalid length. [ 272.684320][ T8827] netlink: 'syz.1.803': attribute type 23 has an invalid length. [ 272.754567][ T8827] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.803'. [ 273.471835][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 273.509537][ T8835] netlink: 'syz.0.807': attribute type 1 has an invalid length. [ 273.522372][ T8835] netlink: 'syz.0.807': attribute type 3 has an invalid length. [ 273.551592][ T8835] netlink: 132 bytes leftover after parsing attributes in process `syz.0.807'. [ 275.422888][ T8851] netlink: 152 bytes leftover after parsing attributes in process `syz.2.813'. [ 275.586239][ T8858] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.812'. [ 275.612176][ T8858] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.812'. [ 275.629385][ T8855] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.812'. [ 275.642271][ T8858] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.812'. [ 275.659689][ T8862] netlink: 'syz.2.816': attribute type 10 has an invalid length. [ 276.870319][ T8862] team0: Port device geneve1 added [ 277.902889][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 278.130741][ T8891] netlink: 142516 bytes leftover after parsing attributes in process `syz.2.822'. [ 278.367031][ T8896] netlink: 763 bytes leftover after parsing attributes in process `syz.1.824'. [ 278.398011][ T8898] netlink: 196 bytes leftover after parsing attributes in process `syz.0.825'. [ 278.763889][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 279.123977][ T8926] IPv6: Can't replace route, no match found [ 280.335708][ T8944] netlink: 14 bytes leftover after parsing attributes in process `syz.3.841'. [ 280.349716][ T8944] hsr_slave_0: left promiscuous mode [ 280.368551][ T8944] hsr_slave_1: left promiscuous mode [ 280.377142][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 280.406459][ T8941] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.840'. [ 280.416995][ T8941] netlink: 'syz.0.840': attribute type 2 has an invalid length. [ 280.895876][ T8944] hsr0 (unregistering): left allmulticast mode [ 280.909579][ T8944] hsr0 (unregistering): left promiscuous mode [ 280.931258][ T8944] nr0: port 1(hsr0) entered disabled state [ 281.369525][ T8967] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.846'. [ 282.292709][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 286.485373][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 286.703548][ T9032] netlink: 'syz.0.866': attribute type 28 has an invalid length. [ 286.720824][ T9032] netlink: 'syz.0.866': attribute type 4 has an invalid length. [ 286.796377][ T9032] netlink: 136 bytes leftover after parsing attributes in process `syz.0.866'. [ 286.918658][ T9040] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 286.941886][ T9040] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.869'. [ 287.305171][ T9046] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.867'. [ 287.949194][ T9060] netlink: 44 bytes leftover after parsing attributes in process `syz.3.872'. [ 288.127488][ T9049] syzkaller0: entered promiscuous mode [ 288.141838][ T9049] syzkaller0: entered allmulticast mode [ 289.283578][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 291.852745][ T9124] netlink: 'syz.0.889': attribute type 21 has an invalid length. [ 291.921756][ T9124] netlink: 156 bytes leftover after parsing attributes in process `syz.0.889'. [ 292.072766][ T5781] Bluetooth: hci2: unexpected event 0x17 length: 151 > 6 [ 295.855341][ T9195] syz.1.912[9195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.870701][ T9195] syz.1.912[9195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.981078][ T9201] syz.1.912[9201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.047350][ T9201] syz.1.912[9201] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 296.313910][ T9211] netlink: 'syz.0.914': attribute type 8 has an invalid length. [ 296.385444][ T9211] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.914'. [ 296.472228][ T9217] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 298.451913][ T9244] Ÿë: port 1(hsr_slave_0) entered blocking state [ 298.464623][ T9244] Ÿë: port 1(hsr_slave_0) entered disabled state [ 298.480690][ T9244] hsr_slave_0: entered allmulticast mode [ 298.517961][ T9244] hsr_slave_0: left allmulticast mode [ 299.617628][ T9252] netlink: 150940 bytes leftover after parsing attributes in process `syz.0.923'. [ 300.115629][ T9268] netlink: 'syz.3.926': attribute type 11 has an invalid length. [ 300.214477][ T9268] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.926'. [ 302.614657][ T9305] netlink: 'syz.1.938': attribute type 10 has an invalid length. [ 302.641532][ T9294] netlink: 'syz.0.933': attribute type 8 has an invalid length. [ 302.649580][ T9305] netlink: 40 bytes leftover after parsing attributes in process `syz.1.938'. [ 302.688020][ T9294] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.933'. [ 302.729478][ T9305] batman_adv: batadv0: Adding interface: virt_wifi0 [ 302.751806][ T9305] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.850922][ T9305] batman_adv: batadv0: Interface activated: virt_wifi0 [ 303.280899][ T9322] netlink: 830 bytes leftover after parsing attributes in process `syz.3.942'. [ 303.477172][ T9325] netlink: 132 bytes leftover after parsing attributes in process `syz.1.943'. [ 303.527416][ T9328] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 303.613505][ T9328] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 304.670847][ T9339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.948'. [ 304.695424][ T9339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.948'. [ 304.726455][ T9339] netlink: 60 bytes leftover after parsing attributes in process `syz.2.948'. [ 304.972430][ T9348] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.951'. [ 305.847839][ T9351] wg2: entered promiscuous mode [ 305.856173][ T9351] wg2: entered allmulticast mode [ 306.013474][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 306.325003][ T9362] netlink: 'syz.1.955': attribute type 33 has an invalid length. [ 306.394727][ T9362] netlink: 152 bytes leftover after parsing attributes in process `syz.1.955'. [ 306.479605][ T9357] netlink: 'syz.2.953': attribute type 10 has an invalid length. [ 306.527635][ T9357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.953'. [ 308.093229][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 308.239723][ T9396] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.965'. [ 308.351823][ T9396] netlink: del zone limit has 8 unknown bytes [ 309.562261][ T9423] C: renamed from team_slave_0 (while UP) [ 309.578185][ T9423] netlink: 'syz.1.972': attribute type 8 has an invalid length. [ 309.610571][ T9423] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.766745][ T9422] netlink: 164 bytes leftover after parsing attributes in process `syz.0.973'. [ 309.791845][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 310.001308][ T9429] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 310.007374][ T9429] syzkaller1: linktype set to 6 [ 311.030633][ T9469] netlink: 'syz.0.983': attribute type 6 has an invalid length. [ 311.038571][ T9469] netlink: 168 bytes leftover after parsing attributes in process `syz.0.983'. [ 311.126599][ T9475] netlink: 'syz.2.986': attribute type 9 has an invalid length. [ 311.135325][ T9475] netlink: 399 bytes leftover after parsing attributes in process `syz.2.986'. [ 311.204102][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 311.646123][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.987'. [ 311.670094][ T9484] netlink: 128 bytes leftover after parsing attributes in process `syz.3.987'. [ 311.682026][ T9487] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.988'. [ 311.886299][ T9490] delete_channel: no stack [ 312.079800][ T9504] veth1_vlan: mtu greater than device maximum [ 312.235170][ T9509] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 312.297627][ T9509] netlink: 'syz.3.995': attribute type 3 has an invalid length. [ 312.385911][ T9509] netlink: 132 bytes leftover after parsing attributes in process `syz.3.995'. [ 312.412393][ T9510] netlink: 'syz.3.995': attribute type 10 has an invalid length. [ 312.477948][ T9510] netlink: 168 bytes leftover after parsing attributes in process `syz.3.995'. [ 312.743264][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 313.494339][ T9515] netlink: 'syz.2.998': attribute type 3 has an invalid length. [ 313.512951][ T9515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.998'. [ 313.618541][ T9517] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.999'. [ 313.920132][ T9532] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 313.941000][ T9532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.074620][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 315.327687][ T9586] netlink: 'syz.2.1018': attribute type 1 has an invalid length. [ 315.347261][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 315.359401][ T9586] netlink: 'syz.2.1018': attribute type 3 has an invalid length. [ 315.367563][ T9586] __nla_validate_parse: 2 callbacks suppressed [ 315.367578][ T9586] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1018'. [ 315.461843][ T9582] netlink: 'syz.3.1016': attribute type 10 has an invalid length. [ 315.470249][ T9582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1016'. [ 315.507287][ T9582] batman_adv: batadv0: Adding interface: virt_wifi0 [ 315.529126][ T9582] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.580545][ T9582] batman_adv: batadv0: Interface activated: virt_wifi0 [ 317.491304][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.510761][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.556679][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 317.722244][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 317.722244][ T9632] Use struct sctp_assoc_value instead [ 317.758463][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 317.758463][ T9632] Use struct sctp_assoc_value instead [ 317.777429][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 317.777429][ T9632] Use struct sctp_assoc_value instead [ 317.897884][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 317.897884][ T9632] Use struct sctp_assoc_value instead [ 317.940496][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 317.940496][ T9632] Use struct sctp_assoc_value instead [ 317.968891][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 317.968891][ T9632] Use struct sctp_assoc_value instead [ 318.000606][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 318.000606][ T9632] Use struct sctp_assoc_value instead [ 318.045677][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 318.045677][ T9632] Use struct sctp_assoc_value instead [ 318.200820][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 318.200820][ T9632] Use struct sctp_assoc_value instead [ 318.302448][ T9632] sctp: [Deprecated]: syz.3.1030 (pid 9632) Use of int in maxseg socket option. [ 318.302448][ T9632] Use struct sctp_assoc_value instead [ 318.659366][ T9657] netlink: 'syz.3.1037': attribute type 9 has an invalid length. [ 318.683896][ T9657] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1037'. [ 319.165879][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 319.258803][ T9674] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1044'. [ 320.365164][ T9703] netlink: 'syz.0.1052': attribute type 1 has an invalid length. [ 320.380489][ T9703] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1052'. [ 320.557316][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 321.499677][ T9718] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1055'. [ 321.524413][ T9718] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1055'. [ 321.544791][ T9713] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1055'. [ 322.298895][ T9726] netlink: 'syz.3.1060': attribute type 5 has an invalid length. [ 322.330123][ T9730] netlink: 'syz.2.1062': attribute type 33 has an invalid length. [ 322.338819][ T9730] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1062'. [ 322.532382][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 323.082376][ T9740] Ÿë: port 1(ip6gretap0) entered blocking state [ 323.116969][ T9740] Ÿë: port 1(ip6gretap0) entered disabled state [ 323.130368][ T9740] ip6gretap0: entered allmulticast mode [ 323.170883][ T9740] ip6gretap0: entered promiscuous mode [ 323.903799][ T9764] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1071'. [ 323.995793][ T9769] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1072'. [ 324.026607][ T9769] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1072'. [ 324.037542][ T9768] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1072'. [ 324.196067][ T9772] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1073'. [ 324.394399][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 325.520458][ T9815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1083'. [ 325.744769][ T9819] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1084'. [ 325.833049][ T9819] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1084'. [ 328.082544][ T9861] netlink: 'syz.2.1093': attribute type 29 has an invalid length. [ 328.098658][ T9861] netlink: 'syz.2.1093': attribute type 29 has an invalid length. [ 328.109412][ T9861] netlink: 'syz.2.1093': attribute type 29 has an invalid length. [ 328.386161][ T9867] netlink: 'syz.3.1094': attribute type 3 has an invalid length. [ 328.561803][ T9867] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1094'. [ 330.108798][ T9905] can: request_module (can-proto-4) failed. [ 330.828548][ T9916] netlink: 'syz.3.1104': attribute type 21 has an invalid length. [ 331.154866][ T9921] netlink: 'syz.2.1106': attribute type 10 has an invalid length. [ 331.163827][ T6093] wlan1: Trigger new scan to find an IBSS to join [ 331.657653][ T9945] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1112'. [ 331.714310][ T9945] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 332.303574][ T9950] netlink: 'syz.2.1114': attribute type 1 has an invalid length. [ 332.326569][ T9950] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1114'. [ 332.654765][ T9969] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1120'. [ 332.675401][ T9969] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1120'. [ 332.702218][ T9969] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1120'. [ 332.732301][ T9969] tc_dump_action: action bad kind [ 332.759295][ T9973] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1122'. [ 333.210957][ T9973] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1122'. [ 333.230794][ T9973] tipc: Started in network mode [ 333.242806][ T9973] tipc: Node identity b, cluster identity 73 [ 333.263579][ T9973] tipc: Node number set to 11 [ 335.275663][ T1098] wlan1: Trigger new scan to find an IBSS to join [ 335.470123][ T9989] can: request_module (can-proto-4) failed. [ 335.519009][ T1098] wlan1: Creating new IBSS network, BSSID 0a:de:79:c4:52:68 [ 335.799649][ T9991] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 336.033798][ T9999] netlink: 'syz.3.1131': attribute type 6 has an invalid length. [ 336.095844][ T9999] netlink: 'syz.3.1131': attribute type 3 has an invalid length. [ 336.135719][ T9999] netlink: 152988 bytes leftover after parsing attributes in process `syz.3.1131'. [ 336.285524][T10003] syzkaller0: entered promiscuous mode [ 336.337920][T10003] syzkaller0: entered allmulticast mode [ 336.364945][T10008] netlink: 'syz.2.1133': attribute type 6 has an invalid length. [ 336.391119][T10008] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1133'. [ 336.932766][T10019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.260930][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 338.203969][ T6607] wlan1: Trigger new scan to find an IBSS to join [ 338.347530][T10034] can: request_module (can-proto-4) failed. [ 338.710679][T10054] netlink: 'syz.2.1143': attribute type 27 has an invalid length. [ 338.732947][T10054] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1143'. [ 342.205605][ T983] wlan1: Trigger new scan to find an IBSS to join [ 343.528224][T10038] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1140'. [ 343.559366][T10064] sit0: left promiscuous mode [ 343.670940][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 343.923383][T10076] netlink: 'syz.1.1151': attribute type 10 has an invalid length. [ 344.015520][T10076] syz_tun: entered promiscuous mode [ 344.081389][T10082] netlink: 'syz.2.1152': attribute type 10 has an invalid length. [ 344.201706][ T1098] wlan1: Creating new IBSS network, BSSID ee:b0:31:6e:cc:72 [ 344.303589][T10087] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 344.705457][T10096] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1157'. [ 344.725841][T10096] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 344.749960][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 345.664364][T10124] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.902701][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 346.092501][T10138] netlink: 'syz.3.1170': attribute type 39 has an invalid length. [ 347.483715][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 347.582704][T10169] can: request_module (can-proto-0) failed. [ 348.358216][T10203] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1188'. [ 348.565033][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 350.007318][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 351.089476][T10264] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1206'. [ 351.131482][T10264] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1206'. [ 351.172973][T10264] tipc: Started in network mode [ 351.190596][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 351.200943][T10264] tipc: Node identity b, cluster identity 73 [ 351.207365][T10264] tipc: Node number set to 11 [ 351.383317][T10273] netlink: 'syz.3.1209': attribute type 21 has an invalid length. [ 351.396623][T10273] netlink: 'syz.3.1209': attribute type 30 has an invalid length. [ 351.734451][T10281] netlink: 'syz.1.1211': attribute type 21 has an invalid length. [ 351.767331][T10286] netlink: 'syz.2.1213': attribute type 13 has an invalid length. [ 351.779617][T10286] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1213'. [ 352.636018][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 352.836001][T10309] C: renamed from team_slave_0 [ 353.019817][T10309] netlink: 'syz.2.1219': attribute type 3 has an invalid length. [ 353.045542][T10309] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1219'. [ 353.520488][T10318] netlink: 'syz.0.1222': attribute type 1 has an invalid length. [ 353.559522][T10318] netlink: 'syz.0.1222': attribute type 3 has an invalid length. [ 353.578573][T10318] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1222'. [ 353.847723][T10332] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1224'. [ 353.937959][T10331] netlink: 'syz.1.1225': attribute type 9 has an invalid length. [ 353.962716][T10331] netlink: 174612 bytes leftover after parsing attributes in process `syz.1.1225'. [ 354.081945][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.089771][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.098064][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.106404][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.116279][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.125253][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.133163][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.141284][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.148958][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.157334][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.165760][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.173601][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.181454][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.189307][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.197532][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.205756][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.213703][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.222956][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.230833][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.238683][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.246762][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.254700][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.262779][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.270906][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.278628][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.286687][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.294562][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.302636][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.310239][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.318199][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.326778][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.334811][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.342838][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.350569][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.358237][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.366628][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.374422][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.382856][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.390838][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.398415][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.406205][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.414055][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.421739][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.430196][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.438847][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.447327][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.455167][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.463560][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.471281][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.479109][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.486887][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.494510][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.502346][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.511040][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.518635][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.536057][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.543909][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.551611][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.559466][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.567229][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.574889][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.582554][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.590203][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.597861][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.606358][ T5781] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 354.670250][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 354.724352][T10332] netlink: 'syz.0.1224': attribute type 5 has an invalid length. [ 354.760619][T10332] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 354.790427][T10332] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1224'. [ 355.190287][T10352] syzkaller0: entered promiscuous mode [ 355.196173][T10352] syzkaller0: entered allmulticast mode [ 355.359044][T10352] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1231'. [ 355.634932][T10361] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1232'. [ 356.107079][T10375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1233'. [ 356.345276][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 358.581798][T10369] dvmrp1: tun_chr_ioctl cmd 2147767517 [ 358.587554][T10372] dvmrp1: tun_chr_ioctl cmd 2147767521 [ 358.601427][T10375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1233'. [ 359.212006][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 359.378684][T10409] validate_nla: 1 callbacks suppressed [ 359.378792][T10409] netlink: 'syz.2.1245': attribute type 2 has an invalid length. [ 359.790907][T10416] netlink: 'syz.3.1248': attribute type 12 has an invalid length. [ 359.824059][T10416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1248'. [ 359.973527][T10429] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1251'. [ 360.045577][T10429] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 360.814235][T10438] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1252'. [ 361.096031][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 361.263440][T10449] netlink: 'syz.3.1255': attribute type 10 has an invalid length. [ 364.132442][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 364.355605][T10497] netlink: 'syz.1.1268': attribute type 29 has an invalid length. [ 364.386215][T10497] netlink: 'syz.1.1268': attribute type 29 has an invalid length. [ 364.527165][T10504] netlink: 'syz.3.1270': attribute type 2 has an invalid length. [ 364.537223][T10504] netlink: 'syz.3.1270': attribute type 8 has an invalid length. [ 364.545513][T10504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1270'. [ 364.557774][T10495] netlink: 'syz.1.1268': attribute type 29 has an invalid length. [ 364.601742][T10498] netlink: 'syz.1.1268': attribute type 29 has an invalid length. [ 364.630897][T10495] netlink: 'syz.1.1268': attribute type 29 has an invalid length. [ 364.684101][T10501] netlink: 'syz.1.1268': attribute type 29 has an invalid length. [ 365.787804][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 366.387252][T10536] netlink: 'syz.3.1281': attribute type 4 has an invalid length. [ 366.444916][T10536] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1281'. [ 366.639449][T10539] netlink: 'syz.1.1283': attribute type 21 has an invalid length. [ 366.700940][T10539] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1283'. [ 366.770988][T10539] netlink: 'syz.1.1283': attribute type 5 has an invalid length. [ 366.778827][T10539] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1283'. [ 366.923450][T10537] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1281'. [ 367.399959][T10556] hsr_slave_1 (unregistering): left promiscuous mode [ 367.822658][T10563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1286'. [ 368.065606][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 368.211763][T10575] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1291'. [ 368.300280][T10574] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1292'. [ 368.321097][T10573] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1292'. [ 368.410643][T10578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1293'. [ 368.571662][T10590] veth0_macvtap: left promiscuous mode [ 369.995227][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 370.171566][T10613] __nla_validate_parse: 1 callbacks suppressed [ 370.171586][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 370.201935][T10618] validate_nla: 9 callbacks suppressed [ 370.201954][T10618] netlink: 'syz.3.1302': attribute type 9 has an invalid length. [ 370.220821][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 370.230276][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 370.231624][T10618] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1302'. [ 370.272210][T10612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 370.340479][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 370.389748][T10625] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1304'. [ 370.391606][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 370.441644][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 370.462513][T10613] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1300'. [ 371.335819][T10656] netlink: 'syz.1.1310': attribute type 3 has an invalid length. [ 371.380532][T10656] netlink: 'syz.1.1310': attribute type 1 has an invalid length. [ 371.806955][T10670] netlink: 'syz.0.1314': attribute type 2 has an invalid length. [ 371.830645][T10670] netlink: 'syz.0.1314': attribute type 8 has an invalid length. [ 372.414113][T10698] netlink: 'syz.2.1324': attribute type 1 has an invalid length. [ 373.012485][T10720] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 374.239351][T10735] openvswitch: netlink: Key type 29 is not supported [ 375.732878][T10763] __nla_validate_parse: 34 callbacks suppressed [ 375.732901][T10763] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1338'. [ 375.872327][T10761] netlink: 'syz.1.1337': attribute type 5 has an invalid length. [ 376.046009][T10770] netlink: 'syz.0.1339': attribute type 13 has an invalid length. [ 378.925277][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.933423][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.906889][T10825] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1351'. [ 380.988471][T10825] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.1351'. [ 382.151459][T10846] syz.3.1358 (10846) used obsolete PPPIOCDETACH ioctl [ 382.698858][T10853] netlink: 'syz.1.1361': attribute type 3 has an invalid length. [ 382.770541][T10853] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1361'. [ 383.798566][T10862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1363'. [ 383.884631][T10862] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 385.749141][T10894] netlink: 'syz.2.1373': attribute type 2 has an invalid length. [ 385.787167][T10894] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1373'. [ 386.801797][T10900] syzkaller0: entered promiscuous mode [ 386.810397][T10900] syzkaller0: entered allmulticast mode [ 386.880237][T10903] netlink: 'syz.3.1375': attribute type 10 has an invalid length. [ 389.649238][T10906] sit0: entered promiscuous mode [ 389.711240][T10932] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 389.725897][T10932] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.095271][T10946] netlink: 'syz.1.1386': attribute type 29 has an invalid length. [ 390.117688][T10946] netlink: 'syz.1.1386': attribute type 29 has an invalid length. [ 390.162570][T10947] netlink: 'syz.1.1386': attribute type 29 has an invalid length. [ 390.196044][T10946] netlink: 'syz.1.1386': attribute type 29 has an invalid length. [ 390.769325][T10959] netlink: 'syz.1.1390': attribute type 29 has an invalid length. [ 390.781850][T10959] netlink: 'syz.1.1390': attribute type 29 has an invalid length. [ 391.552332][T10971] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1395'. [ 391.574164][T10971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 391.647416][T10967] netlink: 'syz.2.1394': attribute type 1 has an invalid length. [ 391.715584][T10967] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1394'. [ 392.776974][T11016] netlink: 'syz.2.1406': attribute type 10 has an invalid length. [ 392.884912][T11016] team0: Device wg1 is of different type [ 395.254974][T11079] netlink: 'syz.1.1424': attribute type 21 has an invalid length. [ 395.280655][T11079] netlink: 14530 bytes leftover after parsing attributes in process `syz.1.1424'. [ 396.598159][T11122] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1432'. [ 397.720187][T11144] syz.0.1438[11144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.726622][T11144] syz.0.1438[11144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.600043][T11162] can: request_module (can-proto-0) failed. [ 401.644695][T11161] can: request_module (can-proto-0) failed. [ 402.648189][T11172] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1446'. [ 402.718355][ T5781] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 402.834018][T11172] netlink: 'syz.1.1446': attribute type 2 has an invalid length. [ 405.603258][T11246] sit0: entered allmulticast mode [ 405.899763][T11258] netlink: 'syz.3.1477': attribute type 10 has an invalid length. [ 405.933798][T11258] team0: Device vxcan1 is of different type [ 406.047475][T11262] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 406.779514][T11269] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 406.802233][T11269] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1479'. [ 406.998431][T11274] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1481'. [ 407.025136][T11274] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1481'. [ 407.103169][T11274] tipc: Started in network mode [ 407.118450][T11274] tipc: Node identity b, cluster identity 73 [ 407.130427][T11274] tipc: Node number set to 11 [ 409.801428][T11306] netlink: 'syz.1.1489': attribute type 10 has an invalid length. [ 409.821040][T11306] netlink: 'syz.1.1489': attribute type 19 has an invalid length. [ 409.829728][T11306] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.1489'. [ 410.048360][T11318] netlink: 'syz.1.1493': attribute type 29 has an invalid length. [ 410.072876][T11318] netlink: 'syz.1.1493': attribute type 29 has an invalid length. [ 410.079966][T11310] netlink: 'syz.1.1493': attribute type 29 has an invalid length. [ 410.099238][T11318] netlink: 'syz.1.1493': attribute type 21 has an invalid length. [ 410.113707][T11318] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1493'. [ 410.990872][T11326] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1497'. [ 411.181379][T11333] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1499'. [ 411.636692][T11355] netlink: 'syz.1.1503': attribute type 153 has an invalid length. [ 411.691116][T11355] netlink: 'syz.1.1503': attribute type 3 has an invalid length. [ 411.737617][T11355] netlink: 84356 bytes leftover after parsing attributes in process `syz.1.1503'. [ 412.066140][T11353] netlink: 'syz.2.1502': attribute type 10 has an invalid length. [ 412.096694][T11353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1502'. [ 412.115143][T11359] netlink: 'syz.2.1502': attribute type 3 has an invalid length. [ 412.130585][T11359] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1502'. [ 412.474596][T11369] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1510'. [ 412.579373][T11380] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1511'. [ 412.608484][T11380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1511'. [ 412.628143][T11380] dummy0: entered promiscuous mode [ 412.640648][T11380] dummy0: entered allmulticast mode [ 412.652195][T11380] bridge0: port 3(dummy0) entered blocking state [ 412.667174][T11380] bridge0: port 3(dummy0) entered disabled state [ 412.690794][T11380] bridge0: port 3(dummy0) entered blocking state [ 412.697732][T11380] bridge0: port 3(dummy0) entered forwarding state [ 414.960014][T11442] validate_nla: 3 callbacks suppressed [ 414.960035][T11442] netlink: 'syz.3.1523': attribute type 10 has an invalid length. [ 415.031627][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.054688][T11442] bridge_slave_1: left allmulticast mode [ 415.062324][T11442] bridge_slave_1: left promiscuous mode [ 415.068311][T11442] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.099814][T11431] __nla_validate_parse: 3 callbacks suppressed [ 415.099832][T11431] netlink: 3060 bytes leftover after parsing attributes in process `syz.1.1524'. [ 415.653455][T11468] syzkaller0: entered promiscuous mode [ 415.666700][T11468] syzkaller0: entered allmulticast mode [ 416.131139][T11480] syzkaller0: entered promiscuous mode [ 416.138444][T11480] syzkaller0: entered allmulticast mode [ 416.182890][T11483] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1533'. [ 418.504746][T11483] netlink: 'syz.1.1533': attribute type 10 has an invalid length. [ 418.512897][T11483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1533'. [ 418.523094][T11485] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1535'. [ 418.728474][T11492] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 418.735556][T11492] syzkaller1: linktype set to 769 [ 418.773780][T11491] netlink: 'syz.2.1537': attribute type 3 has an invalid length. [ 418.790077][T11491] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1537'. [ 421.948698][T11520] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1545'. [ 421.968213][T11524] netlink: 'syz.3.1545': attribute type 10 has an invalid length. [ 421.977450][T11524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1545'. [ 421.989249][T11536] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1549'. [ 422.249730][T11550] sit0: entered allmulticast mode [ 422.336879][T11548] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1554'. [ 422.388433][T11543] sit0: entered promiscuous mode [ 422.543670][T11552] netlink: 'syz.0.1555': attribute type 6 has an invalid length. [ 422.564456][T11552] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1555'. [ 423.115511][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 423.129744][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 423.829646][T11615] netlink: 'syz.0.1572': attribute type 29 has an invalid length. [ 423.844183][T11615] netlink: 'syz.0.1572': attribute type 29 has an invalid length. [ 423.866676][T11615] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1572'. [ 424.864537][T11640] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1582'. [ 425.024421][T11649] netlink: 'syz.2.1584': attribute type 8 has an invalid length. [ 425.037991][T11649] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1584'. [ 425.165256][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 425.890939][T11665] netlink: 'syz.3.1588': attribute type 10 has an invalid length. [ 425.910041][T11665] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 425.924871][T11665] batman_adv: batadv0: Removing interface: veth0_vlan [ 425.982133][T11665] bridge0: port 2(veth0_vlan) entered blocking state [ 425.989204][T11665] bridge0: port 2(veth0_vlan) entered disabled state [ 426.018646][T11665] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 426.044976][T11669] netlink: 'syz.0.1591': attribute type 2 has an invalid length. [ 426.119893][T11677] netlink: 'syz.3.1588': attribute type 10 has an invalid length. [ 426.201840][T11677] bridge0: port 2(veth0_vlan) entered blocking state [ 426.234603][T11677] bridge0: port 2(veth0_vlan) entered disabled state [ 426.291798][T11677] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 426.963461][T11694] __nla_validate_parse: 4 callbacks suppressed [ 426.963480][T11694] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1596'. [ 427.052359][T11694] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 427.089381][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 427.153137][T11701] IPv6: Can't replace route, no match found [ 428.642791][T11725] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1603'. [ 429.352818][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 429.465746][T11745] lo: entered allmulticast mode [ 429.967568][T11760] netlink: 'syz.2.1612': attribute type 4 has an invalid length. [ 429.992789][T11760] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1612'. [ 430.077069][T11760] netlink: 'syz.2.1612': attribute type 2 has an invalid length. [ 430.104354][T11760] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1612'. [ 431.260709][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 431.842065][T11800] netlink: 'syz.0.1621': attribute type 3 has an invalid length. [ 431.850121][T11800] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1621'. [ 432.003858][T11811] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1624'. [ 432.408929][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 433.404027][T11862] syzkaller0: entered promiscuous mode [ 433.424238][T11862] syzkaller0: entered allmulticast mode [ 433.500105][T11870] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1637'. [ 433.560568][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 434.819732][T11902] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1644'. [ 436.370043][T11891] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1641'. [ 436.379213][T11891] : renamed from caif0 [ 436.387901][T11891] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 436.404008][T11902] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1644'. [ 436.603326][ T5781] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 436.744283][T11919] netlink: 'syz.3.1645': attribute type 8 has an invalid length. [ 436.786645][T11919] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1645'. [ 436.997590][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 438.759883][T11939] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1650'. [ 439.322179][ T5781] Bluetooth: hci3: unexpected subevent 0x04 length: 150 > 11 [ 439.551355][T11966] netlink: 'syz.0.1660': attribute type 25 has an invalid length. [ 439.570119][T11965] netlink: 'syz.0.1660': attribute type 25 has an invalid length. [ 439.578255][T11965] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1660'. [ 439.612970][T11966] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.1660'. [ 440.364809][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.371547][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.703763][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 445.210521][T11998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1669'. [ 445.446158][T12008] netlink: 'syz.0.1674': attribute type 20 has an invalid length. [ 445.921894][T12027] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1678'. [ 445.961936][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 446.217332][T12034] ªªªªªª: renamed from vlan0 (while UP) [ 447.227366][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 447.553392][T12067] netlink: 'syz.1.1690': attribute type 2 has an invalid length. [ 447.609163][T12067] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 447.661007][T12067] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1690'. [ 447.791401][T12079] netlink: 206468 bytes leftover after parsing attributes in process `syz.3.1695'. [ 447.808178][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1695'. [ 448.137492][T12084] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 448.167145][T12084] syzkaller1: linktype set to 769 [ 448.245940][T12088] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.1696'. [ 448.297282][T12084] netlink: 'syz.2.1696': attribute type 3 has an invalid length. [ 448.308259][T12084] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1696'. [ 448.571706][T12094] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1700'. [ 448.771967][T12105] netlink: 'syz.3.1703': attribute type 3 has an invalid length. [ 448.790370][T12105] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1703'. [ 451.536936][T12168] syz.1.1721[12168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.537208][T12168] syz.1.1721[12168] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 451.657326][T12171] netlink: 'syz.3.1723': attribute type 3 has an invalid length. [ 451.675493][T12179] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1721'. [ 451.698990][T12171] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1723'. [ 452.531817][T12209] netlink: 'syz.0.1730': attribute type 21 has an invalid length. [ 452.607084][T12209] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1730'. [ 452.663872][T12209] netlink: 'syz.0.1730': attribute type 5 has an invalid length. [ 452.760809][T12209] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1730'. [ 453.343049][T12212] netlink: 'syz.0.1730': attribute type 21 has an invalid length. [ 453.363012][T12212] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1730'. [ 453.391095][T12212] netlink: 'syz.0.1730': attribute type 5 has an invalid length. [ 453.409897][T12212] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1730'. [ 453.725162][T12226] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1736'. [ 454.092666][T12234] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1738'. [ 454.228391][T12242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1740'. [ 454.856824][T12264] vcan0: entered allmulticast mode [ 455.242001][T12278] netlink: 'syz.1.1750': attribute type 39 has an invalid length. [ 455.605956][T12278] hsr_slave_1 (unregistering): left promiscuous mode [ 456.676146][T12304] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1759'. [ 456.758919][T12304] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 457.191378][T12308] netlink: 'syz.2.1760': attribute type 39 has an invalid length. [ 457.383179][T12317] netlink: 'syz.3.1761': attribute type 29 has an invalid length. [ 458.848189][T12317] netlink: 'syz.3.1761': attribute type 29 has an invalid length. [ 458.860244][T12321] netlink: 'syz.0.1762': attribute type 27 has an invalid length. [ 458.876311][T12321] netlink: 'syz.0.1762': attribute type 25 has an invalid length. [ 459.297346][T12349] netlink: 'syz.1.1770': attribute type 4 has an invalid length. [ 459.451901][T12353] netlink: 'syz.3.1772': attribute type 10 has an invalid length. [ 460.126549][T12382] netlink: 'syz.2.1782': attribute type 33 has an invalid length. [ 460.153903][T12382] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1782'. [ 460.386116][T12387] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1783'. [ 460.467062][T12387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1783'. [ 461.090940][T12408] netlink: 'syz.3.1789': attribute type 3 has an invalid length. [ 461.098849][T12408] netlink: 'syz.3.1789': attribute type 4 has an invalid length. [ 461.138763][T12408] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1789'. [ 461.756045][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 461.774474][T12433] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1797'. [ 461.917404][T12443] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1800'. [ 461.965389][T12443] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1800'. [ 462.448905][T12452] validate_nla: 5 callbacks suppressed [ 462.448923][T12452] netlink: 'syz.1.1804': attribute type 39 has an invalid length. [ 463.586520][T12498] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 463.598683][T12499] netlink: 'syz.3.1817': attribute type 9 has an invalid length. [ 463.609304][T12498] syzkaller1: Linktype set failed because interface is up [ 463.616987][ T5815] syzkaller1: tun_net_xmit 90 [ 463.636681][T12499] netlink: 155304 bytes leftover after parsing attributes in process `syz.3.1817'. [ 463.721988][T12500] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 463.741665][T12500] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 463.761486][T12500] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 463.801066][T12500] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 464.014594][T12500] netlink: 'syz.0.1818': attribute type 29 has an invalid length. [ 465.116391][T12534] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1831'. [ 465.133400][T12535] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1831'. [ 465.664690][T12546] netlink: 'syz.3.1837': attribute type 6 has an invalid length. [ 465.690687][T12546] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1837'. [ 465.767363][T12552] netlink: 'syz.2.1836': attribute type 29 has an invalid length. [ 465.795362][T12552] netlink: 'syz.2.1836': attribute type 29 has an invalid length. [ 469.085175][T12572] ¥: port 1(team0) entered blocking state [ 469.103656][T12572] ¥: port 1(team0) entered disabled state [ 469.109638][T12572] team0: entered allmulticast mode [ 469.130608][T12572] team_slave_0: entered allmulticast mode [ 469.136830][T12572] team_slave_1: entered allmulticast mode [ 469.146336][T12572] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 469.154255][T12572] geneve1: entered allmulticast mode [ 469.184022][T12572] team0: entered promiscuous mode [ 469.189142][T12572] team_slave_0: entered promiscuous mode [ 469.215986][T12572] team_slave_1: entered promiscuous mode [ 469.228966][T12572] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 469.236965][T12572] geneve1: entered promiscuous mode [ 469.262701][T12574] team0: left allmulticast mode [ 469.267644][T12574] team_slave_0: left allmulticast mode [ 469.285167][T12574] team_slave_1: left allmulticast mode [ 469.298659][T12574] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 469.311550][T12574] geneve1: left allmulticast mode [ 469.317006][T12574] team0: left promiscuous mode [ 469.326142][T12574] team_slave_0: left promiscuous mode [ 469.333159][T12574] team_slave_1: left promiscuous mode [ 469.338889][T12574] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 469.355771][T12574] geneve1: left promiscuous mode [ 469.369883][T12574] ¥: port 1(team0) entered disabled state [ 469.425166][T12584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1846'. [ 469.440485][T12584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1846'. [ 469.470815][T12584] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1846'. [ 469.864142][T12599] validate_nla: 3 callbacks suppressed [ 469.864183][T12599] netlink: 'syz.2.1852': attribute type 10 has an invalid length. [ 470.156916][T12599] team0: Port device .3ãc¤± added [ 470.394958][T12615] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 470.430579][T12614] syzkaller0: tun_chr_ioctl cmd 2147767507 [ 475.420870][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.522672][ T5781] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 475.601518][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.676373][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.684719][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.694417][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.702986][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.730670][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.742338][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.760833][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.780671][T12673] netlink: 'syz.1.1873': attribute type 39 has an invalid length. [ 475.834159][T12688] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1878'. [ 476.452279][ T5781] Bluetooth: hci2: unexpected subevent 0x04 length: 150 > 11 [ 476.532347][T12708] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1886'. [ 476.966621][T12728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1892'. [ 477.091569][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 477.227796][T12736] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1897'. [ 478.432516][ T5781] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 478.733629][T12776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1908'. [ 479.236850][T12792] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1912'. [ 480.565852][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.633076][T12818] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 480.649880][T12817] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 480.681061][T12817] syzkaller1: linktype set to 769 [ 480.736649][T12818] validate_nla: 30 callbacks suppressed [ 480.736687][T12818] netlink: 'syz.3.1920': attribute type 3 has an invalid length. [ 480.788942][T12818] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1920'. [ 480.996362][T12835] netlink: 'syz.2.1925': attribute type 2 has an invalid length. [ 481.305398][T12847] netlink: 'syz.1.1928': attribute type 39 has an invalid length. [ 481.354660][T12844] netlink: 'syz.0.1927': attribute type 21 has an invalid length. [ 481.380538][T12844] netlink: 'syz.0.1927': attribute type 20 has an invalid length. [ 481.855394][T12872] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1935'. [ 481.905222][T12872] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 482.100901][T12875] netlink: 'syz.3.1938': attribute type 1 has an invalid length. [ 482.109240][T12875] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1938'. [ 482.976918][T12903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1945'. [ 484.484760][T12938] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1954'. [ 484.719117][T12939] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1954'. [ 484.770030][T12939] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 485.312126][T12956] netlink: 'syz.3.1960': attribute type 25 has an invalid length. [ 485.331161][T12956] netlink: 'syz.3.1960': attribute type 10 has an invalid length. [ 485.677789][T12976] netlink: 'syz.2.1965': attribute type 3 has an invalid length. [ 486.557411][T12996] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1969'. [ 487.535531][T13004] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 487.554150][T13004] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 488.124797][T13024] netlink: 'syz.1.1977': attribute type 1 has an invalid length. [ 488.134924][T13024] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1977'. [ 488.374965][T13028] netlink: 'syz.3.1979': attribute type 10 has an invalid length. [ 488.406923][T13028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1979'. [ 488.457435][T13028] netlink: 'syz.3.1979': attribute type 2 has an invalid length. [ 488.486351][T13028] netlink: 'syz.3.1979': attribute type 8 has an invalid length. [ 488.529060][T13028] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1979'. [ 491.624032][T13047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1981'. [ 491.759514][T13047] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1981'. [ 491.788361][T13048] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1981'. [ 491.798116][T13049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1981'. [ 493.455224][T13085] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 493.467522][T13085] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 493.725627][T13092] Ÿë: port 1(hsr_slave_0) entered blocking state [ 493.737255][T13092] Ÿë: port 1(hsr_slave_0) entered disabled state [ 493.749892][T13092] hsr_slave_0: entered promiscuous mode [ 493.924976][T13101] bridge_slave_0: left allmulticast mode [ 493.932762][T13101] bridge_slave_0: left promiscuous mode [ 493.939061][T13101] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.998941][T13101] bond0: (slave bridge0): Releasing backup interface [ 494.043695][T13107] netlink: 'syz.3.1998': attribute type 7 has an invalid length. [ 494.060605][T13107] netlink: 'syz.3.1998': attribute type 6 has an invalid length. [ 494.103826][T13116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1992'. [ 494.136100][T13116] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1992'. [ 494.204210][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1992'. [ 494.271096][T13110] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1992'. [ 494.822162][T13135] netlink: 'syz.2.2004': attribute type 17 has an invalid length. [ 494.867536][T13135] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2004'. [ 494.891482][T13135] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 495.924709][T13174] netlink: 'syz.0.2012': attribute type 29 has an invalid length. [ 495.934483][T13175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2010'. [ 495.980654][T13174] netlink: 'syz.0.2012': attribute type 29 has an invalid length. [ 496.007825][T13175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2010'. [ 496.056585][T13167] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2010'. [ 496.091245][T13173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2010'. [ 496.572962][T13185] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2023'. [ 497.113378][T13199] can: request_module (can-proto-0) failed. [ 497.352037][T13212] netlink: 'syz.1.2022': attribute type 7 has an invalid length. [ 497.442158][T13212] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 497.709588][T13226] netlink: 'syz.0.2027': attribute type 29 has an invalid length. [ 497.740786][T13215] syzkaller0: entered promiscuous mode [ 497.755473][T13215] syzkaller0: entered allmulticast mode [ 498.714622][T13226] netlink: 'syz.0.2027': attribute type 29 has an invalid length. [ 498.817057][T13238] syzkaller0: entered promiscuous mode [ 498.822892][T13238] syzkaller0: entered allmulticast mode [ 498.829939][T13229] netlink: 'syz.0.2027': attribute type 29 has an invalid length. [ 501.809745][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.816348][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.488004][T13277] netlink: 'syz.3.2037': attribute type 2 has an invalid length. [ 502.496222][T13277] __nla_validate_parse: 3 callbacks suppressed [ 502.496237][T13277] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2037'. [ 504.851598][T13304] netlink: 'syz.1.2045': attribute type 10 has an invalid length. [ 505.235716][T13318] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2048'. [ 505.478966][T13334] netlink: 'syz.3.2051': attribute type 1 has an invalid length. [ 505.493432][T13334] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.2051'. [ 505.761929][T13341] netlink: 'syz.2.2055': attribute type 17 has an invalid length. [ 505.783798][T13341] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2055'. [ 505.947716][T13342] netlink: 'syz.2.2055': attribute type 19 has an invalid length. [ 505.987652][T13342] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2055'. [ 506.104552][T13351] netlink: 'syz.1.2058': attribute type 10 has an invalid length. [ 506.138833][T13351] bridge0: port 2(team0) entered disabled state [ 506.216970][T13351] bridge0: port 2(team0) entered disabled state [ 506.243651][T13351] C: left promiscuous mode [ 506.260634][T13351] C: left allmulticast mode [ 506.326996][T13351] team0 (unregistering): Port device C removed [ 506.345419][T13351] team_slave_1: left promiscuous mode [ 506.354087][T13351] team_slave_1: left allmulticast mode [ 506.392409][T13351] team0 (unregistering): Port device team_slave_1 removed [ 506.435077][T13363] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2061'. [ 506.476999][T13364] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.2061'. [ 508.561400][T13403] netlink: 'syz.0.2072': attribute type 9 has an invalid length. [ 508.576164][T13403] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2072'. [ 508.709486][T13413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2074'. [ 508.729659][T13410] netlink: 'syz.1.2073': attribute type 1 has an invalid length. [ 508.737939][T13410] netlink: 'syz.1.2073': attribute type 3 has an invalid length. [ 508.751221][T13410] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2073'. [ 508.769205][T13410] netlink: 'syz.1.2073': attribute type 10 has an invalid length. [ 508.778830][T13410] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2073'. [ 510.326311][T13441] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2080'. [ 511.251603][T13465] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.2088'. [ 511.268990][T13465] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2088'. [ 511.331398][T13469] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2089'. [ 512.338605][T13504] netlink: 'syz.3.2097': attribute type 10 has an invalid length. [ 512.378454][T13504] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.393708][T13504] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.407516][T13504] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.422045][T13504] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.457836][T13537] netlink: 'syz.2.2101': attribute type 64 has an invalid length. [ 513.476133][T13537] netlink: 'syz.2.2101': attribute type 64 has an invalid length. [ 513.497528][T13532] netlink: 'syz.2.2101': attribute type 64 has an invalid length. [ 513.623344][T13542] netlink: 'syz.3.2106': attribute type 10 has an invalid length. [ 513.648720][T13542] hsr_slave_0: left promiscuous mode [ 513.679958][T13542] Ÿë: port 1(hsr_slave_0) entered disabled state [ 514.091412][T13542] team0: Port device hsr_slave_0 added [ 514.184424][T13550] netlink: 'syz.0.2108': attribute type 1 has an invalid length. [ 514.387452][T13551] can: request_module (can-proto-0) failed. [ 516.667726][T13619] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2128'. [ 516.824959][T13630] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2129'. [ 516.845209][T13630] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.866117][T13633] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2129'. [ 516.876740][T13633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 516.963743][T13629] netlink: 'syz.1.2131': attribute type 4 has an invalid length. [ 517.000939][T13629] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2131'. [ 517.438259][T13648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.704396][T13659] netlink: 'syz.1.2137': attribute type 10 has an invalid length. [ 517.748502][T13659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2137'. [ 517.987999][T13671] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2140'. [ 518.056480][T13671] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 518.459166][T13678] netlink: 'syz.2.2142': attribute type 10 has an invalid length. [ 518.468014][T13678] team0: Device hsr_slave_0 failed to register rx_handler [ 518.793315][T13684] netlink: 'syz.2.2145': attribute type 64 has an invalid length. [ 518.863783][T13686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2146'. [ 519.068927][ T5781] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 519.084629][T13692] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2147'. [ 519.112431][T13692] netlink: 'syz.1.2147': attribute type 28 has an invalid length. [ 519.152142][T13692] netlink: 'syz.1.2147': attribute type 29 has an invalid length. [ 519.172756][T13692] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2147'. [ 519.231991][T13702] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2152'. [ 519.507053][T13708] sctp: [Deprecated]: syz.0.2152 (pid 13708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 519.507053][T13708] Use struct sctp_sack_info instead [ 522.027026][T13769] syzkaller0: entered promiscuous mode [ 522.047902][T13769] syzkaller0: entered allmulticast mode [ 522.768750][T13790] syzkaller0: entered promiscuous mode [ 522.774666][T13790] syzkaller0: entered allmulticast mode [ 522.790574][T13795] __nla_validate_parse: 2 callbacks suppressed [ 522.790594][T13795] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2176'. [ 522.816551][T13795] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 524.826888][T13796] tap0: tun_chr_ioctl cmd 1074025676 [ 524.832702][T13796] tap0: owner set to 776 [ 525.071093][ T5781] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 525.519737][T13826] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.2185'. [ 527.068924][ T5781] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 527.080913][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 527.745711][T13865] netlink: 'syz.1.2197': attribute type 22 has an invalid length. [ 527.761668][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 528.109016][T13871] netlink: 'syz.0.2200': attribute type 46 has an invalid length. [ 528.117721][T13871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2200'. [ 528.347061][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 528.988691][T13894] netlink: 'syz.2.2206': attribute type 10 has an invalid length. [ 529.013291][T13897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2206'. [ 529.080459][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 529.621753][T13907] netlink: 'syz.1.2209': attribute type 39 has an invalid length. [ 530.368961][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 530.873309][ T5781] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 531.370074][T13931] netlink: 'syz.1.2215': attribute type 10 has an invalid length. [ 531.593170][T13931] netlink: 'syz.1.2215': attribute type 4 has an invalid length. [ 531.725020][T13931] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2215'. [ 531.763110][T13933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.771005][T13933] IPv6: NLM_F_CREATE should be set when creating new route [ 531.778868][T13933] IPv6: NLM_F_CREATE should be set when creating new route [ 531.786741][T13933] IPv6: NLM_F_CREATE should be set when creating new route [ 532.083526][T13949] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.2221'. [ 532.929908][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 533.539751][T13981] netlink: 'syz.0.2229': attribute type 39 has an invalid length. [ 533.632548][T13974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.641755][T13974] IPv6: NLM_F_CREATE should be set when creating new route [ 533.650186][T13974] IPv6: NLM_F_CREATE should be set when creating new route [ 533.658059][T13974] IPv6: NLM_F_CREATE should be set when creating new route [ 533.924051][T13988] FAULT_INJECTION: forcing a failure. [ 533.924051][T13988] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 533.950561][T13988] CPU: 1 PID: 13988 Comm: syz.3.2231 Not tainted syzkaller #0 [ 533.958125][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.968255][T13988] Call Trace: [ 533.971671][T13988] [ 533.974643][T13988] dump_stack_lvl+0x18c/0x250 [ 533.979495][T13988] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.985810][T13988] ? show_regs_print_info+0x20/0x20 [ 533.991168][T13988] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.997409][T13988] should_fail_ex+0x394/0x4c0 [ 534.002222][T13988] _copy_from_user+0x2f/0xe0 [ 534.006897][T13988] __sys_bpf+0x23e/0x890 [ 534.011259][T13988] ? bpf_link_show_fdinfo+0x560/0x560 [ 534.016699][T13988] ? lock_chain_count+0x20/0x20 [ 534.021616][T13988] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 534.027660][T13988] __x64_sys_bpf+0x7c/0x90 [ 534.032114][T13988] do_syscall_64+0x55/0xb0 [ 534.036566][T13988] ? clear_bhb_loop+0x40/0x90 [ 534.041275][T13988] ? clear_bhb_loop+0x40/0x90 [ 534.045978][T13988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.051998][T13988] RIP: 0033:0x7fb0cdd9e159 [ 534.056440][T13988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.076188][T13988] RSP: 002b:00007fb0ceb91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 534.084648][T13988] RAX: ffffffffffffffda RBX: 00007fb0ce025fa0 RCX: 00007fb0cdd9e159 [ 534.092742][T13988] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 534.100744][T13988] RBP: 00007fb0ceb91090 R08: 0000000000000000 R09: 0000000000000000 [ 534.108823][T13988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.116833][T13988] R13: 00007fb0ce026038 R14: 00007fb0ce025fa0 R15: 00007ffc481a6d08 [ 534.124844][T13988] [ 534.286117][ T5781] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 535.433325][T14031] netlink: 'syz.0.2244': attribute type 29 has an invalid length. [ 535.450196][T14031] netlink: 'syz.0.2244': attribute type 29 has an invalid length. [ 535.505949][T14042] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2246'. [ 535.574390][T14047] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2246'. [ 536.360438][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 536.799499][T14065] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2252'. [ 537.041756][T14068] netlink: 'syz.3.2253': attribute type 10 has an invalid length. [ 537.050159][T14068] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2253'. [ 537.306781][T14068] batman_adv: batadv0: Adding interface: veth0_vlan [ 537.360461][T14068] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.410738][T14068] batman_adv: batadv0: Interface activated: veth0_vlan [ 539.844037][T14083] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2257'. [ 539.969690][T14087] netlink: 'syz.0.2260': attribute type 1 has an invalid length. [ 539.988929][T14087] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2260'. [ 540.019647][T14093] netlink: 'syz.1.2259': attribute type 46 has an invalid length. [ 540.028431][T14093] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2259'. [ 540.049622][T14093] netlink: 'syz.1.2259': attribute type 10 has an invalid length. [ 540.067469][T14093] bridge0: port 2(ÿÿÿÿÿÿ) entered blocking state [ 540.091623][T14093] bridge0: port 2(ÿÿÿÿÿÿ) entered disabled state [ 540.103991][T14093] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered allmulticast mode [ 540.114608][T14093] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered promiscuous mode [ 540.160701][T14094] netlink: 'syz.3.2261': attribute type 27 has an invalid length. [ 540.173515][T14094] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2261'. [ 540.359138][T14098] netlink: 'syz.2.2262': attribute type 3 has an invalid length. [ 540.379268][T14098] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2262'. [ 540.390331][T14102] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2262'. [ 540.721726][T14112] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 542.172126][T14132] netlink: 'syz.0.2272': attribute type 10 has an invalid length. [ 542.190467][T14132] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2272'. [ 542.199845][T14132] bridge0: left allmulticast mode [ 542.223828][T14132] bridge0: port 3(team0) entered blocking state [ 542.230550][T14132] bridge0: port 3(team0) entered forwarding state [ 542.237652][T14132] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.245088][T14132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.271402][T14132] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 544.256935][T14136] netlink: 'syz.3.2274': attribute type 3 has an invalid length. [ 544.282568][T14136] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2274'. [ 544.359636][T14136] netlink: 'syz.3.2274': attribute type 29 has an invalid length. [ 544.377220][T14136] netlink: 'syz.3.2274': attribute type 29 has an invalid length. [ 544.412081][T14136] netlink: 'syz.3.2274': attribute type 29 has an invalid length. [ 545.052212][T14153] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.2279'. [ 545.188151][T14156] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2280'. [ 545.199152][T14158] validate_nla: 1 callbacks suppressed [ 545.199198][T14158] netlink: 'syz.3.2281': attribute type 10 has an invalid length. [ 545.220618][T14158] macvlan0: entered promiscuous mode [ 545.229886][T14158] macvlan0: entered allmulticast mode [ 545.331857][T14156] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 545.356550][T14156] CPU: 0 PID: 14156 Comm: syz.1.2280 Not tainted syzkaller #0 [ 545.364113][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.374227][T14156] Call Trace: [ 545.377567][T14156] [ 545.380557][T14156] dump_stack_lvl+0x18c/0x250 [ 545.385299][T14156] ? show_regs_print_info+0x20/0x20 [ 545.390555][T14156] ? load_image+0x420/0x420 [ 545.395179][T14156] sysfs_warn_dup+0x8e/0xa0 [ 545.399757][T14156] sysfs_do_create_link_sd+0xc0/0x110 [ 545.405213][T14156] device_add_class_symlinks+0x1cf/0x240 [ 545.410981][T14156] device_add+0x4f9/0xc40 [ 545.415400][T14156] wiphy_register+0x1d99/0x2ac0 [ 545.420431][T14156] ? cfg80211_event_work+0x40/0x40 [ 545.425599][T14156] ? minstrel_ht_alloc+0x88a/0x990 [ 545.430895][T14156] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 545.437098][T14156] ieee80211_register_hw+0x2f3d/0x3cb0 [ 545.442724][T14156] ? ieee80211_register_hw+0xf51/0x3cb0 [ 545.448352][T14156] ? ieee80211_tasklet_handler+0x20/0x20 [ 545.454050][T14156] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 545.460118][T14156] ? __debug_object_init+0xec/0x450 [ 545.465422][T14156] ? __asan_memset+0x22/0x40 [ 545.470096][T14156] ? __hrtimer_init+0x189/0x270 [ 545.474985][T14156] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 545.480799][T14156] ? mac80211_hwsim_free+0x220/0x220 [ 545.486120][T14156] ? rcu_is_watching+0x15/0xb0 [ 545.490946][T14156] ? kstrndup+0xbd/0x140 [ 545.495261][T14156] hwsim_new_radio_nl+0xdad/0x1a70 [ 545.500424][T14156] ? __nla_validate+0x50/0x50 [ 545.505159][T14156] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 545.511541][T14156] ? __nla_parse+0x40/0x50 [ 545.516088][T14156] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 545.522561][T14156] genl_family_rcv_msg_doit+0x21a/0x310 [ 545.528242][T14156] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 545.534182][T14156] ? bpf_lsm_capable+0x9/0x10 [ 545.538979][T14156] ? security_capable+0x89/0xb0 [ 545.543994][T14156] genl_rcv_msg+0x611/0x7a0 [ 545.548660][T14156] ? genl_bind+0x360/0x360 [ 545.553203][T14156] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 545.559573][T14156] netlink_rcv_skb+0x235/0x4c0 [ 545.564378][T14156] ? genl_bind+0x360/0x360 [ 545.568835][T14156] ? netlink_ack+0x1160/0x1160 [ 545.573640][T14156] ? __lock_acquire+0x7eb0/0x7eb0 [ 545.578704][T14156] ? down_read+0x1ac/0x2e0 [ 545.583358][T14156] genl_rcv+0x28/0x40 [ 545.587436][T14156] netlink_unicast+0x7b1/0x930 [ 545.592243][T14156] netlink_sendmsg+0x8d0/0xbf0 [ 545.597053][T14156] ? netlink_getsockopt+0x590/0x590 [ 545.602285][T14156] ? apparmor_socket_sendmsg+0x8e/0x330 [ 545.607909][T14156] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 545.613235][T14156] ? security_socket_sendmsg+0x80/0xa0 [ 545.618718][T14156] ? netlink_getsockopt+0x590/0x590 [ 545.623960][T14156] ____sys_sendmsg+0x61b/0x980 [ 545.628955][T14156] ? __asan_memset+0x22/0x40 [ 545.633581][T14156] ? __sys_sendmsg_sock+0x30/0x30 [ 545.638724][T14156] ? __import_iovec+0x5f2/0x850 [ 545.643622][T14156] ? import_iovec+0x73/0xa0 [ 545.648164][T14156] ___sys_sendmsg+0x2a6/0x360 [ 545.652887][T14156] ? __sys_sendmsg+0x2b0/0x2b0 [ 545.657794][T14156] ? trace_call_bpf+0xc3/0x6c0 [ 545.662633][T14156] __se_sys_sendmsg+0x1d0/0x2c0 [ 545.667519][T14156] ? perf_trace_preemptirq_template+0x269/0x330 [ 545.673827][T14156] ? __x64_sys_sendmsg+0x80/0x80 [ 545.679211][T14156] ? lockdep_hardirqs_on+0x98/0x150 [ 545.684465][T14156] do_syscall_64+0x55/0xb0 [ 545.688956][T14156] ? clear_bhb_loop+0x40/0x90 [ 545.693673][T14156] ? clear_bhb_loop+0x40/0x90 [ 545.698497][T14156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.704440][T14156] RIP: 0033:0x7f5a5479e159 [ 545.708995][T14156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.728658][T14156] RSP: 002b:00007f5a55639028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.737107][T14156] RAX: ffffffffffffffda RBX: 00007f5a54a25fa0 RCX: 00007f5a5479e159 [ 545.745132][T14156] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 545.753132][T14156] RBP: 00007f5a5483506b R08: 0000000000000000 R09: 0000000000000000 [ 545.761128][T14156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.769127][T14156] R13: 00007f5a54a26038 R14: 00007f5a54a25fa0 R15: 00007fff13a05568 [ 545.777282][T14156] [ 546.032185][T14171] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2284'. [ 546.527941][T14182] netlink: 'syz.1.2288': attribute type 3 has an invalid length. [ 546.554643][T14182] netlink: 'syz.1.2288': attribute type 1 has an invalid length. [ 546.574937][T14182] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2288'. [ 546.806564][T14187] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2291'. [ 546.828970][T14187] smc: net device  applied user defined pnetid CONFIG [ 547.634121][T14204] FAULT_INJECTION: forcing a failure. [ 547.634121][T14204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.665170][T14204] CPU: 0 PID: 14204 Comm: syz.1.2296 Not tainted syzkaller #0 [ 547.672735][T14204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 547.682862][T14204] Call Trace: [ 547.686195][T14204] [ 547.689178][T14204] dump_stack_lvl+0x18c/0x250 [ 547.693917][T14204] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.700162][T14204] ? show_regs_print_info+0x20/0x20 [ 547.706470][T14204] ? load_image+0x420/0x420 [ 547.711051][T14204] should_fail_ex+0x394/0x4c0 [ 547.715796][T14204] _copy_to_user+0x2f/0xa0 [ 547.720260][T14204] bpf_verifier_vlog+0x2f1/0x840 [ 547.725451][T14204] __btf_verifier_log+0xe3/0x140 [ 547.730465][T14204] ? btf_check_sec_info+0x350/0x350 [ 547.735739][T14204] ? btf_parse_hdr+0x1f0/0x700 [ 547.740901][T14204] btf_parse_hdr+0x2fa/0x700 [ 547.745546][T14204] btf_new_fd+0x397/0x9e0 [ 547.749947][T14204] ? bpf_btf_show_fdinfo+0x80/0x80 [ 547.755115][T14204] ? capable+0x88/0xe0 [ 547.759293][T14204] __sys_bpf+0x670/0x890 [ 547.763596][T14204] ? bpf_link_show_fdinfo+0x560/0x560 [ 547.769473][T14204] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 547.775702][T14204] __x64_sys_bpf+0x7c/0x90 [ 547.780186][T14204] do_syscall_64+0x55/0xb0 [ 547.784657][T14204] ? clear_bhb_loop+0x40/0x90 [ 547.789375][T14204] ? clear_bhb_loop+0x40/0x90 [ 547.794117][T14204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 547.800059][T14204] RIP: 0033:0x7f5a5479e159 [ 547.804522][T14204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 547.824189][T14204] RSP: 002b:00007f5a55639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 547.832670][T14204] RAX: ffffffffffffffda RBX: 00007f5a54a25fa0 RCX: 00007f5a5479e159 [ 547.840694][T14204] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 547.848887][T14204] RBP: 00007f5a55639090 R08: 0000000000000000 R09: 0000000000000000 [ 547.856913][T14204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.864959][T14204] R13: 00007f5a54a26038 R14: 00007f5a54a25fa0 R15: 00007fff13a05568 [ 547.873010][T14204] [ 550.520038][T14218] sit0: left promiscuous mode [ 550.666066][T14214] sit0: entered promiscuous mode [ 551.572688][T14242] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2308'. [ 551.600673][T14243] netlink: 26 bytes leftover after parsing attributes in process `syz.0.2308'. [ 551.785945][T14245] FAULT_INJECTION: forcing a failure. [ 551.785945][T14245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.836620][T14247] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 551.852255][T14247] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2310'. [ 551.856730][T14245] CPU: 1 PID: 14245 Comm: syz.2.2309 Not tainted syzkaller #0 [ 551.869112][T14245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 551.879214][T14245] Call Trace: [ 551.882539][T14245] [ 551.885519][T14245] dump_stack_lvl+0x18c/0x250 [ 551.890279][T14245] ? show_regs_print_info+0x20/0x20 [ 551.895549][T14245] ? load_image+0x420/0x420 [ 551.900139][T14245] ? __might_fault+0xaa/0x120 [ 551.904882][T14245] ? __lock_acquire+0x7eb0/0x7eb0 [ 551.910407][T14245] ? __virt_addr_valid+0x10c/0x380 [ 551.915702][T14245] should_fail_ex+0x394/0x4c0 [ 551.920442][T14245] _copy_to_user+0x2f/0xa0 [ 551.924915][T14245] bpf_verifier_vlog+0x4e6/0x840 [ 551.930276][T14245] __btf_verifier_log+0xe3/0x140 [ 551.935284][T14245] ? btf_check_sec_info+0x350/0x350 [ 551.940539][T14245] ? lockdep_hardirqs_on+0x98/0x150 [ 551.945827][T14245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 551.952228][T14245] ? btf_parse_hdr+0x1f0/0x700 [ 551.957070][T14245] btf_parse_hdr+0x32b/0x700 [ 551.961841][T14245] btf_new_fd+0x397/0x9e0 [ 551.966307][T14245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 551.972533][T14245] ? bpf_btf_show_fdinfo+0x80/0x80 [ 551.977735][T14245] ? bpf_btf_load+0x4e/0x90 [ 551.982396][T14245] __sys_bpf+0x670/0x890 [ 551.986804][T14245] ? bpf_link_show_fdinfo+0x560/0x560 [ 551.992250][T14245] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 551.998506][T14245] __x64_sys_bpf+0x7c/0x90 [ 552.002984][T14245] do_syscall_64+0x55/0xb0 [ 552.007473][T14245] ? clear_bhb_loop+0x40/0x90 [ 552.012202][T14245] ? clear_bhb_loop+0x40/0x90 [ 552.017327][T14245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 552.023288][T14245] RIP: 0033:0x7f401319e159 [ 552.027760][T14245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.047507][T14245] RSP: 002b:00007f4014155028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 552.056092][T14245] RAX: ffffffffffffffda RBX: 00007f4013425fa0 RCX: 00007f401319e159 [ 552.064241][T14245] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 552.072390][T14245] RBP: 00007f4014155090 R08: 0000000000000000 R09: 0000000000000000 [ 552.080419][T14245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.088445][T14245] R13: 00007f4013426038 R14: 00007f4013425fa0 R15: 00007ffcf2583878 [ 552.096499][T14245] [ 553.502879][T14299] FAULT_INJECTION: forcing a failure. [ 553.502879][T14299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.605666][T14299] CPU: 0 PID: 14299 Comm: syz.1.2320 Not tainted syzkaller #0 [ 553.613341][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 553.623540][T14299] Call Trace: [ 553.627122][T14299] [ 553.630091][T14299] dump_stack_lvl+0x18c/0x250 [ 553.634853][T14299] ? show_regs_print_info+0x20/0x20 [ 553.640127][T14299] ? load_image+0x420/0x420 [ 553.644706][T14299] ? __might_fault+0xaa/0x120 [ 553.649431][T14299] ? __lock_acquire+0x7eb0/0x7eb0 [ 553.654583][T14299] ? __virt_addr_valid+0x10c/0x380 [ 553.659835][T14299] should_fail_ex+0x394/0x4c0 [ 553.664783][T14299] _copy_to_user+0x2f/0xa0 [ 553.669315][T14299] bpf_verifier_vlog+0x5ac/0x840 [ 553.674343][T14299] __btf_verifier_log+0xe3/0x140 [ 553.679540][T14299] ? btf_check_sec_info+0x350/0x350 [ 553.685026][T14299] ? __lock_acquire+0x7eb0/0x7eb0 [ 553.690139][T14299] ? __virt_addr_valid+0x10c/0x380 [ 553.695572][T14299] ? btf_parse_hdr+0x1f0/0x700 [ 553.700669][T14299] btf_parse_hdr+0x32b/0x700 [ 553.705444][T14299] btf_new_fd+0x397/0x9e0 [ 553.709961][T14299] ? bpf_btf_show_fdinfo+0x80/0x80 [ 553.715284][T14299] ? capable+0x88/0xe0 [ 553.719513][T14299] __sys_bpf+0x670/0x890 [ 553.723828][T14299] ? bpf_link_show_fdinfo+0x560/0x560 [ 553.729275][T14299] ? lock_chain_count+0x20/0x20 [ 553.734190][T14299] __x64_sys_bpf+0x7c/0x90 [ 553.738698][T14299] do_syscall_64+0x55/0xb0 [ 553.743178][T14299] ? clear_bhb_loop+0x40/0x90 [ 553.748160][T14299] ? clear_bhb_loop+0x40/0x90 [ 553.753263][T14299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.759219][T14299] RIP: 0033:0x7f5a5479e159 [ 553.763806][T14299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.783481][T14299] RSP: 002b:00007f5a55618028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 553.793472][T14299] RAX: ffffffffffffffda RBX: 00007f5a54a26090 RCX: 00007f5a5479e159 [ 553.801605][T14299] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 553.809623][T14299] RBP: 00007f5a55618090 R08: 0000000000000000 R09: 0000000000000000 [ 553.817636][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.825828][T14299] R13: 00007f5a54a26128 R14: 00007f5a54a26090 R15: 00007fff13a05568 [ 553.833872][T14299] [ 555.160062][T14314] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2324'. [ 556.446654][T14334] netlink: 'syz.1.2331': attribute type 21 has an invalid length. [ 556.463909][T14334] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2331'. [ 556.505648][T14337] FAULT_INJECTION: forcing a failure. [ 556.505648][T14337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.544638][T14337] CPU: 1 PID: 14337 Comm: syz.2.2332 Not tainted syzkaller #0 [ 556.552381][T14337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.562743][T14337] Call Trace: [ 556.566068][T14337] [ 556.569045][T14337] dump_stack_lvl+0x18c/0x250 [ 556.573791][T14337] ? show_regs_print_info+0x20/0x20 [ 556.579048][T14337] ? load_image+0x420/0x420 [ 556.583789][T14337] ? __might_fault+0xaa/0x120 [ 556.588535][T14337] ? __lock_acquire+0x7eb0/0x7eb0 [ 556.593610][T14337] ? __virt_addr_valid+0x10c/0x380 [ 556.598960][T14337] should_fail_ex+0x394/0x4c0 [ 556.603715][T14337] _copy_to_user+0x2f/0xa0 [ 556.608219][T14337] bpf_verifier_vlog+0x2f1/0x840 [ 556.613261][T14337] __btf_verifier_log+0xe3/0x140 [ 556.618268][T14337] ? btf_check_sec_info+0x350/0x350 [ 556.623521][T14337] ? __lock_acquire+0x7eb0/0x7eb0 [ 556.628579][T14337] ? __virt_addr_valid+0x10c/0x380 [ 556.633722][T14337] ? btf_parse_hdr+0x1f0/0x700 [ 556.638517][T14337] btf_parse_hdr+0x358/0x700 [ 556.643151][T14337] btf_new_fd+0x397/0x9e0 [ 556.647519][T14337] ? bpf_btf_show_fdinfo+0x80/0x80 [ 556.652836][T14337] ? capable+0x88/0xe0 [ 556.656938][T14337] __sys_bpf+0x670/0x890 [ 556.661215][T14337] ? bpf_link_show_fdinfo+0x560/0x560 [ 556.667763][T14337] ? lock_chain_count+0x20/0x20 [ 556.672691][T14337] __x64_sys_bpf+0x7c/0x90 [ 556.677317][T14337] do_syscall_64+0x55/0xb0 [ 556.681769][T14337] ? clear_bhb_loop+0x40/0x90 [ 556.686469][T14337] ? clear_bhb_loop+0x40/0x90 [ 556.691178][T14337] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.697217][T14337] RIP: 0033:0x7f401319e159 [ 556.701670][T14337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.721480][T14337] RSP: 002b:00007f4014155028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.729919][T14337] RAX: ffffffffffffffda RBX: 00007f4013425fa0 RCX: 00007f401319e159 [ 556.737914][T14337] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 556.746001][T14337] RBP: 00007f4014155090 R08: 0000000000000000 R09: 0000000000000000 [ 556.753993][T14337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.761994][T14337] R13: 00007f4013426038 R14: 00007f4013425fa0 R15: 00007ffcf2583878 [ 556.770008][T14337] Stopping sshd: [ 557.931827][T14368] syzkaller0: entered promiscuous mode [ 557.953538][T14368] syzkaller0: entered allmulticast mode stopped /usr/sbin/sshd (pid 5530) OK Stopping crond: stopped /usr/sbin/crond (pid 5515) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5436) Stopping network: [ 562.091506][T14398] FAULT_INJECTION: forcing a failure. [ 562.091506][T14398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.126286][T14398] CPU: 0 PID: 14398 Comm: syz.1.2342 Not tainted syzkaller #0 [ 562.133838][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 562.143949][T14398] Call Trace: [ 562.147274][T14398] [ 562.150326][T14398] dump_stack_lvl+0x18c/0x250 [ 562.155323][T14398] ? show_regs_print_info+0x20/0x20 [ 562.160579][T14398] ? load_image+0x420/0x420 [ 562.165156][T14398] ? __might_fault+0xaa/0x120 [ 562.169962][T14398] ? __lock_acquire+0x7eb0/0x7eb0 [ 562.175115][T14398] ? __virt_addr_valid+0x10c/0x380 [ 562.180266][T14398] should_fail_ex+0x394/0x4c0 [ 562.184998][T14398] _copy_to_user+0x2f/0xa0 [ 562.189709][T14398] bpf_verifier_vlog+0x2f1/0x840 [ 562.194691][T14398] __btf_verifier_log+0xe3/0x140 [ 562.199677][T14398] ? btf_check_sec_info+0x350/0x350 [ 562.204930][T14398] ? lockdep_hardirqs_on+0x98/0x150 [ 562.210248][T14398] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 562.216737][T14398] ? btf_parse_hdr+0x1f0/0x700 [ 562.221633][T14398] btf_parse_hdr+0x385/0x700 [ 562.226342][T14398] btf_new_fd+0x397/0x9e0 [ 562.230711][T14398] ? bpf_btf_show_fdinfo+0x80/0x80 [ 562.235859][T14398] ? capable+0x88/0xe0 [ 562.240052][T14398] __sys_bpf+0x670/0x890 [ 562.244407][T14398] ? bpf_link_show_fdinfo+0x560/0x560 [ 562.249818][T14398] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 562.256013][T14398] __x64_sys_bpf+0x7c/0x90 [ 562.260455][T14398] do_syscall_64+0x55/0xb0 [ 562.264904][T14398] ? clear_bhb_loop+0x40/0x90 [ 562.269599][T14398] ? clear_bhb_loop+0x40/0x90 [ 562.274297][T14398] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.280220][T14398] RIP: 0033:0x7f5a5479e159 [ 562.284659][T14398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.304388][T14398] RSP: 002b:00007f5a55639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.312832][T14398] RAX: ffffffffffffffda RBX: 00007f5a54a25fa0 RCX: 00007f5a5479e159 [ 562.320829][T14398] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 562.328826][T14398] RBP: 00007f5a55639090 R08: 0000000000000000 R09: 0000000000000000 [ 562.336826][T14398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 562.345097][T14398] R13: 00007f5a54a26038 R14: 00007f5a54a25fa0 R15: 00007fff13a05568 [ 562.353190][T14398] [ 562.503198][T14411] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.2343'. [ 562.540376][T14411] openvswitch: netlink: Key type 8208 is out of range max 32 OK Stopping iptables: OK [ 562.998259][T14428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2348'. [ 563.050049][T14428] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2348'. [ 563.105833][T14428] netlink: 'syz.1.2348': attribute type 153 has an invalid length. [ 563.148324][T14428] netlink: 'syz.1.2348': attribute type 1 has an invalid length. [ 563.177336][T14428] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.2348'. Stopping system message bus: [ 563.250115][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.259122][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.278469][T14434] netlink: 'syz.3.2349': attribute type 21 has an invalid length. [ 563.797463][T14442] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.2350'. [ 563.888775][T14453] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.2350'. done [ 567.128495][T14524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2367'. [ 567.279223][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 567.292742][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 567.301155][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 567.310428][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 567.320463][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 567.328017][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 Stopping klogd: OK Stopping acpid: [ 568.406730][T14551] netlink: 'syz.0.2375': attribute type 39 has an invalid length. [ 568.725790][T14527] chnl_net:caif_netlink_parms(): no params data found [ 569.012043][T14574] netlink: 'syz.0.2378': attribute type 46 has an invalid length. [ 569.382802][T11852] team0: Port device netdevsim0 removed [ 569.407278][ T5781] Bluetooth: hci1: command tx timeout [ 569.525947][T14527] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.551695][T14527] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.559050][T14527] bridge_slave_0: entered allmulticast mode [ 569.589107][T14527] bridge_slave_0: entered promiscuous mode [ 569.651754][T14527] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.659062][T14527] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.724846][T14527] bridge_slave_1: entered allmulticast mode [ 569.755553][T14527] bridge_slave_1: entered promiscuous mode OK [ 569.895623][T14527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.944563][T14527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link Stopping syslogd: [ 570.076884][T14527] team0: Port device team_slave_0 added [ 570.115673][T14527] team0: Port device team_slave_1 added stopped /sbin/syslogd (pid 5124) OK [ 570.326419][T14527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.341307][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.379663][T14527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.401276][T11852] tipc: Left network mode [ 570.434180][T14527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.453739][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.528332][T14527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.632622][ T5781] Bluetooth: hci3: unexpected subevent 0x06 length: 150 > 10 umount: can't remount debugfs read-only [ 571.138934][T14527] hsr_slave_0: entered promiscuous mode [ 571.159362][T14527] hsr_slave_1: entered promiscuous mode [ 571.172134][T14527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.180564][T14527] Cannot create hsr debugfs directory [ 571.486683][ T5781] Bluetooth: hci1: command tx timeout [ 571.959796][T14634] FAULT_INJECTION: forcing a failure. [ 571.959796][T14634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.010672][T14634] CPU: 1 PID: 14634 Comm: syz.1.2394 Not tainted syzkaller #0 [ 572.018321][T14634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.028525][T14634] Call Trace: [ 572.031848][T14634] [ 572.034816][T14634] dump_stack_lvl+0x18c/0x250 [ 572.039571][T14634] ? show_regs_print_info+0x20/0x20 [ 572.044869][T14634] ? load_image+0x420/0x420 [ 572.049461][T14634] ? __might_fault+0xaa/0x120 [ 572.054195][T14634] ? __lock_acquire+0x7eb0/0x7eb0 [ 572.059274][T14634] ? __virt_addr_valid+0x10c/0x380 [ 572.064450][T14634] should_fail_ex+0x394/0x4c0 [ 572.069278][T14634] _copy_to_user+0x2f/0xa0 [ 572.073870][T14634] bpf_verifier_vlog+0x5ac/0x840 [ 572.078886][T14634] __btf_verifier_log+0xe3/0x140 [ 572.083891][T14634] ? btf_check_sec_info+0x350/0x350 [ 572.089140][T14634] ? lockdep_hardirqs_on+0x98/0x150 [ 572.094411][T14634] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 572.100626][T14634] ? btf_parse_hdr+0x1f0/0x700 [ 572.105447][T14634] btf_parse_hdr+0x3dd/0x700 [ 572.110091][T14634] btf_new_fd+0x397/0x9e0 [ 572.114489][T14634] ? bpf_btf_show_fdinfo+0x80/0x80 [ 572.119698][T14634] ? capable+0x88/0xe0 [ 572.123836][T14634] __sys_bpf+0x670/0x890 [ 572.128133][T14634] ? bpf_link_show_fdinfo+0x560/0x560 [ 572.133659][T14634] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 572.139994][T14634] __x64_sys_bpf+0x7c/0x90 [ 572.144505][T14634] do_syscall_64+0x55/0xb0 [ 572.148975][T14634] ? clear_bhb_loop+0x40/0x90 [ 572.153785][T14634] ? clear_bhb_loop+0x40/0x90 [ 572.158636][T14634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.164587][T14634] RIP: 0033:0x7f5a5479e159 [ 572.169047][T14634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.188704][T14634] RSP: 002b:00007f5a55639028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.197243][T14634] RAX: ffffffffffffffda RBX: 00007f5a54a25fa0 RCX: 00007f5a5479e159 [ 572.205247][T14634] RDX: 0000000000000028 RSI: 0000200000000a80 RDI: 0000000000000012 [ 572.213242][T14634] RBP: 00007f5a55639090 R08: 0000000000000000 R09: 0000000000000000 [ 572.221236][T14634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 572.229251][T14634] R13: 00007f5a54a26038 R14: 00007f5a54a25fa0 R15: 00007fff13a05568 [ 572.237382][T14634] [ 572.680454][ T5781] Bluetooth: hci3: command 0x0406 tx timeout [ 572.736001][T14637] IPv6: pim6reg1: Disabled Multicast RS [ 572.909139][T14641] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2397'. umount: can't remount sysfs read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 573.570393][ T5781] Bluetooth: hci1: command tx timeout Sent SIGTERM to all processes Connection to 10.128.1.98 closed by remote host. Sent SIGKILL to all processes Requesting system poweroff [ 575.372440][T14641] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2397'. [ 575.382782][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.394211][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.406153][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.416768][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.449919][T14643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.460847][T14643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.616642][T14647] syzkaller0: entered promiscuous mode [ 575.622379][T14647] syzkaller0: entered allmulticast mode [ 575.641334][ T5781] Bluetooth: hci1: command tx timeout [ 576.025926][T14651] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 576.091754][T14651] ACPI: PM: Preparing to enter system sleep state S5 [ 576.112183][T14651] kvm: exiting hardware virtualization [ 576.118280][T14651] reboot: Power down serialport: VM disconnected.