last executing test programs: 5m27.711899943s ago: executing program 2 (id=1396): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r4, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x4f0}, 0x20040011) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/40, 0x28}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xff, 0xc0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80}, 0x4182, 0x2000000000000001, 0xfffffffd, 0xb, 0xfffffffffff7bbfe, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x4000000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 5m27.366488394s ago: executing program 2 (id=1399): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x3, 0x10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000680)="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", 0x5e7}], 0x1}, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x55, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef7712", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') ioctl$TUNSETNOCSUM(r4, 0xb702, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x40) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000680)={'geneve0\x00', @multicast}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'veth0\x00', 0x4000}) r6 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000290000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9"], 0x6b}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYRES64, @ANYRES32=r1, @ANYBLOB="6a0fec170000b85afd744316742e000000200000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="04000000000040000500"/28], 0x50) 5m26.88895755s ago: executing program 2 (id=1403): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080017002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 5m26.730679435s ago: executing program 2 (id=1405): socket$kcm(0xa, 0x922000000003, 0x11) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000002da0dd04000000000050b3465f8e24b3acbeb3e1aec2745839235def5faec3dcf1ea991ecc4e3ebedd39a9609a101178526923062dcb7e89204bb6fc29e21afbdeaf65ac74babd5ae2e91ddb24c94a527be9096acea677a3598c29c5092a37aef2f070c2a57bdc5da06f18aa2b3ba41515de30883a6b87db4338973a3a507e7731c21c03c0d8"], 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xb8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYRESOCT=r2], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000000, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m26.521470592s ago: executing program 2 (id=1409): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10003, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f0000001a00)=""/122}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1}, &(0x7f0000001780)=0x4, 0x0}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r4, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x4f0}, 0x20040011) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000180)=""/40, 0x28}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xff, 0xc0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80}, 0x4182, 0x2000000000000001, 0xfffffffd, 0xb, 0xfffffffffff7bbfe, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x4000000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 5m25.61798906s ago: executing program 2 (id=1412): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x0, 0x1c, 0x0, 0x0, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0) 5m10.115450019s ago: executing program 32 (id=1412): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d80), &(0x7f0000000dc0), 0x0, 0x1c, 0x0, 0x0, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x7f, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_clone(0x43b00000, 0x0, 0x5b, 0x0, 0x0, 0x0) 17.7489156s ago: executing program 3 (id=2957): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x3, 0x0, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='(pu&\"&\t&&') socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x3, 0x80, 0x9, 0x4, 0x8, 0x7f, 0x0, 0x5, 0x60402, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, @perf_config_ext={0x9, 0x400}, 0x2800, 0x6, 0x6, 0x6, 0xc, 0x9, 0x1, 0x0, 0x7fff, 0x0, 0x10000}, 0x0, 0xc, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xff, 0xc0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80}, 0x4182, 0x2000000000000001, 0xfffffffd, 0xb, 0xfffffffffff7bbfe, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x4000000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.357499942s ago: executing program 3 (id=2960): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x55, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef7712", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid\x00') ioctl$TUNSETNOCSUM(r4, 0xb702, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000e45e00000000000000000002000000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x40) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000680)={'geneve0\x00', @multicast}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000006c0)={'veth0\x00', 0x4000}) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000290000000700000010000034366567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799e1459c9c9a7521737a8879e3ef4dca1e3c32158996e4b2abde5342e22f2ba8b679121ac0b0ad62ade31", @ANYRES32=0x0, @ANYBLOB="e1212f0409000000e70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f884c1fa9f46b3472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9"], 0x6b}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000), 0xfdef) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x17c50f6a, '\x00', 0x0, r6, 0x4, 0x400000, 0x5}, 0x50) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r2) 16.672277424s ago: executing program 3 (id=2964): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa4, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x2, 0x5}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000010c0)={r0, &(0x7f0000000080)="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", &(0x7f0000001080)=""/19, 0x4}, 0x20) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000001100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000001140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x80, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f00000011c0)=0x1) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001200), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x18, 0x4f2c5ad6, 0x3, 0xf, 0x460, r0, 0x0, '\x00', 0x0, r2, 0x5, 0x3}, 0x50) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000012c0), 0x300, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000001300)=""/95) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) socketpair(0x10, 0x6, 0xdfc, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001500)={r2, &(0x7f00000013c0)="f8e711604b280325ed2695deac798800684b5d1907561dbd608d35f8281597d8144d5513e732b2", &(0x7f0000001400)=""/255}, 0x20) socketpair(0x18, 0x6, 0x8, &(0x7f0000001540)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', 0x0, 0x4010, r4}, 0x18) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000001640)=r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002b80)={0xffffffffffffffff}) r9 = gettid() r10 = gettid() r11 = getpid() r12 = syz_clone(0x480, &(0x7f0000002bc0)="787bad6a261c63e94f5918be38edae88f2dea824d120b7f6f5245bd55e9d7530a9ae8fd62ebf77c15df993efadc6ad86f6bca7c6177abca92216349c6b3eb659f32d047534db487a656ffaaca367797c436be2f40448486ec232177656585c74b4c6b91b671e1cb8fcdaa8", 0x6b, &(0x7f0000002c40), &(0x7f0000002c80), &(0x7f0000002cc0)="02159acbeac1da9917508b7da447c02cb38f82adfefe0d99a4a514a7991f5d2c7901e756cd703706bb1cc49dc1ac2ddb8f81ed1ddeb3664d9a33693fc893f727d3a5687e93caa17548df4e2c0f0304a183084dacf3335bd4014734ba2ac545aa94b0b9c4f87c71698b51e16cf160b3758d21f2b79887c94e02540c20bd55168bcb175870da0a3311c361128b87ca4d68e074049ad43e9f70380222229f") sendmsg$unix(r6, &(0x7f0000002e40)={&(0x7f0000001680)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001700)="efcc15a3d0d58ddc5d5021ded8a0b31a07d6f529674aed534af7728d434b796dde88abd2d1d3d48ef45b7d8340bbc35cde4de8d01ba3ff3ecabd5ec36b4ea978da4b468ee1987c15ff7e71fc4124548dad58bd2365f31e3b85be5a91ead76d08c862297acb8afa04f917b73a9bbfc78d7c92cb91ae10c9be908ed3ae82847be6251cbad360b0c1893a87560d6bcd84eab2fb0b7ef367934f35a369ff4a8d19247b4fca03bac6011d7ec343c27d8d93391ad1b15311fd96491cf429cddd92d8cd8e199d5d43dc3c44431a0d49", 0xcc}, {&(0x7f0000001800)="d1ba3d72c2b377986e4778152d6a76e79f4b407f27298d67e7d7901366478e81b900462bdd96a8da16bca66427c81a871e13d73639eb06a3c9770c991fd2ac8fef1d48cd56a99c4a3cb686cbad", 0x4d}, {&(0x7f0000001880)="3efc74d2349ca71345", 0x9}, {&(0x7f00000018c0)="a11caaef48c2a9233ecea90e0455e6a05df27dffb04bf0956c594395b463a7721ea9a34beac7e55d80", 0x29}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="71d5ee74073e74886d6fb3dcc891ee6e3983ef4cf5fc53a19167cecc46ed89c6f20318b6e9c8016f3c7371df35951acf397c3be0ab062ff3510912a8bfd7517c8d5720f374b91587a84114513ff93e4d0b623a3a3a98dba3084c17095b9f4184b1e50bbdcbca3a41502720b51e6279607aa6d10832cc716f925242b76c207ec76f99e1c1b9f9", 0x86}, {&(0x7f00000029c0)="30d914aafb3177a5bec4020f61e0ce21e767d82a5d642704ca9da79dad42b2ce3996a7b42121f2fcbad91b1215f65d574687d3613a636426debb6d1de46328eac1380b6037065ef173d08dec6ce8555f5dee9a03e6ea59a55a6574f719f4bd2d969c21441c95fa841ff8a478f646b994d9eebfae7485da20dd79d2f6cc4ed7f51864d6abe2a893d97d098ca709950959e4", 0x91}, {&(0x7f0000002a80)="8974d7a3dd865d365e01e26e648931b491a6cc9c441678ece852f5504f21e2a65c418e464689d62b60d037f3ccfda0ce096459d102ba1e840b813e13d1be64ce398c948a6fb325c3930b036fe91306a43e8330c292909c6e8b6f2ff69946ad5113ba", 0x62}], 0x8, &(0x7f0000002d80)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [r5, r6, r8, r7]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xffffffffffffffff}}}], 0xc0}, 0x4001) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000002e80)=r7) mkdir(&(0x7f0000002ec0)='./file0\x00', 0x101) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x29, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000031c0)={r7, 0xe0, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002f00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000002f40)=[0x0, 0x0, 0x0], &(0x7f0000002f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f0000002fc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000003000), &(0x7f0000003040), 0x8, 0xba, 0x8, 0x8, &(0x7f0000003080)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003200)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x87, '\x00', r13, r2, 0x2, 0x3, 0x3}, 0x50) 15.466652533s ago: executing program 3 (id=2969): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x16) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0xb7, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x80, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xb, 0x9, 0x72}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, r2, r7], &(0x7f00000006c0)=[{0x4, 0x1, 0x0, 0x5}, {0x4, 0x5, 0xd, 0x9}], 0x10, 0x18}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 9.468200506s ago: executing program 5 (id=2987): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x0) 9.379927709s ago: executing program 5 (id=2988): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 8.387319561s ago: executing program 5 (id=2991): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1555}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910080000000000630a04ff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000640)=r2, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000000)="b9ff0300600d698dff062cf008004de7f9c7643600000002007af5f3da11ee93aa1a014409a65ca947348c5352c0c05cb77a502055b8874590de801045d4d4d34aa2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) 8.065624581s ago: executing program 3 (id=2994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000ffb000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.950935125s ago: executing program 3 (id=2996): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000010000000000000000000000000000987d000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00", @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa1000000000000c4010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002f00)=""/4081, 0xff1}, {&(0x7f0000000000)=""/107, 0x6b}, {&(0x7f0000000080)=""/29, 0x1d}], 0x3}, 0x0) write$cgroup_subtree(r6, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x1, 0x400000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf49}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000700)="515fe253a38e78a49e2ca7602b251b73b28a8d99a36c0aa96520ba9a9c4929995bd35ed307960e0890f4cacb1ccf80202666c7f84b1be2f258cdd444d63b08b13269f691e5bcb78900a3dcbae7f008d30db2820ee1f841bb04eb1fb4afc95991434f39e028b50d810174f2831f05da809f801c72ab5209197e73865fafdc592c498512ab7e717920e513f5488a29481eb3d8c436317af30ec13271f3985a17d41367b85131608d26fbabb67febb05101acfa12bfd9d1959fe99c66a7dae06ab8a70b0000000000000000", &(0x7f0000000500)=""/8}, 0x20) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) 7.899495966s ago: executing program 5 (id=2997): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x5f0, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180015000600142603600e1208000fa888810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 6.967894936s ago: executing program 1 (id=3000): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 6.967399296s ago: executing program 5 (id=3001): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40034, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x3, 0x0, 0x6, 0x7, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, 0x0, 0x24008884) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000008c0)=0x49) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) recvmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/179, 0xb3}], 0x1, &(0x7f0000000640)=""/190, 0xbe}, 0x40010103) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x227}, {&(0x7f0000001440)}], 0x2}, 0x8400) sendmsg$inet(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10}, 0x0) sendmsg$sock(r4, &(0x7f0000000140)={&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @broadcast}, 0x4, 0x0, 0x2, 0x4}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000540)="14c55273decf6b96efa749b7f1eefadabe5ecdc06053d1049f43c73e528f1d6c1e7ed9f62617724664e6fbfa87eeedd4a31594bdddc5675f079c2c2ceb5ff9163346bc22a1be46611bfc1c347fd7c1d7bfdc915318ec415608ea70a230f1888138e6eeed55cea722d549215e1b72a934b06034d5912180cb440226789b7b7703a22c29fbb821f6198fb2da5035dc765d82a1050174aa2eff199802008735a3c07eaccbc84339b2b7fb9eb0b66870d9b72485b2e88de37e9e6e55dc77", 0xbc}, {&(0x7f0000000600)="63a12a5fd1256b3657501757a86b4b5adca43c702b0d69b7a674fc4cc60d491eb747f5dd6085f2aedae1aa0a8859f53918233c23aa0bb7ef9f1cb5b73969c0fc59dde67dc02247b4fa55068e39c71966dbd3e5ec15e7ec0abb66de375a65a48a9a51c37eaf736519f985ab6432479c8b3894076203879b8f4582a79566ef13bae1f6161f42cdf53917230739f201bb", 0x8f}, {0x0}, {&(0x7f0000000400)="a016ce4630e9f2161a069ec3838e4d07b11b19e86a25101ec442f65d4ff3f5a640545efe42f74e7be13477bcbfe206a57669530d41ab2ae8c9b8123b57e1d2449259294f87d7c8f4f4e50dea93d11874939fdd72f78080dce937154bcee2", 0x5e}], 0x4, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0xe}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x726}}, @mark={{0x14, 0x1, 0x24, 0x100}}], 0xa8}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x81ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001fc0)=@bpf_lsm={0x1d, 0x1b, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000008000000000ff07000018110000", @ANYRES32=r9, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000b70000000000000009000000655c42389500000000000000"], &(0x7f0000000900)='syzkaller\x00', 0xfffff000, 0x0, &(0x7f0000000a80), 0x41000, 0x42, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000b00)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xe, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001f40)=[r0, r1], &(0x7f0000001f80)=[{0x3, 0x1, 0x5, 0xb}, {0x0, 0x4, 0xd, 0x4}, {0x2, 0x2, 0x2, 0xc}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5.990968107s ago: executing program 1 (id=3003): syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/uts\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000f40)='ns/uts\x00') perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x8202, 0x0) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) (async) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xc0a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8948, &(0x7f00000002c0)={'bond0\x00', @link_local}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) r6 = syz_clone(0x80000000, &(0x7f0000000140)="21cb1c18bce6b1aebed099e66a88114544427e8f762d71762d30a621b52eb71a214aecc7e4a072", 0x27, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="e9577c03f9be65566c1dc7b250aa49fd56057c2a610e5f8b9742751a50eb2996cee29b20c10987fd4732af0029d46be82c5821e620f982326682fab777c3b76cbaad15cc716e779cf269f0480fe914ae6ece6e22d9c594aab6ca395ad9") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0x2, 0x2, 0x0, 0x0, 0x1, 0x82242, 0xb, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf76, 0x2, @perf_config_ext={0x730b, 0x7fffffffffffffff}, 0x90f, 0x2, 0xffffffff, 0x4, 0x2186, 0x5, 0x5, 0x0, 0x2, 0x0, 0x8}, r6, 0xe, r1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000000008100000081"], 0x48) write$cgroup_subtree(r5, &(0x7f0000000000), 0x25) syz_open_procfs$namespace(0x0, 0x0) 5.946879249s ago: executing program 5 (id=3004): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080), 0x16) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0xb7, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x80, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='GPL\x00', 0x81, 0x0, 0x0, 0x41000, 0x1, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0xb, 0x9, 0x72}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0xffffffffffffffff, r2, r7], &(0x7f00000006c0)=[{0x4, 0x1, 0x0, 0x5}, {0x4, 0x5, 0xd, 0x9}], 0x10, 0x18}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 5.578721941s ago: executing program 1 (id=3008): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = getpid() perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0xb, 0x3, 0x81, 0x0, 0x0, 0x5, 0x2cc01, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x0, @perf_bp={&(0x7f00000009c0)}, 0x1001, 0xfffffffffffffffc, 0x4, 0xe, 0x5, 0x7ff, 0x595, 0x0, 0xffffffff, 0x0, 0x8}, r1, 0x0, 0xffffffffffffffff, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0xb8, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4, @local, 0x3, 0x4}, 0x80, &(0x7f0000000100)=[{0x0, 0x21}], 0x1}, 0x4804) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc9, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x2f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10042) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0xb, &(0x7f00000002c0)=@raw=[@generic={0x7, 0x4, 0x1, 0x1, 0x6}, @map_fd={0x18, 0xf, 0x1, 0x0, r5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x7, 0x1, 0x5, 0x7, 0x3, 0x4, 0xfffffffffffffff0}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}], &(0x7f0000000340)='GPL\x00', 0xfffffffa, 0xac, &(0x7f0000000380)=""/172, 0x41000, 0x1, '\x00', r6, 0x0, r0, 0x8, &(0x7f0000000740)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xa, 0x8, 0xffffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x5, 0x4, 0x9, 0x1}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x19, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000073000000b7000000000000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.590222767s ago: executing program 1 (id=3009): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 2.474711121s ago: executing program 1 (id=3011): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40500000000000061108b000000000063012ce5ffffffff94000000000000009646"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = getpid() bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0d000000040000000400", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1053e0, 0x2, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, r4, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/time\x00') perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x32, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x19, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x3}, 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="220000000100000000000000000001001831000005000000000000000000000085200000010000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x7, 0xe4, &(0x7f00000005c0)=""/228, 0x41100, 0x0, '\x00', r5, 0x1b, r0, 0x8, &(0x7f00000006c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{0x2, 0x3, 0xd}, {0x2, 0x4, 0xe, 0x6}, {0x0, 0x3, 0x5, 0x6}, {0x3, 0x4, 0x6, 0x4}], 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x26, 0x0, 0x1}, 0x28) socketpair(0x26, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="94c1b4fedb8a35393a", 0x9}], 0x1}, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x891f, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0xfffffffc, @loopback={0xfe80000000000000}, 0x4}, 0x80, 0x0}, 0x20008810) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[], 0x0, 0x26}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009500ee0000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r9, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 2.47433854s ago: executing program 0 (id=3012): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 1.764926873s ago: executing program 0 (id=3015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000000000ff00b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.488416892s ago: executing program 0 (id=3016): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xffff08c8, '\x00', 0x0, 0xffffffffffffffff, 0x7b7, 0x1, 0x2}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b70200dc280000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004000000000000be10d8265de39cf070475ddf434dd44ab53a5fb08dfbf782cb72e74df6c7c704ac8d20b7497f5d9f19e2833f63d1534c56fcfdfbfc020bb449b5bf6519f5f91870d7f410d84d8e33a376a65e6192d0db01b81809b98d99845b4befb41a0be9f2bfa5c01ccfaf632f41d57be53a6f20d3c5704cfde80b52911b8f99bfe73c37fa3ac9c2d3e9e4c0622cf14935"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x8f, 0xde, 0x0, 0x0, 0x9, 0x0, 0xfffffefffffffffe, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, @perf_config_ext, 0x0, 0x4, 0x80, 0x6, 0x48a, 0x8, 0x0, 0x0, 0x10040000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) r4 = socket$kcm(0x29, 0x7, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@generic={&(0x7f0000001240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xd1, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f0000000440), &(0x7f00000006c0), 0x8, 0xb9, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) sendmsg$inet(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208001e0000000401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d254f9ea7b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300", 0xd8}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) 1.487926192s ago: executing program 4 (id=3017): socket$kcm(0x29, 0x5, 0x0) (async) r0 = socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r1}) getpid() (async) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/mnt\x00') (async) syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/mnt\x00') close(r2) r4 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) close(r4) (async) close(r4) getpid() ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)=',\'\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)=',\'\x00') bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) (async) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000140)='./file0\x00', r5, 0x4000, r6}, 0x18) socketpair(0x1a, 0x6, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f00000025c0)={&(0x7f00000002c0)=@phonet, 0x80, &(0x7f0000002540)=[{&(0x7f0000000340)=""/247, 0xf7}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/62, 0x3e}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/141, 0x8d}], 0x5}, 0x121) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002600)={0xffffffffffffffff}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002700)='./cgroup/syz0\x00', 0x200002, 0x0) r10 = perf_event_open$cgroup(&(0x7f0000002680)={0x4, 0x80, 0xe, 0x2, 0x40, 0x6, 0x0, 0x2, 0x880, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9891, 0x1, @perf_bp={&(0x7f0000002640)}, 0x7209, 0x1, 0xd8, 0x7, 0x7fffffffffffffff, 0x6, 0x6, 0x0, 0x2, 0x0, 0x100000001}, r9, 0xffffffffffffffff, r8, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000002740)={0x0, r4}, 0x8) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002780)={0x1b, 0x0, 0x0, 0x8, 0x0, r5, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003900)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003c80)={0xffffffffffffffff, 0xe0, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000039c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000003a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003a40)=[0x0], 0x0, 0xc2, &(0x7f0000003a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003ac0), &(0x7f0000003b00), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000003b40)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003c80)={0xffffffffffffffff, 0xe0, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000039c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000003a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003a40)=[0x0], 0x0, 0xc2, &(0x7f0000003a80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003ac0), &(0x7f0000003b00), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000003b40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003d40)={0x8, 0x12, &(0x7f0000002800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x972}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@generic={0x8, 0x1, 0x0, 0x9, 0x2caa8cff}, @alu={0x7, 0x0, 0x0, 0xb, 0xb, 0xc, 0xfffffffffffffff0}, @generic={0xc, 0x9, 0xc, 0x2, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000028c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000002900)=""/4096, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, r12, 0x8, &(0x7f0000003940)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000003980)={0x0, 0x10, 0x4}, 0x10, r13, 0xffffffffffffffff, 0x1, &(0x7f0000003cc0)=[r4, r5, r5], &(0x7f0000003d00)=[{0x2, 0x1, 0x8, 0x3}], 0x10, 0x3ff}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003d40)={0x8, 0x12, &(0x7f0000002800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x972}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@generic={0x8, 0x1, 0x0, 0x9, 0x2caa8cff}, @alu={0x7, 0x0, 0x0, 0xb, 0xb, 0xc, 0xfffffffffffffff0}, @generic={0xc, 0x9, 0xc, 0x2, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000028c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000002900)=""/4096, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb=0x1, r12, 0x8, &(0x7f0000003940)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000003980)={0x0, 0x10, 0x4}, 0x10, r13, 0xffffffffffffffff, 0x1, &(0x7f0000003cc0)=[r4, r5, r5], &(0x7f0000003d00)=[{0x2, 0x1, 0x8, 0x3}], 0x10, 0x3ff}, 0x94) r14 = openat$cgroup(r9, &(0x7f0000003f40)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003f00)={@cgroup=r14, 0x12, 0x0, 0x1, &(0x7f0000003e00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000003e40)=[0x0], &(0x7f0000003e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open$cgroup(&(0x7f0000003f80)={0x2, 0x80, 0x2f, 0x2, 0xf, 0x0, 0x0, 0x2, 0x902, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x3}, 0x317, 0x4, 0x2, 0x9, 0x3, 0x3536, 0x0, 0x0, 0x0, 0x0, 0xb6}, r15, 0x4, r10, 0x8) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x9) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x40042409, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000004000), 0x8) (async) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000004000), 0x8) openat$cgroup_pressure(r16, &(0x7f0000004040)='cpu.pressure\x00', 0x2, 0x0) 1.391889255s ago: executing program 4 (id=3018): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000004000000060000008000000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000340), 0x619, r0}, 0x38) 1.376632396s ago: executing program 1 (id=3019): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0xa30, 0x0, 0x0, 0x2, 0x2, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x0, 0x0, &(0x7f0000000580), 0x8, 0xe0, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000240)=""/190) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x60f2f308, 0x80000001}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000), 0x8) recvmsg$kcm(r5, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_config_ext={0x40, 0x8}, 0x100410, 0x200, 0xa, 0x5, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190003000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.317754058s ago: executing program 0 (id=3020): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x1555}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000007910080000000000630a04ff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) r5 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x2e, &(0x7f0000000640)=r2, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000000)="b9ff0300600d698dff062cf008004de7f9c7643600000002007af5f3da11ee93aa1a014409a65ca947348c5352c0c05cb77a502055b8874590de801045d4d4d34aa2", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xe) 1.095014335s ago: executing program 4 (id=3021): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d031fffffff000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf72a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x48) 1.055508316s ago: executing program 4 (id=3022): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x2, 0x0, 0x0, 0x4}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000380)="da050f767ebaf9d084958ac5e8655a06496973553a99ca9a7e98226508abb9a4998d36b54261b06e7b5ef97363", 0x2d}, {0x0}], 0x2, &(0x7f0000001b40)=ANY=[@ANYBLOB="78000000000000000a010000030000007b48cdaf7e05c67aa19225bbc835abe401e6930f9cb17d8146112295bf4d8ff417166c491ff1cea4cdecdf5630306c84c8133ef3602f86a200ed36053d4454ad35ca8148ebd097b1a3be5295ade4bdd8a2077e6f4940e24d2b0b1d9aaa321de3c800000000000000d0000000000000000100000002000000a2871d666bd4c47c6b3611505a2d6c474e03ab96045930c8b350bc04d97152b8fce180415ca41b9e7c25b5ef4ea9f48db2600f116d090b4b6c9fd8146d980f27fb"], 0x148}, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x0, 0x0, 0x0, 0xfdfffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x0, 0x2, 0xa}, {0xfffffffd, 0x0, 0x3}, {0x0, 0x80004, 0x10100, 0x3}], 0x10, 0x1}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x2) 775.994725ms ago: executing program 0 (id=3023): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f00000000c0)=0x8, 0xc) (async) write$cgroup_int(r0, &(0x7f00000000c0)=0x8, 0xc) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'vcan0\x00', 0x400}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) (async) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x1001, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x63}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x1001, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x63}, 0x80) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x4}], 0x10, 0xfffffff6}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) write$cgroup_devices(r4, &(0x7f0000000080)={'c', ' *:* ', 'm\x00'}, 0x8) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socketpair(0x1d, 0x800, 0x0, &(0x7f00000003c0)) 429.700807ms ago: executing program 4 (id=3024): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r3, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) 417.083796ms ago: executing program 0 (id=3025): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x5c298795369ca057, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) 0s ago: executing program 4 (id=3026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="000000000090ff00b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): valid length. [ 283.925354][ T7061] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.892'. [ 286.053843][ T7070] netlink: 180 bytes leftover after parsing attributes in process `syz.1.894'. [ 286.090979][ T7076] netlink: 180 bytes leftover after parsing attributes in process `syz.1.894'. [ 286.572277][ T7086] netlink: 'syz.2.899': attribute type 21 has an invalid length. [ 286.600647][ T7085] netlink: 'syz.4.900': attribute type 30 has an invalid length. [ 286.742040][ T7088] netlink: 'syz.4.901': attribute type 21 has an invalid length. [ 286.774173][ T7088] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.805866][ T7088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 286.813220][ T7088] IPv6: NLM_F_CREATE should be set when creating new route [ 286.820499][ T7088] IPv6: NLM_F_CREATE should be set when creating new route [ 289.499921][ T7109] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.907'. [ 289.674185][ T7114] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.909'. [ 293.706762][ T7140] netlink: 'syz.1.915': attribute type 21 has an invalid length. [ 294.067416][ T7169] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 294.078000][ T7169] netlink: 40 bytes leftover after parsing attributes in process `syz.1.920'. [ 294.333206][ T7175] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.924'. [ 294.431663][ T7177] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 294.439366][ T7177] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.925'. [ 297.409782][ T7192] netlink: 'syz.2.930': attribute type 21 has an invalid length. [ 298.175683][ T7202] netlink: 180 bytes leftover after parsing attributes in process `syz.4.933'. [ 298.194324][ T7202] netlink: 180 bytes leftover after parsing attributes in process `syz.4.933'. [ 298.199890][ T7204] netlink: 188 bytes leftover after parsing attributes in process `syz.4.933'. [ 300.328211][ T7211] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.936'. [ 300.747951][ T7218] netlink: 'syz.0.938': attribute type 10 has an invalid length. [ 300.782331][ T7218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.938'. [ 301.512869][ T7223] netlink: 'syz.1.941': attribute type 21 has an invalid length. [ 303.042770][ T7240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.945'. [ 303.070767][ T7245] netlink: 132 bytes leftover after parsing attributes in process `syz.0.948'. [ 304.367305][ T7270] netlink: 'syz.4.954': attribute type 21 has an invalid length. [ 306.232186][ T7281] netlink: 'syz.1.959': attribute type 17 has an invalid length. [ 306.249892][ T7281] netlink: 152 bytes leftover after parsing attributes in process `syz.1.959'. [ 306.302446][ T7281] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.634221][ T7294] netlink: 'syz.4.961': attribute type 21 has an invalid length. [ 306.643585][ T7286] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 306.658932][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.960'. [ 307.060376][ T7286] batman_adv: batadv0: Adding interface: veth0_vlan [ 307.067778][ T7286] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.094430][ T7286] batman_adv: batadv0: Interface activated: veth0_vlan [ 307.654843][ T7318] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.965'. [ 307.878158][ T7309] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.967'. [ 308.974504][ T4724] tipc: Subscription rejected, illegal request [ 312.689287][ T7362] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.980'. [ 312.763419][ T7361] netlink: 'syz.2.981': attribute type 1 has an invalid length. [ 312.815288][ T7361] netlink: 'syz.2.981': attribute type 4 has an invalid length. [ 312.866110][ T7361] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.981'. [ 313.027322][ T7357] netlink: 'syz.4.979': attribute type 10 has an invalid length. [ 313.045955][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.054091][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.084590][ T7366] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.983'. [ 313.108377][ T7357] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.115594][ T7357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.123176][ T7357] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.130435][ T7357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.168294][ T7357] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 314.094193][ T7373] netlink: 132 bytes leftover after parsing attributes in process `syz.4.985'. [ 314.284798][ T7370] delete_channel: no stack [ 314.330228][ T7388] netlink: 'syz.2.990': attribute type 17 has an invalid length. [ 314.340000][ T7388] netlink: 152 bytes leftover after parsing attributes in process `syz.2.990'. [ 314.377630][ T7388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.601316][ T7404] netlink: 'syz.1.994': attribute type 10 has an invalid length. [ 315.609113][ T7404] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.994'. [ 315.618518][ T7404] openvswitch: netlink: Flow key attr not present in new flow. [ 317.217512][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.224016][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.774265][ T7418] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.997'. [ 317.808530][ T7416] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.996'. [ 319.619420][ T7459] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1010'. [ 323.276872][ T7509] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1024'. [ 323.295605][ T7511] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1024'. [ 323.433789][ T7515] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1025'. [ 323.510300][ T7516] netlink: 'syz.1.1026': attribute type 21 has an invalid length. [ 323.620515][ T7520] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1027'. [ 324.234914][ T7536] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.1033'. [ 324.276294][ T7536] netlink: 8454 bytes leftover after parsing attributes in process `syz.0.1033'. [ 324.328893][ T7536] netlink: 'syz.0.1033': attribute type 39 has an invalid length. [ 327.578045][ T7564] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1040'. [ 327.806786][ T7569] netlink: 'syz.2.1041': attribute type 21 has an invalid length. [ 329.097268][ T7589] netlink: 'syz.4.1045': attribute type 2 has an invalid length. [ 329.114812][ T7589] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1045'. [ 330.237023][ T7597] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.1049'. [ 330.339739][ T7597] netlink: 'syz.2.1049': attribute type 1 has an invalid length. [ 330.339769][ T7597] netlink: 'syz.2.1049': attribute type 2 has an invalid length. [ 330.339787][ T7597] netlink: 'syz.2.1049': attribute type 3 has an invalid length. [ 330.339804][ T7597] netlink: 'syz.2.1049': attribute type 4 has an invalid length. [ 330.339821][ T7597] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1049'. [ 330.407970][ T7609] netlink: 'syz.0.1052': attribute type 21 has an invalid length. [ 330.458206][ T7609] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1052'. [ 330.700570][ T7619] netlink: 'syz.0.1054': attribute type 21 has an invalid length. [ 331.746201][ T7623] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1056'. [ 333.166787][ T7606] syz.2.1049 (7606) used greatest stack depth: 18512 bytes left [ 333.285620][ T7626] netlink: 'syz.0.1057': attribute type 10 has an invalid length. [ 333.475869][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.541999][ T7626] team0: Port device bond0 added [ 333.663141][ T7642] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 334.906288][ T7663] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1068'. [ 335.379200][ T7678] netlink: 'syz.1.1074': attribute type 10 has an invalid length. [ 335.507133][ T7679] FAULT_INJECTION: forcing a failure. [ 335.507133][ T7679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.538738][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.560525][ T7683] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1075'. [ 335.574213][ T7679] CPU: 1 PID: 7679 Comm: syz.4.1072 Not tainted syzkaller #0 [ 335.581642][ T7679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 335.592341][ T7679] Call Trace: [ 335.595626][ T7679] [ 335.598564][ T7679] dump_stack_lvl+0x188/0x250 [ 335.603251][ T7679] ? show_regs_print_info+0x20/0x20 [ 335.608455][ T7679] ? load_image+0x400/0x400 [ 335.612959][ T7679] ? __lock_acquire+0x7d10/0x7d10 [ 335.617981][ T7679] ? vfs_write+0x8b2/0xd60 [ 335.622402][ T7679] should_fail+0x38c/0x4c0 [ 335.626997][ T7679] _copy_from_user+0x2e/0x170 [ 335.631959][ T7679] __sys_bpf+0x26d/0x6f0 [ 335.636228][ T7679] ? bpf_link_show_fdinfo+0x380/0x380 [ 335.642053][ T7679] ? rcu_nmi_exit+0x6f/0xf0 [ 335.646834][ T7679] ? vtime_user_exit+0x2c8/0x3e0 [ 335.651866][ T7679] __x64_sys_bpf+0x78/0x90 [ 335.656290][ T7679] do_syscall_64+0x4c/0xa0 [ 335.660706][ T7679] ? clear_bhb_loop+0x30/0x80 [ 335.665382][ T7679] ? clear_bhb_loop+0x30/0x80 [ 335.670165][ T7679] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 335.676062][ T7679] RIP: 0033:0x7fda2321b819 [ 335.680486][ T7679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.700488][ T7679] RSP: 002b:00007fda21475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.709147][ T7679] RAX: ffffffffffffffda RBX: 00007fda23494fa0 RCX: 00007fda2321b819 [ 335.717322][ T7679] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 335.725398][ T7679] RBP: 00007fda21475090 R08: 0000000000000000 R09: 0000000000000000 [ 335.733635][ T7679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.741621][ T7679] R13: 00007fda23495038 R14: 00007fda23494fa0 R15: 00007ffdaa9bccc8 [ 335.749621][ T7679] [ 335.755414][ T7678] team0: Port device bond0 added [ 335.781492][ T7674] syz.0.1071 (7674) used obsolete PPPIOCDETACH ioctl [ 336.241255][ T7687] team0: Port device team_slave_0 removed [ 336.247991][ T7687] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 339.342072][ T7717] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1082'. [ 339.403906][ T7713] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1082'. [ 339.467770][ T7723] netlink: 'syz.2.1087': attribute type 10 has an invalid length. [ 342.427418][ T7733] FAULT_INJECTION: forcing a failure. [ 342.427418][ T7733] name failslab, interval 1, probability 0, space 0, times 0 [ 342.445988][ T7733] CPU: 1 PID: 7733 Comm: syz.0.1088 Not tainted syzkaller #0 [ 342.453951][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 342.460085][ T7723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.464133][ T7733] Call Trace: [ 342.464148][ T7733] [ 342.477077][ T7733] dump_stack_lvl+0x188/0x250 [ 342.481903][ T7733] ? show_regs_print_info+0x20/0x20 [ 342.487229][ T7733] ? load_image+0x400/0x400 [ 342.491765][ T7733] ? __might_sleep+0xf0/0xf0 [ 342.496398][ T7733] ? __lock_acquire+0x7d10/0x7d10 [ 342.497960][ T7723] team0: Port device bond0 added [ 342.501545][ T7733] should_fail+0x38c/0x4c0 [ 342.501582][ T7733] should_failslab+0x5/0x20 [ 342.501600][ T7733] slab_pre_alloc_hook+0x51/0xc0 [ 342.501622][ T7733] __kmalloc+0x6b/0x330 [ 342.501639][ T7733] ? bpf_test_init+0xf8/0x1b0 [ 342.501662][ T7733] ? __lock_acquire+0x7d10/0x7d10 [ 342.501688][ T7733] bpf_test_init+0xf8/0x1b0 [ 342.539457][ T7733] bpf_prog_test_run_skb+0x181/0x1180 [ 342.544875][ T7733] ? __fget_files+0x40f/0x480 [ 342.549698][ T7733] ? cpu_online+0x60/0x60 [ 342.554156][ T7733] bpf_prog_test_run+0x31e/0x390 [ 342.559122][ T7733] __sys_bpf+0x5a5/0x6f0 [ 342.563375][ T7733] ? bpf_link_show_fdinfo+0x380/0x380 [ 342.568799][ T7733] ? rcu_nmi_exit+0x6f/0xf0 [ 342.573418][ T7733] ? vtime_user_exit+0x2c8/0x3e0 [ 342.578452][ T7733] __x64_sys_bpf+0x78/0x90 [ 342.582872][ T7733] do_syscall_64+0x4c/0xa0 [ 342.587387][ T7733] ? clear_bhb_loop+0x30/0x80 [ 342.592064][ T7733] ? clear_bhb_loop+0x30/0x80 [ 342.596754][ T7733] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.602821][ T7733] RIP: 0033:0x7f58bdf5f819 [ 342.607242][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.627116][ T7733] RSP: 002b:00007f58bc1b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.635622][ T7733] RAX: ffffffffffffffda RBX: 00007f58be1d8fa0 RCX: 00007f58bdf5f819 [ 342.643690][ T7733] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 342.651664][ T7733] RBP: 00007f58bc1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 342.659652][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.667726][ T7733] R13: 00007f58be1d9038 R14: 00007f58be1d8fa0 R15: 00007ffdf89406c8 [ 342.675721][ T7733] [ 342.912397][ T7737] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1090'. [ 343.102964][ T7741] team0: Port device team_slave_0 removed [ 343.109999][ T7741] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 344.378339][ T7754] ODEBUG: Out of memory. ODEBUG disabled [ 346.362415][ T7762] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1095'. [ 346.914266][ T7779] FAULT_INJECTION: forcing a failure. [ 346.914266][ T7779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.917091][ T7781] device wlan1 entered promiscuous mode [ 346.955206][ T7779] CPU: 0 PID: 7779 Comm: syz.0.1103 Not tainted syzkaller #0 [ 346.962638][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 346.972813][ T7779] Call Trace: [ 346.976115][ T7779] [ 346.979064][ T7779] dump_stack_lvl+0x188/0x250 [ 346.983768][ T7779] ? show_regs_print_info+0x20/0x20 [ 346.989430][ T7779] ? load_image+0x400/0x400 [ 346.989469][ T7781] netlink: 'syz.3.1104': attribute type 41 has an invalid length. [ 346.993967][ T7779] ? __lock_acquire+0x7d10/0x7d10 [ 346.994011][ T7779] should_fail+0x38c/0x4c0 [ 346.994043][ T7779] _copy_from_user+0x2e/0x170 [ 347.016115][ T7779] bpf_test_init+0x136/0x1b0 [ 347.020862][ T7779] bpf_prog_test_run_skb+0x181/0x1180 [ 347.026276][ T7779] ? __fget_files+0x40f/0x480 [ 347.028328][ T7781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1104'. [ 347.031083][ T7779] ? cpu_online+0x60/0x60 [ 347.031111][ T7779] bpf_prog_test_run+0x31e/0x390 [ 347.031138][ T7779] __sys_bpf+0x5a5/0x6f0 [ 347.031157][ T7779] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 347.031183][ T7779] ? bpf_link_show_fdinfo+0x380/0x380 [ 347.031204][ T7779] ? rcu_nmi_exit+0x6f/0xf0 [ 347.031240][ T7779] ? vtime_user_exit+0x2c8/0x3e0 [ 347.031269][ T7779] __x64_sys_bpf+0x78/0x90 [ 347.031303][ T7779] do_syscall_64+0x4c/0xa0 [ 347.031329][ T7779] ? clear_bhb_loop+0x30/0x80 [ 347.031348][ T7779] ? clear_bhb_loop+0x30/0x80 [ 347.031369][ T7779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.031392][ T7779] RIP: 0033:0x7f58bdf5f819 [ 347.031413][ T7779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.031429][ T7779] RSP: 002b:00007f58bc198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.031453][ T7779] RAX: ffffffffffffffda RBX: 00007f58be1d9090 RCX: 00007f58bdf5f819 [ 347.031469][ T7779] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 347.031483][ T7779] RBP: 00007f58bc198090 R08: 0000000000000000 R09: 0000000000000000 [ 347.031495][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.031509][ T7779] R13: 00007f58be1d9128 R14: 00007f58be1d9090 R15: 00007ffdf89406c8 [ 347.031541][ T7779] [ 347.218778][ T7781] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 347.347229][ T7786] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1105'. [ 349.468551][ T7854] netlink: 'syz.3.1118': attribute type 21 has an invalid length. [ 349.489744][ T7855] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1108'. [ 350.043103][ T7866] netlink: 'syz.3.1112': attribute type 21 has an invalid length. [ 350.062006][ T7866] netlink: 'syz.3.1112': attribute type 1 has an invalid length. [ 350.327278][ T7876] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1114'. [ 350.653484][ T7887] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1115'. [ 352.906913][ T7853] team0: Port device team_slave_0 removed [ 352.922940][ T7853] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 355.353139][ T7932] FAULT_INJECTION: forcing a failure. [ 355.353139][ T7932] name failslab, interval 1, probability 0, space 0, times 0 [ 355.372335][ T7932] CPU: 1 PID: 7932 Comm: syz.4.1123 Not tainted syzkaller #0 [ 355.379768][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 355.390033][ T7932] Call Trace: [ 355.393340][ T7932] [ 355.396287][ T7932] dump_stack_lvl+0x188/0x250 [ 355.400986][ T7932] ? show_regs_print_info+0x20/0x20 [ 355.406293][ T7932] ? load_image+0x400/0x400 [ 355.410817][ T7932] ? __lock_acquire+0x7d10/0x7d10 [ 355.416098][ T7932] should_fail+0x38c/0x4c0 [ 355.420547][ T7932] should_failslab+0x5/0x20 [ 355.425070][ T7932] slab_pre_alloc_hook+0x51/0xc0 [ 355.430028][ T7932] __kmalloc+0x6b/0x330 [ 355.434199][ T7932] ? sk_prot_alloc+0xe7/0x210 [ 355.438900][ T7932] sk_prot_alloc+0xe7/0x210 [ 355.443501][ T7932] ? sk_alloc+0x1d/0x310 [ 355.447766][ T7932] sk_alloc+0x2f/0x310 [ 355.451956][ T7932] bpf_prog_test_run_skb+0x240/0x1180 [ 355.457457][ T7932] ? __fget_files+0x40f/0x480 [ 355.462247][ T7932] ? cpu_online+0x60/0x60 [ 355.466591][ T7932] bpf_prog_test_run+0x31e/0x390 [ 355.471555][ T7932] __sys_bpf+0x5a5/0x6f0 [ 355.475818][ T7932] ? bpf_link_show_fdinfo+0x380/0x380 [ 355.481288][ T7932] ? rcu_nmi_exit+0x6f/0xf0 [ 355.485828][ T7932] ? vtime_user_exit+0x2c8/0x3e0 [ 355.490787][ T7932] __x64_sys_bpf+0x78/0x90 [ 355.495223][ T7932] do_syscall_64+0x4c/0xa0 [ 355.499652][ T7932] ? clear_bhb_loop+0x30/0x80 [ 355.504346][ T7932] ? clear_bhb_loop+0x30/0x80 [ 355.509035][ T7932] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 355.514955][ T7932] RIP: 0033:0x7fda2321b819 [ 355.519405][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.539126][ T7932] RSP: 002b:00007fda21475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 355.547570][ T7932] RAX: ffffffffffffffda RBX: 00007fda23494fa0 RCX: 00007fda2321b819 [ 355.555559][ T7932] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 355.563553][ T7932] RBP: 00007fda21475090 R08: 0000000000000000 R09: 0000000000000000 [ 355.571899][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.579896][ T7932] R13: 00007fda23495038 R14: 00007fda23494fa0 R15: 00007ffdaa9bccc8 [ 355.588206][ T7932] [ 355.684770][ T7895] netlink: 'syz.2.1119': attribute type 21 has an invalid length. [ 355.697960][ T7895] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1119'. [ 355.714919][ T7895] netlink: 'syz.2.1119': attribute type 4 has an invalid length. [ 355.726033][ T7895] netlink: 'syz.2.1119': attribute type 3 has an invalid length. [ 355.734482][ T7895] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1119'. [ 355.748065][ T7903] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1122'. [ 355.824609][ T7935] netlink: 'syz.4.1124': attribute type 21 has an invalid length. [ 355.988601][ T7938] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1126'. [ 356.047324][ T7949] netlink: set zone limit has 8 unknown bytes [ 356.711723][ T7978] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1131'. [ 356.751679][ T7977] device vcan0 entered promiscuous mode [ 356.779013][ T7977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 356.812793][ T7981] FAULT_INJECTION: forcing a failure. [ 356.812793][ T7981] name failslab, interval 1, probability 0, space 0, times 0 [ 356.869999][ T7981] CPU: 0 PID: 7981 Comm: syz.2.1134 Not tainted syzkaller #0 [ 356.877555][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 356.887641][ T7981] Call Trace: [ 356.890947][ T7981] [ 356.893902][ T7981] dump_stack_lvl+0x188/0x250 [ 356.898716][ T7981] ? show_regs_print_info+0x20/0x20 [ 356.903951][ T7981] ? load_image+0x400/0x400 [ 356.908478][ T7981] ? __might_sleep+0xf0/0xf0 [ 356.913201][ T7981] ? __lock_acquire+0x7d10/0x7d10 [ 356.918269][ T7981] should_fail+0x38c/0x4c0 [ 356.922720][ T7981] should_failslab+0x5/0x20 [ 356.927251][ T7981] slab_pre_alloc_hook+0x51/0xc0 [ 356.932225][ T7981] kmem_cache_alloc_trace+0x47/0x2a0 [ 356.937652][ T7981] ? apparmor_sk_alloc_security+0x74/0x100 [ 356.943604][ T7981] apparmor_sk_alloc_security+0x74/0x100 [ 356.949418][ T7981] security_sk_alloc+0x6a/0xa0 [ 356.954222][ T7981] sk_prot_alloc+0x101/0x210 [ 356.958838][ T7981] ? sk_alloc+0x1d/0x310 [ 356.963188][ T7981] sk_alloc+0x2f/0x310 [ 356.967362][ T7981] bpf_prog_test_run_skb+0x240/0x1180 [ 356.972764][ T7981] ? __fget_files+0x40f/0x480 [ 356.977573][ T7981] ? cpu_online+0x60/0x60 [ 356.981916][ T7981] bpf_prog_test_run+0x31e/0x390 [ 356.986874][ T7981] __sys_bpf+0x5a5/0x6f0 [ 356.991135][ T7981] ? bpf_link_show_fdinfo+0x380/0x380 [ 356.996528][ T7981] ? rcu_nmi_exit+0x6f/0xf0 [ 357.001068][ T7981] __x64_sys_bpf+0x78/0x90 [ 357.005506][ T7981] do_syscall_64+0x4c/0xa0 [ 357.009929][ T7981] ? clear_bhb_loop+0x30/0x80 [ 357.014735][ T7981] ? clear_bhb_loop+0x30/0x80 [ 357.019544][ T7981] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 357.025461][ T7981] RIP: 0033:0x7f50b476b819 [ 357.029902][ T7981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.049723][ T7981] RSP: 002b:00007f50b29c5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.058509][ T7981] RAX: ffffffffffffffda RBX: 00007f50b49e4fa0 RCX: 00007f50b476b819 [ 357.066512][ T7981] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 357.074593][ T7981] RBP: 00007f50b29c5090 R08: 0000000000000000 R09: 0000000000000000 [ 357.082578][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.090653][ T7981] R13: 00007f50b49e5038 R14: 00007f50b49e4fa0 R15: 00007ffc9a455718 [ 357.098653][ T7981] [ 357.158338][ T7993] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 357.179532][ T7993] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 357.193388][ T7993] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 357.232974][ T7987] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1132'. [ 360.465736][ T7994] team0: Port device team_slave_0 removed [ 360.503488][ T7994] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 360.545348][ T8005] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1139'. [ 360.729371][ T8014] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1140'. [ 360.997046][ T8030] netlink: 'syz.0.1146': attribute type 21 has an invalid length. [ 361.016821][ T8026] netlink: 'syz.1.1144': attribute type 21 has an invalid length. [ 361.165747][ T8037] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1149'. [ 361.186264][ T8033] netlink: 'syz.2.1147': attribute type 21 has an invalid length. [ 361.791781][ T8067] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1155'. [ 361.802186][ T8065] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1158'. [ 361.996354][ T8069] netlink: 'syz.4.1159': attribute type 21 has an invalid length. [ 362.189100][ T8083] netlink: 'syz.0.1164': attribute type 10 has an invalid length. [ 362.254203][ T8087] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1162'. [ 362.257530][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.298537][ T8083] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 362.317201][ T8086] netlink: 'syz.3.1163': attribute type 21 has an invalid length. [ 362.332386][ T8087] device bridge_slave_1 left promiscuous mode [ 362.343383][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.354117][ T8087] device bridge_slave_0 left promiscuous mode [ 362.366825][ T8087] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.578509][ T8092] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1166'. [ 363.236662][ T8125] netlink: 'syz.0.1175': attribute type 21 has an invalid length. [ 363.277237][ T8130] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1174'. [ 363.392773][ T8129] bond0: (slave bridge0): Error: Slave device does not support XDP [ 363.442124][ T8132] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 363.478158][ T8132] device geneve0 entered promiscuous mode [ 363.538610][ T8132] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 363.582877][ T8141] netlink: 'syz.0.1179': attribute type 21 has an invalid length. [ 363.624856][ T8143] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 363.637891][ T8143] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1180'. [ 364.085373][ T8165] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1188'. [ 365.161631][ T8205] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1200'. [ 365.225944][ T8200] can: request_module (can-proto-5) failed. [ 365.422185][ T8212] device hsr0 entered promiscuous mode [ 365.440561][ T8212] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 366.592658][ T8264] validate_nla: 7 callbacks suppressed [ 366.592676][ T8264] netlink: 'syz.3.1219': attribute type 10 has an invalid length. [ 366.629237][ T8264] __nla_validate_parse: 1 callbacks suppressed [ 366.629258][ T8264] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1219'. [ 366.649971][ T8264] device ipvlan1 entered promiscuous mode [ 366.663341][ T8264] bridge0: port 3(ipvlan1) entered blocking state [ 366.677448][ T8264] bridge0: port 3(ipvlan1) entered disabled state [ 366.710436][ T8264] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 369.635438][ T8270] netlink: 'syz.3.1222': attribute type 3 has an invalid length. [ 369.700911][ T8270] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1222'. [ 369.763359][ T8276] netlink: 'syz.0.1223': attribute type 2 has an invalid length. [ 369.825505][ T8276] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1223'. [ 370.120185][ T8289] netlink: 'syz.3.1227': attribute type 21 has an invalid length. [ 370.394963][ T7835] tipc: Subscription rejected, illegal request [ 370.422711][ T8299] netlink: 'syz.4.1233': attribute type 39 has an invalid length. [ 371.347422][ T8329] netlink: 'syz.3.1242': attribute type 21 has an invalid length. [ 371.474419][ T8336] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1244'. [ 371.664518][ T8341] netlink: 'syz.2.1245': attribute type 2 has an invalid length. [ 371.809232][ T7833] tipc: Subscription rejected, illegal request [ 373.092777][ T8391] netlink: 'syz.4.1258': attribute type 10 has an invalid length. [ 373.330030][ T8394] netlink: 'syz.0.1259': attribute type 4 has an invalid length. [ 373.351470][ T8394] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1259'. [ 373.542104][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.581146][ T8391] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 373.944489][ T145] tipc: Subscription rejected, illegal request [ 373.949932][ T8415] sctp: [Deprecated]: syz.3.1263 (pid 8415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.949932][ T8415] Use struct sctp_sack_info instead [ 374.445455][ T8429] netlink: 'syz.2.1270': attribute type 9 has an invalid length. [ 374.464524][ T8429] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1270'. [ 374.500380][ T8425] device wlan0 entered promiscuous mode [ 375.048380][ T8439] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1276'. [ 375.186391][ T8439] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 375.880709][ T8463] netlink: 'syz.1.1279': attribute type 10 has an invalid length. [ 376.020925][ T8463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.067590][ T8463] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 378.511084][ T8478] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1286'. [ 378.548599][ T7835] tipc: Subscription rejected, illegal request [ 378.582448][ T8478] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 378.632725][ T8478] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 378.662320][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.668741][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.442527][ T8517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1297'. [ 380.613600][ T8522] netlink: 'syz.3.1299': attribute type 10 has an invalid length. [ 380.673118][ T8522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.721832][ T8522] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 381.261605][ T7829] tipc: Subscription rejected, illegal request [ 382.115092][ T8560] netlink: 'syz.3.1307': attribute type 27 has an invalid length. [ 382.144431][ T8560] C: renamed from team_slave_0 [ 384.822851][ T8561] netlink: 'syz.3.1307': attribute type 27 has an invalid length. [ 384.964750][ T8573] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1310'. [ 385.429145][ T6806] tipc: Subscription rejected, illegal request [ 386.851043][ T8619] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1323'. [ 389.966114][ T6806] tipc: Subscription rejected, illegal request [ 393.016216][ T8654] netlink: 'syz.0.1335': attribute type 17 has an invalid length. [ 393.089846][ T8654] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1335'. [ 393.150860][ T8654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 393.175402][ T8658] netlink: 'syz.3.1336': attribute type 4 has an invalid length. [ 393.198396][ T8658] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1336'. [ 396.542181][ T419] tipc: Subscription rejected, illegal request [ 396.778192][ T8695] netlink: 'syz.3.1346': attribute type 21 has an invalid length. [ 396.792185][ T8695] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1346'. [ 396.805352][ T8694] netlink: 'syz.3.1346': attribute type 21 has an invalid length. [ 396.821954][ T8694] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1346'. [ 396.994532][ T8709] netlink: 'syz.3.1349': attribute type 10 has an invalid length. [ 397.051321][ T8709] team0: Device wg1 is of different type [ 397.269930][ T8717] netlink: 'syz.2.1352': attribute type 10 has an invalid length. [ 397.597041][ T8717] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 401.023019][ T8746] netlink: 'syz.3.1360': attribute type 13 has an invalid length. [ 401.036822][ T8746] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1360'. [ 401.104448][ T8746] erspan0: refused to change device tx_queue_len [ 401.141091][ T8746] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 401.210058][ T8749] netlink: 'syz.0.1362': attribute type 10 has an invalid length. [ 401.309742][ T8757] netlink: 'syz.0.1362': attribute type 2 has an invalid length. [ 401.348127][ T8749] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1362'. [ 401.728378][ T8762] netlink: 'syz.1.1365': attribute type 21 has an invalid length. [ 402.451860][ T8777] netlink: 'syz.3.1368': attribute type 25 has an invalid length. [ 402.491693][ T8775] netlink: 'syz.2.1367': attribute type 4 has an invalid length. [ 402.512816][ T8775] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1367'. [ 402.713965][ T8791] bond0: (slave batadv0): Error: Slave device does not support XDP [ 402.807305][ T8791] netlink: 'syz.3.1371': attribute type 21 has an invalid length. [ 402.821530][ T8791] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1371'. [ 402.831081][ T8791] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1371'. [ 402.899756][ T8795] netlink: 'syz.2.1373': attribute type 17 has an invalid length. [ 402.922143][ T8795] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1373'. [ 402.942631][ T8796] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1374'. [ 403.526437][ T8805] netlink: 'syz.0.1377': attribute type 21 has an invalid length. [ 404.659351][ T8824] netlink: 'syz.2.1381': attribute type 10 has an invalid length. [ 404.746331][ T8824] team0: Device wg1 is of different type [ 408.040140][ T8851] netlink: 'syz.1.1390': attribute type 21 has an invalid length. [ 408.124737][ T8849] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.1389'. [ 408.237864][ T8858] netlink: 'syz.2.1393': attribute type 10 has an invalid length. [ 408.297888][ T8858] team0: Device wg1 is of different type [ 408.321234][ T8856] netlink: 'syz.1.1392': attribute type 17 has an invalid length. [ 408.329179][ T8856] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1392'. [ 408.452609][ T8864] netlink: 'syz.3.1394': attribute type 3 has an invalid length. [ 408.465729][ T8864] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.1394'. [ 408.593895][ T145] tipc: Subscription rejected, illegal request [ 409.352307][ T8891] netlink: 'syz.1.1402': attribute type 21 has an invalid length. [ 409.433578][ T8895] netlink: 'syz.3.1404': attribute type 30 has an invalid length. [ 409.649904][ T8899] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1406'. [ 409.988303][ T7827] tipc: Subscription rejected, illegal request [ 410.673263][ T8917] device bridge_slave_1 left promiscuous mode [ 410.748119][ T8917] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.875530][ T8917] device bridge_slave_0 left promiscuous mode [ 410.922145][ T8917] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.216809][ T8923] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1414'. [ 411.241001][ T8923] netlink: 6324 bytes leftover after parsing attributes in process `syz.1.1414'. [ 411.265790][ T8923] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1414'. [ 411.678006][ T8928] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 411.993413][ T8933] netlink: 'syz.3.1417': attribute type 21 has an invalid length. [ 412.706245][ T7829] tipc: Subscription rejected, illegal request [ 413.434883][ T8951] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1423'. [ 414.266260][ T8954] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1424'. [ 415.790304][ T8970] netlink: 'syz.1.1429': attribute type 21 has an invalid length. [ 416.229974][ T6806] tipc: Subscription rejected, illegal request [ 416.268327][ T8973] device syzkaller0 entered promiscuous mode [ 416.943408][ T9002] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1437'. [ 418.758006][ T9022] netlink: 'syz.0.1442': attribute type 21 has an invalid length. [ 419.790580][ T9034] netlink: 'syz.4.1443': attribute type 21 has an invalid length. [ 420.173354][ T7829] tipc: Subscription rejected, illegal request [ 422.599006][ T9070] netlink: 'syz.0.1456': attribute type 21 has an invalid length. [ 422.953431][ T9082] tun0: tun_chr_ioctl cmd 1074025677 [ 423.041001][ T9082] tun0: linktype set to 768 [ 423.189729][ T9098] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1465'. [ 423.525719][ T7833] tipc: Subscription rejected, illegal request [ 426.637894][ T9128] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1474'. [ 426.682290][ T9135] netlink: 'syz.3.1474': attribute type 29 has an invalid length. [ 426.731191][ T9135] netlink: 'syz.3.1474': attribute type 3 has an invalid length. [ 426.732469][ T9134] netlink: 'syz.4.1473': attribute type 21 has an invalid length. [ 426.802201][ T9135] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1474'. [ 427.404574][ T9163] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1478'. [ 427.509132][ T7827] tipc: Subscription rejected, illegal request [ 427.822942][ T9162] è: renamed from team_slave_0 [ 427.889303][ T9162] A link change request failed with some changes committed already. Interface è may have been left with an inconsistent configuration, please check. [ 428.244979][ T9172] netlink: 'syz.4.1483': attribute type 2 has an invalid length. [ 428.246198][ T9141] chnl_net:caif_netlink_parms(): no params data found [ 428.284640][ T9172] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1483'. [ 428.358916][ T9175] bridge0: port 3(veth0_to_bridge) entered blocking state [ 428.398027][ T9175] bridge0: port 3(veth0_to_bridge) entered disabled state [ 428.437345][ T9175] device veth0_to_bridge entered promiscuous mode [ 428.457678][ T9175] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 428.520316][ T9175] bridge0: port 3(veth0_to_bridge) entered blocking state [ 428.527887][ T9175] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 428.634493][ T9179] netlink: 'syz.3.1485': attribute type 21 has an invalid length. [ 428.858747][ T9208] delete_channel: no stack [ 428.868882][ T9209] netlink: 'syz.1.1490': attribute type 3 has an invalid length. [ 428.869635][ T9208] delete_channel: no stack [ 428.926080][ T9141] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.952325][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.962744][ T9141] device bridge_slave_0 entered promiscuous mode [ 428.977098][ T7829] tipc: Subscription rejected, illegal request [ 429.049787][ T4229] Bluetooth: hci5: command 0x0409 tx timeout [ 429.112860][ T9141] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.142603][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.151067][ T9141] device bridge_slave_1 entered promiscuous mode [ 429.175007][ T9141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.188046][ T9141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.357551][ T9141] team0: Port device team_slave_0 added [ 429.381820][ T9141] team0: Port device team_slave_1 added [ 429.435944][ T9223] device wlan0 entered promiscuous mode [ 429.489499][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.557630][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.635229][ T9141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.663009][ T9141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.699336][ T9141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.787931][ T9141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.123279][ T9236] netlink: 'syz.4.1499': attribute type 4 has an invalid length. [ 430.151779][ T9236] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1499'. [ 431.149572][ T4225] Bluetooth: hci5: command 0x041b tx timeout [ 432.160623][ T9236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1499'. [ 432.211783][ T9241] netlink: 'syz.1.1500': attribute type 21 has an invalid length. [ 432.273995][ T9141] device hsr_slave_0 entered promiscuous mode [ 432.307553][ T9141] device hsr_slave_1 entered promiscuous mode [ 432.348059][ T9141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.380056][ T9141] Cannot create hsr debugfs directory [ 432.402359][ T9243] netlink: 'syz.3.1501': attribute type 39 has an invalid length. [ 433.052345][ T7829] tipc: Subscription rejected, illegal request [ 433.220020][ T4223] Bluetooth: hci5: command 0x040f tx timeout [ 433.333366][ T9268] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1508'. [ 433.350380][ T9141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 433.401902][ T9141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 433.446716][ T9141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 433.511558][ T9141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 433.680838][ T9278] netlink: 'syz.1.1510': attribute type 25 has an invalid length. [ 433.848253][ T9141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.938780][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 433.947807][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 433.991844][ T9141] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.999079][ T9286] netlink: 'syz.3.1512': attribute type 21 has an invalid length. [ 434.030387][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.080034][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.128201][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.135631][ T7833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.195644][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.224290][ T9291] netlink: 'syz.4.1514': attribute type 10 has an invalid length. [ 434.254728][ T9291] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1514'. [ 434.289038][ T9294] netlink: 'syz.1.1515': attribute type 10 has an invalid length. [ 434.350624][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.386852][ T9294] device bridge_slave_1 left promiscuous mode [ 434.411610][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.446529][ T9298] delete_channel: no stack [ 434.457195][ T9294] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 434.481720][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.516500][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.529181][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.536447][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.554474][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.612060][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.627007][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.704067][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.736631][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.777116][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.886254][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.924288][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.978899][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 435.014358][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 435.091590][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 435.126490][ T9141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 435.178086][ T9296] delete_channel: no stack [ 435.285746][ T9306] netlink: 'syz.1.1519': attribute type 4 has an invalid length. [ 435.306948][ T9306] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1519'. [ 435.307010][ T4229] Bluetooth: hci5: command 0x0419 tx timeout [ 435.394891][ T9314] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1520'. [ 435.584975][ T145] tipc: Subscription rejected, illegal request [ 435.667675][ T7835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.766970][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 435.784461][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 435.812739][ T9141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.903350][ T7835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.935583][ T9327] netlink: 'syz.3.1524': attribute type 21 has an invalid length. [ 435.996886][ T7835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.033838][ T9331] netlink: 'syz.4.1525': attribute type 25 has an invalid length. [ 436.063607][ T7835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.342497][ T9344] netlink: 'syz.1.1526': attribute type 21 has an invalid length. [ 436.458191][ T9340] device syzkaller0 entered promiscuous mode [ 439.198696][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 439.219255][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 439.455792][ T9141] device veth0_vlan entered promiscuous mode [ 439.515576][ T9370] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1531'. [ 439.524780][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 439.538227][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 439.547331][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 439.555540][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 439.633226][ T9141] device veth1_vlan entered promiscuous mode [ 439.808548][ T7827] tipc: Subscription rejected, illegal request [ 440.203995][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.210405][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.240608][ T9376] netlink: 'syz.3.1532': attribute type 4 has an invalid length. [ 440.249278][ T9376] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1532'. [ 440.288908][ T9376] .`: renamed from bond0 [ 440.449035][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 440.472244][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 440.496563][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 440.513433][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 440.526408][ T9141] device veth0_macvtap entered promiscuous mode [ 440.537310][ T9391] netlink: 'syz.1.1536': attribute type 21 has an invalid length. [ 440.574666][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 440.652081][ T9141] device veth1_macvtap entered promiscuous mode [ 440.947464][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.994557][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.995426][ T9408] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1547'. [ 441.017013][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.029041][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.046260][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.057199][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.069050][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.079824][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.090452][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.100972][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.147456][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.164081][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.175025][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.185411][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.197172][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.224288][ T9141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.235455][ T9141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.248091][ T9141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.299319][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 441.311452][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 441.321217][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 441.340803][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 441.377849][ T9141] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.393745][ T9141] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.411208][ T9141] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.425946][ T9141] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.434870][ T145] tipc: Subscription rejected, illegal request [ 444.448766][ T7827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.482925][ T7827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.719097][ T9463] netlink: 'syz.4.1549': attribute type 4 has an invalid length. [ 444.743844][ T9463] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1549'. [ 445.272803][ T9463] .`: renamed from bond0 [ 445.332910][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 445.464193][ T7833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.500789][ T7833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.561930][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 448.656003][ T9501] netlink: 'syz.4.1551': attribute type 21 has an invalid length. [ 448.724057][ T9509] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1556'. [ 448.813766][ T9512] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1557'. [ 449.002600][ T9512] netlink: 'syz.3.1557': attribute type 9 has an invalid length. [ 449.041207][ T9512] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1557'. [ 449.425513][ T9530] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1564'. [ 449.552917][ T145] tipc: Subscription rejected, illegal request [ 452.564247][ T9554] netlink: 'syz.1.1569': attribute type 21 has an invalid length. [ 452.728381][ T7835] device hsr_slave_0 left promiscuous mode [ 452.900658][ T7835] device hsr_slave_1 left promiscuous mode [ 452.973266][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.009453][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.102324][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.135996][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.170560][ T7835] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 453.225317][ T7835] batman_adv: batadv0: Removing interface: veth0_vlan [ 453.362691][ T9589] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1578'. [ 453.549212][ T7835] device veth1_macvtap left promiscuous mode [ 453.580756][ T7835] device veth0_macvtap left promiscuous mode [ 453.595565][ T7835] device veth1_vlan left promiscuous mode [ 453.608449][ T7835] device veth0_vlan left promiscuous mode [ 456.807194][ T7835] team0 (unregistering): Port device team_slave_1 removed [ 456.826143][ T7835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.844393][ T7835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.861238][ T7835] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 456.921623][ T7835] team0 (unregistering): Port device bond0 removed [ 456.939226][ T7835] bond0 (unregistering): Released all slaves [ 456.960620][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1578'. [ 456.970374][ T9587] netlink: 'syz.5.1578': attribute type 25 has an invalid length. [ 457.162570][ T419] tipc: Subscription rejected, illegal request [ 457.267935][ T9623] netlink: 'syz.5.1584': attribute type 21 has an invalid length. [ 457.668676][ T9648] device veth0_to_bridge left promiscuous mode [ 457.708557][ T9648] bridge0: port 3(veth0_to_bridge) entered disabled state [ 457.761915][ T9648] device bridge_slave_0 left promiscuous mode [ 457.850359][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.150313][ T9679] netlink: 'syz.5.1595': attribute type 10 has an invalid length. [ 461.158192][ T9679] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1595'. [ 461.248182][ T9679] device team0 entered promiscuous mode [ 461.264166][ T9679] device team_slave_0 entered promiscuous mode [ 461.300625][ T9679] device team_slave_1 entered promiscuous mode [ 461.410476][ T9679] bridge0: port 3(team0) entered blocking state [ 461.465019][ T9679] bridge0: port 3(team0) entered disabled state [ 461.532280][ T9679] bridge0: port 3(team0) entered blocking state [ 461.538648][ T9679] bridge0: port 3(team0) entered forwarding state [ 461.560474][ T9684] netlink: 'syz.3.1597': attribute type 21 has an invalid length. [ 461.776070][ T7833] tipc: Subscription rejected, illegal request [ 462.752991][ T9734] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1612'. [ 465.191765][ T9770] netlink: 'syz.0.1614': attribute type 21 has an invalid length. [ 465.476060][ T7833] tipc: Subscription rejected, illegal request [ 465.942117][ T9795] netlink: 'syz.0.1623': attribute type 29 has an invalid length. [ 465.983095][ T9795] netlink: 'syz.0.1623': attribute type 29 has an invalid length. [ 466.039770][ T9798] netlink: 'syz.0.1623': attribute type 29 has an invalid length. [ 466.380741][ T9809] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1627'. [ 466.657362][ T9821] netlink: 'syz.0.1630': attribute type 21 has an invalid length. [ 469.486491][ T6806] tipc: Subscription rejected, illegal request [ 470.110795][ T9901] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1645'. [ 470.172844][ T9900] netlink: 'syz.0.1646': attribute type 21 has an invalid length. [ 470.625005][ T7829] tipc: Subscription rejected, illegal request [ 470.952852][ T9948] netlink: 'syz.3.1659': attribute type 27 has an invalid length. [ 471.027061][ T9948] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1659'. [ 471.158634][ T9957] netlink: 'syz.5.1660': attribute type 21 has an invalid length. [ 471.429951][ T9963] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1662'. [ 473.978176][ T9985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1668'. [ 474.066967][ T9994] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1670'. [ 474.179270][ T9988] netlink: 'syz.0.1668': attribute type 39 has an invalid length. [ 474.406455][ T419] tipc: Subscription rejected, illegal request [ 474.780629][T10009] netlink: 'syz.5.1673': attribute type 21 has an invalid length. [ 474.843807][T10013] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 474.851511][T10013] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 475.363939][T10038] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1679'. [ 475.436274][T10044] device syzkaller0 entered promiscuous mode [ 475.469096][T10044] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 475.600730][T10050] syz.1.1684[10050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 478.338776][ T7829] tipc: Subscription rejected, illegal request [ 478.707662][T10077] netlink: 'syz.4.1688': attribute type 21 has an invalid length. [ 479.422487][T10121] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1698'. [ 479.497606][T10127] netlink: 'syz.4.1699': attribute type 3 has an invalid length. [ 479.519796][T10127] netlink: 201336 bytes leftover after parsing attributes in process `syz.4.1699'. [ 482.340031][T10138] FAULT_INJECTION: forcing a failure. [ 482.340031][T10138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.450762][T10138] CPU: 0 PID: 10138 Comm: syz.0.1700 Not tainted syzkaller #0 [ 482.454200][ T7829] tipc: Subscription rejected, illegal request [ 482.458281][T10138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.458297][T10138] Call Trace: [ 482.458304][T10138] [ 482.458313][T10138] dump_stack_lvl+0x188/0x250 [ 482.485742][T10138] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 482.491946][T10138] ? show_regs_print_info+0x20/0x20 [ 482.497176][T10138] ? load_image+0x400/0x400 [ 482.501722][T10138] should_fail+0x38c/0x4c0 [ 482.506186][T10138] _copy_from_user+0x2e/0x170 [ 482.510896][T10138] __sys_bpf+0x26d/0x6f0 [ 482.515254][T10138] ? bpf_link_show_fdinfo+0x380/0x380 [ 482.520671][T10138] __x64_sys_bpf+0x78/0x90 [ 482.525121][T10138] do_syscall_64+0x4c/0xa0 [ 482.529560][T10138] ? clear_bhb_loop+0x30/0x80 [ 482.534257][T10138] ? clear_bhb_loop+0x30/0x80 [ 482.539077][T10138] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 482.545084][T10138] RIP: 0033:0x7f58bdf5f819 [ 482.549524][T10138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.569427][T10138] RSP: 002b:00007f58bc1b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.577880][T10138] RAX: ffffffffffffffda RBX: 00007f58be1d8fa0 RCX: 00007f58bdf5f819 [ 482.585887][T10138] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000002 [ 482.593892][T10138] RBP: 00007f58bc1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 482.601895][T10138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.609893][T10138] R13: 00007f58be1d9038 R14: 00007f58be1d8fa0 R15: 00007ffdf89406c8 [ 482.617912][T10138] [ 482.729597][T10154] netlink: 'syz.5.1706': attribute type 21 has an invalid length. [ 482.926155][T10186] netlink: 'syz.1.1711': attribute type 1 has an invalid length. [ 482.961746][T10186] netlink: 'syz.1.1711': attribute type 3 has an invalid length. [ 482.988965][T10186] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1711'. [ 483.051851][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1711'. [ 483.093469][T10192] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1711'. [ 483.232981][T10203] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1713'. [ 485.338603][T10219] FAULT_INJECTION: forcing a failure. [ 485.338603][T10219] name failslab, interval 1, probability 0, space 0, times 0 [ 485.399404][T10219] CPU: 0 PID: 10219 Comm: syz.5.1719 Not tainted syzkaller #0 [ 485.406928][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.417004][T10219] Call Trace: [ 485.420303][T10219] [ 485.423280][T10219] dump_stack_lvl+0x188/0x250 [ 485.427981][T10219] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.434175][T10219] ? show_regs_print_info+0x20/0x20 [ 485.439483][T10219] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.445668][T10219] should_fail+0x38c/0x4c0 [ 485.450097][T10219] should_failslab+0x5/0x20 [ 485.454603][T10219] slab_pre_alloc_hook+0x51/0xc0 [ 485.459630][T10219] __kmalloc_node+0x6e/0x3b0 [ 485.464228][T10219] ? kvmalloc_node+0x84/0x130 [ 485.468907][T10219] kvmalloc_node+0x84/0x130 [ 485.473422][T10219] map_update_elem+0x2ff/0x770 [ 485.478202][T10219] __sys_bpf+0x46b/0x6f0 [ 485.482451][T10219] ? bpf_link_show_fdinfo+0x380/0x380 [ 485.487837][T10219] ? vtime_user_exit+0x2c8/0x3e0 [ 485.492790][T10219] __x64_sys_bpf+0x78/0x90 [ 485.497343][T10219] do_syscall_64+0x4c/0xa0 [ 485.501870][T10219] ? clear_bhb_loop+0x30/0x80 [ 485.506565][T10219] ? clear_bhb_loop+0x30/0x80 [ 485.511340][T10219] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 485.517241][T10219] RIP: 0033:0x7fce77e54819 [ 485.521760][T10219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.541384][T10219] RSP: 002b:00007fce760ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.549814][T10219] RAX: ffffffffffffffda RBX: 00007fce780cdfa0 RCX: 00007fce77e54819 [ 485.558112][T10219] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000002 [ 485.566298][T10219] RBP: 00007fce760ae090 R08: 0000000000000000 R09: 0000000000000000 [ 485.574385][T10219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.582366][T10219] R13: 00007fce780ce038 R14: 00007fce780cdfa0 R15: 00007ffc17a10618 [ 485.590360][T10219] [ 485.683444][T10226] netlink: 'syz.3.1720': attribute type 21 has an invalid length. [ 485.774043][ T145] tipc: Subscription rejected, illegal request [ 486.376676][T10249] netlink: 'syz.1.1724': attribute type 2 has an invalid length. [ 486.420711][T10249] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1724'. [ 486.960812][T10270] netlink: 'syz.4.1730': attribute type 21 has an invalid length. [ 486.973689][T10270] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1730'. [ 487.324026][ T7829] tipc: Subscription rejected, illegal request [ 487.428875][T10290] FAULT_INJECTION: forcing a failure. [ 487.428875][T10290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.559390][T10290] CPU: 0 PID: 10290 Comm: syz.4.1734 Not tainted syzkaller #0 [ 487.567026][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.577224][T10290] Call Trace: [ 487.580532][T10290] [ 487.583576][T10290] dump_stack_lvl+0x188/0x250 [ 487.588289][T10290] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 487.594477][T10290] ? show_regs_print_info+0x20/0x20 [ 487.599722][T10290] ? load_image+0x400/0x400 [ 487.604354][T10290] should_fail+0x38c/0x4c0 [ 487.608808][T10290] _copy_from_user+0x2e/0x170 [ 487.613738][T10290] map_update_elem+0x3c3/0x770 [ 487.618549][T10290] __sys_bpf+0x46b/0x6f0 [ 487.622915][T10290] ? bpf_link_show_fdinfo+0x380/0x380 [ 487.628340][T10290] ? vtime_user_exit+0x2c8/0x3e0 [ 487.633438][T10290] __x64_sys_bpf+0x78/0x90 [ 487.637900][T10290] do_syscall_64+0x4c/0xa0 [ 487.642435][T10290] ? clear_bhb_loop+0x30/0x80 [ 487.647143][T10290] ? clear_bhb_loop+0x30/0x80 [ 487.651850][T10290] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 487.657773][T10290] RIP: 0033:0x7fda2321b819 [ 487.662399][T10290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.682135][T10290] RSP: 002b:00007fda21475028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.690697][T10290] RAX: ffffffffffffffda RBX: 00007fda23494fa0 RCX: 00007fda2321b819 [ 487.698710][T10290] RDX: 0000000000000020 RSI: 0000200000000740 RDI: 0000000000000002 [ 487.706843][T10290] RBP: 00007fda21475090 R08: 0000000000000000 R09: 0000000000000000 [ 487.715002][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.723009][T10290] R13: 00007fda23495038 R14: 00007fda23494fa0 R15: 00007ffdaa9bccc8 [ 487.731138][T10290] [ 488.065604][T10316] netlink: 'syz.5.1738': attribute type 21 has an invalid length. [ 488.191592][T10325] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1737'. [ 491.020573][ T419] tipc: Subscription rejected, illegal request [ 491.123082][T10375] netlink: 'syz.3.1751': attribute type 21 has an invalid length. [ 491.976623][T10420] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1761'. [ 492.219604][ T7835] tipc: Subscription rejected, illegal request [ 494.499836][T10432] netlink: 'syz.3.1766': attribute type 21 has an invalid length. [ 494.551093][T10438] netlink: 668 bytes leftover after parsing attributes in process `syz.0.1768'. [ 494.569850][T10438] openvswitch: netlink: Key type 15645 is out of range max 29 [ 495.034413][ T7833] tipc: Subscription rejected, illegal request [ 495.360378][T10471] netlink: 'syz.0.1779': attribute type 21 has an invalid length. [ 495.483376][T10472] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1780'. [ 498.566041][T10503] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1793'. [ 498.635994][ T7833] tipc: Subscription rejected, illegal request [ 498.643694][T10501] netlink: 'syz.5.1792': attribute type 21 has an invalid length. [ 498.787419][T10512] delete_channel: no stack [ 499.263546][T10531] netlink: 'syz.4.1798': attribute type 39 has an invalid length. [ 499.564020][T10539] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1799'. [ 501.532811][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.539445][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.100650][T10550] netlink: 'syz.0.1806': attribute type 21 has an invalid length. [ 502.161509][ T7833] tipc: Subscription rejected, illegal request [ 502.878122][T10590] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1815'. [ 503.422162][T10613] netlink: 'syz.5.1820': attribute type 21 has an invalid length. [ 506.632758][T10637] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 506.756692][ T145] tipc: Subscription rejected, illegal request [ 507.190061][T10621] delete_channel: no stack [ 507.327046][T10655] netlink: 'syz.0.1833': attribute type 21 has an invalid length. [ 507.375854][T10648] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1830'. [ 507.459088][T10661] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.1835'. [ 507.513613][T10661] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 507.624973][T10670] netlink: 'syz.0.1836': attribute type 10 has an invalid length. [ 508.341673][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.660758][T10670] team0: Port device wlan1 added [ 510.768296][ T7829] tipc: Subscription rejected, illegal request [ 510.926405][T10696] netlink: 'syz.4.1846': attribute type 21 has an invalid length. [ 511.184888][T10715] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1851'. [ 511.291537][T10716] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1848'. [ 511.431271][T10715] netlink: 'syz.5.1851': attribute type 3 has an invalid length. [ 511.439339][T10715] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.1851'. [ 511.490919][T10719] delete_channel: no stack [ 511.545511][T10728] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 511.900922][ T419] tipc: Subscription rejected, illegal request [ 514.572009][T10756] netlink: 'syz.5.1861': attribute type 21 has an invalid length. [ 515.014029][T10765] device syzkaller0 entered promiscuous mode [ 515.143792][T10780] netlink: 'syz.0.1870': attribute type 21 has an invalid length. [ 515.167082][T10780] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1870'. [ 515.202400][T10782] netlink: 'syz.3.1869': attribute type 9 has an invalid length. [ 515.216763][T10782] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1869'. [ 515.251521][ T7833] tipc: Subscription rejected, illegal request [ 515.295051][T10780] netlink: 'syz.0.1870': attribute type 27 has an invalid length. [ 515.320743][T10780] C: renamed from è [ 515.335236][T10783] netlink: 'syz.0.1870': attribute type 21 has an invalid length. [ 515.353450][T10783] netlink: 'syz.0.1870': attribute type 6 has an invalid length. [ 515.383055][T10783] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1870'. [ 515.697074][T10802] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1875'. [ 516.302689][T10814] netlink: 'syz.0.1879': attribute type 21 has an invalid length. [ 519.306360][T10825] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1883'. [ 519.430370][T10830] netlink: 'syz.3.1882': attribute type 6 has an invalid length. [ 519.684006][ T145] tipc: Subscription rejected, illegal request [ 519.799294][T10832] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 519.908229][T10843] delete_channel: no stack [ 520.138761][T10852] netlink: 'syz.4.1892': attribute type 21 has an invalid length. [ 520.182730][T10854] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1894'. [ 520.289080][T10859] netlink: 'syz.0.1896': attribute type 21 has an invalid length. [ 520.311264][T10859] netlink: 'syz.0.1896': attribute type 1 has an invalid length. [ 520.343350][T10859] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.1896'. [ 520.377771][T10866] netlink: 'syz.3.1899': attribute type 2 has an invalid length. [ 520.405384][T10866] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1899'. [ 520.558180][T10869] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1898'. [ 521.296265][ T145] tipc: Subscription rejected, illegal request [ 523.329196][T10903] netlink: 'syz.1.1910': attribute type 11 has an invalid length. [ 523.358482][T10907] netlink: 'syz.5.1909': attribute type 21 has an invalid length. [ 523.383525][T10904] netlink: 'syz.1.1910': attribute type 11 has an invalid length. [ 523.690742][ T7827] tipc: Subscription rejected, illegal request [ 523.724943][T10932] netlink: 'syz.3.1919': attribute type 4 has an invalid length. [ 523.770809][T10935] netlink: 'syz.1.1920': attribute type 2 has an invalid length. [ 523.876256][T10935] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1920'. [ 523.999980][T10940] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1920'. [ 524.029060][T10941] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1921'. [ 526.946461][T10952] netlink: 'syz.3.1925': attribute type 21 has an invalid length. [ 526.991478][T10950] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 527.464776][ T7835] tipc: Subscription rejected, illegal request [ 527.551351][T10966] netlink: 'syz.0.1930': attribute type 11 has an invalid length. [ 528.285219][T10996] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.1926'. [ 528.427381][T10996] bridge_slave_1: default FDB implementation only supports local addresses [ 528.478032][T11009] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1936'. [ 528.487682][T11005] netlink: 'syz.3.1937': attribute type 3 has an invalid length. [ 528.514287][T11005] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1937'. [ 528.569867][T11008] netlink: 'syz.3.1937': attribute type 10 has an invalid length. [ 528.630195][T11008] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1937'. [ 531.765463][T11030] netlink: 'syz.5.1943': attribute type 21 has an invalid length. [ 531.888699][ T145] tipc: Subscription rejected, illegal request [ 535.678383][T11067] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1955'. [ 535.882020][T11073] netlink: 'syz.0.1958': attribute type 21 has an invalid length. [ 536.100466][T11077] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1957'. [ 536.148629][T11080] netlink: 'syz.1.1960': attribute type 21 has an invalid length. [ 536.169650][T11080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1960'. [ 536.233380][T11085] netlink: 'syz.1.1960': attribute type 27 has an invalid length. [ 536.297081][T11085] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 536.370836][T11080] netlink: 'syz.1.1960': attribute type 21 has an invalid length. [ 536.378903][T11080] netlink: 'syz.1.1960': attribute type 6 has an invalid length. [ 536.392998][T11080] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1960'. [ 536.521404][T11089] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 539.444016][T11096] netlink: 'syz.1.1965': attribute type 39 has an invalid length. [ 539.730474][ T7835] tipc: Subscription rejected, illegal request [ 539.986914][T11114] device syzkaller0 entered promiscuous mode [ 540.014086][T11118] netlink: 'syz.5.1972': attribute type 21 has an invalid length. [ 540.265718][T11134] netlink: 'syz.4.1975': attribute type 9 has an invalid length. [ 540.287980][T11134] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1975'. [ 540.459745][T11132] device wlan0 entered promiscuous mode [ 540.648530][T11143] netlink: 'syz.0.1989': attribute type 2 has an invalid length. [ 540.670483][T11145] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1977'. [ 540.679948][T11143] netlink: 'syz.0.1989': attribute type 1 has an invalid length. [ 542.610347][T11147] device wlan0 left promiscuous mode [ 542.657952][T11148] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 542.699675][T11151] netlink: 'syz.3.1980': attribute type 39 has an invalid length. [ 543.353953][T11170] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1985'. [ 543.508786][T11173] netlink: 'syz.5.1986': attribute type 29 has an invalid length. [ 543.587689][T11173] netlink: 'syz.5.1986': attribute type 29 has an invalid length. [ 543.653587][T11177] netlink: 'syz.5.1986': attribute type 29 has an invalid length. [ 543.786080][T11179] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 543.799735][T11180] netlink: 'syz.5.1986': attribute type 29 has an invalid length. [ 543.820417][T11179] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1988'. [ 543.954141][T11179] netlink: 'syz.4.1988': attribute type 29 has an invalid length. [ 544.013558][T11179] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1988'. [ 544.310086][T11189] netlink: 'syz.3.1993': attribute type 10 has an invalid length. [ 544.513784][T11189] team0: Device wg1 is of different type [ 544.986201][T11204] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1996'. [ 545.062694][T11212] device syzkaller0 entered promiscuous mode [ 545.920199][T11246] netlink: 'syz.1.2009': attribute type 29 has an invalid length. [ 545.959174][T11246] netlink: 'syz.1.2009': attribute type 29 has an invalid length. [ 547.838228][T11310] validate_nla: 2 callbacks suppressed [ 547.838246][T11310] netlink: 'syz.3.2025': attribute type 29 has an invalid length. [ 547.919876][T11310] netlink: 'syz.3.2025': attribute type 29 has an invalid length. [ 548.200375][T11315] netlink: 'syz.3.2025': attribute type 29 has an invalid length. [ 548.208558][T11318] netlink: 'syz.5.2027': attribute type 21 has an invalid length. [ 548.219720][T11318] netlink: 'syz.5.2027': attribute type 6 has an invalid length. [ 548.522786][T11329] tap0: tun_chr_ioctl cmd 2148553947 [ 548.570226][T11329] tap0: tun_chr_ioctl cmd 1074025677 [ 548.575726][T11329] tap0: linktype set to 804 [ 548.727340][T11337] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2031'. [ 548.755883][T11333] netlink: 'syz.1.2032': attribute type 27 has an invalid length. [ 548.764477][T11333] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2032'. [ 549.690567][ T4282] Bluetooth: hci5: command 0x0406 tx timeout [ 550.717984][T11348] netlink: 'syz.0.2037': attribute type 17 has an invalid length. [ 550.914799][T11359] netlink: 'syz.4.2036': attribute type 10 has an invalid length. [ 550.939901][T11359] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2036'. [ 550.974251][T11359] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 550.989004][T11359] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.019925][T11359] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 551.037829][T11368] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2043'. [ 551.387008][T11380] netlink: 'syz.3.2045': attribute type 2 has an invalid length. [ 551.419821][T11380] netlink: 198692 bytes leftover after parsing attributes in process `syz.3.2045'. [ 551.967700][T11404] netlink: 'syz.0.2053': attribute type 1 has an invalid length. [ 552.039090][T11405] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2050'. [ 552.076955][T11404] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2053'. [ 552.090709][T11406] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2053'. [ 552.441539][T11421] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2059'. [ 552.840523][T11419] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2058'. [ 553.339608][ T6806] tipc: Subscription rejected, illegal request [ 553.984125][T11486] __nla_validate_parse: 1 callbacks suppressed [ 553.984143][T11486] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2075'. [ 554.604683][T11505] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2085'. [ 554.640043][ T145] tipc: Subscription rejected, illegal request [ 554.869223][T11510] validate_nla: 3 callbacks suppressed [ 554.869262][T11510] netlink: 'syz.5.2088': attribute type 21 has an invalid length. [ 555.776738][T11554] netlink: 'syz.0.2100': attribute type 21 has an invalid length. [ 555.955411][T11557] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.2097'. [ 556.094631][T11563] netlink: 'syz.3.2101': attribute type 10 has an invalid length. [ 556.141939][T11563] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2101'. [ 556.179171][T11563] device dummy0 entered promiscuous mode [ 556.313962][T11576] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2106'. [ 556.389189][T11563] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 556.399877][ T419] tipc: Subscription rejected, illegal request [ 556.553772][T11573] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2105'. [ 556.671112][T11576] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2106'. [ 556.887137][T11591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2108'. [ 556.948298][T11592] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.2109'. [ 556.987472][T11591] netlink: 'syz.0.2108': attribute type 6 has an invalid length. [ 557.240587][T11601] netlink: 'syz.4.2112': attribute type 21 has an invalid length. [ 557.404302][T11615] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2115'. [ 557.624474][ T7829] tipc: Subscription rejected, illegal request [ 557.932146][T11640] netlink: 'syz.5.2121': attribute type 10 has an invalid length. [ 560.889939][T11640] device geneve0 entered promiscuous mode [ 560.937240][T11640] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 562.975808][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.982204][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.975523][T11670] netlink: 'syz.5.2127': attribute type 21 has an invalid length. [ 564.160857][T11680] __nla_validate_parse: 2 callbacks suppressed [ 564.160877][T11680] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2132'. [ 564.238146][T11684] -1: renamed from syzkaller0 [ 564.394553][T11690] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2132'. [ 569.317343][T11732] netlink: 'syz.0.2146': attribute type 3 has an invalid length. [ 569.325283][T11732] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2146'. [ 569.435985][T11718] netlink: 'syz.1.2141': attribute type 10 has an invalid length. [ 569.455771][T11718] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2141'. [ 569.703324][ T7835] tipc: Subscription rejected, illegal request [ 569.755050][T11750] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2151'. [ 570.122147][T11759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 573.661052][T11794] netlink: 'syz.0.2165': attribute type 1 has an invalid length. [ 573.786396][T11794] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.2165'. [ 573.822133][ T419] tipc: Subscription rejected, illegal request [ 574.107251][T11805] netlink: 'syz.5.2167': attribute type 28 has an invalid length. [ 574.145919][T11805] netlink: 'syz.5.2167': attribute type 3 has an invalid length. [ 574.183899][T11805] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2167'. [ 574.282035][ T7833] tipc: Subscription rejected, illegal request [ 574.348315][T11805] netlink: 'syz.5.2167': attribute type 2 has an invalid length. [ 574.553780][T11824] netlink: 'syz.1.2171': attribute type 4 has an invalid length. [ 574.575307][T11824] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2171'. [ 574.914212][T11826] netlink: 'syz.0.2172': attribute type 3 has an invalid length. [ 574.952085][T11826] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2172'. [ 575.047996][T11826] netlink: 'syz.0.2172': attribute type 2 has an invalid length. [ 575.091155][T11826] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2172'. [ 575.258740][T11831] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 575.413810][T11836] sock: sock_timestamping_bind_phc: sock not bind to device [ 577.794228][ T419] tipc: Subscription rejected, illegal request [ 578.911138][T11898] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2190'. [ 579.228043][T11904] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2192'. [ 581.824761][T11924] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2198'. [ 582.033649][T11941] IPv6: Can't replace route, no match found [ 582.156342][T11944] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 582.240062][T11945] netlink: 'syz.1.2212': attribute type 21 has an invalid length. [ 582.368818][T11953] netlink: 'syz.3.2206': attribute type 4 has an invalid length. [ 584.891771][ T419] wlan1: Trigger new scan to find an IBSS to join [ 585.631932][T11976] netlink: 'syz.0.2213': attribute type 21 has an invalid length. [ 585.729650][T11976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2213'. [ 585.758444][T11980] netlink: 'syz.3.2217': attribute type 29 has an invalid length. [ 585.797417][T11980] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2217'. [ 585.823022][T11980] netlink: 'syz.3.2217': attribute type 29 has an invalid length. [ 585.900767][T11980] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2217'. [ 586.540820][T12002] .`: (slave batadv0): Error: Slave device does not support XDP [ 587.216254][T12014] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.2225'. [ 587.932103][ T7829] wlan1: Trigger new scan to find an IBSS to join [ 589.506947][ T419] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 590.070399][T12039] netlink: 'syz.4.2232': attribute type 29 has an invalid length. [ 590.078734][T12039] netlink: 'syz.4.2232': attribute type 29 has an invalid length. [ 590.134013][T12040] netlink: 'syz.5.2231': attribute type 39 has an invalid length. [ 590.422663][T12044] netlink: 'syz.4.2232': attribute type 29 has an invalid length. [ 590.505962][T12055] netlink: 'syz.3.2236': attribute type 1 has an invalid length. [ 590.576527][T12059] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2238'. [ 590.605589][T12059] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 593.877749][T12089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2245'. [ 594.116750][T12096] netlink: 'syz.1.2249': attribute type 17 has an invalid length. [ 594.181109][T12096] netlink: 'syz.1.2249': attribute type 16 has an invalid length. [ 594.219952][T12096] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2249'. [ 594.541257][T12102] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2251'. [ 594.902175][T12121] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.2259'. [ 594.918890][T12116] netlink: 'syz.3.2256': attribute type 5 has an invalid length. [ 594.928822][T12116] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2256'. [ 597.984388][T12138] netlink: 'syz.1.2262': attribute type 11 has an invalid length. [ 598.022240][T12138] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2262'. [ 599.342144][T12158] delete_channel: no stack [ 602.588243][T12214] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2282'. [ 602.699324][T12226] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2284'. [ 602.976703][T12233] device wlan0 left promiscuous mode [ 603.023804][T12233] device wlan0 entered promiscuous mode [ 603.038088][T12233] netlink: 'syz.3.2287': attribute type 9 has an invalid length. [ 603.064591][T12233] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2287'. [ 606.732946][T12261] netlink: 'syz.3.2295': attribute type 12 has an invalid length. [ 606.749747][T12261] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2295'. [ 606.898613][T12263] delete_channel: no stack [ 606.934223][T12275] netlink: 'syz.1.2299': attribute type 13 has an invalid length. [ 606.980001][T12275] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2299'. [ 607.328785][ T419] tipc: Subscription rejected, illegal request [ 607.725001][T12314] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2309'. [ 607.725067][T12308] netlink: 'syz.4.2308': attribute type 1 has an invalid length. [ 607.769761][T12308] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.2308'. [ 607.874134][T12309] device syzkaller0 entered promiscuous mode [ 610.823292][T12326] netlink: 208644 bytes leftover after parsing attributes in process `syz.5.2314'. [ 610.879685][T12326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2314'. [ 611.801510][ T7833] tipc: Subscription rejected, illegal request [ 612.216766][T12349] delete_channel: no stack [ 612.268191][T12367] netlink: 'syz.5.2325': attribute type 21 has an invalid length. [ 612.298548][T12367] IPv6: NLM_F_CREATE should be specified when creating new route [ 612.322191][T12367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 612.329514][T12367] IPv6: NLM_F_CREATE should be set when creating new route [ 612.336836][T12367] IPv6: NLM_F_CREATE should be set when creating new route [ 612.344089][T12367] IPv6: NLM_F_CREATE should be set when creating new route [ 612.407431][T12367] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2325'. [ 612.652873][T12380] netlink: 'syz.3.2329': attribute type 3 has an invalid length. [ 612.686334][T12380] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2329'. [ 612.983147][ T419] tipc: Subscription rejected, illegal request [ 614.453280][T12427] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2340'. [ 614.904145][T12411] delete_channel: no stack [ 616.711287][T12454] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2350'. [ 616.816008][T12440] delete_channel: no stack [ 616.845993][T12440] delete_channel: no stack [ 617.942877][T12481] delete_channel: no stack [ 618.312919][T12500] netlink: 'syz.1.2361': attribute type 9 has an invalid length. [ 618.359845][T12500] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2361'. [ 618.590394][T12503] netlink: 'syz.3.2362': attribute type 22 has an invalid length. [ 618.603725][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 618.657043][T12503] netlink: 'syz.3.2362': attribute type 10 has an invalid length. [ 618.692877][T12503] device geneve0 entered promiscuous mode [ 618.753475][T12503] .`: (slave geneve0): Enslaving as an active interface with an up link [ 620.361970][T12575] netlink: 'syz.3.2383': attribute type 2 has an invalid length. [ 620.370016][T12575] netlink: 16386 bytes leftover after parsing attributes in process `syz.3.2383'. [ 620.528900][T12579] netlink: 'syz.4.2385': attribute type 2 has an invalid length. [ 620.541149][T12580] netlink: 'syz.5.2384': attribute type 29 has an invalid length. [ 620.580519][T12579] netlink: 'syz.4.2385': attribute type 1 has an invalid length. [ 620.596548][T12579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.605656][T12580] netlink: 'syz.5.2384': attribute type 29 has an invalid length. [ 620.639595][T12585] netlink: 'syz.5.2384': attribute type 29 has an invalid length. [ 620.675793][T12590] netlink: 'syz.5.2384': attribute type 29 has an invalid length. [ 622.494211][ T6806] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 624.412250][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.418611][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.525074][T12649] validate_nla: 1 callbacks suppressed [ 624.525095][T12649] netlink: 'syz.1.2401': attribute type 1 has an invalid length. [ 624.585542][T12649] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2401'. [ 625.517357][T12657] netlink: 'syz.0.2407': attribute type 9 has an invalid length. [ 625.535888][T12657] netlink: 163400 bytes leftover after parsing attributes in process `syz.0.2407'. [ 627.976015][T12675] device syzkaller0 entered promiscuous mode [ 627.990792][T12680] netlink: 'syz.4.2413': attribute type 17 has an invalid length. [ 628.010629][T12680] netlink: 160 bytes leftover after parsing attributes in process `syz.4.2413'. [ 628.072885][ T419] tipc: Subscription rejected, illegal request [ 632.233819][T12733] netlink: 'syz.3.2429': attribute type 10 has an invalid length. [ 632.352687][ T419] tipc: Subscription rejected, illegal request [ 633.094995][ T6806] tipc: Subscription rejected, illegal request [ 633.976679][T12794] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2444'. [ 637.064591][T12806] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2448'. [ 637.109517][T12820] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2448'. [ 637.352359][ T7835] tipc: Subscription rejected, illegal request [ 637.937719][T12843] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2455'. [ 638.001837][T12848] netlink: 'syz.4.2458': attribute type 17 has an invalid length. [ 638.019636][T12843] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 638.049338][T12848] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2458'. [ 641.255465][T12868] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2466'. [ 641.404327][ T7835] tipc: Subscription rejected, illegal request [ 641.529899][T12888] netlink: 'syz.5.2471': attribute type 49 has an invalid length. [ 641.598800][T12888] netlink: 'syz.5.2471': attribute type 49 has an invalid length. [ 641.853984][T12905] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2474'. [ 641.914962][T12905] netlink: 3064 bytes leftover after parsing attributes in process `syz.1.2474'. [ 642.308991][T12925] netlink: 'syz.1.2480': attribute type 22 has an invalid length. [ 642.340877][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2480'. [ 645.263035][ T145] tipc: Subscription rejected, illegal request [ 645.343158][T12944] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2486'. [ 645.588799][T12950] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2487'. [ 646.774315][T12965] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2493'. [ 648.255220][ T145] tipc: Subscription rejected, illegal request [ 648.733640][T13011] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2505'. [ 649.325389][T13023] netlink: 'syz.3.2508': attribute type 21 has an invalid length. [ 649.546631][T13029] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2511'. [ 650.481211][T13056] bond0: (slave batadv0): Error: Slave device does not support XDP [ 650.523915][ T6806] tipc: Subscription rejected, illegal request [ 650.607321][T13061] netlink: 'syz.5.2521': attribute type 21 has an invalid length. [ 651.384854][T13081] netlink: 'syz.5.2528': attribute type 10 has an invalid length. [ 651.419623][T13081] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2528'. [ 651.625726][T13092] netlink: 'syz.0.2531': attribute type 3 has an invalid length. [ 651.720839][T13092] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2531'. [ 651.731792][T13101] .`: (slave bridge0): Error: Slave device does not support XDP [ 651.798713][T13102] netlink: 'syz.3.2534': attribute type 21 has an invalid length. [ 652.097505][ T6806] tipc: Subscription rejected, illegal request [ 653.397370][T13142] bond0: (slave batadv0): Error: Slave device does not support XDP [ 653.505837][T13152] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2550'. [ 653.549339][T13152] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 653.684963][ T145] tipc: Subscription rejected, illegal request [ 654.492773][ T419] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.783133][T13191] netlink: 'syz.1.2564': attribute type 3 has an invalid length. [ 654.889730][T13191] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2564'. [ 655.052862][T13193] bond0: (slave geneve0): Error: Slave device does not support XDP [ 655.505288][ T6806] tipc: Subscription rejected, illegal request [ 655.571692][T13211] netlink: 'syz.1.2573': attribute type 1 has an invalid length. [ 655.628431][T13211] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2573'. [ 655.758694][T13211] netlink: 'syz.1.2573': attribute type 3 has an invalid length. [ 655.788603][T13211] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2573'. [ 656.046658][T13227] netlink: 'syz.4.2579': attribute type 27 has an invalid length. [ 656.090336][T13227] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2579'. [ 656.205312][T13227] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2579'. [ 656.271092][T13234] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2581'. [ 656.532687][ T3050] tipc: Subscription rejected, illegal request [ 656.599205][T13252] netlink: 'syz.1.2587': attribute type 23 has an invalid length. [ 657.402177][T13272] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2592'. [ 658.015200][T13280] netlink: 'syz.5.2596': attribute type 6 has an invalid length. [ 658.075803][T13280] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2596'. [ 658.115946][T13287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2598'. [ 658.312728][ T6806] tipc: Subscription rejected, illegal request [ 658.356540][T13297] netlink: 'syz.3.2601': attribute type 16 has an invalid length. [ 659.120977][T13312] netlink: 'syz.3.2607': attribute type 21 has an invalid length. [ 659.472114][T13321] netlink: 'syz.1.2609': attribute type 21 has an invalid length. [ 659.592758][T13324] netlink: 'syz.5.2612': attribute type 3 has an invalid length. [ 659.640718][T13324] __nla_validate_parse: 5 callbacks suppressed [ 659.640736][T13324] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.2612'. [ 660.235157][T13337] validate_nla: 1 callbacks suppressed [ 660.235216][T13337] netlink: 'syz.1.2615': attribute type 21 has an invalid length. [ 661.773453][T13383] netlink: 'syz.3.2625': attribute type 21 has an invalid length. [ 662.440362][T13397] ip6gretap0: refused to change device tx_queue_len [ 662.625795][T13401] device wlan0 left promiscuous mode [ 663.656261][T13434] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2644'. [ 668.056646][T13540] netlink: 'syz.5.2676': attribute type 21 has an invalid length. [ 668.143380][T13539] netlink: 'syz.3.2675': attribute type 21 has an invalid length. [ 668.239763][T13551] netlink: 'syz.0.2680': attribute type 3 has an invalid length. [ 668.292503][T13551] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2680'. [ 669.694405][T13582] netlink: 'syz.3.2691': attribute type 21 has an invalid length. [ 669.801918][T13586] netlink: 'syz.5.2692': attribute type 10 has an invalid length. [ 669.905457][T13594] netlink: 'syz.3.2695': attribute type 12 has an invalid length. [ 669.937579][T13594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2695'. [ 669.955845][T13589] netlink: 'syz.1.2693': attribute type 21 has an invalid length. [ 671.138309][T13629] netlink: 'syz.0.2705': attribute type 21 has an invalid length. [ 671.817271][ T3050] tipc: Subscription rejected, illegal request [ 672.390890][T13662] netlink: 'syz.0.2716': attribute type 11 has an invalid length. [ 672.890619][ T3050] wlan1: Trigger new scan to find an IBSS to join [ 673.311857][T13682] netlink: 'syz.3.2719': attribute type 39 has an invalid length. [ 673.963139][T13697] delete_channel: no stack [ 674.089889][ T419] tipc: Subscription rejected, illegal request [ 674.608822][T13711] netlink: 'syz.3.2730': attribute type 21 has an invalid length. [ 675.586599][T13716] netlink: 'syz.3.2732': attribute type 10 has an invalid length. [ 675.940983][ T419] wlan1: Trigger new scan to find an IBSS to join [ 676.266547][T13728] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2736'. [ 676.685388][T13736] netlink: 'syz.3.2739': attribute type 10 has an invalid length. [ 676.946012][ T6806] tipc: Subscription rejected, illegal request [ 677.017524][T13736] 8021q: adding VLAN 0 to HW filter on device .` [ 677.110421][T13736] team0: Port device .` added [ 677.143176][T13737] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2739'. [ 677.417993][T13746] netlink: 'syz.3.2742': attribute type 21 has an invalid length. [ 677.797759][T13750] netlink: 'syz.3.2743': attribute type 27 has an invalid length. [ 678.061538][T13750] .`: (slave bond_slave_0): Releasing backup interface [ 678.377922][T13753] .`: (slave bridge0): Error: Slave device does not support XDP [ 678.622170][T13757] netlink: 'syz.4.2746': attribute type 10 has an invalid length. [ 678.889915][ T7833] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 679.496271][ T7833] tipc: Subscription rejected, illegal request [ 679.840224][T13789] netlink: 'syz.0.2753': attribute type 21 has an invalid length. [ 680.555614][T13797] .`: (slave batadv0): Error: Slave device does not support XDP [ 681.664354][T13826] netlink: 'syz.3.2765': attribute type 21 has an invalid length. [ 682.040464][T13831] netlink: 'syz.5.2777': attribute type 21 has an invalid length. [ 682.046138][ T7833] tipc: Subscription rejected, illegal request [ 682.275727][T13840] bond0: (slave batadv0): Error: Slave device does not support XDP [ 682.937902][T13843] netlink: 'syz.5.2770': attribute type 10 has an invalid length. [ 683.113025][T13843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.192405][T13843] device bond0 entered promiscuous mode [ 683.218837][T13843] device bond_slave_0 entered promiscuous mode [ 683.240779][T13843] device bond_slave_1 entered promiscuous mode [ 683.288281][T13843] team0: Port device bond0 added [ 683.300167][T13845] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2770'. [ 685.669338][T13901] netlink: 'syz.5.2781': attribute type 21 has an invalid length. [ 685.783951][ T6806] tipc: Subscription rejected, illegal request [ 685.852712][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.859094][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.279863][T13911] bond0: (slave batadv0): Error: Slave device does not support XDP [ 686.685016][T13924] netlink: 'syz.0.2787': attribute type 10 has an invalid length. [ 686.820018][T13927] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2787'. [ 689.907983][ T7833] tipc: Subscription rejected, illegal request [ 689.951874][T13942] netlink: 'syz.0.2805': attribute type 1 has an invalid length. [ 689.979982][T13942] netlink: 'syz.0.2805': attribute type 4 has an invalid length. [ 689.996177][T13942] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2805'. [ 690.348014][T13955] bond0: (slave geneve0): Error: Slave device does not support XDP [ 690.696402][T13959] netlink: 'syz.0.2801': attribute type 10 has an invalid length. [ 690.712037][T13959] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2801'. [ 690.838705][T13959] device ipvlan1 entered promiscuous mode [ 690.953654][T13959] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 691.007934][T13974] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2808'. [ 691.132871][ T3050] tipc: Subscription rejected, illegal request [ 692.159102][T14005] bond0: (slave geneve0): Error: Slave device does not support XDP [ 694.078496][ T6806] tipc: Subscription rejected, illegal request [ 694.195429][ T3050] tipc: Subscription rejected, illegal request [ 694.216193][T14028] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2824'. [ 694.260753][T14028] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 694.480440][T14037] netlink: 'syz.0.2826': attribute type 11 has an invalid length. [ 694.526620][T14037] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2826'. [ 695.234277][T14054] .`: (slave batadv0): Error: Slave device does not support XDP [ 697.148108][T14065] netlink: 'syz.3.2835': attribute type 21 has an invalid length. [ 697.197639][ T3050] tipc: Subscription rejected, illegal request [ 697.310938][T14063] netlink: 'syz.5.2844': attribute type 10 has an invalid length. [ 697.334747][T14063] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2844'. [ 697.365699][T14063] device ipvlan1 entered promiscuous mode [ 697.619791][T14063] bridge0: port 4(ipvlan1) entered blocking state [ 697.663909][T14063] bridge0: port 4(ipvlan1) entered disabled state [ 697.776572][T14063] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 697.950288][T14087] netlink: 'syz.0.2841': attribute type 3 has an invalid length. [ 697.976211][T14087] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2841'. [ 700.388133][T14097] bond0: (slave batadv0): Error: Slave device does not support XDP [ 700.399266][T14098] netlink: 'syz.1.2845': attribute type 7 has an invalid length. [ 700.609954][ T7829] tipc: Subscription rejected, illegal request [ 700.894312][T14131] netlink: 'syz.4.2855': attribute type 21 has an invalid length. [ 701.560428][T14144] netlink: 'syz.1.2856': attribute type 10 has an invalid length. [ 701.568389][T14144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2856'. [ 701.579735][T14144] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 701.606577][T14146] bond0: (slave batadv0): Error: Slave device does not support XDP [ 701.742627][T14148] bond0: (slave geneve0): Error: Slave device does not support XDP [ 703.670632][ T7833] tipc: Subscription rejected, illegal request [ 703.699945][T14174] netlink: 'syz.5.2867': attribute type 21 has an invalid length. [ 703.824270][T14175] netlink: 'syz.1.2862': attribute type 29 has an invalid length. [ 703.898012][T14175] netlink: 'syz.1.2862': attribute type 29 has an invalid length. [ 704.969138][T14201] netlink: 'syz.1.2875': attribute type 21 has an invalid length. [ 705.023427][T14201] netlink: 'syz.1.2875': attribute type 20 has an invalid length. [ 705.568404][T14203] bond0: (slave batadv0): Error: Slave device does not support XDP [ 707.841258][T14209] netlink: 'syz.4.2878': attribute type 21 has an invalid length. [ 707.934128][T14215] netlink: 'syz.0.2879': attribute type 2 has an invalid length. [ 707.988790][ T6806] tipc: Subscription rejected, illegal request [ 708.067126][T14220] netlink: 'syz.1.2882': attribute type 21 has an invalid length. [ 708.105284][T14220] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2882'. [ 708.366335][T14229] delete_channel: no stack [ 708.390174][T14229] delete_channel: no stack [ 709.071875][T14246] netlink: 'syz.0.2889': attribute type 41 has an invalid length. [ 709.350621][T14252] netlink: 'syz.3.2891': attribute type 21 has an invalid length. [ 711.264600][T14258] .`: (slave bridge0): Error: Slave device does not support XDP [ 711.375610][ T7829] tipc: Subscription rejected, illegal request [ 711.444576][T14267] netlink: 399 bytes leftover after parsing attributes in process `syz.5.2897'. [ 711.457116][ T7829] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 712.517449][T14294] netlink: 'syz.3.2904': attribute type 21 has an invalid length. [ 713.164450][T14304] .`: (slave batadv0): Error: Slave device does not support XDP [ 713.192097][ T7829] tipc: Subscription rejected, illegal request [ 713.369072][T14267] delete_channel: no stack [ 713.870121][T14344] netlink: 'syz.1.2918': attribute type 21 has an invalid length. [ 714.220985][ T7833] tipc: Subscription rejected, illegal request [ 714.474261][T14364] bond0: (slave batadv0): Error: Slave device does not support XDP [ 715.026393][T14389] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2931'. [ 715.207429][T14394] netlink: 'syz.3.2934': attribute type 21 has an invalid length. [ 715.520981][T14400] netlink: 'syz.3.2937': attribute type 41 has an invalid length. [ 715.877203][ T419] tipc: Subscription rejected, illegal request [ 716.228027][T14406] chnl_net:caif_netlink_parms(): no params data found [ 716.552909][T14425] delete_channel: no stack [ 716.563363][T14406] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.596532][T14406] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.625338][T14406] device bridge_slave_0 entered promiscuous mode [ 716.661449][T14406] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.682608][T14406] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.697477][T14406] device bridge_slave_1 entered promiscuous mode [ 716.788129][T14441] tap0: tun_chr_ioctl cmd 2147767521 [ 716.861979][T14406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.890488][T14406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.983385][T14406] team0: Port device team_slave_0 added [ 717.209237][T14406] team0: Port device team_slave_1 added [ 717.297309][T14406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.321584][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.430689][T14406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.636316][ T7835] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.860678][ T419] tipc: Subscription rejected, illegal request [ 718.012691][T14476] netlink: 'syz.5.2955': attribute type 1 has an invalid length. [ 718.036937][T14476] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2955'. [ 718.367089][T14056] Bluetooth: hci3: command 0x0409 tx timeout [ 718.416724][T14406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.434261][T14406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.511280][T14406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.627943][ T7835] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.821822][ T7835] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.978769][T14498] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2961'. [ 718.999842][ T7835] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.044215][T14406] device hsr_slave_0 entered promiscuous mode [ 719.077945][T14406] device hsr_slave_1 entered promiscuous mode [ 720.142402][T14515] netlink: 'syz.0.2965': attribute type 2 has an invalid length. [ 720.209576][T14515] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2965'. [ 720.229095][ T6806] tipc: Subscription rejected, illegal request [ 720.229905][T14514] netlink: 'syz.0.2965': attribute type 2 has an invalid length. [ 720.267717][T14514] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2965'. [ 720.398400][T14527] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.2966'. [ 720.601753][ T4252] Bluetooth: hci3: command 0x041b tx timeout [ 721.164977][T14549] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2971'. [ 721.411141][T14548] netlink: 'syz.0.2968': attribute type 10 has an invalid length. [ 721.548565][T14548] team0: Port device geneve1 added [ 722.275265][T14406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 722.304573][T14406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 722.348227][T14406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 722.395455][T14406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 722.649698][ T8566] Bluetooth: hci3: command 0x040f tx timeout [ 722.695183][T14406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.779647][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 722.796584][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 722.825189][T14406] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.896608][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 722.917289][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 722.935147][ T6806] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.942355][ T6806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 723.020016][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 723.940942][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 723.999808][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 724.011025][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.018136][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.060598][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 724.073815][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.111823][T14600] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2978'. [ 724.121122][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 724.151739][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 724.178157][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 724.201267][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 724.218568][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 724.252556][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.268289][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 724.281612][ T419] tipc: Subscription rejected, illegal request [ 724.313886][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 724.342678][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 724.370842][T14406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 724.618081][T14621] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.2980'. [ 724.729764][ T8566] Bluetooth: hci3: command 0x0419 tx timeout [ 725.029062][T14406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.073095][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 725.101961][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 725.239550][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 725.282023][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 725.416318][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 725.463867][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 725.490177][T14406] device veth0_vlan entered promiscuous mode [ 725.514035][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 725.523161][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 725.545720][T14406] device veth1_vlan entered promiscuous mode [ 725.658180][ T7835] device hsr_slave_0 left promiscuous mode [ 725.667746][ T7835] device hsr_slave_1 left promiscuous mode [ 725.711399][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 725.722747][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.738563][ T7835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 725.755076][ T7835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.771955][ T7835] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 725.788179][ T7835] batman_adv: batadv0: Removing interface: veth0_vlan [ 725.827718][ T7835] device veth1_macvtap left promiscuous mode [ 725.841835][ T7835] device veth0_macvtap left promiscuous mode [ 725.855944][ T7835] device veth1_vlan left promiscuous mode [ 725.867510][ T7835] device veth0_vlan left promiscuous mode [ 726.579485][ T7835] team0 (unregistering): Port device team_slave_1 removed [ 726.595054][ T7835] team0 (unregistering): Port device team_slave_0 removed [ 726.606779][ T7835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.625312][ T7835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.638746][ T7835] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 726.672540][ T7835] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 726.691659][ T7835] team0 (unregistering): Port device bond0 removed [ 726.712767][ T7835] bond0 (unregistering): Released all slaves [ 726.759729][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 726.768106][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 726.795184][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 726.811700][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 726.914112][T14406] device veth0_macvtap entered promiscuous mode [ 726.999322][T14406] device veth1_macvtap entered promiscuous mode [ 727.129242][ T6806] tipc: Subscription rejected, illegal request [ 727.203272][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.214091][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.224039][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 727.235220][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.247100][T14406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.290456][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 727.302268][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 727.318825][ T6806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 727.368302][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.379741][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.389702][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.400268][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.420591][T14406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.466686][T14406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.498977][T14406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.510925][ T7829] tipc: Subscription rejected, illegal request [ 727.523227][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 727.563697][ T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 727.638442][T14406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.670862][T14406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.680229][T14406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.689273][T14406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.901576][ T3050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.927608][ T3050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.002573][T14674] netlink: 'syz.0.2992': attribute type 21 has an invalid length. [ 728.011901][ T7833] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 728.049272][ T7829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.076600][ T7829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.175441][ T7829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 729.325287][ T7833] tipc: Subscription rejected, illegal request [ 729.986921][T14704] chnl_net:caif_netlink_parms(): no params data found [ 730.174860][T14704] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.249588][T14704] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.263624][T14704] device bridge_slave_0 entered promiscuous mode [ 730.309882][T14713] netlink: 'syz.0.3002': attribute type 21 has an invalid length. [ 730.380190][T14704] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.387669][T14704] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.416194][T14704] device bridge_slave_1 entered promiscuous mode [ 730.516982][T14704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.651644][T14704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.609537][T14340] Bluetooth: hci0: command 0x0409 tx timeout [ 733.681428][T14729] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3006'. [ 733.691065][ T1108] Bluetooth: hci0: command 0x041b tx timeout [ 733.931771][T14704] team0: Port device team_slave_0 added [ 733.991000][T14704] team0: Port device team_slave_1 added [ 734.095723][T14753] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3014'. [ 734.348138][T14704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.376988][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.497604][T14704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.545691][T14753] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3014'. [ 734.612668][T14704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.638095][T14704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.755978][T14704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.816704][T14760] netlink: 'syz.0.3016': attribute type 21 has an invalid length. [ 735.011347][T14704] device hsr_slave_0 entered promiscuous mode [ 735.041372][T14704] device hsr_slave_1 entered promiscuous mode [ 735.063913][T14704] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 735.099511][T14704] Cannot create hsr debugfs directory [ 735.538015][ T7835] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.619283][T14783] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3023'. [ 735.633314][T14783] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 735.638154][T14766] netlink: 'syz.1.3019': attribute type 25 has an invalid length. [ 735.652799][T14783] openvswitch: netlink: Message has 1 unknown bytes. [ 735.701958][T14784] can: request_module (can-proto-0) failed. [ 735.769558][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 735.801814][ T7835] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.849813][ T4252] Bluetooth: hci0: command 0x0419 tx timeout [ 743.451840][ T6806] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 747.292943][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.299303][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.849556][ T4225] Bluetooth: hci2: command 0x0409 tx timeout [ 749.929584][T14000] Bluetooth: hci2: command 0x041b tx timeout [ 752.009510][ T4225] Bluetooth: hci2: command 0x040f tx timeout [ 754.089538][T14000] Bluetooth: hci2: command 0x0419 tx timeout [ 774.172281][ T145] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 792.089536][T14000] Bluetooth: hci6: command 0x0409 tx timeout [ 794.169487][T14000] Bluetooth: hci6: command 0x041b tx timeout [ 796.249484][T14000] Bluetooth: hci6: command 0x040f tx timeout [ 798.329485][T14000] Bluetooth: hci6: command 0x0419 tx timeout [ 808.249793][ T8566] Bluetooth: hci7: command 0x0409 tx timeout [ 808.732601][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.738948][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.329780][ T8566] Bluetooth: hci7: command 0x041b tx timeout [ 812.409791][ T8566] Bluetooth: hci7: command 0x040f tx timeout [ 814.489733][ T8566] Bluetooth: hci7: command 0x0419 tx timeout [ 840.899372][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 840.906363][ C1] rcu: 0-....: (0 ticks this GP) idle=ecd/1/0x4000000000000002 softirq=34241/34241 fqs=5221 [ 840.917609][ C1] (detected by 1, t=10502 jiffies, g=43585, q=1293) [ 840.924310][ C1] Sending NMI from CPU 1 to CPUs 0: [ 840.929526][ C0] NMI backtrace for cpu 0 [ 840.929535][ C0] CPU: 0 PID: 14766 Comm: syz.1.3019 Not tainted syzkaller #0 [ 840.929550][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 840.929558][ C0] RIP: 0010:asm_sysvec_irq_work+0x0/0x20 [ 840.929582][ C0] Code: e9 a5 03 00 00 90 90 90 90 90 0f 01 ca fc 6a ff e8 a5 02 00 00 48 89 c4 48 89 e7 e8 7a 3c dc ff e9 85 03 00 00 90 90 90 90 90 <0f> 01 ca fc 6a ff e8 85 02 00 00 48 89 c4 48 89 e7 e8 4a 41 dc ff [ 840.929594][ C0] RSP: 0018:ffffc90002f5f3f8 EFLAGS: 00000006 [ 840.929614][ C0] RAX: 7fb457ef1ef54400 RBX: 1ffff920005ebe88 RCX: 7fb457ef1ef54400 [ 840.929626][ C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: ffffffff8a79f980 [ 840.929636][ C0] RBP: ffffc90002f5f4f0 R08: ffffffff901d40c7 R09: 1ffffffff203a818 [ 840.929647][ C0] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffffffff8c322f00 [ 840.929657][ C0] R13: dffffc0000000000 R14: 0000000000000246 R15: 0000000000000001 [ 840.929668][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 840.929681][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 840.929692][ C0] CR2: 0000000100000000 CR3: 000000000c08e000 CR4: 00000000003506f0 [ 840.929707][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 840.929717][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 840.929726][ C0] Call Trace: [ 840.929734][ C0] [ 840.929738][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x4a0 [ 840.929755][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 12 f2 9c 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 840.929766][ C0] RSP: 0018:ffffc90002f5f420 EFLAGS: 00000206 [ 840.929783][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 840.929797][ C0] ? rcu_lock_acquire+0x30/0x30 [ 840.929817][ C0] __rcu_read_unlock+0x78/0xd0 [ 840.929832][ C0] __unlock_page_memcg+0xea/0x100 [ 840.929847][ C0] unmap_page_range+0xf96/0x2500 [ 840.929878][ C0] unmap_vmas+0x131/0x250 [ 840.929892][ C0] ? unmap_page_range+0x2500/0x2500 [ 840.929904][ C0] ? __mutex_lock_common+0x465/0x2400 [ 840.929928][ C0] exit_mmap+0x3b9/0x640 [ 840.929944][ C0] ? vm_brk+0x20/0x20 [ 840.929965][ C0] ? uprobe_clear_state+0x2f6/0x460 [ 840.929979][ C0] ? mm_update_next_owner+0x522/0x640 [ 840.929996][ C0] __mmput+0x115/0x3b0 [ 840.930012][ C0] exit_mm+0x588/0x6e0 [ 840.930024][ C0] ? xacct_add_tsk+0x4a0/0x4a0 [ 840.930042][ C0] ? do_exit+0x20c0/0x20c0 [ 840.930055][ C0] ? taskstats_exit+0x439/0xab0 [ 840.930073][ C0] ? tty_audit_exit+0x14e/0x1f0 [ 840.930091][ C0] do_exit+0x5a9/0x20c0 [ 840.930106][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 840.930121][ C0] ? put_task_struct+0x80/0x80 [ 840.930135][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 840.930155][ C0] ? lock_chain_count+0x20/0x20 [ 840.930171][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 840.930186][ C0] do_group_exit+0x12e/0x300 [ 840.930200][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 840.930216][ C0] get_signal+0x6ca/0x12c0 [ 840.930239][ C0] arch_do_signal_or_restart+0xe7/0x12c0 [ 840.930262][ C0] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 840.930280][ C0] ? get_sigframe_size+0x10/0x10 [ 840.930296][ C0] ? rcu_nmi_exit+0x6f/0xf0 [ 840.930315][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 840.930334][ C0] ? exit_to_user_mode_loop+0x3b/0x130 [ 840.930349][ C0] exit_to_user_mode_loop+0x9e/0x130 [ 840.930364][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 840.930378][ C0] syscall_exit_to_user_mode+0x16/0x40 [ 840.930394][ C0] do_syscall_64+0x58/0xa0 [ 840.930407][ C0] ? clear_bhb_loop+0x30/0x80 [ 840.930421][ C0] ? clear_bhb_loop+0x30/0x80 [ 840.930436][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 840.930451][ C0] RIP: 0033:0x7f228ab35819 [ 840.930463][ C0] Code: Unable to access opcode bytes at RIP 0x7f228ab357ef. [ 840.930470][ C0] RSP: 002b:00007f2288d8f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 840.930484][ C0] RAX: fffffffffffffe00 RBX: 00007f228adaefa8 RCX: 00007f228ab35819 [ 840.930495][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f228adaefa8 [ 840.930504][ C0] RBP: 00007f228adaefa0 R08: 0000000000000000 R09: 0000000000000000 [ 840.930514][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 840.930523][ C0] R13: 00007f228adaf038 R14: 00007fffcb4dc920 R15: 00007fffcb4dca08 [ 840.930540][ C0] [ 841.529845][ T8566] Bluetooth: hci3: command 0x0406 tx timeout [ 844.570249][T14340] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-... } 10868 jiffies s: 31673 root: 0x1/. [ 844.595508][T14340] rcu: blocking rcu_node structures (internal RCU debug): [ 844.606432][T14340] Task dump for CPU 0: [ 844.610677][T14340] task:syz.1.3019 state:R running task stack:23152 pid:14766 ppid: 14406 flags:0x00004008 [ 844.621581][T14340] Call Trace: [ 844.624890][T14340] [ 844.627841][T14340] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 844.634202][T14340] ? mark_lock+0x94/0x320 [ 844.638564][T14340] ? asm_sysvec_irq_work+0x16/0x20 [ 844.643874][T14340] ? trace_event_raw_event_preemptirq_template+0x290/0x290 [ 844.651293][T14340] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 844.657303][T14340] ? lock_chain_count+0x20/0x20 [ 844.662459][T14340] ? asm_sysvec_irq_work+0x16/0x20 [ 844.667609][T14340] ? trace_irq_enable_rcuidle+0x12c/0x180 [ 844.673508][T14340] ? sysvec_irq_work+0x7d/0xc0 [ 844.678296][T14340] ? trace_hardirqs_on+0x57/0x80 [ 844.683286][T14340] ? asm_sysvec_irq_work+0x16/0x20 [ 844.688438][T14340] ? rcu_read_unlock_special+0x7f/0x4a0 [ 844.694057][T14340] ? __rcu_read_unlock+0xd0/0xd0 [ 844.699017][T14340] ? rcu_lock_acquire+0x30/0x30 [ 844.703933][T14340] ? __rcu_read_unlock+0x78/0xd0 [ 844.708895][T14340] ? __unlock_page_memcg+0xea/0x100 [ 844.714233][T14340] ? unmap_page_range+0xf96/0x2500 [ 844.719433][T14340] ? unmap_vmas+0x131/0x250 [ 844.724051][T14340] ? unmap_page_range+0x2500/0x2500 [ 844.729392][T14340] ? __mutex_lock_common+0x465/0x2400 [ 844.734808][T14340] ? exit_mmap+0x3b9/0x640 [ 844.739252][T14340] ? vm_brk+0x20/0x20 [ 844.743305][T14340] ? uprobe_clear_state+0x2f6/0x460 [ 844.748528][T14340] ? mm_update_next_owner+0x522/0x640 [ 844.753959][T14340] ? __mmput+0x115/0x3b0 [ 844.758352][T14340] ? exit_mm+0x588/0x6e0 [ 844.762651][T14340] ? xacct_add_tsk+0x4a0/0x4a0 [ 844.767460][T14340] ? do_exit+0x20c0/0x20c0 [ 844.771931][T14340] ? taskstats_exit+0x439/0xab0 [ 844.776817][T14340] ? tty_audit_exit+0x14e/0x1f0 [ 844.781724][T14340] ? do_exit+0x5a9/0x20c0 [ 844.786078][T14340] ? rcu_nmi_exit+0x6f/0xf0 [ 844.790639][T14340] ? put_task_struct+0x80/0x80 [ 844.795475][T14340] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 844.801512][T14340] ? lock_chain_count+0x20/0x20 [ 844.806389][T14340] ? _raw_spin_lock_irq+0xb7/0xf0 [ 844.811466][T14340] ? do_group_exit+0x12e/0x300 [ 844.816313][T14340] ? lockdep_hardirqs_on+0x94/0x140 [ 844.821567][T14340] ? get_signal+0x6ca/0x12c0 [ 844.826213][T14340] ? arch_do_signal_or_restart+0xe7/0x12c0 [ 844.832091][T14340] ? perf_trace_run_bpf_submit+0x124/0x1c0 [ 844.837936][T14340] ? get_sigframe_size+0x10/0x10 [ 844.842931][T14340] ? rcu_nmi_exit+0x6f/0xf0 [ 844.847469][T14340] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 844.853619][T14340] ? exit_to_user_mode_loop+0x3b/0x130 [ 844.859108][T14340] ? exit_to_user_mode_loop+0x9e/0x130 [ 844.864707][T14340] ? exit_to_user_mode_prepare+0xee/0x180 [ 844.870476][T14340] ? syscall_exit_to_user_mode+0x16/0x40 [ 844.876223][T14340] ? do_syscall_64+0x58/0xa0 [ 844.880880][T14340] ? clear_bhb_loop+0x30/0x80 [ 844.885586][T14340] ? clear_bhb_loop+0x30/0x80 [ 844.890323][T14340] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 844.896430][T14340]