last executing test programs: 27.818294405s ago: executing program 3 (id=2180): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB, @ANYRES8=r0, @ANYRES32, @ANYRESDEC=r0], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="620ac4ff000000007110b3000000000085000000d00000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000005000180c2000003aaaaaaaaba865563d445ced37e0000000000000004000000"]) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180600000000040000f7ff000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000440)=[{&(0x7f00000000c0)="c1", 0x1}], 0x1}, 0xc000) r6 = openat$cgroup_ro(r2, &(0x7f0000000280)='blkio.throttle.io_serviced\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000340)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000580)}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000940)=""/182, 0xb6}, {&(0x7f0000000a00)=""/250, 0xfa}], 0x5, &(0x7f0000000b80)=""/47, 0x2f}, 0x20012000) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x10c002, 0xac60, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x12000) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="1400000027000b6c8cff001b0529fc60022fc569", 0x14}], 0x1}, 0x8084) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@caif=@dbg={0x25, 0x5, 0x4}, 0x80, &(0x7f0000000080)}, 0x20048815) 27.08176674s ago: executing program 4 (id=2181): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x100, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r1}, 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2900db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x100, 0x0, 0x8, 0x0, 0x4000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) (async) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000001940)='{', 0xffe0}], 0x1}, 0x80d1) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r1}, 0x48) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x10, 0x0, 0x8, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x10000004000}, 0xd832, 0x200000000000c8, 0x806, 0x9, 0xfffffffffffffffb, 0x80000000, 0x3, 0x0, 0xfffffffc, 0x0, 0x100000000001000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) sendmsg$unix(r4, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x24040014) (async) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd631180fc020c2900db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) (async) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r2}, 0x38) (async) 24.857999569s ago: executing program 3 (id=2185): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) close(0xffffffffffffffff) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x11b, 0x4, &(0x7f0000000000), 0x18) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 24.81006983s ago: executing program 4 (id=2186): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f92624fc60", 0x14}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0xbd}, 0x8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000001fed00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000100000300000000000000000000000000f8caf7c34e5ba2095c88d443a859d118a598920d7304a381e288ea36487ea6731297e6284505e3364a0fc1e643f729b0002e0d96d12322684c522a62d26765670d345e237959c5f840ac58c0af4a3212da4a55afb1870d7f0c6d22a5545b9d92a65a1089b3bd33f00ba87c3bc01ff3404610040d66090dab5154c8691ddacdd986861f"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfa, r5}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000520033d087277b9b108b4ab51c"], 0xfe33) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x47}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)="513b5a9c0c0000fb4c4241fc05", 0xd}, {&(0x7f00000000c0)="05", 0x1}], 0x2}, 0x40080) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd"], 0x50) socket$kcm(0x2, 0x3, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302c00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef000100ffffff88"], 0x280) 23.297835769s ago: executing program 0 (id=2193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000180)='GPL\x00'}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xe, &(0x7f0000000840)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f00000001c0)=""/157, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 23.215609216s ago: executing program 0 (id=2194): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="600000001e007f109e", 0x9}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x57}, {&(0x7f0000000000)="5cac6b7ded12380164cb63e57c6c22df82311fd259d3977e51c4", 0x1a}, {&(0x7f00000001c0)="fe1dca32c89ad3e31a3d7c62ab68930a0cf93064c950c129bbc7895cb632691081fb371f73e6653f606a611ff301c2b6c6cfbafba5ff684e82255db82c088c23d43c9b9f0aae859e5e48bf0c1ebfbf2fc1be48e5262479fb555d4f70cb18919660a69913b02e5ba4d52bdb70eb5b02f6592c319a90a8aae0ff4c0dd9ae10974a8a7e75402bd2f5b43fea15ece89fd44a473b1d52741c6082b39b36acd40f", 0x9e}, {&(0x7f0000000280)='9', 0x1}], 0x5}, 0x4000000) 20.956971852s ago: executing program 1 (id=2195): r0 = socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x3, 0x0, 0x5, 0x0, 0x0, 0x4000000, 0x400, 0xe, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x8002, 0x4, 0xfffffff8, 0x6, 0x3, 0xfffffffa, 0x0, 0x0, 0x2, 0x0, 0x6}, r3, 0x7, r2, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x54}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0xfffffc22, 0x0, 0x0, 0x41100, 0x35f47dec7fff5c71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000001c0)={r1, r4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="0763707573751400000000000009"], 0x17) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x80, 0x4, 0xad, 0xf, 0x0, 0x9, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000200), 0x2}, 0x4020, 0x100000001, 0x3, 0x6, 0x5, 0x3, 0xffff, 0x0, 0x1000, 0x0, 0xffffffffffffffff}, r3, 0x1, r8, 0x1) 20.904027183s ago: executing program 0 (id=2196): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0xe, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x80}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="2000000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b200", 0x42}], 0x1}, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0)=r3, 0x12) 20.902341803s ago: executing program 3 (id=2198): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x100010, 0x0, 0x8, 0x0, 0x4000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001"], 0xfdef) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x2, &(0x7f0000000200), 0x4) close(r5) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0)={r3}, 0x8) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x55f) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES8=r4], &(0x7f0000000340)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/135, 0x41000, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44a904020000000000000000000005100013", 0x1f}], 0x1}, 0x4090) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="04390000"], 0x33fe0) sendmsg$inet(r2, &(0x7f0000000ac0)={&(0x7f00000005c0)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000840)="9c", 0x1}], 0x1}, 0x4008010) 20.709835744s ago: executing program 4 (id=2199): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084000400000000000003000000000000000000000000000005000000000000000000000009"], 0x0, 0x4a}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x80, 0x0, 0x0, 0x80c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0xac5d, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd394}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0xb0, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffeef) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) 19.420475606s ago: executing program 4 (id=2200): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x80, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffffffffff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, 0x0, 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x80000, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r5, @ANYRES32=r3, @ANYRES64=r4, @ANYRESHEX=r4, @ANYRESDEC, @ANYRESDEC=r4, @ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x40800) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0x1) recvmsg$kcm(r6, 0x0, 0x10020) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000a00)='syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 17.570308616s ago: executing program 2 (id=2202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000ff0f0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x22, 0x2, 0x25, &(0x7f0000000840)) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6, 0x71, 0x8, 0x12, 0x0, 0xd, 0x4418, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbbe, 0x4, @perf_config_ext, 0x10000, 0x7, 0x0, 0x9, 0x2, 0x5, 0xd96b, 0x0, 0x40, 0x0, 0xa}, 0x0, 0x8, r0, 0x0) 17.545854861s ago: executing program 2 (id=2203): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)=0x20000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xa8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0x2c2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) 17.390036164s ago: executing program 1 (id=2204): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="94000000000000006111880094813f00000000050000000000000095000400000b000000000000001cd9615f23b25724d4f34227b0a897fc58cc462505014d932a4c8a29446a7ce7709944a89347fecca6157879168da0916506679af7ea042cc48c672a3671bab35e3906f790760a06764bc9a9744a1fe6c12fe905b35931d809577a0d6a2e441fce6cf4"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000007a00000076000000000000efdb7b9c00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc62, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) 17.328068617s ago: executing program 0 (id=2205): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000006000000080000006000000020000000", @ANYRES32=r1, @ANYBLOB="ffff0000000a7d1f0700"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="02000000050000000100"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x2f8}, 0x20000080) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xc2ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x19, &(0x7f0000000200)=r3, 0x78) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004002) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0x8f00) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c61a137462c7f2539479f49d4eb2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc16e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c0977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6040099d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663dd472021d202eedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe3594d4a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed180d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35f267632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12a851810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f314001a62863f6e04b4506ac2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab79e609c57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2b4bb9905a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296e99d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55000048e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cf7800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc699d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7dc1a869fa5551b873e2c838e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0000000000000000000000a0616252abda1102c3eee13eddef0275f21752ee474e32d790ae1f3df77e303ae1968c2a4419d1ca13b97b2c3123ab5b8473b880644e6acfe1d346d1528262c6e91f38029ec24eeb4fe5c1b3726bcfd386ba153fed11692170e5a09432bd02fa9dba861ecad4dbf61a93733a21aeff5f541b8f78bccbf1ac0000000000000000000000145aaaa62ff74b216b2977e7b9261824f663cea60ec6e0fa03bd596cec6d12316c8ed147d4cdd140857444c27c1946b1afcd4ec260694cb71e421744cf1f860840b0decf9be35aeb02d1bf6137b3189edb2d21557e6804ed52305e7deace8b97cd2b423cb79c541762097e29c386634a4bcc3ee91266d808706aadbc4650183d71bf5341edfe4c815d3a87c05d75da20b260d39cdd8559292000cb06faf9972683d379565dcd932fbc6bfb13f938a693252fc3af8088fcf8e06a"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x36, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x400fe, 0x60000000, 0x0, 0xfffffffe, &(0x7f00000002c0)}, 0x2c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r6}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) close(0x4) 17.326638567s ago: executing program 4 (id=2206): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x770f3639, 0x7}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffd0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x9, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x82d7) recvmsg(0xffffffffffffffff, 0x0, 0x2141) (async) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) (async) socketpair(0xa, 0x3, 0xff, &(0x7f0000000000)) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0x1e, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNATTACHFILTER(r3, 0x401054d5, 0x0) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000004000000000000001cbd00009021feff0400"/36], 0x0, 0x80000000, 0xd1, &(0x7f00000001c0)=""/209, 0x40f00, 0xe8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x2, 0x9, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r0], 0x0, 0x10, 0x4}, 0x94) 17.150248294s ago: executing program 3 (id=2207): r0 = socket$kcm(0x21, 0x2, 0xa) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0xffd8, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}], &(0x7f0000000280)='GPL\x00', 0x41, 0x4d, &(0x7f0000000600)=""/77, 0x41100, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x4, 0xa, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r1, 0xffffffffffffffff, r2], 0x0, 0x10, 0x7fff}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000900)={r0, r4}) (async) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) recvmsg(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600)}, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b3cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9411a36324ea1790e834c", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e000000380005ffd25a80698c63940d0300fc602f0000000b000200001ec0003715de60cfd9a1af05d81d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) recvmsg$kcm(r0, &(0x7f0000002240)={&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002140)=[{&(0x7f00000009c0)=""/79, 0x4f}, {&(0x7f0000000a40)=""/250, 0xfa}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/130, 0x82}], 0x4, &(0x7f0000002180)=""/159, 0x9f}, 0x2001) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000fa40000007010000080020007500feff0000820095000000d3031a006da911b0d632b4e2e86b7ad015836e4d27f5182b60bbb7c19e7a69a85411c531002b1b2c0f21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6da7013c062d13176d71d7dad98eb976ed679fa639", @ANYRES64=r0, @ANYRES32=0x0], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x94) 17.149712445s ago: executing program 1 (id=2208): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000080200000000002e2e5f"], 0x0, 0x44}, 0x20) r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000f00)={&(0x7f0000000780)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000e80)}, 0x4040000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000", @ANYRES32, @ANYBLOB="e7000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x72, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x54, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000040000000c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0xfff}, 0x104140, 0x400000, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 16.352211183s ago: executing program 1 (id=2209): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, @perf_config_ext={0x0, 0xff}, 0x4140, 0x80, 0x8, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002200356bd25a806f8c6394f91524fc60", 0x14}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002200356bd25a806f8c6394f91524fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xf, r0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xffffffffffffffa6, &(0x7f00000001c0)=[{&(0x7f0000000100)="1c00000021006bcd210000006e04000081000000000000007aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x482100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x2, 0xaca, 0x0, 0x0, 0x2000000000000, 0x4, 0x0, 0x0, 0x800000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x482100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x2, 0xaca, 0x0, 0x0, 0x2000000000000, 0x4, 0x0, 0x0, 0x800000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009000000000000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000a00008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x21}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000000) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80205, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x6, 0xfe, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80205, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x5}, 0x100410, 0x200, 0x6, 0xfe, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000200000000008508000000fdffffff0000001100000000060000000000"], &(0x7f0000000180)=""/231, 0x36, 0xe7, 0x1}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000200000000008508000000fdffffff0000001100000000060000000000"], &(0x7f0000000180)=""/231, 0x36, 0xe7, 0x1}, 0x28) 16.301532344s ago: executing program 3 (id=2210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESHEX, @ANYRES16, @ANYBLOB="d4422e3ba8d99f6b16e6177ba9c2681b556d64516d56dc42cb4482a0e0170dccdfa25b9a49d971ac4e27c608cf7adfab2794d722a3ab0d06b48c6e3268c4735ec72fc5f626b223e1f4bf8dc6bf8e9bf388615741c2907265d225f5a0672533c162099030ebd4b456522d7710effe4499dc3baa7486df536341514777093877c05cb1e4ecda3b9677acae6f5e62b6e9a8b6926c40838e5e05b8b59d99a97a2ed5f79725ee86d133913b9097b0858ac9fc0901a92ec320bfeb470f999529630d840ea9fe4065702a9da216ae72584325082cc24660fca34414df9b9351ed20"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x2000000000000240, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0xfffffcb2, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, 0x0, 0x10}, 0x20040090) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$kcm(0x11, 0xa, 0x300) ioctl$TUNGETVNETLE(r2, 0x8953, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020031000b05d25a806f8c6394f90324fc602f0009000a740100053582c137153e370248018000", 0x29}], 0x1}, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 16.238664437s ago: executing program 0 (id=2211): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000008c0)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x0, 0x3, 0x4, 0x1}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000180)="67306f6db71a22ff4e949efa69bf102c8f53f0444661707af7c7455de9eb", 0x1e}, {&(0x7f00000001c0)="1f43db36d73a0e877b7adad543dd5557915d5248f95fa8dec899c7", 0x1b}, {&(0x7f0000000240)="6ee7f95393b2c26b6a6411a5d59b1c73788d82cf6373aac520a99070b1b7be802ecb4f0b365548a7e3acf591bb06ded83a52b205ac35caaf8f289451abef2f6cb6086afde81c33886148be62c01a22a73e64ff463528b692cd3ab1aebe748813c900ff504d97e3bfc7c33cd62f8e9fc229f5a1510d49af046c5b02cb9a0f62e83636dc69069bbe57d1188250ce000bc3ba02f5c4cff1b1c3373d1125b89f1d05817d4d572cb978164249707762dbc58f4db1b8823267a24818e08d019e06c3105b6603e6108ad64666531572f6a15a7c2fdcb3c17bd3be3ccc5f9757ac160ffe532289cb3548bc224104", 0xea}, {&(0x7f0000000340)="75127e6ea9a2902efe349d376ee76737090e36a63186d5616f3701d25bdf4942ec80f52d7bf397aba2497fa0c4c823d8a4371fbddc5bda0ae83f8862bf987cb0bbcfa2ab81602f3093214f966dd06b13136c4289a163d340076394e40998a1f4142e6bcaa1dc2876f682cbae87b3456421d4514fda84e4d71b589a5a2af8a348952c05fd9de263ab070bf1eac797ac6f33ac5efde2a2d75d1f1835e9dbcec891fb2107ca071312d0ebd6b2c2c2706b6d71dd703257", 0xb5}], 0x4, &(0x7f0000000740)=[{0x60, 0x114, 0x8fe, "ea3f37bf57e8ca75c453d7d87d463abc3730bad13757b25c14bc7c02e43ae5c350029653a799502b4f1c1f687fceb5eb4589227b91255c5cfc69968d8ff57ec1947a769190af0aeea10ec2a4"}, {0x60, 0x10f, 0x9, "41006d8d53e573fcd7984d55f2896e38a6e155b367aa1df062e5961597fa36e77a0984d85068f72763043dcb5502b084e54baa7b49cbdb137ee1599a3eb80e9b296bb1aec06aa5ca95d1"}, {0x98, 0x118, 0x43084d24, "ff7c644793da0827a04aa427bef1a4a4b4c2854a0580acc84b12e978d113e4373b52e58a4658fd9cacf0a66fe6c2cbb20a33ad516685b46ae1d90b3a7e99651eefe63b9b7418a93873dde417aad17024a55a0ed3a02d0505ba560c6cee8e1644cfa3405606fbfb2d175814877ccc79ce53836b3b9c16d402f1c1befcf2b2de4d41"}], 0x158}, 0x4c091) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="d8000000320081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x20, 0xff, 0x6, 0xfffff02c}, {0x6, 0xff, 0x9, 0x1}]}) 16.181922609s ago: executing program 2 (id=2212): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000020000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) 16.027267151s ago: executing program 4 (id=2213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000eb0000008500000094000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x4, 0xc3ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16, @ANYRES64=r1, @ANYRESOCT=r1], &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r3], 0xfe33) perf_event_open(&(0x7f0000000140)={0xbadf22c6c4312bb9, 0x80, 0x1c, 0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth1_to_team\x00', @random="0200fd7fac14"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x33}, @loopback}}}], 0x20}, 0xe900) socket$kcm(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x79, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x1, 0x8, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x2, 0x5, 0x3, 0x101a0, 0xffffffffffffffff, 0x6, '\x00', r8, r9, 0x5, 0x3, 0x5, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 15.905707077s ago: executing program 2 (id=2214): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r0, @ANYRES8=r4, @ANYRESOCT=r0, @ANYBLOB="fd263e815793540dc80ec0f40aa4410678da5327508d41099da4350316349be79fe7e56623c5661871544a50ab636f056f54787cd9d5c567ad90a506581e3aa00bcf7ac380d1ba0bf4f8ac33fb307b555373ff43e8a96df1abec8d7b16ba1e1f7ff3e992950e0bd1dc01c52a6bb52a3599006ab0757cf014b394bd98e48c61799e108d9ebeabb8a6dd97cc65465b8ccb5a7246bc68de9a2fef20502106843e66ded842afa75cfebada9e426265dcae7918f7237264214cac9cb56d4a3c303a2ec6bae47068a40df8cccbf43f4d21c1260e9f9120a5f2e732", @ANYRESHEX=r4, @ANYBLOB="21d5a28958a18f1c36dd8d74781238d5938f520be936b5987f729a73e2d8a5addb1bbfacd53099b30c3b923996ea080a21008a", @ANYRESDEC=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c98e16a6009e62476f000000", 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, &(0x7f00000009c0)=@framed={{0x18, 0x9}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@p, {0x3, 0x0, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 15.785842702s ago: executing program 1 (id=2215): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15.776842424s ago: executing program 0 (id=2216): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="f224a68d45e9732d7aef159d856b91449e63aac4d168cd3e041407641be1cab3ae5827a05b6bf7ccd231ec756985cd9d433f386f263b806f7bf05c49e602457aaf015a3a30cbc108b67eaadda3f9f66d76241eaa7cc5868e9b174d60f38d4fff717e6029216a04fad378439cceb3fad4cf30449704664f16271a3ce212e4d62bf10a33761ddc8af3c3e444f17dfbf52fcd5b1a2d0481f8964e9fd9be5756da1b213a500aa797ee6189ce7ff945b1f99b2daa7ba6221fee78795ca67e1f277ad011d5f658cf2faefea14d066e7d29a4377a1ab40a011ceb6f2f59803dff219f9665114235afdf3bdf1a446cdd49d4932c08fb5d", 0xf3}], 0x1, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x94, 0x2}, @timestamp={0x44, 0x20, 0x74, 0x0, 0xe, [0x10001, 0x14, 0x2, 0x3, 0x5, 0x7, 0x833e]}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0xf, [{@local}]}, @end]}}}], 0x70}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xb6, 0x8e, &(0x7f0000000040)="a028c804ab8de9efd530ed431e27ca2844d248ad4266070d434e54185b1ad2d85ce83f0b2f27b9fd461db3d04810e62e272a84ebd9cee7af5d45d68df74361d034945caea1ac104e8d883311ec9690fea9e66dc96f223e050ba7f16bae6879ab9df1419285ebbe34fcff5f758976aecdeb153a57f8959c6aed69c8765617ec4b46bdf41988896168c9e20f584eaae04ce805318a4b3d65a7f56cc14282845bc9642ef5b32f410ad169325d1b4e4aab2b10a83760d360", &(0x7f00000001c0)=""/142, 0xf35b, 0x0, 0x6d, 0xb3, &(0x7f0000000280)="2451cb1af4875071d27904d78fd6fedae8a847dde1f709f99d385eff0d74d8de775f82b0a3cdb42ad517e3452b6cae19c7c396503a391b943eabfe0c9a8c0e09b1ebcff2cf4ca4cd940944e260b99c12dd6a8134c16d59eba8dce4bb9d7a2f67a51f43aa8dd38744feff9789df", &(0x7f0000000300)="c2213a76e88c735ae0f8a98938e35aaabfd4079437188f9157e5762597efe1c21681a92f3cde4cdd2fab337053207093ccc1edf642ec0b34444fbe54a306b4af71f3c415c24d94790d95bd196c912227471dfed4577689b4357e6b4561a9b52e0bd3adc8d795ab57d08b25998b7c41d75d279fd3b4b77185ffcdbeb53d8ca18e12ddd9f7f85aa5374fd462f03325300f9a102d4b428bc5d382e413c249e5981535fd476025579190ffcd5b66abbe8855c76105", 0x1, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 15.659307419s ago: executing program 2 (id=2217): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000280)=""/237, 0xed, 0x0, &(0x7f0000000380)=""/32, 0x20}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r0, 0x4) 15.596967862s ago: executing program 3 (id=2218): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000005d31, 0x40000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa21, 0x0, 0x498a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) close(r1) (rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) (async, rerun: 32) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', r1, 0x4000, r0}, 0x18) (async, rerun: 32) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) (async) socket$kcm(0xa, 0x2, 0x0) (async) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000280)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000001c0), 0x45) (async, rerun: 64) close(r2) (async, rerun: 64) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000003c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320536b1ff"}) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x19, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x97, 0x8, 0x1, 0x45, 0x0, 0xcbb, 0xa0820, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3, @perf_config_ext={0x6, 0x5}, 0x10000, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0x7f, 0x3, 0x0, 0x4, 0x0, 0x7fffffffffffffff}, 0xffffffffffffffff, 0x0, r3, 0xb) (async) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffffffffffff6e, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 15.341415996s ago: executing program 1 (id=2219): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000f00)={&(0x7f0000000780)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000e80)}, 0x4040000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000", @ANYRES32, @ANYBLOB="e7000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x72, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x54, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000040000000c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0xfff}, 0x104140, 0x400000, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 15.295595625s ago: executing program 2 (id=2220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000000c0)="6309028666270765a18929c9dc3f", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000340)=ANY=[@ANYBLOB="1806000000000400000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r3}, 0x20) 215.565025ms ago: executing program 32 (id=2216): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0}, 0x10009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="f224a68d45e9732d7aef159d856b91449e63aac4d168cd3e041407641be1cab3ae5827a05b6bf7ccd231ec756985cd9d433f386f263b806f7bf05c49e602457aaf015a3a30cbc108b67eaadda3f9f66d76241eaa7cc5868e9b174d60f38d4fff717e6029216a04fad378439cceb3fad4cf30449704664f16271a3ce212e4d62bf10a33761ddc8af3c3e444f17dfbf52fcd5b1a2d0481f8964e9fd9be5756da1b213a500aa797ee6189ce7ff945b1f99b2daa7ba6221fee78795ca67e1f277ad011d5f658cf2faefea14d066e7d29a4377a1ab40a011ceb6f2f59803dff219f9665114235afdf3bdf1a446cdd49d4932c08fb5d", 0xf3}], 0x1, &(0x7f0000000680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x40, 0x0, 0x7, {[@generic={0x94, 0x2}, @timestamp={0x44, 0x20, 0x74, 0x0, 0xe, [0x10001, 0x14, 0x2, 0x3, 0x5, 0x7, 0x833e]}, @timestamp_prespec={0x44, 0xc, 0xea, 0x3, 0xf, [{@local}]}, @end]}}}], 0x70}, 0x8004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xb6, 0x8e, &(0x7f0000000040)="a028c804ab8de9efd530ed431e27ca2844d248ad4266070d434e54185b1ad2d85ce83f0b2f27b9fd461db3d04810e62e272a84ebd9cee7af5d45d68df74361d034945caea1ac104e8d883311ec9690fea9e66dc96f223e050ba7f16bae6879ab9df1419285ebbe34fcff5f758976aecdeb153a57f8959c6aed69c8765617ec4b46bdf41988896168c9e20f584eaae04ce805318a4b3d65a7f56cc14282845bc9642ef5b32f410ad169325d1b4e4aab2b10a83760d360", &(0x7f00000001c0)=""/142, 0xf35b, 0x0, 0x6d, 0xb3, &(0x7f0000000280)="2451cb1af4875071d27904d78fd6fedae8a847dde1f709f99d385eff0d74d8de775f82b0a3cdb42ad517e3452b6cae19c7c396503a391b943eabfe0c9a8c0e09b1ebcff2cf4ca4cd940944e260b99c12dd6a8134c16d59eba8dce4bb9d7a2f67a51f43aa8dd38744feff9789df", &(0x7f0000000300)="c2213a76e88c735ae0f8a98938e35aaabfd4079437188f9157e5762597efe1c21681a92f3cde4cdd2fab337053207093ccc1edf642ec0b34444fbe54a306b4af71f3c415c24d94790d95bd196c912227471dfed4577689b4357e6b4561a9b52e0bd3adc8d795ab57d08b25998b7c41d75d279fd3b4b77185ffcdbeb53d8ca18e12ddd9f7f85aa5374fd462f03325300f9a102d4b428bc5d382e413c249e5981535fd476025579190ffcd5b66abbe8855c76105", 0x1, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001a00)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c07000000000000009555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a59a08077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aac263dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d85fa4373d5b569ac3353cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2ff070000cfb030dd4ac0fe54db67510d3e9a5d36b900000074000000000000000000000000006e96ba8f5e7e89bef4226173e20ebb17b924e9e6d0ee163713b2bd56f58dec64df91417beaac4061e6216774e048276e110d25fe936b2cf31dc573b98bd037bceeae7feb600897c8364af49ce59027a6ee5d7c6e12c0f45c0f376d9da065ca0499e209655d2420fcfa10fccf2cbe7b60161cc6cbd874c928689acd9d4e00cefacc88"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 0s ago: executing program 33 (id=2219): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000004b00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000120000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) r0 = socket$kcm(0x11, 0x20000000000000a, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000f00)={&(0x7f0000000780)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000000e80)}, 0x4040000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000", @ANYRES32, @ANYBLOB="e7000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) recvmsg$unix(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x72, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xc, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x54, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000004000000040000000c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6, r5}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={0x0, 0x0, 0x8}, 0x18) r7 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x88, 0xfff}, 0x104140, 0x400000, 0x0, 0x8, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.3.44'. [ 101.600453][ T4537] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.47'. [ 101.705143][ T4541] Driver unsupported XDP return value 0 on prog (id 51) dev N/A, expect packet loss! [ 104.736192][ T4564] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.54'. [ 104.820379][ T4564] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 105.327367][ T4567] delete_channel: no stack [ 106.847979][ T4597] netlink: 36 bytes leftover after parsing attributes in process `syz.3.63'. [ 115.007548][ T4601] delete_channel: no stack [ 116.118904][ T4644] netlink: 132 bytes leftover after parsing attributes in process `syz.3.76'. [ 116.130182][ T4646] netlink: 132 bytes leftover after parsing attributes in process `syz.0.74'. [ 116.194436][ T4650] netlink: 60 bytes leftover after parsing attributes in process `syz.2.77'. [ 116.417478][ T4650] netlink: 60 bytes leftover after parsing attributes in process `syz.2.77'. [ 116.933733][ T4651] netlink: 60 bytes leftover after parsing attributes in process `syz.2.77'. [ 116.990390][ T4653] netlink: 60 bytes leftover after parsing attributes in process `syz.2.77'. [ 117.182140][ T4670] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 117.201750][ T4670] netlink: 55 bytes leftover after parsing attributes in process `syz.0.82'. [ 117.250077][ T4672] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.81'. [ 117.889939][ T4674] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 117.926996][ T4674] netlink: 55 bytes leftover after parsing attributes in process `syz.0.82'. [ 120.201576][ T4694] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 120.381502][ T4709] IPv6: …: Disabled Multicast RS [ 120.414780][ T4712] FAULT_INJECTION: forcing a failure. [ 120.414780][ T4712] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 120.699710][ T4715] netlink: 'syz.2.90': attribute type 29 has an invalid length. [ 120.727508][ T4715] netlink: 'syz.2.90': attribute type 29 has an invalid length. [ 120.919679][ T4712] CPU: 1 PID: 4712 Comm: syz.3.84 Not tainted syzkaller #0 [ 120.927221][ T4712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.937478][ T4712] Call Trace: [ 120.940779][ T4712] [ 120.943735][ T4712] dump_stack_lvl+0x188/0x24e [ 120.948454][ T4712] ? show_regs_print_info+0x12/0x12 [ 120.953680][ T4712] ? load_image+0x410/0x410 [ 120.958222][ T4712] ? __lock_acquire+0x7c40/0x7c40 [ 120.963282][ T4712] ? snprintf+0xe5/0x140 [ 120.967557][ T4712] should_fail_ex+0x390/0x4c0 [ 120.972276][ T4712] _copy_to_user+0x2c/0x130 [ 120.976822][ T4712] simple_read_from_buffer+0xe3/0x150 [ 120.982226][ T4712] proc_fail_nth_read+0x1a6/0x220 [ 120.987368][ T4712] ? proc_fault_inject_write+0x310/0x310 [ 120.993050][ T4712] ? fsnotify_perm+0x248/0x550 [ 120.997854][ T4712] ? proc_fault_inject_write+0x310/0x310 [ 121.004145][ T4712] vfs_read+0x2db/0x960 [ 121.008464][ T4712] ? kernel_read+0x1e0/0x1e0 [ 121.013093][ T4712] ? __fget_files+0x28/0x460 [ 121.017722][ T4712] ? __fget_files+0x3fc/0x460 [ 121.022452][ T4712] ? __fdget_pos+0x2ae/0x360 [ 121.027081][ T4712] ? ksys_read+0x70/0x260 [ 121.031543][ T4712] ksys_read+0x14d/0x260 [ 121.035824][ T4712] ? vfs_write+0x9a0/0x9a0 [ 121.040277][ T4712] ? lockdep_hardirqs_on+0x94/0x140 [ 121.045510][ T4712] do_syscall_64+0x4c/0xa0 [ 121.050037][ T4712] ? clear_bhb_loop+0x60/0xb0 [ 121.054741][ T4712] ? clear_bhb_loop+0x60/0xb0 [ 121.059445][ T4712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 121.065450][ T4712] RIP: 0033:0x7fe09455e98e [ 121.069895][ T4712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.089983][ T4712] RSP: 002b:00007fe092792fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.098524][ T4712] RAX: ffffffffffffffda RBX: 00007fe0927936c0 RCX: 00007fe09455e98e [ 121.106518][ T4712] RDX: 000000000000000f RSI: 00007fe0927930a0 RDI: 000000000000000f [ 121.114513][ T4712] RBP: 00007fe092793090 R08: 0000000000000000 R09: 0000000000000000 [ 121.122506][ T4712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.130500][ T4712] R13: 00007fe0948263f8 R14: 00007fe094826360 R15: 00007ffd3dad0538 [ 121.138541][ T4712] [ 121.805304][ T4695] delete_channel: no stack [ 123.085973][ T4730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.93'. [ 123.104698][ T4730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.93'. [ 123.130354][ T4730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.93'. [ 123.141141][ T4730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.93'. [ 123.461710][ T4735] netlink: 'syz.1.95': attribute type 10 has an invalid length. [ 123.677030][ T4725] delete_channel: no stack [ 123.966352][ T4735] team0: Port device geneve1 added [ 123.979752][ T4742] netlink: 'syz.2.97': attribute type 11 has an invalid length. [ 123.999542][ T4744] netlink: 132 bytes leftover after parsing attributes in process `syz.4.98'. [ 124.012913][ T4742] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.97'. [ 124.133519][ T4735] syz.1.95 (4735) used greatest stack depth: 20304 bytes left [ 124.209081][ T4748] netlink: 188 bytes leftover after parsing attributes in process `syz.2.97'. [ 124.286587][ T4748] ksmbd: Daemon and kernel module version mismatch. ksmbd: 2, kernel module: 1. User-space ksmbd should terminate. [ 124.812585][ T4740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.908535][ T4756] netlink: 'syz.1.102': attribute type 11 has an invalid length. [ 124.916477][ T4756] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.102'. [ 125.327340][ T4764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.105'. [ 125.336404][ T4764] netlink: 60 bytes leftover after parsing attributes in process `syz.3.105'. [ 126.497734][ T4789] netlink: 'syz.0.110': attribute type 17 has an invalid length. [ 126.508424][ T4789] netlink: 'syz.0.110': attribute type 16 has an invalid length. [ 127.395905][ T4810] netlink: 'syz.3.113': attribute type 2 has an invalid length. [ 127.441038][ T4814] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 127.450797][ T4810] netlink: 'syz.3.113': attribute type 1 has an invalid length. [ 129.273744][ T4838] device batadv0 entered promiscuous mode [ 129.335498][ T4806] delete_channel: no stack [ 129.928285][ T4850] sock: sock_set_timeout: `syz.4.124' (pid 4850) tries to set negative timeout [ 130.088999][ T4852] netlink: 'syz.2.125': attribute type 11 has an invalid length. [ 130.106984][ T4852] __nla_validate_parse: 5 callbacks suppressed [ 130.107020][ T4852] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.125'. [ 130.235067][ T4851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.546078][ T4865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.129'. [ 131.215987][ T4877] netlink: 'syz.2.133': attribute type 13 has an invalid length. [ 131.312439][ T4877] netlink: 152 bytes leftover after parsing attributes in process `syz.2.133'. [ 131.724151][ T4877] syz_tun: refused to change device tx_queue_len [ 131.828048][ T4877] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 132.113097][ T4873] delete_channel: no stack [ 132.870346][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877283][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.545191][ T4925] netlink: 10 bytes leftover after parsing attributes in process `syz.2.141'. [ 133.657822][ T4928] netlink: 132 bytes leftover after parsing attributes in process `syz.1.143'. [ 134.114282][ T4941] netlink: 'syz.3.147': attribute type 1 has an invalid length. [ 136.392977][ T4975] netlink: 'syz.1.155': attribute type 21 has an invalid length. [ 136.436079][ T4975] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.548277][ T4975] IPv6: Can't replace route, no match found [ 137.018340][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.018340][ T4992] Use struct sctp_assoc_value instead [ 137.166552][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.166552][ T4992] Use struct sctp_assoc_value instead [ 137.226982][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.226982][ T4992] Use struct sctp_assoc_value instead [ 137.297211][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.297211][ T4992] Use struct sctp_assoc_value instead [ 137.387022][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.387022][ T4992] Use struct sctp_assoc_value instead [ 137.449136][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.449136][ T4992] Use struct sctp_assoc_value instead [ 137.516615][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.516615][ T4992] Use struct sctp_assoc_value instead [ 137.565720][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.565720][ T4992] Use struct sctp_assoc_value instead [ 137.607736][ T4992] sctp: [Deprecated]: syz.0.161 (pid 4992) Use of int in maxseg socket option. [ 137.607736][ T4992] Use struct sctp_assoc_value instead [ 137.756043][ T5023] netlink: 'syz.4.165': attribute type 1 has an invalid length. [ 138.059300][ T5028] netlink: 'syz.0.166': attribute type 13 has an invalid length. [ 138.092219][ T5028] netlink: 152 bytes leftover after parsing attributes in process `syz.0.166'. [ 138.130764][ T5028] erspan0: refused to change device tx_queue_len [ 138.156628][ T5028] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 138.525383][ T5036] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 139.234915][ T5036] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.377281][ T5031] delete_channel: no stack [ 139.774260][ T5072] netlink: 152 bytes leftover after parsing attributes in process `syz.4.175'. [ 141.035511][ T5086] Ÿë: port 1(gretap0) entered blocking state [ 141.060423][ T5086] Ÿë: port 1(gretap0) entered disabled state [ 141.081674][ T5086] device gretap0 entered promiscuous mode [ 141.555562][ T5102] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 141.579294][ T5102] device veth0_macvtap left promiscuous mode [ 143.581454][ T5107] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.185'. [ 143.634257][ T5119] netlink: 'syz.0.184': attribute type 1 has an invalid length. [ 143.882677][ T5136] netlink: 'syz.3.190': attribute type 21 has an invalid length. [ 143.916239][ T5137] netlink: 'syz.3.190': attribute type 21 has an invalid length. [ 144.286851][ T5156] netlink: 'syz.1.193': attribute type 2 has an invalid length. [ 144.336140][ T5156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.193'. [ 144.838483][ T5123] delete_channel: no stack [ 146.406790][ T5188] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 146.556405][ T5188] device veth0_vlan left promiscuous mode [ 146.631384][ T5188] device veth0_vlan entered promiscuous mode [ 146.662053][ T5188] team0: Device veth0_vlan failed to register rx_handler [ 147.353017][ T5209] netlink: 'syz.0.207': attribute type 10 has an invalid length. [ 147.414623][ T5209] team0: Device ipvlan1 failed to register rx_handler [ 148.318823][ T5232] netlink: 'syz.4.213': attribute type 10 has an invalid length. [ 148.858293][ T5254] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 149.206757][ T5247] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.217'. [ 150.867188][ T4937] wlan1: Trigger new scan to find an IBSS to join [ 151.591717][ T5303] netlink: 36 bytes leftover after parsing attributes in process `syz.3.230'. [ 151.927468][ T5303] : renamed from caif0 [ 152.293487][ T5303] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 152.329064][ T5258] delete_channel: no stack [ 152.360887][ T5309] netlink: 10 bytes leftover after parsing attributes in process `syz.0.233'. [ 152.740244][ T5312] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.234'. [ 152.768442][ T5312] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.234'. [ 152.840126][ T5312] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.234'. [ 152.957597][ T5324] netlink: 'syz.0.237': attribute type 21 has an invalid length. [ 152.965651][ T5324] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.119631][ T5324] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.126965][ T5324] IPv6: NLM_F_CREATE should be set when creating new route [ 153.134259][ T5324] IPv6: NLM_F_CREATE should be set when creating new route [ 153.141596][ T5324] IPv6: NLM_F_CREATE should be set when creating new route [ 153.347919][ T5331] netlink: 'syz.3.238': attribute type 21 has an invalid length. [ 153.627838][ T5335] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.237'. [ 153.979777][ T5346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 154.010148][ T5346] netlink: 152 bytes leftover after parsing attributes in process `syz.0.237'. [ 154.022006][ T5335] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.237'. [ 154.299408][ T5354] netlink: 2539 bytes leftover after parsing attributes in process `syz.3.242'. [ 154.511707][ T5362] netlink: 111 bytes leftover after parsing attributes in process `syz.3.245'. [ 154.970161][ T4931] wlan1: Trigger new scan to find an IBSS to join [ 155.472160][ T5365] netlink: 'syz.2.246': attribute type 10 has an invalid length. [ 155.587039][ T5365] device veth0_vlan left promiscuous mode [ 155.624880][ T5365] device veth0_vlan entered promiscuous mode [ 155.698393][ T5365] team0: Device veth0_vlan failed to register rx_handler [ 156.168930][ T5372] netlink: 132 bytes leftover after parsing attributes in process `syz.4.244'. [ 156.179180][ T9] wlan1: Creating new IBSS network, BSSID 3a:6e:65:12:b6:a3 [ 156.609842][ T5374] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.248'. [ 156.777391][ T5374] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.248'. [ 158.248020][ T5393] netlink: 'syz.3.252': attribute type 2 has an invalid length. [ 158.256277][ T5393] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.252'. [ 158.512492][ T5404] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 158.585896][ T5404] syzkaller1: linktype set to 804 [ 158.637011][ T5412] netlink: 'syz.3.255': attribute type 1 has an invalid length. [ 159.045391][ T5385] delete_channel: no stack [ 159.104304][ T5421] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.257'. [ 159.680665][ T5428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.259'. [ 159.748660][ T5428] : renamed from caif0 [ 160.436984][ T5428] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 160.454632][ T5444] netlink: 'syz.4.264': attribute type 3 has an invalid length. [ 160.488458][ T5444] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.264'. [ 161.108586][ T5458] netlink: 'syz.4.270': attribute type 39 has an invalid length. [ 162.329440][ T5467] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.271'. [ 162.457274][ T5467] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.271'. [ 162.609857][ T5467] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.271'. [ 163.147066][ T5452] delete_channel: no stack [ 163.838279][ T5454] delete_channel: no stack [ 163.881130][ T5492] netlink: 36 bytes leftover after parsing attributes in process `syz.4.279'. [ 163.909479][ T5492] : renamed from caif0 [ 164.263094][ T5492] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 165.191507][ T5512] netlink: 152 bytes leftover after parsing attributes in process `syz.2.284'. [ 166.666075][ T5546] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.293'. [ 166.794478][ T5546] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 166.811772][ T5546] netlink: 40 bytes leftover after parsing attributes in process `syz.2.293'. [ 166.915122][ T5546] batman_adv: batadv0: Adding interface: virt_wifi0 [ 166.929689][ T5546] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.031630][ T5546] batman_adv: batadv0: Interface activated: virt_wifi0 [ 167.761451][ T5555] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.295'. [ 168.046586][ T5538] delete_channel: no stack [ 168.964539][ T5550] delete_channel: no stack [ 171.339751][ T5578] netlink: 128 bytes leftover after parsing attributes in process `syz.1.300'. [ 171.406218][ T5578] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 171.540545][ T5578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.116127][ T5593] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.264280][ T5593] netlink: 1 bytes leftover after parsing attributes in process `syz.0.304'. [ 176.377657][ T5621] delete_channel: no stack [ 176.906904][ T5676] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.315'. [ 178.282068][ T5708] netlink: 'syz.2.324': attribute type 28 has an invalid length. [ 178.327625][ T5708] netlink: 2 bytes leftover after parsing attributes in process `syz.2.324'. [ 179.441630][ T5713] delete_channel: no stack [ 179.874562][ T5733] device bridge_slave_1 left promiscuous mode [ 179.930243][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.118251][ T5751] netlink: 'syz.2.331': attribute type 2 has an invalid length. [ 182.387349][ T5733] device bridge_slave_0 left promiscuous mode [ 182.396935][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.521883][ T5737] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.328'. [ 182.553369][ T5751] device .*! entered promiscuous mode [ 184.605303][ T5833] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.353'. [ 185.193901][ T5850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 185.335087][ T5857] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.346'. [ 185.886700][ T5875] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.354'. [ 186.182435][ T5881] netlink: 'syz.0.355': attribute type 2 has an invalid length. [ 186.197094][ T5881] netlink: 'syz.0.355': attribute type 4 has an invalid length. [ 186.238686][ T5766] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 186.241667][ T5881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.355'. [ 186.344497][ T5883] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.356'. [ 186.565780][ T5875] syz.4.354 (5875) used greatest stack depth: 15552 bytes left [ 187.388998][ T5915] device syzkaller0 entered promiscuous mode [ 187.913456][ T5925] netlink: 188 bytes leftover after parsing attributes in process `syz.2.367'. [ 190.521822][ T5944] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 190.603309][ T5942] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 190.823848][ T5942] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 192.071101][ T5976] netlink: 152 bytes leftover after parsing attributes in process `syz.3.379'. [ 192.517299][ T5986] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 192.564673][ T5986] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 192.623462][ T5986] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 192.654806][ T5986] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 192.701469][ T5986] netlink: 'syz.3.382': attribute type 29 has an invalid length. [ 192.735661][ T5989] netlink: 64 bytes leftover after parsing attributes in process `syz.1.383'. [ 192.878639][ T5993] device wlan1 entered promiscuous mode [ 193.985996][ T6023] netlink: 15007 bytes leftover after parsing attributes in process `syz.1.398'. [ 194.777284][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.783743][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.425713][ T6057] netlink: 22 bytes leftover after parsing attributes in process `syz.0.396'. [ 201.508177][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 201.514328][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 201.520518][ T4290] Bluetooth: hci3: command 0x0406 tx timeout [ 201.527656][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 201.746777][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 202.764658][ T6085] delete_channel: no stack [ 202.803585][ T6111] netlink: 'syz.3.409': attribute type 10 has an invalid length. [ 202.856167][ T6111] device vlan0 entered promiscuous mode [ 203.970037][ T6146] netlink: 'syz.3.417': attribute type 29 has an invalid length. [ 204.095536][ T6146] netlink: 'syz.3.417': attribute type 29 has an invalid length. [ 204.226496][ T6147] netlink: 'syz.3.417': attribute type 29 has an invalid length. [ 204.369386][ T6148] netlink: 'syz.3.417': attribute type 29 has an invalid length. [ 204.435574][ T6143] netlink: 'syz.3.417': attribute type 29 has an invalid length. [ 206.279967][ T6152] netlink: 'syz.2.419': attribute type 21 has an invalid length. [ 206.297764][ T6152] netlink: 'syz.2.419': attribute type 1 has an invalid length. [ 206.407345][ T6152] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.419'. [ 207.238090][ T6180] netlink: 184 bytes leftover after parsing attributes in process `syz.0.426'. [ 213.789064][ T6205] netlink: 2623 bytes leftover after parsing attributes in process `syz.3.429'. [ 213.847012][ T6210] netlink: 'syz.4.431': attribute type 12 has an invalid length. [ 213.885505][ T6210] netlink: 132 bytes leftover after parsing attributes in process `syz.4.431'. [ 213.928393][ T6210] netlink: 132 bytes leftover after parsing attributes in process `syz.4.431'. [ 214.419337][ T6223] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.435'. [ 214.714764][ T6226] netlink: 3529 bytes leftover after parsing attributes in process `syz.1.437'. [ 214.913409][ T6226] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.437'. [ 215.047020][ T6226] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.437'. [ 215.735220][ T6249] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.444'. [ 215.774675][ T6251] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.445'. [ 216.134396][ T6251] netlink: zone id is out of range [ 216.398610][ T6251] netlink: zone id is out of range [ 216.461630][ T6251] netlink: get zone limit has 8 unknown bytes [ 217.251258][ T6260] device veth1_macvtap left promiscuous mode [ 217.988006][ T5766] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 218.457534][ T6284] netlink: 'syz.2.455': attribute type 1 has an invalid length. [ 218.576747][ T6284] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.455'. [ 219.439978][ T6282] netlink: 'syz.2.455': attribute type 2 has an invalid length. [ 219.449982][ T6282] netlink: 'syz.2.455': attribute type 8 has an invalid length. [ 219.459272][ T6282] netlink: 132 bytes leftover after parsing attributes in process `syz.2.455'. [ 219.491971][ T6288] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 219.771746][ T6288] team0: Port device geneve1 added [ 220.533583][ T6305] netlink: 'syz.0.462': attribute type 3 has an invalid length. [ 220.564472][ T6305] netlink: 'syz.0.462': attribute type 1 has an invalid length. [ 220.572669][ T6305] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.462'. [ 221.187773][ T6310] netlink: 'syz.2.463': attribute type 3 has an invalid length. [ 221.245247][ T6310] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.463'. [ 221.685742][ T6330] delete_channel: no stack [ 221.747635][ T6330] delete_channel: no stack [ 224.953967][ T6346] netlink: 'syz.2.472': attribute type 10 has an invalid length. [ 225.204104][ T6346] team0: Port device geneve1 added [ 225.940443][ T6360] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.475'. [ 226.525260][ T6375] netlink: 'syz.0.478': attribute type 10 has an invalid length. [ 226.562760][ T6354] delete_channel: no stack [ 226.569895][ T6375] team0: Device hsr_slave_0 failed to register rx_handler [ 227.082009][ T6390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.483'. [ 227.135868][ T6398] netlink: 'syz.4.480': attribute type 10 has an invalid length. [ 227.177264][ T6398] netlink: 40 bytes leftover after parsing attributes in process `syz.4.480'. [ 227.237299][ T6398] batman_adv: batadv0: Adding interface: vlan1 [ 227.330990][ T6398] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.426724][ T6401] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.484'. [ 227.482635][ T6398] batman_adv: batadv0: Interface activated: vlan1 [ 227.574643][ T6401] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 228.236238][ T6422] netlink: 'syz.2.489': attribute type 41 has an invalid length. [ 228.611212][ T6441] netlink: 15119 bytes leftover after parsing attributes in process `syz.2.495'. [ 230.073675][ T6435] delete_channel: no stack [ 230.087708][ T6460] netlink: 3529 bytes leftover after parsing attributes in process `syz.4.499'. [ 230.107031][ T6460] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.499'. [ 230.132590][ T6460] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.499'. [ 231.452981][ T6511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.513'. [ 236.843935][ T6560] netlink: 3529 bytes leftover after parsing attributes in process `syz.3.521'. [ 236.882862][ T6560] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.521'. [ 236.911950][ T6560] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.521'. [ 237.201524][ T6570] netlink: 'syz.1.525': attribute type 3 has an invalid length. [ 237.214192][ T6571] netlink: 128 bytes leftover after parsing attributes in process `syz.2.524'. [ 237.242671][ T6570] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 237.253193][ T6570] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.525'. [ 237.253759][ T6575] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.525'. [ 237.263005][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 237.292438][ T6571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.170148][ T6573] netlink: 'syz.4.526': attribute type 2 has an invalid length. [ 238.266814][ T6573] netlink: 'syz.4.526': attribute type 3 has an invalid length. [ 238.296065][ T6573] netlink: 132 bytes leftover after parsing attributes in process `syz.4.526'. [ 238.650216][ T6600] tap0: tun_chr_ioctl cmd 1074025677 [ 238.688098][ T6600] tap0: linktype set to 6 [ 238.746769][ T6601] tap0: tun_chr_ioctl cmd 1074025677 [ 238.752395][ T6601] tap0: linktype set to 6 [ 239.371179][ T6607] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 239.383696][ T6607] dvmrp1: ignored: set checksum disabled [ 239.423630][ T6610] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.533'. [ 239.541565][ T6613] netlink: 'syz.3.534': attribute type 29 has an invalid length. [ 239.606771][ T6613] netlink: 'syz.3.534': attribute type 29 has an invalid length. [ 239.653852][ T6617] netlink: 60 bytes leftover after parsing attributes in process `syz.0.535'. [ 239.688874][ T6614] netlink: 'syz.3.534': attribute type 29 has an invalid length. [ 239.758197][ T6618] netlink: 'syz.3.534': attribute type 10 has an invalid length. [ 239.806162][ T6618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.534'. [ 239.861867][ T6618] device  entered promiscuous mode [ 239.887851][ T6618] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 239.934406][ T6620] netlink: 'syz.0.535': attribute type 21 has an invalid length. [ 239.962358][ T6620] netlink: 'syz.0.535': attribute type 4 has an invalid length. [ 242.458858][ T6682] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 242.482261][ T6682] dvmrp1: ignored: set checksum disabled [ 242.815544][ T6693] __nla_validate_parse: 8 callbacks suppressed [ 242.815563][ T6693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 242.843883][ T6693] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 242.966181][ T6694] netlink: 60 bytes leftover after parsing attributes in process `syz.1.553'. [ 243.021996][ T6693] validate_nla: 3 callbacks suppressed [ 243.022014][ T6693] netlink: 'syz.1.553': attribute type 21 has an invalid length. [ 243.068716][ T6693] netlink: 128 bytes leftover after parsing attributes in process `syz.1.553'. [ 243.116329][ T6693] netlink: 'syz.1.553': attribute type 4 has an invalid length. [ 243.148691][ T6693] netlink: 'syz.1.553': attribute type 5 has an invalid length. [ 243.209780][ T6693] netlink: 3 bytes leftover after parsing attributes in process `syz.1.553'. [ 243.303998][ T6694] netlink: 56 bytes leftover after parsing attributes in process `syz.1.553'. [ 244.535224][ T4279] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 244.543873][ T4279] Bluetooth: hci2: Invalid handle: 0x5393 > 0x0eff [ 247.200060][ T6764] netlink: 'syz.2.574': attribute type 29 has an invalid length. [ 247.826183][ T6765] netlink: 128 bytes leftover after parsing attributes in process `syz.3.573'. [ 247.974100][ T6765] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 248.050790][ T6765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.240840][ T6764] netlink: 'syz.2.574': attribute type 29 has an invalid length. [ 248.267472][ T6767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.574'. [ 248.843893][ T6786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.578'. [ 249.347790][ T5767] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.635060][ T6814] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.586'. [ 252.737620][ T6818] netlink: 14 bytes leftover after parsing attributes in process `syz.3.585'. [ 252.752735][ T6818] device hsr0 entered promiscuous mode [ 252.774977][ T6821] netlink: 'syz.1.588': attribute type 46 has an invalid length. [ 252.790256][ T6821] netlink: 2 bytes leftover after parsing attributes in process `syz.1.588'. [ 252.998256][ T6827] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 253.105062][ T6827] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.590'. [ 253.225957][ T6828] netlink: 'syz.4.590': attribute type 3 has an invalid length. [ 253.275661][ T6828] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.590'. [ 253.397912][ T6843] sctp: [Deprecated]: syz.3.592 (pid 6843) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.397912][ T6843] Use struct sctp_sack_info instead [ 254.175235][ T6852] netlink: 'syz.4.598': attribute type 21 has an invalid length. [ 254.267176][ T6852] netlink: 128 bytes leftover after parsing attributes in process `syz.4.598'. [ 254.276270][ T6852] netlink: 3 bytes leftover after parsing attributes in process `syz.4.598'. [ 254.856476][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 254.907113][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 254.998428][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 255.050931][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 255.077015][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 255.085401][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 255.104061][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 255.148229][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 255.199289][ T6867] netlink: 'syz.2.600': attribute type 21 has an invalid length. [ 255.749949][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.756417][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.985953][ T6923] sctp: [Deprecated]: syz.4.616 (pid 6923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.985953][ T6923] Use struct sctp_sack_info instead [ 257.404164][ T6933] netlink: 4068 bytes leftover after parsing attributes in process `syz.1.619'. [ 259.632146][ T6954] validate_nla: 25 callbacks suppressed [ 259.632183][ T6954] netlink: 'syz.3.625': attribute type 39 has an invalid length. [ 262.000428][ T6981] bond0: (slave netdevsim0): Error: Slave device does not support XDP [ 262.098666][ T6982] netlink: 14 bytes leftover after parsing attributes in process `syz.3.633'. [ 262.400591][ T6982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.542099][ T6982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.596310][ T6982] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 262.682350][ T6982] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 262.703164][ T6982] bond0 (unregistering): Released all slaves [ 262.710524][ T6993] netlink: 'syz.4.636': attribute type 3 has an invalid length. [ 262.745200][ T4279] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 262.756776][ T6993] netlink: 132 bytes leftover after parsing attributes in process `syz.4.636'. [ 262.805468][ T6998] sctp: [Deprecated]: syz.1.637 (pid 6998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.805468][ T6998] Use struct sctp_sack_info instead [ 263.936881][ T7018] netlink: 132 bytes leftover after parsing attributes in process `syz.4.642'. [ 263.959954][ T7020] netlink: 132 bytes leftover after parsing attributes in process `syz.4.642'. [ 264.128369][ T7031] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 264.154848][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.215233][ T7031] device bridge_slave_1 left promiscuous mode [ 264.235298][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.944337][ T7084] netlink: 'syz.1.654': attribute type 10 has an invalid length. [ 265.955871][ T7085] netlink: 'syz.0.657': attribute type 2 has an invalid length. [ 266.018204][ T7084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.654'. [ 266.224642][ T7085] netlink: 'syz.0.657': attribute type 1 has an invalid length. [ 266.379668][ T7085] netlink: 'syz.0.657': attribute type 4 has an invalid length. [ 266.446755][ T7085] netlink: 208312 bytes leftover after parsing attributes in process `syz.0.657'. [ 266.546321][ T7093] netlink: 'syz.3.658': attribute type 21 has an invalid length. [ 266.657521][ T7093] netlink: 100 bytes leftover after parsing attributes in process `syz.3.658'. [ 267.698357][ T7114] netlink: 'syz.2.665': attribute type 10 has an invalid length. [ 268.050378][ T7120] netlink: 'syz.0.666': attribute type 2 has an invalid length. [ 268.197421][ T7120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.666'. [ 268.267753][ T7128] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.667'. [ 268.576858][ T7132] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 268.661302][ T7142] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.667'. [ 268.809924][ T7132] team0: Device wg1 is of different type [ 268.909277][ T7128] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 269.302143][ T7128] team0: Device wg1 is of different type [ 271.002684][ T7176] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.677'. [ 273.964089][ T7176] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 274.001309][ T7176] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 274.036706][ T7176] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 274.408093][ T7208] device syzkaller0 entered promiscuous mode [ 275.229611][ T7225] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.691'. [ 275.296905][ T7221] netlink: 132 bytes leftover after parsing attributes in process `syz.3.689'. [ 275.379829][ T7225] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.691'. [ 276.597489][ T7263] netlink: 64 bytes leftover after parsing attributes in process `syz.4.698'. [ 278.059476][ T7289] delete_channel: no stack [ 278.368789][ T4279] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 278.535113][ T7315] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.706'. [ 278.805053][ T7315] netlink: zone id is out of range [ 278.826186][ T7324] netlink: 'syz.0.707': attribute type 21 has an invalid length. [ 278.859512][ T7315] netlink: zone id is out of range [ 278.864742][ T7315] netlink: zone id is out of range [ 278.881656][ T7324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.707'. [ 278.883173][ T7315] netlink: zone id is out of range [ 278.896786][ T7315] netlink: zone id is out of range [ 278.902115][ T7315] netlink: zone id is out of range [ 278.907578][ T7315] netlink: get zone limit has 8 unknown bytes [ 279.146378][ T7327] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.711'. [ 279.407736][ T7331] netlink: 132 bytes leftover after parsing attributes in process `syz.0.710'. [ 280.819266][ T7362] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 280.825402][ T7362] syzkaller1: linktype set to 773 [ 281.194325][ T7371] netlink: 'syz.4.722': attribute type 10 has an invalid length. [ 281.215606][ T7371] netlink: 164 bytes leftover after parsing attributes in process `syz.4.722'. [ 282.308995][ T7391] netlink: 14 bytes leftover after parsing attributes in process `syz.1.725'. [ 283.223920][ T7404] netlink: 132 bytes leftover after parsing attributes in process `syz.1.730'. [ 284.532887][ T7414] netlink: 'syz.4.732': attribute type 16 has an invalid length. [ 285.143969][ T7414] netlink: 152 bytes leftover after parsing attributes in process `syz.4.732'. [ 286.413739][ T7427] netlink: 'syz.0.735': attribute type 2 has an invalid length. [ 286.492374][ T7427] netlink: 'syz.0.735': attribute type 8 has an invalid length. [ 286.671871][ T7427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.735'. [ 286.792527][ T7432] netlink: 44 bytes leftover after parsing attributes in process `syz.3.737'. [ 287.103180][ T7451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.739'. [ 287.133256][ T7451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.739'. [ 287.193523][ T7452] netlink: 60 bytes leftover after parsing attributes in process `syz.2.739'. [ 287.249747][ T7451] netlink: 60 bytes leftover after parsing attributes in process `syz.2.739'. [ 288.906128][ T7485] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.746'. [ 289.011254][ T7487] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.747'. [ 289.944512][ T7511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.749'. [ 290.478991][ T7519] netlink: 14 bytes leftover after parsing attributes in process `syz.1.753'. [ 290.514868][ T7519] device hsr_slave_0 left promiscuous mode [ 290.608438][ T7519] device hsr_slave_1 left promiscuous mode [ 291.203012][ T7543] device batadv0 entered promiscuous mode [ 292.486121][ T7575] netlink: 'syz.0.768': attribute type 2 has an invalid length. [ 292.541842][ T7575] netlink: 'syz.0.768': attribute type 8 has an invalid length. [ 292.598979][ T7575] __nla_validate_parse: 1 callbacks suppressed [ 292.599029][ T7575] netlink: 132 bytes leftover after parsing attributes in process `syz.0.768'. [ 293.053497][ T7589] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.772'. [ 293.229367][ T7593] netlink: 'syz.3.773': attribute type 5 has an invalid length. [ 293.250247][ T7593] netlink: 156 bytes leftover after parsing attributes in process `syz.3.773'. [ 293.284400][ T7593] netlink: 'syz.3.773': attribute type 21 has an invalid length. [ 293.375185][ T7595] raw_sendmsg: syz.4.775 forgot to set AF_INET. Fix it! [ 293.427982][ T7603] device batadv0 entered promiscuous mode [ 293.774353][ T7616] netlink: 'syz.3.779': attribute type 10 has an invalid length. [ 295.978403][ T7646] netlink: 'syz.2.790': attribute type 39 has an invalid length. [ 296.051710][ T7648] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 296.081073][ T7648] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.791'. [ 296.191471][ T7651] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.792'. [ 296.193680][ T7648] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.791'. [ 296.781055][ T7666] ¥: port 1(team0) entered blocking state [ 296.810435][ T7666] ¥: port 1(team0) entered disabled state [ 296.841345][ T7666] device team0 entered promiscuous mode [ 296.856675][ T7666] device team_slave_0 entered promiscuous mode [ 296.863522][ T7666] device team_slave_1 entered promiscuous mode [ 296.886853][ T7666] device geneve1 entered promiscuous mode [ 296.946155][ T7674] netlink: 'syz.0.799': attribute type 3 has an invalid length. [ 296.972580][ T7674] netlink: 163968 bytes leftover after parsing attributes in process `syz.0.799'. [ 297.290203][ T7681] netlink: 132 bytes leftover after parsing attributes in process `syz.3.802'. [ 297.534984][ T7697] netlink: 'syz.4.801': attribute type 2 has an invalid length. [ 297.697106][ T7697] netlink: 'syz.4.801': attribute type 9 has an invalid length. [ 297.747469][ T7699] netlink: 'syz.4.801': attribute type 3 has an invalid length. [ 297.786809][ T7699] netlink: 163968 bytes leftover after parsing attributes in process `syz.4.801'. [ 302.109125][ T7745] netlink: 763 bytes leftover after parsing attributes in process `syz.1.811'. [ 302.935603][ T7770] netlink: 'syz.4.822': attribute type 10 has an invalid length. [ 303.169557][ T7771] device syzkaller0 entered promiscuous mode [ 303.494139][ T7792] netlink: 'syz.1.827': attribute type 2 has an invalid length. [ 303.505192][ T7792] netlink: 'syz.1.827': attribute type 1 has an invalid length. [ 303.564449][ T7792] netlink: 152 bytes leftover after parsing attributes in process `syz.1.827'. [ 307.199865][ T7855] netlink: 'syz.3.842': attribute type 27 has an invalid length. [ 307.255870][ T7856] netlink: 'syz.3.842': attribute type 3 has an invalid length. [ 307.305625][ T7855] netlink: 'syz.3.842': attribute type 4 has an invalid length. [ 307.306815][ T7856] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.842'. [ 307.357971][ T7855] netlink: 120 bytes leftover after parsing attributes in process `syz.3.842'. [ 307.428908][ T7855] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 307.642391][ T7847] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 307.685739][ T7863] netlink: 'syz.2.843': attribute type 10 has an invalid length. [ 307.967772][ T7873] netlink: 'syz.1.854': attribute type 10 has an invalid length. [ 308.436552][ T7880] netlink: 'syz.4.846': attribute type 1 has an invalid length. [ 308.560130][ T7880] netlink: 'syz.4.846': attribute type 3 has an invalid length. [ 309.246993][ T7895] netlink: 60 bytes leftover after parsing attributes in process `syz.3.849'. [ 309.980780][ T7916] netlink: 'syz.3.856': attribute type 10 has an invalid length. [ 310.003487][ T7916] netlink: 2 bytes leftover after parsing attributes in process `syz.3.856'. [ 310.068430][ T7920] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 311.633808][ T7948] netlink: 'syz.4.864': attribute type 3 has an invalid length. [ 311.694051][ T7948] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.864'. [ 311.797351][ T7954] netlink: 'syz.1.866': attribute type 2 has an invalid length. [ 311.889035][ T7955] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 312.024920][ T7954] device 0 entered promiscuous mode [ 312.081885][ T7955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.866'. [ 312.129735][ T7955] netlink: 'syz.1.866': attribute type 10 has an invalid length. [ 312.172857][ T7955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.866'. [ 313.169269][ T7974] tipc: Started in network mode [ 313.191094][ T7974] tipc: Node identity 9215a268, cluster identity 4711 [ 313.222914][ T7974] tipc: Node number set to 2450891368 [ 313.294710][ T7977] netlink: 'syz.1.873': attribute type 9 has an invalid length. [ 313.360121][ T7977] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.873'. [ 313.554788][ T7980] netlink: 'syz.3.872': attribute type 3 has an invalid length. [ 313.769321][ T7980] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.872'. [ 313.789521][ T7961] netlink: 763 bytes leftover after parsing attributes in process `syz.0.869'. [ 317.007600][ T8025] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 317.192812][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.199319][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.726257][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'. [ 320.155085][ T8048] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.891'. [ 320.175627][ T8049] netlink: 'syz.1.890': attribute type 3 has an invalid length. [ 320.287032][ T8049] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.890'. [ 321.535706][ T8066] netlink: 'syz.3.895': attribute type 10 has an invalid length. [ 321.997861][ T8082] netlink: 'syz.2.899': attribute type 2 has an invalid length. [ 322.060073][ T8083] netlink: 'syz.2.899': attribute type 2 has an invalid length. [ 322.145317][ T8081] netlink: 14 bytes leftover after parsing attributes in process `syz.2.899'. [ 322.751642][ T8102] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.906'. [ 324.126021][ T8130] netlink: 'syz.4.916': attribute type 3 has an invalid length. [ 324.136354][ T8130] netlink: 132 bytes leftover after parsing attributes in process `syz.4.916'. [ 324.154339][ T8130] Q±6ã�`Ò˜: renamed from lo [ 326.282355][ T8190] device syzkaller0 entered promiscuous mode [ 326.374259][ T8190] netlink: 'syz.1.929': attribute type 21 has an invalid length. [ 326.399927][ T8191] netlink: 'syz.4.928': attribute type 4 has an invalid length. [ 326.482443][ T8190] C: renamed from team_slave_0 [ 327.061490][ T8190] netlink: 'syz.1.929': attribute type 2 has an invalid length. [ 327.077644][ T8190] netlink: 128 bytes leftover after parsing attributes in process `syz.1.929'. [ 327.106110][ T8190] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 327.272092][ T8198] netlink: 'syz.2.931': attribute type 4 has an invalid length. [ 327.297997][ T8200] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 330.914471][ T8252] netlink: 'syz.1.945': attribute type 1 has an invalid length. [ 330.943593][ T8252] netlink: 'syz.1.945': attribute type 2 has an invalid length. [ 330.999361][ T8252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.945'. [ 331.412842][ T8265] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.950'. [ 331.433750][ T8267] netlink: 'syz.4.948': attribute type 2 has an invalid length. [ 331.478389][ T8267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.948'. [ 331.614626][ T8271] netlink: 'syz.4.948': attribute type 10 has an invalid length. [ 334.675979][ T8267] netlink: 'syz.4.948': attribute type 2 has an invalid length. [ 334.684284][ T8267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.948'. [ 334.716764][ T8278] netlink: 'syz.4.948': attribute type 10 has an invalid length. [ 334.775567][ T8292] device bridge_slave_1 left promiscuous mode [ 334.792196][ T8292] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.818503][ T8292] device bridge_slave_0 left promiscuous mode [ 334.853874][ T8292] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.073749][ T8295] netlink: 'syz.1.956': attribute type 27 has an invalid length. [ 335.090483][ T8295] netlink: 152 bytes leftover after parsing attributes in process `syz.1.956'. [ 335.141510][ T8295] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 335.170749][ T8299] netlink: 'syz.4.958': attribute type 33 has an invalid length. [ 335.197823][ T8299] netlink: 152 bytes leftover after parsing attributes in process `syz.4.958'. [ 335.234914][ T8304] netlink: 'syz.0.959': attribute type 29 has an invalid length. [ 335.333093][ T8304] netlink: 'syz.0.959': attribute type 29 has an invalid length. [ 335.357410][ T8305] netlink: 'syz.0.959': attribute type 29 has an invalid length. [ 335.458816][ T8304] netlink: 'syz.0.959': attribute type 3 has an invalid length. [ 335.488182][ T8304] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.959'. [ 336.445961][ T8326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.963'. [ 336.513600][ T8326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.963'. [ 336.544225][ T8326] netlink: 9 bytes leftover after parsing attributes in process `syz.1.963'. [ 336.581660][ T8331] netlink: 'syz.1.963': attribute type 11 has an invalid length. [ 336.640217][ T8331] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.963'. [ 336.789203][ T8324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.693946][ T8350] netlink: 'syz.4.970': attribute type 3 has an invalid length. [ 337.720286][ T8350] netlink: 'syz.4.970': attribute type 4 has an invalid length. [ 337.761500][ T8350] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.970'. [ 339.521646][ T8341] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.968'. [ 339.951463][ T8363] netlink: 132 bytes leftover after parsing attributes in process `syz.1.976'. [ 341.006763][ T8384] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.984'. [ 341.095313][ T8388] netlink: 'syz.1.984': attribute type 10 has an invalid length. [ 341.121200][ T8388] netlink: 156 bytes leftover after parsing attributes in process `syz.1.984'. [ 343.899138][ T8405] netlink: 'syz.3.987': attribute type 8 has an invalid length. [ 343.956662][ T8405] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 343.984978][ T8405] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.987'. [ 344.079970][ T8409] netlink: 'syz.2.988': attribute type 20 has an invalid length. [ 344.536634][ T8414] netlink: 'syz.0.990': attribute type 9 has an invalid length. [ 344.627396][ T8414] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.990'. [ 345.023826][ T8422] netlink: 152 bytes leftover after parsing attributes in process `syz.0.990'. [ 345.555393][ T8436] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.996'. [ 348.915662][ T8462] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1001'. [ 348.931581][ T8459] netlink: 'syz.2.1003': attribute type 3 has an invalid length. [ 348.995963][ T8459] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1003'. [ 349.067004][ T8460] netlink: 'syz.4.1001': attribute type 3 has an invalid length. [ 349.159758][ T8460] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1001'. [ 349.682983][ T8480] netlink: 'syz.1.1007': attribute type 7 has an invalid length. [ 349.986210][ T8487] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1009'. [ 350.161934][ T8492] tap0: tun_chr_ioctl cmd 1074025675 [ 350.183584][ T8492] tap0: persist enabled [ 350.212201][ T8492] tap0: tun_chr_ioctl cmd 1074025675 [ 350.243546][ T8492] tap0: persist disabled [ 350.798952][ T8503] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1015'. [ 350.958780][ T8514] netlink: 'syz.3.1017': attribute type 2 has an invalid length. [ 350.984166][ T8514] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1017'. [ 352.281421][ T8520] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1019'. [ 352.338116][ T8520] netlink: zone id is out of range [ 352.365923][ T8520] netlink: zone id is out of range [ 352.383462][ T8520] netlink: zone id is out of range [ 352.406431][ T8520] netlink: zone id is out of range [ 352.425997][ T8520] netlink: zone id is out of range [ 352.452984][ T8520] netlink: zone id is out of range [ 352.477119][ T8520] netlink: zone id is out of range [ 352.482715][ T8520] netlink: zone id is out of range [ 352.515840][ T8520] netlink: zone id is out of range [ 352.533886][ T8520] netlink: zone id is out of range [ 353.543528][ T8508] netlink: 'syz.2.1015': attribute type 10 has an invalid length. [ 353.552514][ T8508] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1015'. [ 353.636885][ T8522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1019'. [ 353.907845][ T8532] netlink: 'syz.1.1022': attribute type 9 has an invalid length. [ 353.915761][ T8532] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1022'. [ 354.062120][ T8539] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1024'. [ 354.126466][ T8541] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1025'. [ 358.503805][ T8580] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 358.527266][ T8579] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1034'. [ 358.541588][ T8587] netlink: 'syz.3.1034': attribute type 10 has an invalid length. [ 358.551224][ T8587] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1034'. [ 358.962820][ T8601] netlink: 'syz.4.1040': attribute type 10 has an invalid length. [ 359.256684][ T8616] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1046'. [ 359.331940][ T8616] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 359.661555][ T8618] device syzkaller0 entered promiscuous mode [ 366.315362][ T8650] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 366.325090][ T8650] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 366.335234][ T8650] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 367.185021][ T8706] nr0: port 1(hsr0) entered blocking state [ 367.234721][ T8706] nr0: port 1(hsr0) entered disabled state [ 367.338220][ T8706] device hsr0 entered promiscuous mode [ 370.065746][ T8732] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1074'. [ 373.057948][ T8749] netlink: 'syz.3.1076': attribute type 10 has an invalid length. [ 373.117550][ T8749] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1076'. [ 373.145415][ T8755] netlink: 'syz.0.1077': attribute type 27 has an invalid length. [ 373.161712][ T8755] netlink: 'syz.0.1077': attribute type 4 has an invalid length. [ 373.180701][ T8755] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1077'. [ 373.225781][ T8755] net_ratelimit: 247 callbacks suppressed [ 373.225798][ T8755] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 374.106031][ T8780] netlink: 'syz.1.1086': attribute type 2 has an invalid length. [ 374.121337][ T8780] netlink: 'syz.1.1086': attribute type 8 has an invalid length. [ 374.131496][ T8780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1086'. [ 374.169607][ T8780] netlink: 'syz.1.1086': attribute type 2 has an invalid length. [ 374.247738][ T8781] netlink: 'syz.1.1086': attribute type 29 has an invalid length. [ 374.255639][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 374.255653][ T8780] netlink: 'syz.1.1086': attribute type 8 has an invalid length. [ 374.295734][ T8780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1086'. [ 374.395854][ T8781] netlink: 'syz.1.1086': attribute type 29 has an invalid length. [ 374.404129][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1086'. [ 374.682717][ T8788] bridge_slave_0: mtu greater than device maximum [ 374.778706][ T8797] bridge_slave_0: mtu greater than device maximum [ 377.060705][ T8829] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 377.121870][ T8829] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 377.811679][ T8855] netlink: 'syz.4.1103': attribute type 2 has an invalid length. [ 377.873551][ T8855] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1103'. [ 377.935083][ T8852] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1103'. [ 377.979893][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 378.029714][ T8860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1103'. [ 378.087769][ T8859] device pim6reg1 entered promiscuous mode [ 378.629423][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.635864][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.874293][ T8867] validate_nla: 5 callbacks suppressed [ 378.874313][ T8867] netlink: 'syz.2.1108': attribute type 15 has an invalid length. [ 378.888713][ T8867] netlink: 'syz.2.1108': attribute type 16 has an invalid length. [ 378.896976][ T8867] netlink: 'syz.2.1108': attribute type 4 has an invalid length. [ 378.915363][ T8867] netlink: 'syz.2.1108': attribute type 6 has an invalid length. [ 378.924284][ T8867] netlink: 'syz.2.1108': attribute type 15 has an invalid length. [ 378.941542][ T8867] netlink: 'syz.2.1108': attribute type 16 has an invalid length. [ 378.965882][ T8867] netlink: 'syz.2.1108': attribute type 20 has an invalid length. [ 378.982980][ T8867] netlink: 'syz.2.1108': attribute type 21 has an invalid length. [ 378.993217][ T8867] netlink: 'syz.2.1108': attribute type 23 has an invalid length. [ 379.008741][ T8867] netlink: 'syz.2.1108': attribute type 25 has an invalid length. [ 379.036491][ T8867] netlink: 13226 bytes leftover after parsing attributes in process `syz.2.1108'. [ 381.650103][ T8883] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1115'. [ 383.713719][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 383.721498][ T8901] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1123'. [ 383.915637][ T8904] validate_nla: 8 callbacks suppressed [ 383.915657][ T8904] netlink: 'syz.0.1123': attribute type 2 has an invalid length. [ 383.936708][ T8904] netlink: 'syz.0.1123': attribute type 8 has an invalid length. [ 384.017455][ T8904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1123'. [ 384.520732][ T8907] netlink: 'syz.0.1123': attribute type 29 has an invalid length. [ 384.539373][ T8907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 388.269422][ T8988] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 388.357062][ T8988] batman_adv: batadv0: Adding interface: netdevsim0 [ 388.374490][ T8988] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.476773][ T8988] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 388.494492][ T8989] netlink: 'syz.0.1136': attribute type 10 has an invalid length. [ 389.913640][ T9012] netlink: 'syz.2.1140': attribute type 2 has an invalid length. [ 389.975383][ T9012] netlink: 'syz.2.1140': attribute type 8 has an invalid length. [ 390.054459][ T9012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1140'. [ 390.271121][ T9006] netlink: 'syz.2.1140': attribute type 29 has an invalid length. [ 390.344266][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 392.696756][ T9013] netlink: 'syz.2.1140': attribute type 2 has an invalid length. [ 392.715553][ T9013] netlink: 'syz.2.1140': attribute type 8 has an invalid length. [ 392.727117][ T9013] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1140'. [ 392.752281][ T9006] netlink: 'syz.2.1140': attribute type 29 has an invalid length. [ 392.777299][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 393.551857][ T9048] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1149'. [ 393.740517][ T9053] netlink: 'syz.2.1152': attribute type 21 has an invalid length. [ 399.729097][ T9109] netlink: 'syz.3.1160': attribute type 2 has an invalid length. [ 400.133242][ T9113] netlink: 'syz.1.1162': attribute type 22 has an invalid length. [ 400.411083][ T9109] device .*! entered promiscuous mode [ 400.655111][ T9130] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1164'. [ 402.999859][ T9132] netlink: 'syz.4.1165': attribute type 2 has an invalid length. [ 403.027823][ T9132] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 403.076791][ T9132] netlink: 'syz.4.1165': attribute type 4 has an invalid length. [ 403.092927][ T9132] netlink: 208312 bytes leftover after parsing attributes in process `syz.4.1165'. [ 403.410556][ T9152] netlink: 'syz.3.1170': attribute type 10 has an invalid length. [ 403.430589][ T9152] device syz_tun entered promiscuous mode [ 404.047208][ T9168] netlink: 'syz.4.1176': attribute type 15 has an invalid length. [ 404.065309][ T4279] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 404.166792][ T9168] netlink: 'syz.4.1176': attribute type 7 has an invalid length. [ 404.174598][ T9168] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1176'. [ 404.344015][ T9179] netlink: 'syz.2.1178': attribute type 46 has an invalid length. [ 408.948620][ T9242] netlink: 'syz.0.1195': attribute type 29 has an invalid length. [ 409.553361][ T9242] netlink: 'syz.0.1195': attribute type 29 has an invalid length. [ 409.576506][ T9249] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.1197'. [ 409.604245][ T9243] netlink: 'syz.0.1195': attribute type 29 has an invalid length. [ 410.299055][ T9274] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1214'. [ 410.318243][ T9274] netlink: zone id is out of range [ 410.334628][ T9268] netlink: 'syz.3.1203': attribute type 10 has an invalid length. [ 410.347636][ T9274] netlink: zone id is out of range [ 410.406276][ T9274] netlink: del zone limit has 4 unknown bytes [ 410.419515][ T9276] netlink: 'syz.2.1204': attribute type 22 has an invalid length. [ 410.939616][ T9281] netlink: 'syz.0.1205': attribute type 2 has an invalid length. [ 410.976747][ T9281] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 410.991553][ T9281] netlink: 'syz.0.1205': attribute type 4 has an invalid length. [ 411.066818][ T9281] netlink: 208312 bytes leftover after parsing attributes in process `syz.0.1205'. [ 411.096121][ T4279] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 411.098529][ T9299] netlink: 'syz.3.1211': attribute type 11 has an invalid length. [ 411.257177][ T9299] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1211'. [ 411.524916][ T9303] netlink: 'syz.4.1213': attribute type 2 has an invalid length. [ 411.556891][ T9303] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1213'. [ 411.588083][ T9306] sctp: [Deprecated]: syz.4.1213 (pid 9306) Use of struct sctp_assoc_value in delayed_ack socket option. [ 411.588083][ T9306] Use struct sctp_sack_info instead [ 412.548249][ T9312] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1227'. [ 412.607409][ T9312] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1227'. [ 412.734728][ T9312] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.1227'. [ 413.328270][ T9327] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1222'. [ 413.884466][ T9339] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1223'. [ 414.458968][ T9359] validate_nla: 4 callbacks suppressed [ 414.458988][ T9359] netlink: 'syz.3.1226': attribute type 2 has an invalid length. [ 414.566807][ T9359] netlink: 'syz.3.1226': attribute type 1 has an invalid length. [ 414.652384][ T9359] netlink: 'syz.3.1226': attribute type 4 has an invalid length. [ 414.705846][ T9359] netlink: 208312 bytes leftover after parsing attributes in process `syz.3.1226'. [ 414.931673][ T9367] sock: sock_timestamping_bind_phc: sock not bind to device [ 417.019073][ T9362] ¥: port 1(team0) entered blocking state [ 417.025001][ T9362] ¥: port 1(team0) entered disabled state [ 417.033743][ T9362] device team0 entered promiscuous mode [ 417.045498][ T9362] device team_slave_0 entered promiscuous mode [ 417.067516][ T9362] device team_slave_1 entered promiscuous mode [ 417.243221][ T9397] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1236'. [ 417.249797][ T9368] device team0 left promiscuous mode [ 417.259269][ T9368] device team_slave_0 left promiscuous mode [ 417.276966][ T9368] device team_slave_1 left promiscuous mode [ 417.293693][ T9368] ¥: port 1(team0) entered disabled state [ 418.530322][ T9407] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1239'. [ 418.585502][ T9415] netlink: 'syz.0.1238': attribute type 2 has an invalid length. [ 418.603911][ T9415] netlink: 'syz.0.1238': attribute type 3 has an invalid length. [ 418.651278][ T9416] netlink: 'syz.2.1240': attribute type 11 has an invalid length. [ 418.661475][ T9415] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1238'. [ 418.684161][ T9414] netlink: 'syz.2.1240': attribute type 11 has an invalid length. [ 421.901473][ T9441] netlink: 'syz.2.1249': attribute type 2 has an invalid length. [ 421.926627][ T9441] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1249'. [ 422.353866][ T9457] netlink: 'syz.4.1252': attribute type 13 has an invalid length. [ 422.387897][ T9457] netlink: 'syz.4.1252': attribute type 58 has an invalid length. [ 422.446263][ T9457] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1252'. [ 422.550135][ T9458] netlink: 'syz.1.1251': attribute type 10 has an invalid length. [ 422.559163][ T9464] netlink: 'syz.0.1254': attribute type 4 has an invalid length. [ 422.567525][ T9464] netlink: 'syz.0.1254': attribute type 26 has an invalid length. [ 422.575904][ T9464] netlink: 'syz.0.1254': attribute type 26 has an invalid length. [ 422.608857][ T9464] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.1254'. [ 422.763883][ T9462] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1253'. [ 423.323784][ T9462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.420913][ T9462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.610496][ T9462] bond0 (unregistering): Released all slaves [ 423.850953][ T9486] netlink: 'syz.1.1259': attribute type 21 has an invalid length. [ 423.894643][ T9486] netlink: 'syz.1.1259': attribute type 1 has an invalid length. [ 424.040956][ T9493] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1261'. [ 427.376830][ T9512] netlink: 'syz.1.1267': attribute type 10 has an invalid length. [ 427.416328][ T9512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.436241][ T9512] device bond0 entered promiscuous mode [ 427.492878][ T9512] device bond_slave_0 entered promiscuous mode [ 427.499500][ T9512] device bond_slave_1 entered promiscuous mode [ 427.516575][ T9512] team0: Port device bond0 added [ 427.542286][ T9516] netlink: 'syz.3.1268': attribute type 17 has an invalid length. [ 427.559285][ T9516] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1268'. [ 427.981730][ T9524] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1271'. [ 428.015062][ T9529] netlink: 180900 bytes leftover after parsing attributes in process `syz.3.1272'. [ 428.027964][ T9529] openvswitch: netlink: Flow actions attr not present in new flow. [ 428.181339][ T9532] device syz_tun left promiscuous mode [ 428.331009][ T9535] device veth1_macvtap left promiscuous mode [ 428.889758][ T9556] netlink: 'syz.1.1279': attribute type 21 has an invalid length. [ 428.991272][ T9556] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1279'. [ 431.088147][ T9571] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1277'. [ 431.287861][ T4279] Bluetooth: hci1: unknown advertising packet type: 0x6c [ 431.287926][ T4279] Bluetooth: hci1: Dropping invalid advertising data [ 431.303856][ T4279] Bluetooth: hci1: Malformed LE Event: 0x02 [ 433.261729][ T9591] device syzkaller0 entered promiscuous mode [ 434.473124][ T9614] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.1288'. [ 440.073327][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.079920][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.724379][ T9645] netlink: 'syz.4.1296': attribute type 21 has an invalid length. [ 440.741682][ T9645] netlink: 'syz.4.1296': attribute type 5 has an invalid length. [ 440.760145][ T9664] netlink: 'syz.0.1299': attribute type 27 has an invalid length. [ 440.970217][ T9664] bond0: (slave bond_slave_0): Releasing backup interface [ 441.775917][ T9705] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1309'. [ 441.817377][ T9705] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1309'. [ 444.507622][ T9726] netlink: 'syz.0.1313': attribute type 21 has an invalid length. [ 444.535708][ T9726] IPv6: NLM_F_CREATE should be specified when creating new route [ 444.576930][ T9726] IPv6: Can't replace route, no match found [ 444.618041][ T9727] netlink: 'syz.0.1313': attribute type 1 has an invalid length. [ 444.625873][ T9727] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.1313'. [ 445.517170][ T9738] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.1316'. [ 445.556767][ T9738] openvswitch: netlink: Flow actions attr not present in new flow. [ 445.568494][ T9745] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.1316'. [ 445.660807][ T9745] openvswitch: netlink: Flow actions attr not present in new flow. [ 445.678777][ T4279] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 445.862075][ T9758] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.1320'. [ 449.083010][ T9774] device pim6reg1 entered promiscuous mode [ 449.503471][ T9797] netlink: 'syz.2.1332': attribute type 29 has an invalid length. [ 449.560294][ T9787] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 449.595677][ T9787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.617081][ T9795] netlink: 'syz.4.1333': attribute type 21 has an invalid length. [ 449.628868][ T9797] netlink: 'syz.2.1332': attribute type 29 has an invalid length. [ 449.658148][ T9799] netlink: 'syz.2.1332': attribute type 29 has an invalid length. [ 450.420913][ T9823] netlink: 'syz.3.1340': attribute type 2 has an invalid length. [ 450.552754][ T9823] device 0 entered promiscuous mode [ 453.495230][ T9875] netlink: 'syz.3.1352': attribute type 39 has an invalid length. [ 453.539100][ T9878] netlink: 'syz.0.1354': attribute type 1 has an invalid length. [ 453.574684][ T9878] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.1354'. [ 456.641777][ T9875] device hsr_slave_1 left promiscuous mode [ 458.002419][ T9906] netlink: 'syz.2.1359': attribute type 2 has an invalid length. [ 458.020056][ T9906] netlink: 'syz.2.1359': attribute type 8 has an invalid length. [ 458.037742][ T9906] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1359'. [ 458.777085][ T9943] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1369'. [ 462.613292][ T9986] netlink: 'syz.3.1380': attribute type 10 has an invalid length. [ 462.699462][ T9986] team0: Device nlmon0 is of different type [ 463.929626][T10009] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1388'. [ 466.189718][T10009] team0: Port device team_slave_0 removed [ 466.205390][T10009] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 466.221727][T10014] netlink: 'syz.1.1389': attribute type 2 has an invalid length. [ 466.233188][T10014] netlink: 119 bytes leftover after parsing attributes in process `syz.1.1389'. [ 466.259101][T10021] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1388'. [ 467.336274][T10053] netlink: 'syz.2.1396': attribute type 21 has an invalid length. [ 467.856086][T10077] netlink: 'syz.2.1400': attribute type 21 has an invalid length. [ 467.897290][T10077] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.1400'. [ 471.000110][T10110] netlink: 'syz.4.1408': attribute type 9 has an invalid length. [ 471.061944][T10110] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1408'. [ 471.229472][T10115] syz.1.1409[10115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.229594][T10115] syz.1.1409[10115] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 471.297157][T10117] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1410'. [ 471.300763][T10115] netlink: 'syz.1.1409': attribute type 2 has an invalid length. [ 471.323102][T10117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.342250][T10115] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 471.377428][T10115] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1409'. [ 475.567662][T10181] tipc: Started in network mode [ 475.588871][T10181] tipc: Node identity 9215a268, cluster identity 4711 [ 475.595703][T10181] tipc: Node number set to 2450891368 [ 484.627444][T10297] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 485.106481][T10308] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1458'. [ 485.235610][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1458'. [ 485.260133][T10307] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1458'. [ 486.108598][T10321] netlink: 'syz.2.1460': attribute type 7 has an invalid length. [ 488.842643][T10353] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 488.891704][T10353] device syzkaller0 entered promiscuous mode [ 494.204634][T10367] netlink: 'syz.1.1471': attribute type 10 has an invalid length. [ 494.213220][T10367] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1471'. [ 495.116099][T10426] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1485'. [ 495.134989][T10414] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 498.208866][T10420] delete_channel: no stack [ 498.286914][T10414] team0 (unregistering): Port device team_slave_1 removed [ 498.360813][T10414] team0 (unregistering): Port device geneve1 removed [ 498.503179][T10415] netlink: 'syz.0.1483': attribute type 10 has an invalid length. [ 498.550929][T10426] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 498.643147][T10444] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1488'. [ 498.705239][T10425] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1485'. [ 498.747181][T10449] netlink: 'syz.3.1491': attribute type 29 has an invalid length. [ 498.775496][T10425] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 498.824961][T10425] CPU: 1 PID: 10425 Comm: syz.1.1485 Not tainted syzkaller #0 [ 498.832536][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.842899][T10425] Call Trace: [ 498.846211][T10425] [ 498.849187][T10425] dump_stack_lvl+0x188/0x24e [ 498.853982][T10425] ? show_regs_print_info+0x12/0x12 [ 498.859315][T10425] ? load_image+0x410/0x410 [ 498.863955][T10425] sysfs_warn_dup+0x8a/0xa0 [ 498.868597][T10425] sysfs_do_create_link_sd+0xc0/0x110 [ 498.874065][T10425] device_add+0x83b/0x1050 [ 498.878634][T10425] wiphy_register+0x1d8b/0x2aa0 [ 498.883726][T10425] ? cfg80211_event_work+0x40/0x40 [ 498.888884][T10425] ? minstrel_ht_alloc+0x894/0xa20 [ 498.894139][T10425] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 498.900341][T10425] ieee80211_register_hw+0x2d48/0x39f0 [ 498.905946][T10425] ? ieee80211_register_hw+0xf41/0x39f0 [ 498.911558][T10425] ? ieee80211_register_hw+0xf41/0x39f0 [ 498.917149][T10425] ? ieee80211_tasklet_handler+0x20/0x20 [ 498.922802][T10425] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 498.928792][T10425] ? __debug_object_init+0xed/0x440 [ 498.934063][T10425] ? memset+0x1e/0x40 [ 498.938115][T10425] ? __hrtimer_init+0x189/0x270 [ 498.943052][T10425] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 498.948890][T10425] ? memcpy+0x3c/0x60 [ 498.952912][T10425] hwsim_new_radio_nl+0xab7/0xc90 [ 498.958038][T10425] genl_family_rcv_msg_doit+0x22f/0x350 [ 498.963642][T10425] ? end_current_label_crit_section+0x170/0x170 [ 498.969974][T10425] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 498.975920][T10425] ? bpf_lsm_capable+0x5/0x10 [ 498.980654][T10425] ? security_capable+0x85/0xb0 [ 498.986029][T10425] genl_rcv_msg+0x601/0x790 [ 498.990625][T10425] ? genl_bind+0x360/0x360 [ 498.995100][T10425] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 499.001500][T10425] ? lock_chain_count+0x20/0x20 [ 499.006688][T10425] netlink_rcv_skb+0x1ef/0x440 [ 499.011505][T10425] ? genl_bind+0x360/0x360 [ 499.015960][T10425] ? netlink_ack+0x1160/0x1160 [ 499.020783][T10425] ? down_read+0x1a8/0x2d0 [ 499.025239][T10425] genl_rcv+0x24/0x40 [ 499.029249][T10425] netlink_unicast+0x7ad/0x920 [ 499.034073][T10425] netlink_sendmsg+0x8ad/0xbd0 [ 499.038919][T10425] ? netlink_getsockopt+0x550/0x550 [ 499.044184][T10425] ? apparmor_socket_sendmsg+0x8a/0x330 [ 499.049768][T10425] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 499.055149][T10425] ? security_socket_sendmsg+0x7c/0xa0 [ 499.060748][T10425] ? netlink_getsockopt+0x550/0x550 [ 499.066018][T10425] ____sys_sendmsg+0x5ed/0x9a0 [ 499.070871][T10425] ? rcu_is_watching+0x11/0xa0 [ 499.075724][T10425] ? lockdep_hardirqs_on+0x94/0x140 [ 499.080952][T10425] ? __sys_sendmsg_sock+0x30/0x30 [ 499.086021][T10425] ? ___sys_sendmsg+0x287/0x360 [ 499.090931][T10425] ___sys_sendmsg+0x2a2/0x360 [ 499.095675][T10425] ? __sys_sendmsg+0x2a0/0x2a0 [ 499.100569][T10425] ? perf_trace_preemptirq_template+0xa8/0x320 [ 499.106820][T10425] ? irqentry_enter+0x33/0x50 [ 499.111643][T10425] __se_sys_sendmsg+0x1c3/0x2b0 [ 499.116611][T10425] ? __x64_sys_sendmsg+0x80/0x80 [ 499.121625][T10425] ? syscall_enter_from_user_mode+0x2a/0x80 [ 499.127562][T10425] do_syscall_64+0x4c/0xa0 [ 499.132001][T10425] ? clear_bhb_loop+0x60/0xb0 [ 499.136721][T10425] ? clear_bhb_loop+0x60/0xb0 [ 499.141424][T10425] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.147352][T10425] RIP: 0033:0x7f6be499e159 [ 499.151799][T10425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.171439][T10425] RSP: 002b:00007f6be5877028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.179912][T10425] RAX: ffffffffffffffda RBX: 00007f6be4c25fa0 RCX: 00007f6be499e159 [ 499.187910][T10425] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 499.195908][T10425] RBP: 00007f6be4a3506b R08: 0000000000000000 R09: 0000000000000000 [ 499.203906][T10425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.211902][T10425] R13: 00007f6be4c26038 R14: 00007f6be4c25fa0 R15: 00007ffdf44d85a8 [ 499.219946][T10425] [ 499.509811][T10449] netlink: 'syz.3.1491': attribute type 29 has an invalid length. [ 499.748748][T10464] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 499.787900][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.999528][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.798325][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.804913][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.597601][T10514] netlink: 'syz.2.1503': attribute type 40 has an invalid length. [ 509.958227][T10511] delete_channel: no stack [ 510.357131][T10541] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1508'. [ 510.370960][T10541] A link change request failed with some changes committed already. Interface Q±6ã�`Ò˜ may have been left with an inconsistent configuration, please check. [ 510.940950][T10564] IPv6: NLM_F_CREATE should be specified when creating new route [ 510.957029][T10564] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1513'. [ 514.553660][T10594] netlink: 'syz.0.1520': attribute type 13 has an invalid length. [ 514.603222][T10594] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1520'. [ 515.021882][T10605] netlink: 'syz.3.1522': attribute type 1 has an invalid length. [ 515.050935][T10605] netlink: 'syz.3.1522': attribute type 3 has an invalid length. [ 517.391911][T10590] delete_channel: no stack [ 517.838927][T10622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'. [ 518.273531][T10628] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1530'. [ 518.340758][T10628] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1530'. [ 518.645891][T10636] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1530'. [ 518.791071][T10635] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1530'. [ 519.500025][T10652] device syzkaller0 entered promiscuous mode [ 526.153416][T10746] device sit0 entered promiscuous mode [ 526.619445][T10758] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1559'. [ 528.450225][T10784] delete_channel: no stack [ 530.164669][T10822] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1572'. [ 531.253657][T10840] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1575'. [ 531.935423][T10848] netlink: 'syz.0.1577': attribute type 21 has an invalid length. [ 532.037512][T10848] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 532.045472][T10848] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1577'. [ 532.772180][T10858] netlink: 'syz.3.1581': attribute type 29 has an invalid length. [ 532.799194][T10858] netlink: 'syz.3.1581': attribute type 29 has an invalid length. [ 532.880515][T10861] netlink: 'syz.3.1581': attribute type 29 has an invalid length. [ 532.916423][T10866] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1582'. [ 532.966003][T10870] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1582'. [ 533.024816][T10869] netlink: 'syz.0.1583': attribute type 21 has an invalid length. [ 533.370002][T10881] netlink: 'syz.4.1586': attribute type 10 has an invalid length. [ 533.380447][T10882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1587'. [ 533.609398][T10882] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1587'. [ 533.784730][T10882] netlink: 'syz.0.1587': attribute type 21 has an invalid length. [ 533.821051][T10882] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1587'. [ 533.884472][T10882] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1587'. [ 535.173467][T10919] netlink: 'syz.0.1596': attribute type 15 has an invalid length. [ 535.235362][T10919] netlink: 'syz.0.1596': attribute type 16 has an invalid length. [ 535.264878][T10919] netlink: 13226 bytes leftover after parsing attributes in process `syz.0.1596'. [ 543.130551][T10962] validate_nla: 11 callbacks suppressed [ 543.130571][T10962] netlink: 'syz.3.1602': attribute type 39 has an invalid length. [ 543.238379][T10964] netlink: 'syz.3.1602': attribute type 39 has an invalid length. [ 543.314945][T10968] netlink: 'syz.0.1604': attribute type 13 has an invalid length. [ 543.324019][T10968] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1604'. [ 543.335690][T10968] syz_tun: refused to change device tx_queue_len [ 543.364230][T10968] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 543.573910][T10980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 543.594081][T10980] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 543.633482][T10982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1606'. [ 544.794683][T10990] netlink: 'syz.1.1609': attribute type 21 has an invalid length. [ 544.827568][T10990] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 544.835380][T10990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1609'. [ 545.144131][T11016] netlink: 'syz.4.1615': attribute type 1 has an invalid length. [ 545.174585][T11016] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1615'. [ 546.470094][T11043] netlink: 'syz.1.1620': attribute type 11 has an invalid length. [ 546.504392][T11043] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1620'. [ 546.568092][T11048] netlink: 'syz.4.1622': attribute type 3 has an invalid length. [ 546.611236][T11048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1622'. [ 546.648933][T11041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.760319][T11055] netlink: 'syz.2.1626': attribute type 21 has an invalid length. [ 546.794157][T11055] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 546.828236][T11055] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1626'. [ 546.943389][T11057] netlink: 'syz.0.1637': attribute type 25 has an invalid length. [ 547.157953][T11071] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1629'. [ 548.364404][T11093] device syzkaller0 entered promiscuous mode [ 554.786392][T11138] validate_nla: 3 callbacks suppressed [ 554.786412][T11138] netlink: 'syz.0.1644': attribute type 21 has an invalid length. [ 554.816732][T11138] __nla_validate_parse: 2 callbacks suppressed [ 554.816821][T11138] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.1644'. [ 554.869266][T11155] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1646'. [ 554.914852][T11155] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 554.983486][T11155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 555.747831][T11174] netlink: 'syz.3.1647': attribute type 21 has an invalid length. [ 555.937588][T11174] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 556.112286][T11174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1647'. [ 558.075717][T11219] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1659'. [ 558.114517][T11217] netlink: 'syz.4.1662': attribute type 21 has an invalid length. [ 558.148623][T11213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1659'. [ 558.196842][T11217] netlink: 'syz.4.1662': attribute type 6 has an invalid length. [ 558.266736][T11217] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1662'. [ 558.353669][T11213] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1659'. [ 558.436300][T11219] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1659'. [ 558.477917][T11230] netlink: 'syz.2.1664': attribute type 10 has an invalid length. [ 559.381395][T11247] netlink: 'syz.4.1668': attribute type 7 has an invalid length. [ 559.423559][T11247] netlink: 'syz.4.1668': attribute type 6 has an invalid length. [ 559.928045][T11253] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1669'. [ 561.895079][T11270] netlink: 'syz.2.1673': attribute type 10 has an invalid length. [ 562.062132][T11276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1673'. [ 562.062238][T11271] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1673'. [ 562.183526][T11276] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1673'. [ 562.318817][T11280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1673'. [ 562.950453][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.956979][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.199367][T11313] netlink: 'syz.1.1680': attribute type 3 has an invalid length. [ 563.270905][T11313] netlink: 'syz.1.1680': attribute type 1 has an invalid length. [ 563.376791][T11313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1680'. [ 564.666744][T11345] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 564.685273][T11345] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 564.710268][T11345] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 564.778307][T11345] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 564.848961][T11345] netlink: 'syz.3.1687': attribute type 29 has an invalid length. [ 565.782776][T11361] netlink: 'syz.0.1691': attribute type 5 has an invalid length. [ 565.959644][T11366] netlink: 'syz.2.1694': attribute type 2 has an invalid length. [ 566.019678][T11367] netlink: 3529 bytes leftover after parsing attributes in process `syz.4.1692'. [ 566.031151][T11366] netlink: 170140 bytes leftover after parsing attributes in process `syz.2.1694'. [ 566.085103][T11367] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.1692'. [ 566.116642][T11367] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.1692'. [ 566.506647][T11383] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1698'. [ 566.932654][T11381] validate_nla: 1 callbacks suppressed [ 566.932695][T11381] netlink: 'syz.2.1698': attribute type 10 has an invalid length. [ 567.428333][T11393] netlink: 'syz.0.1701': attribute type 5 has an invalid length. [ 567.806093][T11412] device syzkaller0 entered promiscuous mode [ 570.245705][T11434] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 570.262694][T11434] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.278426][T11435] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1711'. [ 573.633816][T11485] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1722'. [ 573.887371][T11490] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 574.023703][T11490] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 574.147987][T11489] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1724'. [ 575.456400][T11535] netlink: 'syz.0.1733': attribute type 13 has an invalid length. [ 575.530233][T11535] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1733'. [ 575.592580][T11535] erspan0: refused to change device tx_queue_len [ 575.613259][T11535] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 575.715627][T11539] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1735'. [ 575.848475][T11538] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1735'. [ 575.989142][T11543] netlink: 'syz.3.1736': attribute type 10 has an invalid length. [ 576.019811][T11543] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1736'. [ 576.058590][T11547] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1737'. [ 576.264481][T11552] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1739'. [ 576.482794][T11561] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1741'. [ 576.672724][T11566] netlink: 'syz.1.1742': attribute type 11 has an invalid length. [ 576.692791][T11566] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1742'. [ 576.851838][T11567] netlink: 'syz.1.1742': attribute type 2 has an invalid length. [ 576.897037][T11567] netlink: 'syz.1.1742': attribute type 8 has an invalid length. [ 577.430536][T11565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.048183][T11592] netlink: 'syz.2.1748': attribute type 3 has an invalid length. [ 579.457923][T11623] __nla_validate_parse: 2 callbacks suppressed [ 579.457992][T11623] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1756'. [ 580.603634][T11660] netlink: 'syz.1.1762': attribute type 2 has an invalid length. [ 580.648423][T11660] netlink: 'syz.1.1762': attribute type 8 has an invalid length. [ 580.703535][T11660] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1762'. [ 581.350406][T11673] netlink: 'syz.0.1765': attribute type 2 has an invalid length. [ 581.393725][T11673] netlink: 'syz.0.1765': attribute type 4 has an invalid length. [ 581.448207][T11673] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1765'. [ 581.771867][T11685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1769'. [ 581.813400][T11681] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1770'. [ 581.866037][T11681] device hsr_slave_0 left promiscuous mode [ 582.455528][T11698] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1774'. [ 582.516753][T11685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1769'. [ 582.577364][T11693] netlink: 'syz.1.1769': attribute type 16 has an invalid length. [ 582.607151][T11693] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1769'. [ 583.072858][T11706] netlink: 'syz.3.1775': attribute type 10 has an invalid length. [ 583.336426][T11706] team0: Port device hsr_slave_0 added [ 583.795160][T11721] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1779'. [ 583.857752][T11725] netlink: 'syz.4.1781': attribute type 1 has an invalid length. [ 583.865594][T11725] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1781'. [ 584.585242][T11739] __nla_validate_parse: 8 callbacks suppressed [ 584.585267][T11739] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1782'. [ 584.869039][T11746] netlink: 'syz.3.1786': attribute type 3 has an invalid length. [ 584.912586][T11746] netlink: 'syz.3.1786': attribute type 4 has an invalid length. [ 584.935717][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 584.973172][T11746] netlink: 'syz.3.1786': attribute type 3 has an invalid length. [ 585.076791][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 585.147139][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 585.155966][T11753] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 585.197516][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 585.274113][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 585.357243][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 585.396873][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 585.445875][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 585.479763][T11746] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.1786'. [ 585.617083][T11746] validate_nla: 187 callbacks suppressed [ 585.617103][T11746] netlink: 'syz.3.1786': attribute type 3 has an invalid length. [ 585.658139][T11746] netlink: 'syz.3.1786': attribute type 4 has an invalid length. [ 586.216977][ T4279] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 586.224711][ T4279] Bluetooth: hci1: Invalid handle: 0xffff > 0x0eff [ 588.818594][T11834] netlink: 'syz.4.1806': attribute type 11 has an invalid length. [ 589.030552][T11840] netlink: 'syz.4.1806': attribute type 2 has an invalid length. [ 589.113725][T11840] netlink: 'syz.4.1806': attribute type 8 has an invalid length. [ 589.587109][T11844] netlink: 'syz.1.1809': attribute type 11 has an invalid length. [ 589.612263][T11833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.666775][T11844] __nla_validate_parse: 50 callbacks suppressed [ 589.666852][T11844] netlink: 71168 bytes leftover after parsing attributes in process `syz.1.1809'. [ 589.892789][T11854] netlink: 'syz.0.1813': attribute type 29 has an invalid length. [ 589.912211][T11854] netlink: 'syz.0.1813': attribute type 29 has an invalid length. [ 590.037547][T11858] netlink: 'syz.0.1813': attribute type 29 has an invalid length. [ 591.330491][T11874] device syzkaller0 entered promiscuous mode [ 598.834272][T11891] netlink: 'syz.0.1822': attribute type 22 has an invalid length. [ 598.845954][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 598.862841][T11893] netlink: 'syz.0.1822': attribute type 22 has an invalid length. [ 598.882922][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1822'. [ 599.029195][T11914] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 599.036976][T11914] IPv6: NLM_F_CREATE should be set when creating new route [ 599.045250][T11914] IPv6: NLM_F_CREATE should be set when creating new route [ 599.052404][T11917] netlink: 'syz.3.1823': attribute type 11 has an invalid length. [ 599.052813][T11914] IPv6: NLM_F_CREATE should be set when creating new route [ 599.098432][T11917] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1823'. [ 599.156304][T11914] netlink: 'syz.1.1833': attribute type 2 has an invalid length. [ 599.176671][T11914] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1833'. [ 599.350655][T11919] netlink: 'syz.3.1823': attribute type 2 has an invalid length. [ 599.392879][T11919] netlink: 'syz.3.1823': attribute type 8 has an invalid length. [ 599.403208][T11919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1823'. [ 599.437112][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 601.041174][T11964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 601.049027][T11964] IPv6: NLM_F_CREATE should be set when creating new route [ 601.057162][T11964] IPv6: NLM_F_CREATE should be set when creating new route [ 601.064931][T11964] IPv6: NLM_F_CREATE should be set when creating new route [ 601.142820][T11967] netlink: 'syz.2.1838': attribute type 2 has an invalid length. [ 601.181974][T11967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1838'. [ 603.671283][T11987] netlink: 'syz.1.1846': attribute type 10 has an invalid length. [ 603.683816][T11987] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.1846'. [ 604.085227][T12014] IPv6: Can't replace route, no match found [ 604.145703][T12018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 604.153523][T12018] IPv6: NLM_F_CREATE should be set when creating new route [ 604.162067][T12018] IPv6: NLM_F_CREATE should be set when creating new route [ 604.170054][T12018] IPv6: NLM_F_CREATE should be set when creating new route [ 604.310468][T12028] netlink: 'syz.1.1855': attribute type 21 has an invalid length. [ 604.321891][T12028] netlink: 'syz.1.1855': attribute type 4 has an invalid length. [ 604.332040][T12028] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1855'. [ 604.359960][T12030] netlink: 'syz.0.1853': attribute type 2 has an invalid length. [ 604.376602][T12030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1853'. [ 604.409448][T12042] netlink: 'syz.1.1855': attribute type 21 has an invalid length. [ 604.425243][T12042] netlink: 16154 bytes leftover after parsing attributes in process `syz.1.1855'. [ 605.797103][T12072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1863'. [ 605.916370][T12077] netlink: 'syz.4.1863': attribute type 2 has an invalid length. [ 607.033242][T12072] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1863'. [ 607.080094][T12077] device 0 entered promiscuous mode [ 607.366398][T12089] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 607.400944][T12089] syzkaller1: linktype set to 825 [ 607.607065][T12102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 607.615109][T12102] IPv6: NLM_F_CREATE should be set when creating new route [ 607.623697][T12102] IPv6: NLM_F_CREATE should be set when creating new route [ 607.632139][T12102] IPv6: NLM_F_CREATE should be set when creating new route [ 607.756971][T12102] netlink: 'syz.4.1868': attribute type 2 has an invalid length. [ 607.804123][T12102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1868'. [ 610.135659][T12123] netlink: 12082 bytes leftover after parsing attributes in process `syz.4.1875'. [ 612.098284][ T12] rcu_tasks_wait_gp: rcu_tasks grace period 49 is 1036 jiffies old. [ 612.941430][T12130] netlink: 'syz.4.1878': attribute type 10 has an invalid length. [ 613.022927][T12130] team0: Device hsr_slave_0 failed to register rx_handler [ 617.161377][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1889'. [ 617.589233][T12202] netlink: 'syz.3.1891': attribute type 21 has an invalid length. [ 617.619115][T12202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1891'. [ 618.151040][T12222] delete_channel: no stack [ 618.595141][T12236] netlink: 'syz.3.1898': attribute type 2 has an invalid length. [ 618.616622][T12236] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1898'. [ 619.452248][T12245] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1902'. [ 620.937803][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1909'. [ 620.957675][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1909'. [ 620.988810][T12279] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1909'. [ 624.094483][T12293] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1912'. [ 624.385249][T12299] netlink: 146340 bytes leftover after parsing attributes in process `syz.2.1913'. [ 624.402163][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.408586][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.418941][T12299] openvswitch: netlink: Key type 386 is out of range max 32 [ 624.972794][T12323] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1919'. [ 625.026427][T12323] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1919'. [ 627.980824][T12453] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 628.212982][T12453] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.022527][T12570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1931'. [ 630.074455][T12570] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1931'. [ 630.120313][T12577] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1931'. [ 630.334933][T12582] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.1935'. [ 630.777694][T12593] netlink: 'syz.3.1937': attribute type 4 has an invalid length. [ 630.785514][T12593] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1937'. [ 631.410408][T12627] netlink: 'syz.1.1945': attribute type 10 has an invalid length. [ 631.451795][T12627] device netdevsim0 entered promiscuous mode [ 634.303882][T12640] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1949'. [ 634.355090][T12640] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1949'. [ 634.444607][T12641] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1949'. [ 634.500645][T12646] netlink: 'syz.0.1950': attribute type 10 has an invalid length. [ 634.510254][T12652] ref_ctr_offset mismatch. inode: 0x7ae offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 634.591645][T12643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1948'. [ 634.602999][T12643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1948'. [ 636.656388][T12695] netlink: 'syz.4.1966': attribute type 29 has an invalid length. [ 636.719387][T12695] netlink: 'syz.4.1966': attribute type 29 has an invalid length. [ 637.325043][T12709] __nla_validate_parse: 1 callbacks suppressed [ 637.325062][T12709] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1970'. [ 637.335374][T12699] tun0: tun_chr_ioctl cmd 1074025677 [ 637.368529][T12699] tun0: linktype set to 805 [ 639.194342][T12711] netlink: 'syz.4.1971': attribute type 1 has an invalid length. [ 639.573022][T12726] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 639.581223][T12726] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1975'. [ 640.482510][T12758] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1985'. [ 643.474713][T12775] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1987'. [ 643.538950][T12775] netlink: 'syz.2.1987': attribute type 13 has an invalid length. [ 643.589844][T12775] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1987'. [ 643.803315][T12775] erspan0: refused to change device tx_queue_len [ 643.906057][T12784] netlink: 'syz.1.1991': attribute type 2 has an invalid length. [ 643.977552][T12784] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1991'. [ 644.051130][T12787] netlink: 'syz.3.1992': attribute type 11 has an invalid length. [ 644.069735][T12787] netlink: 'syz.3.1992': attribute type 11 has an invalid length. [ 644.099762][T12787] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1992'. [ 644.121827][T12791] netlink: 'syz.2.1994': attribute type 2 has an invalid length. [ 644.167751][T12791] netlink: 'syz.2.1994': attribute type 8 has an invalid length. [ 644.178353][T12791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1994'. [ 644.669095][T12807] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1999'. [ 644.734591][T12807] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 644.742591][T12807] CPU: 1 PID: 12807 Comm: syz.3.1999 Not tainted syzkaller #0 [ 644.750143][T12807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 644.760268][T12807] Call Trace: [ 644.763586][T12807] [ 644.766564][T12807] dump_stack_lvl+0x188/0x24e [ 644.771328][T12807] ? show_regs_print_info+0x12/0x12 [ 644.776597][T12807] ? load_image+0x410/0x410 [ 644.781211][T12807] sysfs_warn_dup+0x8a/0xa0 [ 644.785782][T12807] sysfs_do_create_link_sd+0xc0/0x110 [ 644.791222][T12807] device_add+0x83b/0x1050 [ 644.795802][T12807] wiphy_register+0x1d8b/0x2aa0 [ 644.800760][T12807] ? cfg80211_event_work+0x40/0x40 [ 644.805906][T12807] ? minstrel_ht_alloc+0x894/0xa20 [ 644.811052][T12807] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 644.817154][T12807] ieee80211_register_hw+0x2d48/0x39f0 [ 644.822665][T12807] ? ieee80211_register_hw+0xf41/0x39f0 [ 644.828240][T12807] ? ieee80211_register_hw+0xf41/0x39f0 [ 644.833823][T12807] ? ieee80211_tasklet_handler+0x20/0x20 [ 644.839470][T12807] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 644.845396][T12807] ? __debug_object_init+0xed/0x440 [ 644.850708][T12807] ? memset+0x1e/0x40 [ 644.854710][T12807] ? __hrtimer_init+0x189/0x270 [ 644.859587][T12807] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 644.865361][T12807] ? memcpy+0x3c/0x60 [ 644.869372][T12807] hwsim_new_radio_nl+0xab7/0xc90 [ 644.874447][T12807] genl_family_rcv_msg_doit+0x22f/0x350 [ 644.880013][T12807] ? end_current_label_crit_section+0x170/0x170 [ 644.886292][T12807] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 644.892226][T12807] ? bpf_lsm_capable+0x5/0x10 [ 644.896919][T12807] ? security_capable+0x85/0xb0 [ 644.902059][T12807] genl_rcv_msg+0x601/0x790 [ 644.906607][T12807] ? genl_bind+0x360/0x360 [ 644.911051][T12807] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 644.917433][T12807] netlink_rcv_skb+0x1ef/0x440 [ 644.922217][T12807] ? genl_bind+0x360/0x360 [ 644.926658][T12807] ? netlink_ack+0x1160/0x1160 [ 644.931464][T12807] ? down_read+0x1a8/0x2d0 [ 644.935906][T12807] genl_rcv+0x24/0x40 [ 644.939907][T12807] netlink_unicast+0x7ad/0x920 [ 644.944718][T12807] netlink_sendmsg+0x8ad/0xbd0 [ 644.949516][T12807] ? netlink_getsockopt+0x550/0x550 [ 644.954734][T12807] ? apparmor_socket_sendmsg+0x8a/0x330 [ 644.960306][T12807] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 644.965613][T12807] ? security_socket_sendmsg+0x7c/0xa0 [ 644.971101][T12807] ? netlink_getsockopt+0x550/0x550 [ 644.976321][T12807] ____sys_sendmsg+0x5ed/0x9a0 [ 644.981124][T12807] ? __sys_sendmsg_sock+0x30/0x30 [ 644.986172][T12807] ? __import_iovec+0x306/0x510 [ 644.991326][T12807] ? import_iovec+0x6f/0xa0 [ 644.995870][T12807] ___sys_sendmsg+0x2a2/0x360 [ 645.000576][T12807] ? __sys_sendmsg+0x2a0/0x2a0 [ 645.005460][T12807] __se_sys_sendmsg+0x1c3/0x2b0 [ 645.010376][T12807] ? __x64_sys_sendmsg+0x80/0x80 [ 645.015471][T12807] ? lockdep_hardirqs_on+0x94/0x140 [ 645.020700][T12807] do_syscall_64+0x4c/0xa0 [ 645.025132][T12807] ? clear_bhb_loop+0x60/0xb0 [ 645.029826][T12807] ? clear_bhb_loop+0x60/0xb0 [ 645.034528][T12807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.040444][T12807] RIP: 0033:0x7fe09459e159 [ 645.044878][T12807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.064500][T12807] RSP: 002b:00007fe095398028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 645.073019][T12807] RAX: ffffffffffffffda RBX: 00007fe094825fa0 RCX: 00007fe09459e159 [ 645.081005][T12807] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 645.089080][T12807] RBP: 00007fe09463506b R08: 0000000000000000 R09: 0000000000000000 [ 645.097069][T12807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.105059][T12807] R13: 00007fe094826038 R14: 00007fe094825fa0 R15: 00007ffd3dad0538 [ 645.113075][T12807] [ 646.007168][T12831] netlink: 'syz.3.2004': attribute type 2 has an invalid length. [ 646.048665][T12831] netlink: 'syz.3.2004': attribute type 8 has an invalid length. [ 646.096708][T12831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2004'. [ 647.042736][T12863] netlink: 'syz.4.2014': attribute type 7 has an invalid length. [ 647.117420][T12863] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2014'. [ 647.675088][T12875] netlink: 'syz.1.2018': attribute type 2 has an invalid length. [ 650.100714][T12879] netlink: 'syz.0.2019': attribute type 10 has an invalid length. [ 650.129467][T12879] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2019'. [ 650.185268][T12879] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.248991][T12879] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.256189][T12879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.319251][T12879] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 650.700128][T12897] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2026'. [ 651.514390][T12910] netlink: 1030 bytes leftover after parsing attributes in process `syz.4.2028'. [ 651.637456][T12912] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2027'. [ 651.811343][T12913] delete_channel: no stack [ 651.826294][T12913] delete_channel: no stack [ 651.958691][T12921] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2031'. [ 652.153420][T12921] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2031'. [ 652.296937][T12925] netlink: 'syz.2.2032': attribute type 13 has an invalid length. [ 652.334334][T12925] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2032'. [ 652.380928][T12925] syz_tun: refused to change device tx_queue_len [ 652.428752][T12925] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 655.456406][T12955] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2041'. [ 655.800578][T12966] : port 1(ip6gretap0) entered blocking state [ 655.894210][T12966] : port 1(ip6gretap0) entered disabled state [ 656.009074][T12966] device ip6gretap0 entered promiscuous mode [ 656.103925][T12973] device ip6gretap0 left promiscuous mode [ 656.137838][T12973] : port 1(ip6gretap0) entered disabled state [ 657.330172][T13005] netlink: 'syz.0.2050': attribute type 9 has an invalid length. [ 657.366265][T13005] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2050'. [ 660.040704][T13014] netlink: 'syz.4.2053': attribute type 4 has an invalid length. [ 660.078093][T13014] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2053'. [ 660.148458][T13014] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 660.203711][T13020] netlink: 'syz.1.2055': attribute type 3 has an invalid length. [ 660.231206][T13020] netlink: 114680 bytes leftover after parsing attributes in process `syz.1.2055'. [ 660.312185][T13026] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 660.377634][T13026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 660.691589][T13035] netlink: 'syz.0.2059': attribute type 4 has an invalid length. [ 661.348395][T13051] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2062'. [ 662.015839][T13061] FAULT_INJECTION: forcing a failure. [ 662.015839][T13061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.091273][T13061] CPU: 0 PID: 13061 Comm: syz.1.2066 Not tainted syzkaller #0 [ 662.098819][T13061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 662.108913][T13061] Call Trace: [ 662.112221][T13061] [ 662.115266][T13061] dump_stack_lvl+0x188/0x24e [ 662.120071][T13061] ? show_regs_print_info+0x12/0x12 [ 662.125297][T13061] ? load_image+0x410/0x410 [ 662.129843][T13061] ? __lock_acquire+0x7c40/0x7c40 [ 662.134916][T13061] ? bpf_get_current_cgroup_id+0x19/0x330 [ 662.140772][T13061] should_fail_ex+0x390/0x4c0 [ 662.145678][T13061] _copy_to_user+0x2c/0x130 [ 662.150215][T13061] bpf_prog_test_run_syscall+0x33b/0x4b0 [ 662.155981][T13061] ? sock_gen_cookie+0x60/0x60 [ 662.160813][T13061] ? sock_gen_cookie+0x60/0x60 [ 662.165709][T13061] bpf_prog_test_run+0x31c/0x390 [ 662.170678][T13061] __sys_bpf+0x62b/0x780 [ 662.174938][T13061] ? bpf_link_show_fdinfo+0x380/0x380 [ 662.180334][T13061] ? lock_chain_count+0x20/0x20 [ 662.185198][T13061] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 662.191242][T13061] __x64_sys_bpf+0x78/0x90 [ 662.195682][T13061] do_syscall_64+0x4c/0xa0 [ 662.200108][T13061] ? clear_bhb_loop+0x60/0xb0 [ 662.204792][T13061] ? clear_bhb_loop+0x60/0xb0 [ 662.209483][T13061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 662.215389][T13061] RIP: 0033:0x7f6be499e159 [ 662.219818][T13061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.239692][T13061] RSP: 002b:00007f6be5877028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 662.248119][T13061] RAX: ffffffffffffffda RBX: 00007f6be4c25fa0 RCX: 00007f6be499e159 [ 662.256188][T13061] RDX: 000000000000000c RSI: 0000200000000040 RDI: 000000000000000a [ 662.264261][T13061] RBP: 00007f6be5877090 R08: 0000000000000000 R09: 0000000000000000 [ 662.272238][T13061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.280211][T13061] R13: 00007f6be4c26038 R14: 00007f6be4c25fa0 R15: 00007ffdf44d85a8 [ 662.288203][T13061] [ 662.873250][T13081] netlink: 'syz.4.2071': attribute type 3 has an invalid length. [ 662.897821][T13081] netlink: 114680 bytes leftover after parsing attributes in process `syz.4.2071'. [ 663.033755][T13082] device syzkaller0 entered promiscuous mode [ 663.330656][T13095] netlink: 'syz.3.2075': attribute type 21 has an invalid length. [ 663.377439][T13095] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 663.384866][T13095] IPv6: NLM_F_CREATE should be set when creating new route [ 663.392259][T13095] IPv6: NLM_F_CREATE should be set when creating new route [ 663.399671][T13095] IPv6: NLM_F_CREATE should be set when creating new route [ 664.445494][T13117] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2079'. [ 666.155998][T13103] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2076'. [ 666.167200][T13091] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 666.176032][T13091] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 666.214086][T13117] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2079'. [ 666.535477][T13127] netlink: 'syz.3.2083': attribute type 2 has an invalid length. [ 666.568986][T13127] netlink: 'syz.3.2083': attribute type 8 has an invalid length. [ 666.591130][T13127] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2083'. [ 666.602799][T13122] FAULT_INJECTION: forcing a failure. [ 666.602799][T13122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.668220][T13122] CPU: 0 PID: 13122 Comm: syz.2.2081 Not tainted syzkaller #0 [ 666.675931][T13122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 666.686095][T13122] Call Trace: [ 666.689403][T13122] [ 666.692368][T13122] dump_stack_lvl+0x188/0x24e [ 666.697097][T13122] ? show_regs_print_info+0x12/0x12 [ 666.702349][T13122] ? load_image+0x410/0x410 [ 666.706902][T13122] ? __lock_acquire+0x7c40/0x7c40 [ 666.711976][T13122] ? snprintf+0xe5/0x140 [ 666.716296][T13122] should_fail_ex+0x390/0x4c0 [ 666.721037][T13122] _copy_to_user+0x2c/0x130 [ 666.725580][T13122] simple_read_from_buffer+0xe3/0x150 [ 666.731094][T13122] proc_fail_nth_read+0x1a6/0x220 [ 666.736176][T13122] ? proc_fault_inject_write+0x310/0x310 [ 666.741930][T13122] ? fsnotify_perm+0x248/0x550 [ 666.746735][T13122] ? proc_fault_inject_write+0x310/0x310 [ 666.752411][T13122] vfs_read+0x2db/0x960 [ 666.756703][T13122] ? kernel_read+0x1e0/0x1e0 [ 666.761355][T13122] ? __fget_files+0x28/0x460 [ 666.766130][T13122] ? __fget_files+0x3fc/0x460 [ 666.770982][T13122] ? __fdget_pos+0x2ae/0x360 [ 666.775831][T13122] ? ksys_read+0x70/0x260 [ 666.780219][T13122] ksys_read+0x14d/0x260 [ 666.784614][T13122] ? vfs_write+0x9a0/0x9a0 [ 666.789087][T13122] ? syscall_enter_from_user_mode+0x2a/0x80 [ 666.795313][T13122] do_syscall_64+0x4c/0xa0 [ 666.799867][T13122] ? clear_bhb_loop+0x60/0xb0 [ 666.804579][T13122] ? clear_bhb_loop+0x60/0xb0 [ 666.809289][T13122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 666.815310][T13122] RIP: 0033:0x7f2e81d5e98e [ 666.819919][T13122] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 666.839663][T13122] RSP: 002b:00007f2e82ca0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 666.848119][T13122] RAX: ffffffffffffffda RBX: 00007f2e82ca16c0 RCX: 00007f2e81d5e98e [ 666.856296][T13122] RDX: 000000000000000f RSI: 00007f2e82ca10a0 RDI: 0000000000000008 [ 666.864727][T13122] RBP: 00007f2e82ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 666.872743][T13122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.880845][T13122] R13: 00007f2e82026038 R14: 00007f2e82025fa0 R15: 00007ffe9ff44d18 [ 666.888972][T13122] [ 670.082796][T13184] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 670.423260][T13184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.642224][T13188] netlink: 'syz.3.2096': attribute type 1 has an invalid length. [ 670.705272][T13188] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2096'. [ 671.105822][T13210] netlink: 'syz.2.2101': attribute type 29 has an invalid length. [ 671.148588][T13210] netlink: 'syz.2.2101': attribute type 29 has an invalid length. [ 671.177202][T13211] netlink: 'syz.2.2101': attribute type 29 has an invalid length. [ 671.860279][T13228] netlink: 'syz.4.2108': attribute type 4 has an invalid length. [ 671.888803][T13228] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2108'. [ 672.130216][T13240] netlink: 125520 bytes leftover after parsing attributes in process `syz.1.2111'. [ 672.324729][T13255] netlink: 'syz.3.2114': attribute type 1 has an invalid length. [ 672.433671][T13243] can: request_module (can-proto-4) failed. [ 672.501295][T13262] netlink: 'syz.0.2115': attribute type 27 has an invalid length. [ 672.614525][T13261] netlink: 'syz.1.2116': attribute type 10 has an invalid length. [ 676.261187][T13364] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2135'. [ 676.286346][T13364] netlink: zone id is out of range [ 676.302157][T13364] netlink: del zone limit has 4 unknown bytes [ 676.428960][T13364] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 676.462496][T13364] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 676.520176][T13364] netlink: 'syz.2.2135': attribute type 29 has an invalid length. [ 676.733575][T13377] netlink: 'syz.0.2140': attribute type 3 has an invalid length. [ 676.754874][T13377] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2140'. [ 679.648474][T13435] netlink: 'syz.4.2150': attribute type 10 has an invalid length. [ 679.879696][T13435] team0 (unregistering): Port device team_slave_0 removed [ 679.913761][T13435] team0 (unregistering): Port device team_slave_1 removed [ 679.963795][T13452] device syzkaller0 entered promiscuous mode [ 681.835745][T13516] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2170'. [ 682.024868][T13518] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2170'. [ 682.658385][T13529] netlink: 'syz.4.2173': attribute type 10 has an invalid length. [ 685.839732][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.846147][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.143616][T13571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2182'. [ 686.205634][T13571] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2182'. [ 686.240115][T13581] netlink: 'syz.2.2183': attribute type 2 has an invalid length. [ 686.281736][T13581] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 686.303268][T13584] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2182'. [ 686.335180][T13581] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2183'. [ 686.358019][T13579] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2182'. [ 695.175034][T13658] delete_channel: no stack [ 695.179839][T13658] delete_channel: no stack [ 695.265576][T13626] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2195'. [ 695.288014][T13632] netlink: 'syz.3.2198': attribute type 19 has an invalid length. [ 695.296381][T13632] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2198'. [ 695.863426][T13682] netlink: 'syz.3.2207': attribute type 28 has an invalid length. [ 696.032897][T13682] netlink: 'syz.3.2207': attribute type 3 has an invalid length. [ 696.173109][T13682] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2207'. [ 696.716925][T13694] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2211'. [ 696.923039][T13700] netlink: 'syz.4.2213': attribute type 1 has an invalid length. [ 696.957181][T13700] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.2213'. [ 724.226845][T13418] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2657 jiffies s: 40929 root: 0x2/. [ 724.256500][T13418] rcu: blocking rcu_node structures (internal RCU debug): [ 724.263712][T13418] Sending NMI from CPU 0 to CPUs 1: [ 724.269522][ C1] NMI backtrace for cpu 1 [ 724.269533][ C1] CPU: 1 PID: 13713 Comm: syz.3.2218 Not tainted syzkaller #0 [ 724.269548][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.269556][ C1] RIP: 0010:__lock_acquire+0x8df/0x7c40 [ 724.269584][ C1] Code: 48 8d 04 9b 4d 8d ac c5 00 0b 00 00 48 c7 c0 40 61 c1 96 48 c1 e8 03 48 89 84 24 c0 00 00 00 48 c7 c0 28 e9 20 8e 48 c1 e8 03 <48> 89 84 24 88 00 00 00 4d 89 ef 48 83 fb 31 0f 83 94 01 00 00 4c [ 724.269596][ C1] RSP: 0018:ffffc900001dfca0 EFLAGS: 00000802 [ 724.269612][ C1] RAX: 1ffffffff1c41d25 RBX: 0000000000000002 RCX: 0000000000000001 [ 724.269623][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b0f240 [ 724.269632][ C1] RBP: ffffc900001dfed0 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 724.269642][ C1] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: ffff88802a378ad8 [ 724.269653][ C1] R13: ffff88802a378b50 R14: 0000000000000002 R15: 0000000000000002 [ 724.269662][ C1] FS: 00007fe0927d56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 724.269675][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 724.269685][ C1] CR2: 00007f6be57556c8 CR3: 0000000053bc1000 CR4: 00000000003506e0 [ 724.269700][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 724.269717][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 724.269726][ C1] Call Trace: [ 724.269731][ C1] [ 724.269748][ C1] ? verify_lock_unused+0x140/0x140 [ 724.269767][ C1] ? mark_lock+0x94/0x320 [ 724.269789][ C1] ? mark_lock+0x94/0x320 [ 724.269806][ C1] ? verify_lock_unused+0x140/0x140 [ 724.269824][ C1] ? __lock_acquire+0x138a/0x7c40 [ 724.269845][ C1] lock_acquire+0x1bb/0x4a0 [ 724.269863][ C1] ? __virt_addr_valid+0x188/0x540 [ 724.269957][ C1] ? read_lock_is_recursive+0x10/0x10 [ 724.269978][ C1] ? rcu_read_unlock+0x8c/0xa0 [ 724.270002][ C1] ? __virt_addr_valid+0x188/0x540 [ 724.270020][ C1] __virt_addr_valid+0x1a5/0x540 [ 724.270038][ C1] ? __virt_addr_valid+0x188/0x540 [ 724.270057][ C1] kasan_addr_to_slab+0x9/0xc0 [ 724.270098][ C1] __kasan_record_aux_stack+0xf/0xc0 [ 724.270112][ C1] irq_work_queue_on+0x10f/0x260 [ 724.270154][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 724.270172][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 724.270187][ C1] ? __perf_cgroup_move+0x150/0x150 [ 724.270208][ C1] __rcu_read_unlock+0x78/0xd0 [ 724.270223][ C1] perf_event_output_forward+0x271/0x2f0 [ 724.270244][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 724.270263][ C1] ? perf_get_page_size+0x430/0x430 [ 724.270280][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 724.270302][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 724.270322][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 724.270343][ C1] __perf_event_overflow+0x457/0x630 [ 724.270366][ C1] perf_swevent_overflow+0x19b/0x230 [ 724.270384][ C1] perf_swevent_event+0x458/0x570 [ 724.270404][ C1] ? perf_tp_event+0xc10/0xc10 [ 724.270423][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 724.270444][ C1] perf_tp_event+0x36b/0xc10 [ 724.270463][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 724.270484][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 724.270522][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 724.270535][ C1] ? sched_clock_cpu+0x6e/0x260 [ 724.270553][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 724.270575][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 724.270595][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 724.270610][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 724.270629][ C1] ? __irq_exit_rcu+0x147/0x230 [ 724.270651][ C1] ? irq_exit_rcu+0x20/0x20 [ 724.270666][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 724.270680][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 724.270699][ C1] trace_hardirqs_on+0x24/0x40 [ 724.270724][ C1] asm_sysvec_irq_work+0x16/0x20 [ 724.270737][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 724.270752][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 32 7b 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 724.270764][ C1] RSP: 0018:ffffc900001e0980 EFLAGS: 00000206 [ 724.270775][ C1] RAX: 26207886d6a95700 RBX: 1ffff9200003c138 RCX: 26207886d6a95700 [ 724.270786][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 724.270796][ C1] RBP: ffffc900001e0a80 R08: ffffffff90b0f337 R09: 1ffffffff2161e66 [ 724.270807][ C1] R10: dffffc0000000000 R11: fffffbfff2161e67 R12: 0000000000000246 [ 724.270816][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 724.270835][ C1] ? _raw_spin_lock_bh+0x20/0x50 [ 724.270853][ C1] ? rcu_is_watching+0x11/0xa0 [ 724.270873][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 724.270892][ C1] __rcu_read_unlock+0x78/0xd0 [ 724.270906][ C1] hsr_announce+0x2ca/0x340 [ 724.270940][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 724.270955][ C1] ? hsr_announce+0x80/0x340 [ 724.270968][ C1] ? hsr_dev_finalize+0xa10/0xa10 [ 724.270983][ C1] ? call_timer_fn+0x194/0x670 [ 724.271001][ C1] call_timer_fn+0x1ac/0x670 [ 724.271014][ C1] ? hsr_dev_finalize+0xa10/0xa10 [ 724.271028][ C1] ? call_timer_fn+0xcf/0x670 [ 724.271041][ C1] ? __run_timers+0x810/0x810 [ 724.271059][ C1] ? hsr_dev_finalize+0xa10/0xa10 [ 724.271074][ C1] __run_timers+0x56c/0x810 [ 724.271094][ C1] ? detach_timer+0x350/0x350 [ 724.271114][ C1] run_timer_softirq+0x63/0xf0 [ 724.271128][ C1] handle_softirqs+0x291/0x910 [ 724.271143][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 724.271158][ C1] ? do_softirq+0x210/0x210 [ 724.271169][ C1] ? hrtimer_interrupt+0x775/0x980 [ 724.271186][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 724.271201][ C1] __irq_exit_rcu+0x13b/0x230 [ 724.271214][ C1] ? irq_exit_rcu+0x20/0x20 [ 724.271231][ C1] irq_exit_rcu+0x5/0x20 [ 724.271243][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 724.271262][ C1] [ 724.271266][ C1] [ 724.271270][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 724.271284][ C1] RIP: 0010:generic_exec_single+0x427/0x4a0 [ 724.271321][ C1] Code: 75 11 e8 dc 13 0b 00 48 85 db 75 16 e8 d2 13 0b 00 eb 15 e8 cb 13 0b 00 e8 46 69 bb 08 48 85 db 74 ea e8 bc 13 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 44 25 00 00 00 00 00 43 c7 44 25 [ 724.271332][ C1] RSP: 0018:ffffc900058bfa60 EFLAGS: 00000246 [ 724.271343][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88802a378000 [ 724.271352][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 724.271360][ C1] RBP: ffffc900058bfb30 R08: ffffffff90b0f347 R09: 1ffffffff2161e68 [ 724.271371][ C1] R10: dffffc0000000000 R11: fffffbfff2161e69 R12: dffffc0000000000 [ 724.271381][ C1] R13: 1ffff92000b17f50 R14: 0000000000000000 R15: 1ffff92000b17f71 [ 724.271398][ C1] ? event_function+0x370/0x370 [ 724.271412][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 724.271430][ C1] ? smp_call_function_single+0xac/0x5a0 [ 724.271447][ C1] smp_call_function_single+0x371/0x5a0 [ 724.271462][ C1] ? event_function+0x370/0x370 [ 724.271476][ C1] ? flush_smp_call_function_queue+0x350/0x350 [ 724.271491][ C1] ? __mutex_trylock_common+0x15c/0x260 [ 724.271507][ C1] ? event_function+0x370/0x370 [ 724.271520][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 724.271541][ C1] perf_install_in_context+0x5cf/0x930 [ 724.271557][ C1] ? alloc_file_pseudo+0x1aa/0x200 [ 724.271573][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 724.271587][ C1] ? add_event_to_ctx+0x1260/0x1260 [ 724.271607][ C1] ? exclusive_event_installable+0xd3/0x2c0 [ 724.271621][ C1] ? perf_event__header_size+0x165/0x220 [ 724.271637][ C1] __se_sys_perf_event_open+0x128b/0x1ec0 [ 724.271654][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 724.271674][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 724.271689][ C1] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 724.271703][ C1] do_syscall_64+0x4c/0xa0 [ 724.271724][ C1] ? clear_bhb_loop+0x60/0xb0 [ 724.271737][ C1] ? clear_bhb_loop+0x60/0xb0 [ 724.271751][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 724.271771][ C1] RIP: 0033:0x7fe09459e159 [ 724.271784][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.271795][ C1] RSP: 002b:00007fe0927d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 724.271809][ C1] RAX: ffffffffffffffda RBX: 00007fe094826180 RCX: 00007fe09459e159 [ 724.271819][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 724.271828][ C1] RBP: 00007fe09463506b R08: 0000000000000000 R09: 0000000000000000 [ 724.271837][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 724.271847][ C1] R13: 00007fe094826218 R14: 00007fe094826180 R15: 00007ffd3dad0538 [ 724.271863][ C1]