last executing test programs: 5.027428107s ago: executing program 3 (id=1355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) close(0x3) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/99, 0x63}], 0x1, &(0x7f0000000380)=""/8, 0x8}, 0x40002140) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001340), 0x888102, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x42579dda60683578) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) write$cgroup_subtree(r7, &(0x7f0000000300), 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x10, &(0x7f0000000480)=r7, 0x4) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8946, &(0x7f0000000080)) mkdirat$cgroup(r7, &(0x7f0000000040)='syz0\x00', 0x1ff) r11 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000008e52b7dbea4a840b0d2e90ec48a7bffae8172ea31696"], 0x10}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="000000000001000080ffffffff0000007b8af8ff00000000bfa20000000000000702000011ffffffbf03000008000000b7040000000000008500000003000000950000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x40f00, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.447105904s ago: executing program 3 (id=1360): sendmsg$unix(0xffffffffffffffff, 0x0, 0x24040014) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x7, 0x1, 0x4, 0x0, 0x0, 0x9, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0xfe, 0x25, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000007, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000100), 0x9}, 0x0, 0x1, 0x1, 0x7, 0xd, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) close(r7) setsockopt$sock_attach_bpf(r5, 0x6, 0x1e, &(0x7f0000000500), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000000340)='\\\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f907", 0x11}], 0x1}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 4.285745971s ago: executing program 2 (id=1363): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x8000, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x9, 0x658, 0xddcb, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x25, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0xf3, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setsockopt$sock_attach_bpf(r2, 0x6, 0x4, &(0x7f0000000000)=r3, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000aaf02302fb1a26705a40d2b39aa3c6077723e8b59c548d236ad9866e509c76161d387d4bb6e54115eb7346b96498d2abe51bb7d8fdf47815608004268460af6abb32e421f9d51297833ad851524e245b7d0bf75568a7ff47c86c2ac428198b5c85564ef9aad0adf0e739dee23bacee49cd4cf0a09f9377db071086cad8e0f94bb5b01b4117fb92ebd23d2e48f8025aa8c251"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x58, &(0x7f0000001380)={0x0, 0x0}}, 0x10) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r9}, 0xc) close(r10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000002c0)={r7, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) sendmsg$kcm(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x4008009) 3.311728146s ago: executing program 1 (id=1366): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x211afa, 0x3, 0x400098, 0x0, 0x2, 0xfffff271, 0xfefc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f000082}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) (async) r3 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="20000000000000008400000002000000fe000000000000"], 0x20}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) (async) close(r5) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 3.266763538s ago: executing program 2 (id=1367): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x17, &(0x7f0000000000), 0x10) socketpair(0x25, 0x5, 0x5, &(0x7f0000001600)) 3.24002613s ago: executing program 3 (id=1368): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095", @ANYRES8=0x0], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) r4 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r4, &(0x7f0000001b80)={&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001780)=[{&(0x7f0000000140)="fa", 0x1}], 0x1}, 0x2004c000) 3.044815188s ago: executing program 2 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x400000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000cbd056ef8032b622b6e43c00", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x40000ee4, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000, '\x00', r5}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0a00000008000000f7ffffff0300000010100000", @ANYRES32=r2, @ANYBLOB="09000000000033919d9f0820f8740882ae8f00"/33, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000000000000100"/28], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002480)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x16}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000780)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001340)=""/4096, 0x40f00, 0x1c, '\x00', r5, 0x18, r3, 0x8, &(0x7f0000002340)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002380)={0x3, 0x10, 0x9, 0x2}, 0x10, 0x25cce, r0, 0x0, &(0x7f0000002440)=[r2, r2, r2, r6, r2], 0x0, 0x10, 0x7}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x3a5240, 0x0) 2.828011669s ago: executing program 1 (id=1372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x85bb, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.826285489s ago: executing program 2 (id=1373): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4097, 0x1001}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000300)=""/188, 0xbc}], 0x3}, 0x100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44", 0xe}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230686f802000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x28, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd33c}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x4, 0x9, 0x1, 0x0, 0x7}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x4}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x4, 0x1, 0x1, 0x9}], 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r5, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000980)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb6, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xdc, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) close(r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000240)={'team_slave_1\x00', 0xdebd12157dab606f}) sendmsg$kcm(r6, &(0x7f0000002dc0)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @empty, 0x4}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001980)="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", 0x1000}], 0x1, &(0x7f00000029c0)=[{0x18, 0x115, 0x80000000, "35dc"}, {0xc0, 0x10e, 0xffffff01, "2eeeb1f33fd946a3f4ffb0ea951c132969df4b0ccb4b80d78f5d4509eeee14f36cd4362c0788751adb4229ce98b2eae7079988e212c53a5e8b502f42a7d47d66b72124b117819a964e33fede7d895bed3b06f61285cac4899a278c3afe35298e8351987e6c8da10f3ae7ddb6dff043091fbb8c69422edc979b767e3b4aabc789e7fbdd514deb8c9860d6227f0026cb5527663fddede516b7361a6e4eb3d91be4e268d28a1bdb7eb496ce0d88f6e3"}, {0x68, 0x111, 0x3, "9aab807cad9a530457bd9f7659885c47710e024b848bb1477efa7681404a507819d226ca83de247c66fcc17378e54cdfad37bdfdbd5e6575fc05c5d7b35551d977b99f4967165e1805903f65435e5eb3e3"}, {0xe8, 0x114, 0xd4, "cc264ad36f29702a9a594b0d8e5630ffc818bd977b62a3424e3a56ae14dae539d8e0e624b138e36aa338380fe2dda67de85498f50213b0bec27144dfadd47d8994a141cf7acf0eecb1778a2d4d84241f20f2b9d536338079f918ca11685854b9192b9cb6d2c005677fdc7cb02c6c7692a2a8ba8be0df5607e951b5161301a33e5e319d63e4ec2366e66e39786bafba2206a35a8b52e15318a1de32b44e47ca95d68742f19b7a8ad72f38ee1ac0a0349eb4b43c186200c85c97a6145e3307fc90cab632d772a7c382ef4db58f7cba6dc11b1909cee70eff"}, {0xd8, 0x10, 0xfffffe00, "8472aaa05bf615e7ca18617ca35d1dcc32ef8c371ad51b06d3bd00e38b1aab90e412c910543a6949b79b6d1aaaecd835ad4f654cf5a758507504098965efc7d9ec9d2d0e50667923315e3d845eadee815cb576df9f1af6cda177a239d0ae7b21d7b9dbb299543ceaf21b47346e5853c8d6a332dec38a627f516db9dbca696853f8e8837e3dcfea2e88bde06050a24f3a533edfe152bdd91fc7aa9fbc5e78ecf06d9d885e7701dc2449c8d0b07698bc3732ec8a90fd796a2c54cc56182d3cf401534b30c0be0031dd"}], 0x300}, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000000c0)=0x634) setsockopt$sock_attach_bpf(r2, 0x84, 0x22, &(0x7f0000000000), 0x10) sendmsg$inet(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000500)="b0", 0x1}], 0x1}, 0x20000000) 2.532380003s ago: executing program 1 (id=1375): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0xb, [@float={0x2, 0x0, 0x0, 0x10, 0x8}, @union={0x9, 0x2, 0x0, 0x5, 0x1, 0x3ff, [{0xd, 0x3, 0xd}, {0x4, 0x3, 0x3}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0xa}, @func={0x6, 0x0, 0x0, 0xc, 0x10000002}, @fwd={0xd}, @ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @union={0xd, 0x3, 0x0, 0x5, 0x0, 0x7, [{0x3, 0x3, 0xf8}, {0x3, 0x2, 0x3}, {0x0, 0x3}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x38}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x5f, 0x0, 0x61, 0x5f, 0x5f, 0x61, 0x61, 0x30]}}, &(0x7f0000000500)=""/79, 0xd3, 0x4f, 0x0, 0x5, 0x10000}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES32=r3], 0x9a) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x6, 0xcf, 0x4, 0x32000, 0x1, 0x7, '\x00', 0x0, r0, 0x1, 0x4, 0x2, 0x4, @void, @value, @value=r4}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000007880)}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0xb, [@float={0x2, 0x0, 0x0, 0x10, 0x8}, @union={0x9, 0x2, 0x0, 0x5, 0x1, 0x3ff, [{0xd, 0x3, 0xd}, {0x4, 0x3, 0x3}]}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x5, 0xa}, @func={0x6, 0x0, 0x0, 0xc, 0x10000002}, @fwd={0xd}, @ptr={0x10, 0x0, 0x0, 0x2, 0x4}, @union={0xd, 0x3, 0x0, 0x5, 0x0, 0x7, [{0x3, 0x3, 0xf8}, {0x3, 0x2, 0x3}, {0x0, 0x3}]}, @int={0x7, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x38}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x30, 0x5f, 0x0, 0x61, 0x5f, 0x5f, 0x61, 0x61, 0x30]}}, &(0x7f0000000500)=""/79, 0xd3, 0x4f, 0x0, 0x5, 0x10000}, 0x28) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) close(r2) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x111d09, 0x4, 0x10000, 0x1, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca", @ANYRES32=r3], 0x9a) (async) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x6, 0xcf, 0x4, 0x32000, 0x1, 0x7, '\x00', 0x0, r0, 0x1, 0x4, 0x2, 0x4, @void, @value, @value=r4}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000007880)}, 0x0) (async) 2.258691535s ago: executing program 1 (id=1377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000230000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000dfb703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r2, 0x0, 0x1dc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000040030000000000001000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000900", 0x33fe0}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r2, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xd8, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x94, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0x4, 0x10}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r9 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) r10 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8948, &(0x7f0000000000)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') recvmsg$kcm(r10, &(0x7f0000000ac0)={&(0x7f0000000580)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000980)}, 0x10021) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_ext={0x1c, 0x25, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000000008000b0000000300000018110000daef968a2317344b00b6000611a1f0640e3a789f94be364276f8a612cbf8fbfcdbd19817b6ad987251f920aa4eaa09fc1340be72e2ffd786", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bb43a003070000009d040400f0ffffff54188000fcffffff9500000000000000b7080000000000007b8af8ff00000000b7080000f7ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x3e18, 0x0, 0x0, 0x41100, 0x35, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xeaf, 0x3}, 0x10, 0x182f2, r2, 0x4, &(0x7f00000007c0)=[r1, r1, r8, r1, r1], &(0x7f0000000800)=[{0x4, 0x2, 0xc, 0xc}, {0x3, 0x5, 0x8, 0x1}, {0x3, 0x4, 0xa, 0x1}, {0x3, 0x1, 0xb, 0xc}], 0x10, 0x2}, 0x94) 2.220745087s ago: executing program 3 (id=1378): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1401, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1401, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) (async) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x709000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a138000c000600142603600e1208000f0000810401a80016002000014003000008", 0x3c}], 0x1, 0x0, 0x0, 0x7400}, 0x40818) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 1.404862084s ago: executing program 0 (id=1383): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = perf_event_open(0x0, r0, 0x8, 0xffffffffffffffff, 0x5) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r1, r4, 0x2, 0x18, 0x0, @void, @value=r3}, 0x20) r5 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x1f, &(0x7f00000000c0), 0xd8) setsockopt$sock_attach_bpf(r7, 0x1, 0x48, &(0x7f0000000000)=r7, 0x4) close(r6) sendmsg(r2, 0x0, 0x4044050) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x1, @perf_bp={0x0, 0x2}, 0x18a21, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0xffffffffffffffff}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) 1.207859434s ago: executing program 0 (id=1384): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0xa, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x30, 0x2e]}}, &(0x7f0000000040)=""/24, 0x2a, 0x18, 0x1}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x4, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x2, 0x61c74, r1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{r2, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x48, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x343d}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x6, 0x9, 0xc09ef152d91d0e09, 0x8, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_val={0x18, 0x5, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7ff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x1, 0x2, 0x4, 0x6, 0x3, 0x4, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffff391}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x8001, 0x0, 0x0, 0x40f00, 0x6, '\x00', r3, 0x25, r0, 0x8, &(0x7f0000000880)={0xa, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x4, 0x0, 0x94a}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000009c0)=[r2, r4], &(0x7f0000000a00)=[{0x3, 0x1, 0x0, 0xb}, {0x3, 0x1, 0x7, 0x8}, {0x3, 0x1, 0x7, 0x4}, {0x3, 0x5, 0xc, 0x6}, {0x1, 0x2, 0x1}, {0x2, 0x5, 0x2, 0x4}, {0x4, 0x1, 0xc, 0xa}], 0x10, 0x2}, 0x94) 1.06767872s ago: executing program 0 (id=1385): socketpair(0x22, 0x3, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)="83", 0x1}, {&(0x7f00000000c0)="83881994828b5d91ed1b4a831ac90863c34a2a7c4687896e4cbd03e3f577a9450e606230bb5b13ace2121874f1e7bafe08dc34a3650d77c3515e2520d71e93f1937019ab075ab1", 0x47}, {&(0x7f0000000140)="242ba1633a8245cd2ae9bd8d5078980e49030e0d7f74655b7834852783110a67c29bf9603d2e3c95cfa123425566b41cf94644b36f93d76f494a8e95ecc76a9de48bf300efe83801fce08da3b4310a8671628852a46e85542ae5b617690399a7", 0x60}, {&(0x7f00000001c0)="843c9212eb085bf385c1ddd14075e1ecd3da74f0a86af9", 0x17}], 0x4, &(0x7f0000000240)=[@ip_ttl={{0x14, 0x0, 0x2, 0x590}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1a}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x1b, 0xa9, [@loopback, @private=0xa010101, @private=0xa010100, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}], 0xc8}, 0x8880) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x50) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000400)=@raw=[@alu={0x4, 0x0, 0x8, 0x5, 0x2, 0xc, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3}, @exit, @alu={0x7, 0x0, 0x239f2be30d2f4a28, 0x1c3c970714d8c6bc, 0x0, 0x40, 0xfffffffffffffff0}, @ldst={0x2, 0x0, 0x3, 0x1, 0xa, 0xfffffffffffffff8, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f0000000480)='GPL\x00', 0x1, 0x3c, &(0x7f00000004c0)=""/60, 0x40f00, 0x12, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x2, 0x0, 0x3, 0x40}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/14, 0xe}, {&(0x7f0000000680)=""/121, 0x79}], 0x2, &(0x7f0000000740)=""/221, 0xdd}, 0x40000100) close(r1) sendmsg$inet(r0, &(0x7f0000001dc0)={&(0x7f0000000880)={0x2, 0x4e21, @rand_addr=0x200}, 0x10, &(0x7f0000001c80)=[{&(0x7f00000008c0)="87da621cd889168cd1ee31aef890f4d507715f03f8a47da95e8f8c3cb64f5872a2c571eaf230c2b67f61fd77a16c183a93701527bee7b76d016f21d242a1c1116a7857bb715b68e7500a0d812f9a302c2dcda07d5958e93f", 0x58}, {&(0x7f0000000940)="909e6307ab4c0b4cc9375502c978aa3fab594c362743c05e5c1be1e059d38b5bef2ee68d58510526c56afec9a40fe40c8e8509efdc7d7b2b8d862b2d51d62318651d3c37384773494b8d007715c7a369d2c753337515a38ec0c5eda87a42fdf4f20f8a9efe5d9c08b2437904fe43b4", 0x6f}, {&(0x7f00000009c0)="a63fa2ef3311bc88b06672ea93fae9f5d9d78acaf9b07812b799d2d1168b7a04a88004ae9d692b1523b865c5f6dea636cb16316376b69c6e29705de9ad3460ffbf83ec690b31437041cdcea118997e62a123d6c8bb292df8095fb27219866b011e4e03860aac9e3c46ccf0f5c8f2b3ed386d2dfa8d4a2903333db72a67b528ae50ff1f2dffc672843f2a722287585967a43f70d0d5b29918ef9d04dacdc4c0e134d12ab72986b93a8faf44efd1b7b92f22c6fb3510cdfb8b28be23d841937b6b72261cf37f2509944305d1a38494325956be88f7d251726c5ee15ac707844d3033b9a161ce5538", 0xe7}, {&(0x7f0000000ac0)="db10bf8c22317f4da844ddd2a83681dba9e3313cf24866dfc3977f52d572601885827f95bd4e6ff9d5176550394f32e2f174cb74a40d4219f0e090c5d31fe7095c4fd0036abcd0542be929aa1f2ac6b9456e249d9a03891ff8542c14363fb35d2b2d85dcf6897e97dc532364712662b7db13309299d2067eb450ed63127eed", 0x7f}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="419d12f12ca73899229736c0697fd3fbb19276c032f1f9a3cb6484752a30a909040251ea9dea1f6945dc5a0e676008dfd2346aab5573dbeba76372b1467dd3cd706abd250eb4362a9b7feadc6f9bbc61ed42e675154beda4bbd31ee540363cad2ed2c71661eddd9568e46b48445aea00207f7f12f96ba65d47b22485d700a3c4bb54962608553d00765f8bda536ba58dad3cf894feeca37dab", 0x99}, {&(0x7f0000001c00)="87a5987e52f081a2e678c6a783a6cdcf8b377305dfc34c0e9e34f1d10095700df9daf5f98a0b66b766de7bc5a9148d906e06d482b494f54cab69e855c7d51ff84da20c76adc89f5124b8a4b41a760f20026263b3453d1c1f7d2fd3c82b20f827d42c69be2b9ef6ee55c819a5ebb93cac02b476ecb852", 0x76}], 0x7, &(0x7f0000001d00)=[@ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x27, 0x73, [@private=0xa010100, @rand_addr=0x64010101, @loopback, @loopback, @multicast1, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x2b}, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1e7b}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf38}}], 0xb0}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001e00)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001e40)={r0, r4}) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x2) recvmsg$unix(r4, &(0x7f0000002140)={0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001e80)=""/214, 0xd6}, {&(0x7f0000001f80)=""/198, 0xc6}, {&(0x7f0000002080)=""/28, 0x1c}], 0x3, &(0x7f0000002100)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x40014040) write$cgroup_pid(r4, &(0x7f0000002180)=r5, 0x12) r6 = perf_event_open$cgroup(&(0x7f0000002200)={0x2, 0x80, 0x0, 0x9, 0x9, 0x7f, 0x0, 0x5, 0x810, 0x7, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000021c0), 0x3}, 0x4826, 0xd66, 0x0, 0x2, 0x400, 0x8, 0x9, 0x0, 0x1, 0x0, 0x7}, r4, 0x8, r4, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000002280)='\x00') r7 = openat$cgroup_subtree(r4, &(0x7f00000022c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000002300)={[{0x2b, 'pids'}, {0x2b, 'net_cls'}, {0x2b, 'cpuacct'}, {0x2b, 'cpuacct'}, {0x2b, 'memory'}, {0x2b, 'hugetlb'}]}, 0x32) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002500), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000025c0)={r4, 0xffffffffffffffff}, 0x4) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x18, 0x14, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@map_fd={0x18, 0x4, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x6}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000002400)='syzkaller\x00', 0x4, 0xb2, &(0x7f0000002440)=""/178, 0x41100, 0x20, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000002540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000002580)={0x0, 0x2, 0x5, 0x7}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000002600)=[r1, r4, r4, r9, r2], &(0x7f0000002640)=[{0x2, 0x4, 0xd, 0xa}, {0x3, 0x1, 0x5, 0x5}, {0x4, 0x4, 0x1, 0x8}, {0x4, 0x4, 0xf, 0xb}, {0x2, 0x4, 0x2, 0x5}, {0x0, 0x4, 0x4, 0x3}, {0x4, 0x1, 0xb, 0x6}, {0x5, 0x1, 0xa, 0x9}, {0x3, 0x2, 0x7, 0x8}, {0x5, 0x5, 0x10, 0x2}], 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002a80)={r4, 0xe0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000027c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xca, &(0x7f0000002880)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000028c0), &(0x7f0000002900), 0x8, 0x8f, 0x8, 0x8, &(0x7f0000002940)}}, 0x10) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r11, 0xffffffffffffffff, 0x3, 0x0, 0x4}, 0x50) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000002b40)={'dummy0\x00', 0x600}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000002b80)=@bloom_filter={0x1e, 0xfffffff9, 0x2, 0x64d, 0x1002, r12, 0xe2, '\x00', 0x0, r4, 0x2, 0x2, 0x4, 0x9}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000002c00)='dummy0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002cc0)={r4, 0x58, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002d00)={0x3, 0x4, 0x4, 0xa, 0x0, r13, 0x6, '\x00', r14, r8, 0x1, 0x1}, 0x50) recvmsg(r4, &(0x7f0000004340)={&(0x7f0000002d80)=@caif=@util, 0x80, &(0x7f00000041c0)=[{&(0x7f0000002e00)=""/249, 0xf9}, {&(0x7f0000002f00)=""/20, 0x14}, {&(0x7f0000002f40)=""/110, 0x6e}, {&(0x7f0000002fc0)=""/34, 0x22}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f0000004000)=""/241, 0xf1}, {&(0x7f0000004100)=""/163, 0xa3}], 0x7, &(0x7f0000004240)=""/219, 0xdb}, 0x101) socket$kcm(0x29, 0x6, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000043c0)=@o_path={&(0x7f0000004380)='./file0\x00', 0x0, 0x8, r10}, 0x18) 1.047896151s ago: executing program 3 (id=1386): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r2, 0x4) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x2001, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x1}, 0x1410, 0x401, 0x0, 0x5, 0x1b, 0xffff0001, 0x2, 0x0, 0x4, 0x0, 0x727}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) close(r5) 1.008159633s ago: executing program 1 (id=1387): r0 = socket$kcm(0x28, 0x5, 0x0) (async) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x1, 0x3d, &(0x7f00000002c0), 0x8) (async) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffff9}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18}}], 0x18}, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x50) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000500), 0x8, r2}, 0x38) (async) socket$kcm(0x28, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x10980, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x20) r4 = socket$kcm(0x1e, 0x2, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) (async, rerun: 64) r6 = socket$kcm(0x21, 0x2, 0xa) (async, rerun: 64) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r7, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x3e, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) (async) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x7fffffff}, 0x28) (async, rerun: 64) close(r4) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="12000000040000000800000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) 947.964025ms ago: executing program 2 (id=1388): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c4c58f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0xd0, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@fallback=r1, r0, 0xf, 0x4, 0x0, @void, @value=r0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x69, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f0000000280)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1100000004000000040000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000c4c58f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], 0x0, 0xd0, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xd, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@fallback=r1, r0, 0xf, 0x4, 0x0, @void, @value=r0}, 0x20) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, r1, 0x69, '\x00', r2, 0xffffffffffffffff, 0x4, 0x0, 0x3}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000200), &(0x7f0000000280)='%pB \x00'}, 0x20) (async) 875.767579ms ago: executing program 0 (id=1389): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x14, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000580), 0x1000, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r0, &(0x7f0000000280)="9dc3ba0a28", &(0x7f0000001580)=""/92}, 0x20) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 658.739569ms ago: executing program 0 (id=1390): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000580)={0x5, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x9f0aaeb241ad0aed, 0xc78, 0x0, 0x0, 0x0, 0x57}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) close(r4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000100)={r0}) setsockopt$sock_attach_bpf(r1, 0x107, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005e92f4ff0000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x2, [{0x0, 0x2}, {}]}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x5f]}}, 0x0, 0x71}, 0x28) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f0000000500), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) sendmsg$kcm(r9, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x1, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900"], 0x1d}, 0x4800) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYRES16=r10], 0xfe33) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000700)="fb", 0x1}, {&(0x7f0000000680)="660f829e3add48b05d82", 0xa}, {&(0x7f0000000800)="adb34727cc508abe1092fb01d95f9d", 0xf}], 0x3}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 375.908972ms ago: executing program 1 (id=1391): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000040d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x75, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x8, 0x6, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0xb, '\x00', 0x0, r2, 0x0, 0x1, 0x2}, 0x50) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x10003, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x4) sendmsg$kcm(r3, 0x0, 0x4045) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040005234538ba"], 0xfe33) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x1, 0x23, 0x0, 0x1, 0x3}, 0x50) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x40000002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 182.184851ms ago: executing program 0 (id=1392): perf_event_open(&(0x7f00000006c0)={0x4, 0x80, 0x1, 0x7, 0x1, 0x20, 0x0, 0x7fffffffffffffff, 0x5008, 0x37d227e0e6384d28, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={&(0x7f00000002c0), 0x3}, 0x3048, 0x3, 0xed6b, 0x0, 0x5, 0x3b382a1e, 0x2, 0x0, 0x0, 0x0, 0xbe2c}, 0x0, 0x3, 0xffffffffffffffff, 0x3) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0, r2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000840)=[{0xfdc0, 0x0, 0x3, 0xff7ff038}, {0x2, 0x0, 0x0, 0x8}]}) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="0000050000000065d20000000036020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010001000000000000000000faffffff00"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f0000000940), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r8) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002180)={&(0x7f0000000780)="1cd63c3b0463bc81ee187c932dafe1d3309243ecb8b23e20a16c23c2119b2f9eeb0bc574edea10bcc5f59d099feffffbb640ed48543fe836aa61fcaa9d7241d81e72c843bb3537bf33328581d9b473a4aae7540ba0609ac8a89c120ee29e8894cb1455bea85f302b4486862889f42acc4977b5f6846f7bbe9e0f0eb56b9b6ed0fea6bff25791fe611245247289aba0e3476a79bb43c9d621aa2fddb2a10912601b99225a9b7647b04b8b9c948e8280d0a47fbc0e0ea7e161e1", &(0x7f0000001040)=""/4096, &(0x7f0000002040)="1d264e2fafdd0e5a81411c0e04cd142005a514e83328f8b586cbf6b1f1081c8fec94a653d93fa4335a8cd05698fe1df801e69661800be69e1a9dc91331cbe9099517d424935833b4b35340b24fc2afb598f33b036c11884d0a8fff45096b5a4b9af6ab33e5329cc6266d3e618767b7", &(0x7f00000020c0)="6b21265b7acd9114ae87606775074e6783411596691b69ad12bf7fa025117c6277aa4a19f643e91b296ebf2bcb9d4c44a53990cf73fca99b9e72b2c05cc6a99a7b6f0590257f5f683ed0b004c8fb9682a489ea5be19979ce19bf7947aaf4924aca9e07954de0e1b9fe469ddbba5cabde8de4d668c545dba0f20c99cc73c3c56f0ee151810083c385e0fb5d60460bb72c62b4de85fcbb62e797854b742ba5c4c7e8d755471ee5af0abfe7d2", 0xb, r4}, 0x38) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="080000000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8941, &(0x7f0000000080)) 71.854046ms ago: executing program 3 (id=1393): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r0}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644ab, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0601000100000044000100fe800e000000004e0033df090e8497b1ed90d3d376bd5f6ffe5aa677b1c6f99b214460bc24f65ee2f308ff9d4f5a60eab556a705251e618294010000003b48df", 0x5c}], 0x1000000000000125, 0x0, 0x0, 0x1f00c00e}, 0x80000) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0xfa, 0x3, 0x4, 0x3, 0x0, 0x104, 0x22400, 0x7, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext={0x909d, 0x8}, 0x418, 0x4, 0x10, 0x2, 0x81, 0x725, 0x2, 0x0, 0x7f, 0x0, 0x81e}, 0x0, 0xb, r1, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4, 0xd}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0xfe33) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x9, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0xa14, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:'], 0x5d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES16=r7], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) 0s ago: executing program 2 (id=1394): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@i, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, 0x0}, 0x94) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xa00, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a10a001200020014260c600e12100015007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 83.099331][ T5765] cgroup: Unknown subsys name 'net' [ 83.243566][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.129873][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.850176][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.861802][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.895900][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.925027][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.933101][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.945412][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.955822][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.963106][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.972331][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.979874][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.994468][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.003694][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.021889][ T5790] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.030201][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.040465][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.049209][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.058779][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.058955][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.076089][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.085125][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.093324][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.097607][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.111903][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.121446][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.824117][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.883306][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.916311][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 87.970944][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 88.141744][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.149230][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.156838][ T5776] bridge_slave_0: entered allmulticast mode [ 88.164191][ T5776] bridge_slave_0: entered promiscuous mode [ 88.215332][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.223070][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.232004][ T5779] bridge_slave_0: entered allmulticast mode [ 88.239629][ T5779] bridge_slave_0: entered promiscuous mode [ 88.248935][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.257276][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.267076][ T5776] bridge_slave_1: entered allmulticast mode [ 88.274479][ T5776] bridge_slave_1: entered promiscuous mode [ 88.282465][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.291869][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.300094][ T5784] bridge_slave_0: entered allmulticast mode [ 88.307945][ T5784] bridge_slave_0: entered promiscuous mode [ 88.321977][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.330657][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.338858][ T5779] bridge_slave_1: entered allmulticast mode [ 88.347240][ T5779] bridge_slave_1: entered promiscuous mode [ 88.367566][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.375004][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.382267][ T5784] bridge_slave_1: entered allmulticast mode [ 88.389995][ T5784] bridge_slave_1: entered promiscuous mode [ 88.481757][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.494633][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.508065][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.519992][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.532783][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.543560][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.551888][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.559958][ T5785] bridge_slave_0: entered allmulticast mode [ 88.567611][ T5785] bridge_slave_0: entered promiscuous mode [ 88.590814][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.614093][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.621722][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.629426][ T5785] bridge_slave_1: entered allmulticast mode [ 88.637412][ T5785] bridge_slave_1: entered promiscuous mode [ 88.661420][ T5776] team0: Port device team_slave_0 added [ 88.719386][ T5776] team0: Port device team_slave_1 added [ 88.739586][ T5784] team0: Port device team_slave_0 added [ 88.752560][ T5779] team0: Port device team_slave_0 added [ 88.774902][ T5779] team0: Port device team_slave_1 added [ 88.793281][ T5784] team0: Port device team_slave_1 added [ 88.805657][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.827523][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.836852][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.863823][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.890208][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.912226][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.919382][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.945851][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.981985][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.990614][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.017290][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.050427][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.058441][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.085691][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.097016][ T5792] Bluetooth: hci0: command tx timeout [ 89.113841][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.123443][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.150304][ T5792] Bluetooth: hci1: command tx timeout [ 89.155533][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.157427][ T5792] Bluetooth: hci3: command tx timeout [ 89.187112][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.194122][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.221392][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.224735][ T5792] Bluetooth: hci2: command tx timeout [ 89.247934][ T5785] team0: Port device team_slave_0 added [ 89.268062][ T5776] hsr_slave_0: entered promiscuous mode [ 89.275313][ T5776] hsr_slave_1: entered promiscuous mode [ 89.287526][ T5785] team0: Port device team_slave_1 added [ 89.365423][ T5779] hsr_slave_0: entered promiscuous mode [ 89.372942][ T5779] hsr_slave_1: entered promiscuous mode [ 89.382843][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.391473][ T5779] Cannot create hsr debugfs directory [ 89.417576][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.424645][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.450938][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.480757][ T5784] hsr_slave_0: entered promiscuous mode [ 89.487931][ T5784] hsr_slave_1: entered promiscuous mode [ 89.494210][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.502040][ T5784] Cannot create hsr debugfs directory [ 89.539261][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.548164][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.577861][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.788942][ T5785] hsr_slave_0: entered promiscuous mode [ 89.798829][ T5785] hsr_slave_1: entered promiscuous mode [ 89.805577][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.813159][ T5785] Cannot create hsr debugfs directory [ 90.100921][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.114919][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.129368][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.140922][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.236266][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.253429][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.271988][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.282925][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.411004][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.422601][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.450090][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.461696][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.495458][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.575139][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.587593][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.599373][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.610841][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.652887][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.690764][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.698889][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.711191][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.718401][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.740829][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.829382][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.867099][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.875066][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.940250][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.947581][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.991865][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.076884][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.098763][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.117873][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.154449][ T5792] Bluetooth: hci0: command tx timeout [ 91.168621][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.175888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.189743][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.197039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.225206][ T5792] Bluetooth: hci3: command tx timeout [ 91.225224][ T5787] Bluetooth: hci1: command tx timeout [ 91.251410][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.258693][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.281230][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.288511][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.304713][ T5787] Bluetooth: hci2: command tx timeout [ 91.614221][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.671340][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.779646][ T5776] veth0_vlan: entered promiscuous mode [ 91.820667][ T5776] veth1_vlan: entered promiscuous mode [ 91.858716][ T5784] veth0_vlan: entered promiscuous mode [ 91.909969][ T5776] veth0_macvtap: entered promiscuous mode [ 91.934039][ T5784] veth1_vlan: entered promiscuous mode [ 91.960442][ T5776] veth1_macvtap: entered promiscuous mode [ 92.036132][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.053132][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.064280][ T5784] veth0_macvtap: entered promiscuous mode [ 92.078016][ T5784] veth1_macvtap: entered promiscuous mode [ 92.100877][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.113493][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.129789][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.140716][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.156713][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.175663][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.188146][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.202824][ T789] cfg80211: failed to load regulatory.db [ 92.214391][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.223169][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.251675][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.262820][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.278998][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.305776][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.318017][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.328037][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.337556][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.478891][ T5785] veth0_vlan: entered promiscuous mode [ 92.501193][ T5779] veth0_vlan: entered promiscuous mode [ 92.551907][ T5785] veth1_vlan: entered promiscuous mode [ 92.568686][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.590417][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.612767][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.627130][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.646028][ T5779] veth1_vlan: entered promiscuous mode [ 92.694876][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.702740][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.752588][ T5785] veth0_macvtap: entered promiscuous mode [ 92.808938][ T5785] veth1_macvtap: entered promiscuous mode [ 92.824208][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.833364][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.862731][ T5779] veth0_macvtap: entered promiscuous mode [ 92.897080][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.918454][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.929166][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.940000][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.957236][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.991440][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.008113][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.018858][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.032104][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.047998][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.063509][ T5779] veth1_macvtap: entered promiscuous mode [ 93.113546][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.136704][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.153803][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.163286][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218875][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.244408][ T5787] Bluetooth: hci0: command tx timeout [ 93.269251][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.281794][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.293624][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.306152][ T5792] Bluetooth: hci1: command tx timeout [ 93.311824][ T5787] Bluetooth: hci3: command tx timeout [ 93.328818][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.340028][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.353153][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.384912][ T5787] Bluetooth: hci2: command tx timeout [ 93.406891][ T5843] Illegal XDP return value 4294967274 on prog (id 3) dev N/A, expect packet loss! [ 93.444693][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.455565][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.468981][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.479968][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.500576][ T5847] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.514310][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.525390][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.537486][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.556456][ T5847] netlink: 252 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.632551][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.664435][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.684572][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.724833][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.905708][ T5853] sit0: entered allmulticast mode [ 93.926911][ C1] hrtimer: interrupt took 166742 ns [ 94.096946][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.154848][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.295997][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.354310][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.391147][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.421702][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.493788][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.527615][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.755472][ T5867] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9'. [ 94.802043][ T5869] Zero length message leads to an empty skb [ 95.106682][ T5871] warning: `syz.0.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.151019][ T5875] netlink: 'syz.1.10': attribute type 21 has an invalid length. [ 95.306461][ T5787] Bluetooth: hci0: command tx timeout [ 95.385734][ T5792] Bluetooth: hci1: command tx timeout [ 95.392663][ T5787] Bluetooth: hci3: command tx timeout [ 95.466239][ T5787] Bluetooth: hci2: command tx timeout [ 95.473017][ T5883] netlink: 'syz.1.11': attribute type 3 has an invalid length. [ 95.485217][ T5883] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 95.493883][ T5883] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.11'. [ 96.169051][ T5903] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.17'. [ 96.304178][ T5913] netlink: 'syz.0.19': attribute type 21 has an invalid length. [ 96.322594][ T5913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19'. [ 96.337946][ T5913] netlink: 'syz.0.19': attribute type 46 has an invalid length. [ 96.729372][ T5913] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.19'. [ 96.763041][ T5919] syz.2.22 uses obsolete (PF_INET,SOCK_PACKET) [ 96.789424][ T5917] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.19'. [ 97.966159][ T5929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.973941][ T5929] IPv6: NLM_F_CREATE should be set when creating new route [ 97.981482][ T5929] IPv6: NLM_F_CREATE should be set when creating new route [ 97.988875][ T5929] IPv6: NLM_F_CREATE should be set when creating new route [ 98.163418][ T5929] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 98.180697][ T5929] syzkaller1: linktype set to 769 [ 98.353545][ T5937] netlink: 'syz.2.27': attribute type 39 has an invalid length. [ 98.756567][ T5937] hsr_slave_1 (unregistering): left promiscuous mode [ 99.608216][ T5937] syz.2.27 (5937) used greatest stack depth: 19944 bytes left [ 101.101434][ T5980] netlink: 830 bytes leftover after parsing attributes in process `syz.2.41'. [ 101.192414][ T5787] Bluetooth: hci2: ISO packet for unknown connection handle 274 [ 103.948448][ T6001] netlink: 'syz.2.47': attribute type 15 has an invalid length. [ 103.956529][ T6001] netlink: 156 bytes leftover after parsing attributes in process `syz.2.47'. [ 104.269643][ T6011] netlink: 14 bytes leftover after parsing attributes in process `syz.1.50'. [ 104.640264][ T6021] netlink: 188 bytes leftover after parsing attributes in process `syz.0.54'. [ 105.168845][ T6030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 105.191006][ T6030] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 105.210362][ T6026] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 105.254712][ T6027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 105.932156][ T6043] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.60'. [ 106.022912][ T6045] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 106.156106][ T6045] netlink: 2 bytes leftover after parsing attributes in process `syz.1.61'. [ 106.242079][ T6045] hsr0: entered promiscuous mode [ 106.312127][ T6045] bridge0: port 3(hsr0) entered blocking state [ 106.568490][ T6045] bridge0: port 3(hsr0) entered disabled state [ 106.624775][ T6045] hsr0: entered allmulticast mode [ 106.749059][ T6045] hsr_slave_0: entered allmulticast mode [ 106.764565][ T6045] hsr_slave_1: entered allmulticast mode [ 106.788370][ T6045] bridge0: port 3(hsr0) entered blocking state [ 106.795405][ T6045] bridge0: port 3(hsr0) entered forwarding state [ 108.570649][ T6071] vcan0: entered allmulticast mode [ 108.649588][ T6071] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 108.697629][ T6071] veth0_macvtap: left promiscuous mode [ 108.764700][ T6077] netlink: 105 bytes leftover after parsing attributes in process `syz.3.69'. [ 109.019183][ T6077] netlink: 105 bytes leftover after parsing attributes in process `syz.3.69'. [ 109.071375][ T6083] IPv6: Can't replace route, no match found [ 109.406033][ T6096] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.75'. [ 109.424221][ T6092] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.73'. [ 109.808129][ T6113] netlink: 'syz.2.79': attribute type 10 has an invalid length. [ 109.934012][ T6113] team0: Device wg1 is of different type [ 110.400232][ T6129] netlink: 'syz.2.83': attribute type 2 has an invalid length. [ 110.413081][ T6129] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.83'. [ 110.705594][ T6139] netlink: 10 bytes leftover after parsing attributes in process `syz.2.85'. [ 111.009296][ T6143] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.388600][ T6145] netlink: 'syz.0.89': attribute type 3 has an invalid length. [ 111.427555][ T6145] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.89'. [ 111.749674][ T6155] netlink: 'syz.1.94': attribute type 39 has an invalid length. [ 112.145639][ T6161] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.95'. [ 112.571201][ T6167] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.96'. [ 114.268577][ T6210] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.108'. [ 114.797090][ T6215] netlink: 'syz.1.109': attribute type 10 has an invalid length. [ 115.324048][ T6208] cgroup: fork rejected by pids controller in /syz0 [ 115.343060][ T6226] netlink: 'syz.2.110': attribute type 16 has an invalid length. [ 115.381436][ T6215] team0 (unregistering): Port device team_slave_0 removed [ 115.389192][ T6226] netlink: 'syz.2.110': attribute type 3 has an invalid length. [ 115.423105][ T6226] netlink: 132 bytes leftover after parsing attributes in process `syz.2.110'. [ 115.457264][ T6215] team0 (unregistering): Port device team_slave_1 removed [ 115.531543][ T6210] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 116.346843][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.612860][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.772920][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.949675][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.010105][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 118.023954][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 118.034139][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 118.061359][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 118.076241][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 118.094371][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 118.906639][ T6302] sctp: [Deprecated]: syz.1.131 (pid 6302) Use of int in maxseg socket option. [ 118.906639][ T6302] Use struct sctp_assoc_value instead [ 119.362220][ T6314] netlink: 'syz.1.133': attribute type 10 has an invalid length. [ 119.867218][ T6281] chnl_net:caif_netlink_parms(): no params data found [ 120.186961][ T5792] Bluetooth: hci2: command tx timeout [ 121.531558][ T6329] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 121.672220][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.712481][ T6281] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.741263][ T6281] bridge_slave_0: entered allmulticast mode [ 121.762403][ T6281] bridge_slave_0: entered promiscuous mode [ 121.826261][ T6281] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.833665][ T6281] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.866888][ T6281] bridge_slave_1: entered allmulticast mode [ 121.890743][ T6281] bridge_slave_1: entered promiscuous mode [ 122.041385][ T6350] IPv6: pim6reg1: Disabled Multicast RS [ 122.273061][ T5792] Bluetooth: hci2: command tx timeout [ 122.282358][ T6281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.330486][ T6281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.582065][ T6281] team0: Port device team_slave_0 added [ 122.752558][ T6354] syzkaller0: entered promiscuous mode [ 122.784522][ T6354] syzkaller0: entered allmulticast mode [ 122.794817][ T6369] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.144'. [ 122.821386][ T6369] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 122.868006][ T12] hsr_slave_0: left promiscuous mode [ 122.888990][ T12] hsr_slave_1: left promiscuous mode [ 122.910795][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.930389][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.963683][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.984325][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.007084][ T12] bridge_slave_1: left allmulticast mode [ 123.025824][ T12] bridge_slave_1: left promiscuous mode [ 123.040660][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.069025][ T12] bridge_slave_0: left allmulticast mode [ 123.084262][ T12] bridge_slave_0: left promiscuous mode [ 123.090345][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.196786][ T12] veth1_macvtap: left promiscuous mode [ 123.203149][ T12] veth0_macvtap: left promiscuous mode [ 123.209577][ T12] veth1_vlan: left promiscuous mode [ 123.215947][ T12] veth0_vlan: left promiscuous mode [ 123.694399][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 123.737927][ T6378] netlink: 'syz.3.146': attribute type 3 has an invalid length. [ 123.749746][ T6378] netlink: 132 bytes leftover after parsing attributes in process `syz.3.146'. [ 124.111562][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.182247][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.232613][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.292014][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.345500][ T5792] Bluetooth: hci2: command tx timeout [ 124.694031][ T12] bond0 (unregistering): Released all slaves [ 124.776141][ T6281] team0: Port device team_slave_1 added [ 124.833593][ T6375] netlink: 830 bytes leftover after parsing attributes in process `syz.1.145'. [ 124.872797][ T6380] lo: entered promiscuous mode [ 124.889969][ T6380] lo: entered allmulticast mode [ 126.435184][ T5792] Bluetooth: hci2: command tx timeout [ 126.723717][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.754614][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.832307][ T6281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.889477][ T6281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.897614][ T6281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.937733][ T6281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.974161][ T6398] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.151'. [ 126.996012][ T6398] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.151'. [ 127.109721][ T6281] hsr_slave_0: entered promiscuous mode [ 127.163336][ T6281] hsr_slave_1: entered promiscuous mode [ 127.218515][ T6281] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.234345][ T6281] Cannot create hsr debugfs directory [ 127.240277][ T6402] netlink: 'syz.1.152': attribute type 10 has an invalid length. [ 127.769880][ T6423] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 127.801687][ T6423] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.157'. [ 128.125119][ T6428] sctp: [Deprecated]: syz.2.157 (pid 6428) Use of int in maxseg socket option. [ 128.125119][ T6428] Use struct sctp_assoc_value instead [ 129.065771][ T6464] netlink: 128 bytes leftover after parsing attributes in process `syz.2.166'. [ 129.089193][ T6464] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.094208][ T6467] netlink: 'syz.2.166': attribute type 3 has an invalid length. [ 129.113368][ T6467] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.166'. [ 129.219382][ T6281] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.260445][ T6281] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.293397][ T6281] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.343765][ T6281] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 129.443111][ T6475] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 129.912666][ T6472] netlink: 'syz.3.167': attribute type 27 has an invalid length. [ 129.970492][ T6472] netlink: 'syz.3.167': attribute type 25 has an invalid length. [ 130.482136][ T6281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.587629][ T6281] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.679749][ T6222] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.687201][ T6222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.781226][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.789039][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.822415][ T6514] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.174'. [ 131.002415][ T6518] netlink: 'syz.2.175': attribute type 21 has an invalid length. [ 131.027839][ T6518] netlink: 164 bytes leftover after parsing attributes in process `syz.2.175'. [ 131.589711][ T6533] netlink: 14 bytes leftover after parsing attributes in process `syz.1.178'. [ 131.618487][ T6533] netlink: get zone limit has 4 unknown bytes [ 131.707985][ T6281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.871388][ T6281] veth0_vlan: entered promiscuous mode [ 131.897852][ T6281] veth1_vlan: entered promiscuous mode [ 132.019880][ T6281] veth0_macvtap: entered promiscuous mode [ 132.058917][ T6281] veth1_macvtap: entered promiscuous mode [ 132.136962][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.176814][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.194361][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.213649][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.233807][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.266750][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.300355][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.396419][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.464339][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.481930][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.504753][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.524160][ T6281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.539415][ T6281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.582597][ T6281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.603846][ T6554] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.183'. [ 132.633683][ T6281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.650292][ T6554] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 132.681660][ T6281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.693421][ T6281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.712437][ T6281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.090681][ T6564] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.184'. [ 133.150439][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164499][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.358800][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.395003][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.535704][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.584644][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.707785][ T6572] netlink: 'syz.3.186': attribute type 39 has an invalid length. [ 134.019620][ T6572] hsr_slave_1 (unregistering): left promiscuous mode [ 135.707899][ T6619] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.191'. [ 135.807206][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 136.796450][ T6642] netlink: 'syz.1.198': attribute type 19 has an invalid length. [ 136.850589][ T6642] netlink: 40 bytes leftover after parsing attributes in process `syz.1.198'. [ 138.037830][ T6671] netlink: 'syz.3.207': attribute type 21 has an invalid length. [ 138.058264][ T6671] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.078706][ T6671] IPv6: Can't replace route, no match found [ 138.818112][ T6680] netlink: 'syz.3.211': attribute type 10 has an invalid length. [ 138.967320][ T6680] team0: Device hsr_slave_0 failed to register rx_handler [ 139.062249][ T6684] netlink: 'syz.2.212': attribute type 10 has an invalid length. [ 139.115746][ T6684] team0: Device wg1 is of different type [ 139.166893][ T6680] syz.3.211 (6680) used greatest stack depth: 18696 bytes left [ 139.435568][ T6690] netlink: 'syz.3.215': attribute type 3 has an invalid length. [ 139.447788][ T6690] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 139.456136][ T6690] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 139.465963][ T6690] netlink: 'syz.3.215': attribute type 2 has an invalid length. [ 139.473917][ T6690] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.215'. [ 139.924553][ T6702] netlink: set zone limit has 8 unknown bytes [ 142.479840][ T6732] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.225'. [ 142.533490][ T6732] bridge_slave_1: default FDB implementation only supports local addresses [ 143.513539][ T6734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 143.878651][ T6734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.267567][ T6775] sit0: entered allmulticast mode [ 146.322314][ T6777] sit0: entered promiscuous mode [ 146.950490][ T6787] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 146.961770][ T6787] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 148.215945][ T6823] netlink: 'syz.1.241': attribute type 2 has an invalid length. [ 148.223979][ T6823] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.241'. [ 148.711461][ T6839] netlink: 'syz.1.245': attribute type 10 has an invalid length. [ 149.631160][ T6849] netlink: 'syz.2.247': attribute type 10 has an invalid length. [ 149.665110][ T6849] netlink: 40 bytes leftover after parsing attributes in process `syz.2.247'. [ 149.727254][ T6849] ipvlan1: entered promiscuous mode [ 149.754085][ T6849] ipvlan1: entered allmulticast mode [ 149.787695][ T6849] veth0_vlan: entered allmulticast mode [ 149.865464][ T6849] bridge0: port 3(ipvlan1) entered blocking state [ 149.893810][ T6849] bridge0: port 3(ipvlan1) entered disabled state [ 149.948568][ T6849] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 158.024136][ T6869] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.252'. [ 158.412869][ T5792] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 158.758998][ T6890] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.256'. [ 159.346339][ T6901] netlink: 'syz.2.262': attribute type 8 has an invalid length. [ 159.360132][ T6901] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.262'. [ 159.677881][ T6918] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.266'. [ 159.693028][ T6918] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 159.730840][ T6923] netlink: 16239 bytes leftover after parsing attributes in process `syz.3.268'. [ 160.111129][ T6935] netlink: 'syz.0.271': attribute type 11 has an invalid length. [ 160.132316][ T6935] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 160.172212][ T6935] netlink: 'syz.0.271': attribute type 1 has an invalid length. [ 160.209384][ T6935] netlink: 'syz.0.271': attribute type 2 has an invalid length. [ 160.240210][ T6935] netlink: 198100 bytes leftover after parsing attributes in process `syz.0.271'. [ 161.094779][ T6963] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.276'. [ 161.584088][ T6968] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.280'. [ 162.207394][ T6977] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 162.739967][ T6979] netlink: 'syz.1.283': attribute type 2 has an invalid length. [ 162.775194][ T6980] netlink: 'syz.1.283': attribute type 2 has an invalid length. [ 163.009615][ T6994] netlink: 'syz.2.288': attribute type 1 has an invalid length. [ 163.046167][ T6994] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.288'. [ 163.152818][ T6996] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.289'. [ 163.175577][ T7001] netlink: 128 bytes leftover after parsing attributes in process `syz.3.287'. [ 163.234507][ T7001] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.406978][ T7028] netlink: 132 bytes leftover after parsing attributes in process `syz.2.298'. [ 165.026428][ T7042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.301'. [ 165.999729][ T7075] netlink: 'syz.1.308': attribute type 10 has an invalid length. [ 166.105551][ T7075] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.308'. [ 168.372442][ T7099] syz.1.317 (7099) used greatest stack depth: 18600 bytes left [ 168.647136][ T7107] Ÿë: port 1(hsr_slave_0) entered blocking state [ 168.674638][ T7107] Ÿë: port 1(hsr_slave_0) entered disabled state [ 168.707781][ T7107] hsr_slave_0: entered allmulticast mode [ 168.750366][ T7107] hsr_slave_0: left allmulticast mode [ 169.119452][ T7117] syzkaller0: entered promiscuous mode [ 169.137063][ T7117] syzkaller0: entered allmulticast mode [ 172.592017][ T7143] netlink: 'syz.1.328': attribute type 2 has an invalid length. [ 172.603541][ T7145] netlink: 'syz.3.329': attribute type 10 has an invalid length. [ 172.631796][ T7143] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.328'. [ 172.653767][ T7145] netlink: 40 bytes leftover after parsing attributes in process `syz.3.329'. [ 172.670862][ T7148] netlink: 'syz.1.328': attribute type 2 has an invalid length. [ 172.704350][ T7145] team0: entered promiscuous mode [ 172.714490][ T7145] team_slave_0: entered promiscuous mode [ 172.730964][ T7145] team_slave_1: entered promiscuous mode [ 172.738417][ T7148] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.328'. [ 172.779745][ T7145] team0: entered allmulticast mode [ 172.789028][ T7145] team_slave_0: entered allmulticast mode [ 172.799172][ T7145] team_slave_1: entered allmulticast mode [ 172.810224][ T7145] bridge0: port 3(team0) entered blocking state [ 172.820912][ T7145] bridge0: port 3(team0) entered disabled state [ 172.947146][ T7145] bridge0: port 3(team0) entered blocking state [ 172.953711][ T7145] bridge0: port 3(team0) entered forwarding state [ 173.045699][ T7159] netlink: 'syz.1.331': attribute type 21 has an invalid length. [ 173.086999][ T7159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.331'. [ 174.554185][ T7182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.901146][ T7201] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.342'. [ 177.986637][ T7203] netlink: 2 bytes leftover after parsing attributes in process `syz.1.343'. [ 179.010346][ T7227] netlink: 'syz.2.351': attribute type 12 has an invalid length. [ 179.022856][ T7227] netlink: 14585 bytes leftover after parsing attributes in process `syz.2.351'. [ 179.230055][ T7233] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.353'. [ 181.423231][ T7278] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.365'. [ 181.857851][ T7289] netlink: 'syz.2.369': attribute type 11 has an invalid length. [ 181.890629][ T7290] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.894912][ T7289] netlink: 212832 bytes leftover after parsing attributes in process `syz.2.369'. [ 181.897993][ T7290] IPv6: NLM_F_CREATE should be set when creating new route [ 181.914881][ T7290] IPv6: NLM_F_CREATE should be set when creating new route [ 181.922208][ T7290] IPv6: NLM_F_CREATE should be set when creating new route [ 182.146783][ T7290] netlink: 'syz.3.368': attribute type 9 has an invalid length. [ 182.374426][ T7290] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.368'. [ 184.159955][ T7319] netlink: 'syz.0.376': attribute type 3 has an invalid length. [ 184.188055][ T7319] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 184.205732][ T7319] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.376'. [ 185.209376][ T7344] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 185.758306][ T7356] netlink: 'syz.3.385': attribute type 2 has an invalid length. [ 185.815543][ T7354] netlink: 14 bytes leftover after parsing attributes in process `syz.3.385'. [ 185.953178][ T7356] netlink: 179264 bytes leftover after parsing attributes in process `syz.3.385'. [ 186.078878][ T7359] syzkaller0: entered promiscuous mode [ 186.084908][ T7359] syzkaller0: entered allmulticast mode [ 188.591694][ T7377] netlink: 132 bytes leftover after parsing attributes in process `syz.0.392'. [ 188.887298][ T7388] netlink: 140 bytes leftover after parsing attributes in process `syz.2.395'. [ 188.947300][ T7389] netlink: 'syz.0.394': attribute type 3 has an invalid length. [ 188.977320][ T7389] netlink: 132 bytes leftover after parsing attributes in process `syz.0.394'. [ 189.070250][ T7393] netlink: 'syz.1.396': attribute type 1 has an invalid length. [ 189.087975][ T7393] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.396'. [ 189.340359][ T7401] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.397'. [ 189.396489][ T7396] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.397'. [ 189.599498][ T7411] netlink: 'syz.3.402': attribute type 21 has an invalid length. [ 189.621542][ T7411] netlink: 128 bytes leftover after parsing attributes in process `syz.3.402'. [ 189.664717][ T7411] netlink: 'syz.3.402': attribute type 4 has an invalid length. [ 189.706115][ T7411] netlink: 'syz.3.402': attribute type 5 has an invalid length. [ 189.725331][ T7411] netlink: 3 bytes leftover after parsing attributes in process `syz.3.402'. [ 191.137712][ T7443] netlink: 14 bytes leftover after parsing attributes in process `syz.3.410'. [ 191.259318][ T7443] hsr_slave_0: left promiscuous mode [ 194.598869][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.605407][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.685622][ T7451] netlink: 'syz.1.411': attribute type 9 has an invalid length. [ 194.700353][ T7456] netlink: 'syz.0.413': attribute type 21 has an invalid length. [ 194.734369][ T7456] netlink: 164 bytes leftover after parsing attributes in process `syz.0.413'. [ 194.772241][ T7457] netlink: 148 bytes leftover after parsing attributes in process `syz.2.414'. [ 194.810359][ T7459] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 194.856824][ T7459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.414'. [ 194.897979][ T7459] dummy0: entered promiscuous mode [ 194.903715][ T7459] dummy0: entered allmulticast mode [ 194.942001][ T7459] bridge0: port 3(dummy0) entered blocking state [ 194.964699][ T7459] bridge0: port 3(dummy0) entered disabled state [ 194.985905][ T7459] bridge0: port 3(dummy0) entered blocking state [ 194.992604][ T7459] bridge0: port 3(dummy0) entered forwarding state [ 195.839617][ T7502] sit0: entered promiscuous mode [ 198.167462][ T7553] sit0: left promiscuous mode [ 198.642876][ T7556] sit0: entered promiscuous mode [ 198.804785][ T7559] delete_channel: no stack [ 199.265874][ T7589] netlink: 'syz.2.445': attribute type 39 has an invalid length. [ 199.493658][ T7600] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.446'. [ 199.510058][ T7600] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 199.762583][ T7591] netlink: 'syz.2.445': attribute type 39 has an invalid length. [ 199.779847][ T7595] netlink: 132 bytes leftover after parsing attributes in process `syz.2.445'. [ 199.805070][ T7603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.445'. [ 199.878018][ T7609] netlink: 227 bytes leftover after parsing attributes in process `syz.1.449'. [ 200.602511][ T7624] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.453'. [ 201.340211][ T7626] netlink: 'syz.3.455': attribute type 21 has an invalid length. [ 201.360721][ T7626] netlink: 100 bytes leftover after parsing attributes in process `syz.3.455'. [ 201.391641][ T7631] sit0: entered allmulticast mode [ 201.488505][ T7636] sit0: entered promiscuous mode [ 201.813508][ T7648] netlink: 26 bytes leftover after parsing attributes in process `syz.1.459'. [ 203.160156][ T7671] netlink: 'syz.1.465': attribute type 29 has an invalid length. [ 203.196043][ T7671] netlink: 'syz.1.465': attribute type 29 has an invalid length. [ 204.371050][ T7695] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.469'. [ 204.657895][ T7701] netlink: 'syz.2.471': attribute type 2 has an invalid length. [ 204.666126][ T7701] netlink: 'syz.2.471': attribute type 8 has an invalid length. [ 204.673829][ T7701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.471'. [ 204.699556][ T7698] netlink: 132 bytes leftover after parsing attributes in process `syz.1.470'. [ 204.747011][ T7704] netlink: 132 bytes leftover after parsing attributes in process `syz.1.470'. [ 204.938572][ T7708] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.474'. [ 205.150115][ T7716] netlink: 14 bytes leftover after parsing attributes in process `syz.3.476'. [ 205.350051][ T7716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.369727][ T7716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.406128][ T7716] bond0 (unregistering): Released all slaves [ 206.023081][ T7736] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 206.176881][ T7736] vxcan1: entered promiscuous mode [ 206.206705][ T7736] vxcan1: entered allmulticast mode [ 206.212029][ T7736] team0: Device vxcan1 is of different type [ 206.915741][ T7757] netlink: 'syz.1.486': attribute type 21 has an invalid length. [ 206.956850][ T7757] netlink: 'syz.1.486': attribute type 6 has an invalid length. [ 206.997569][ T7757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.486'. [ 207.571788][ T7760] netlink: 'syz.1.487': attribute type 11 has an invalid length. [ 208.159798][ T7764] netlink: 'syz.0.488': attribute type 10 has an invalid length. [ 208.232942][ T7764] veth0_vlan: entered allmulticast mode [ 208.271191][ T7770] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.489'. [ 208.313246][ T7770] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 208.429610][ T7764] veth0_vlan: left promiscuous mode [ 208.537173][ T7777] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.491'. [ 208.561879][ T7764] veth0_vlan: entered promiscuous mode [ 208.592709][ T7764] team0: Device veth0_vlan failed to register rx_handler [ 208.826932][ T7785] netlink: 'syz.3.492': attribute type 27 has an invalid length. [ 208.836224][ T7785] netlink: 'syz.3.492': attribute type 25 has an invalid length. [ 209.482468][ T7798] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.496'. [ 209.501937][ T7802] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.497'. [ 210.147377][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 210.167014][ T7807] syzkaller0: entered promiscuous mode [ 210.172576][ T7807] syzkaller0: entered allmulticast mode [ 210.468524][ T7821] netlink: 'syz.0.501': attribute type 5 has an invalid length. [ 212.063222][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 212.065750][ T5780] Bluetooth: hci0: command 0x0406 tx timeout [ 212.070023][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 213.012372][ T7826] netlink: 'syz.0.502': attribute type 13 has an invalid length. [ 213.020604][ T7826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.502'. [ 213.035934][ T7826] syz_tun: refused to change device tx_queue_len [ 213.042381][ T7826] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 213.267129][ T7838] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.504'. [ 213.290669][ T7838] netlink: zone id is out of range [ 213.301609][ T7838] netlink: zone id is out of range [ 213.972694][ T7857] netlink: 3554 bytes leftover after parsing attributes in process `syz.1.511'. [ 215.387118][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 215.424529][ T7882] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 215.445600][ T7881] netlink: 60 bytes leftover after parsing attributes in process `syz.2.518'. [ 215.733537][ T7889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 216.024689][ T7900] netlink: 'syz.1.522': attribute type 21 has an invalid length. [ 216.055905][ T7900] netlink: 128 bytes leftover after parsing attributes in process `syz.1.522'. [ 216.139505][ T7900] netlink: 'syz.1.522': attribute type 4 has an invalid length. [ 216.187214][ T7900] netlink: 3 bytes leftover after parsing attributes in process `syz.1.522'. [ 216.865749][ T7918] netlink: 'syz.3.525': attribute type 21 has an invalid length. [ 216.877291][ T7918] netlink: 'syz.3.525': attribute type 6 has an invalid length. [ 216.887921][ T7918] netlink: 132 bytes leftover after parsing attributes in process `syz.3.525'. [ 216.911219][ T7919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.525'. [ 219.208320][ T7953] netlink: 'syz.0.536': attribute type 64 has an invalid length. [ 219.744603][ T7975] netlink: 'syz.0.538': attribute type 10 has an invalid length. [ 219.951471][ T7975] geneve0: entered promiscuous mode [ 220.006650][ T7975] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 220.334518][ T7990] netlink: zone id is out of range [ 220.339741][ T7990] netlink: set zone limit has 8 unknown bytes [ 220.394833][ T7993] netlink: zone id is out of range [ 220.400038][ T7993] netlink: set zone limit has 8 unknown bytes [ 221.522316][ T8023] syzkaller0: entered promiscuous mode [ 221.540630][ T8023] syzkaller0: entered allmulticast mode [ 224.731208][ T8033] netlink: 'syz.1.552': attribute type 29 has an invalid length. [ 226.559810][ T8030] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.552'. [ 226.569246][ T8033] netlink: 'syz.1.552': attribute type 29 has an invalid length. [ 226.577463][ T8036] netlink: 'syz.3.551': attribute type 58 has an invalid length. [ 226.588906][ T8036] netlink: 144 bytes leftover after parsing attributes in process `syz.3.551'. [ 226.610264][ T8035] netlink: 'syz.1.552': attribute type 39 has an invalid length. [ 226.728740][ T8047] netlink: 'syz.0.554': attribute type 2 has an invalid length. [ 226.745092][ T8047] netlink: 'syz.0.554': attribute type 8 has an invalid length. [ 226.789322][ T8047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.554'. [ 226.864102][ T8050] netlink: 'syz.2.555': attribute type 10 has an invalid length. [ 226.872788][ T8050] netlink: 40 bytes leftover after parsing attributes in process `syz.2.555'. [ 226.913695][ T8050] batman_adv: batadv0: Adding interface: virt_wifi0 [ 226.940676][ T8050] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.974608][ T8050] batman_adv: batadv0: Interface activated: virt_wifi0 [ 227.019934][ T8051] netlink: 'syz.2.555': attribute type 2 has an invalid length. [ 227.036953][ T8051] netlink: 'syz.2.555': attribute type 8 has an invalid length. [ 227.094791][ T8051] netlink: 132 bytes leftover after parsing attributes in process `syz.2.555'. [ 227.746056][ T8056] netlink: 'syz.1.557': attribute type 23 has an invalid length. [ 228.797364][ T8087] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.566'. [ 229.111094][ T8097] netlink: 196 bytes leftover after parsing attributes in process `syz.0.569'. [ 229.157348][ T8099] netlink: 207144 bytes leftover after parsing attributes in process `syz.3.570'. [ 229.318155][ T8103] netlink: 9 bytes leftover after parsing attributes in process `syz.2.571'. [ 229.397373][ T8106] sit0: left promiscuous mode [ 229.716125][ T8120] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.573'. [ 229.856368][ T5792] Bluetooth: hci1: Malformed LE Event: 0x02 [ 229.943426][ T8130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 229.972045][ T8128] validate_nla: 4 callbacks suppressed [ 229.972060][ T8128] netlink: 'syz.3.576': attribute type 9 has an invalid length. [ 231.511962][ T8147] netlink: 'syz.2.580': attribute type 21 has an invalid length. [ 232.500177][ T8164] __nla_validate_parse: 4 callbacks suppressed [ 232.500207][ T8164] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.586'. [ 232.798443][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 234.497937][ T8198] bridge0: port 3(hsr0) entered disabled state [ 234.504516][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.513393][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.605700][ T8198] bridge0: entered allmulticast mode [ 235.217448][ T8211] netlink: 'syz.2.598': attribute type 29 has an invalid length. [ 235.653182][ T8211] netlink: 'syz.2.598': attribute type 29 has an invalid length. [ 235.672189][ T8213] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.599'. [ 235.682371][ T8214] netlink: 'syz.2.598': attribute type 29 has an invalid length. [ 238.396113][ T8245] netlink: 'syz.2.607': attribute type 21 has an invalid length. [ 238.403963][ T8245] netlink: 128 bytes leftover after parsing attributes in process `syz.2.607'. [ 238.593060][ T8245] netlink: 3 bytes leftover after parsing attributes in process `syz.2.607'. [ 239.018809][ T8253] netlink: 'syz.3.610': attribute type 2 has an invalid length. [ 240.294612][ T8265] netlink: 71 bytes leftover after parsing attributes in process `syz.0.612'. [ 241.204731][ T8271] netlink: 'syz.2.615': attribute type 21 has an invalid length. [ 241.224513][ T8271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.615'. [ 241.246382][ T8275] netlink: 'syz.3.616': attribute type 21 has an invalid length. [ 241.265216][ T8275] netlink: 132 bytes leftover after parsing attributes in process `syz.3.616'. [ 241.578324][ T8282] netlink: 'syz.2.618': attribute type 10 has an invalid length. [ 241.619270][ T8282] netlink: 152 bytes leftover after parsing attributes in process `syz.2.618'. [ 241.798888][ T8293] netlink: 'syz.0.621': attribute type 3 has an invalid length. [ 241.832813][ T8293] netlink: 'syz.0.621': attribute type 1 has an invalid length. [ 241.855296][ T8293] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.621'. [ 241.875504][ T8299] netlink: 14 bytes leftover after parsing attributes in process `syz.0.621'. [ 241.921059][ T8299] hsr_slave_0: left promiscuous mode [ 241.990036][ T8299] hsr_slave_1: left promiscuous mode [ 242.348497][ T8301] netlink: 'syz.1.623': attribute type 10 has an invalid length. [ 242.646381][ T8316] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.626'. [ 242.665760][ T8316] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 242.746599][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 242.800622][ T8323] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.629'. [ 242.832657][ T8323] openvswitch: netlink: Tunnel attr 2 has unexpected len 1788 expected 4 [ 244.525369][ T8357] netlink: 'syz.2.636': attribute type 2 has an invalid length. [ 247.580526][ T8369] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.640'. [ 247.797125][ T8369] bridge_slave_1: default FDB implementation only supports local addresses [ 248.008783][ T8374] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.641'. [ 250.962251][ T8409] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.650'. [ 251.026595][ T8409] netlink: 252 bytes leftover after parsing attributes in process `syz.2.650'. [ 251.074805][ T8412] netlink: 'syz.2.650': attribute type 8 has an invalid length. [ 251.242925][ T8411] netlink: 180 bytes leftover after parsing attributes in process `syz.1.651'. [ 252.153491][ T8420] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.654'. [ 252.998446][ T8432] netlink: 'syz.1.656': attribute type 17 has an invalid length. [ 253.022088][ T8432] netlink: 148 bytes leftover after parsing attributes in process `syz.1.656'. [ 253.237490][ T8434] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.656'. [ 254.170078][ T8440] netlink: 205720 bytes leftover after parsing attributes in process `syz.2.657'. [ 254.423459][ T8451] netlink: 'syz.1.662': attribute type 64 has an invalid length. [ 254.517956][ T8451] netlink: 'syz.1.662': attribute type 64 has an invalid length. [ 254.583013][ T8450] netlink: 'syz.1.662': attribute type 64 has an invalid length. [ 255.817109][ T8458] syzkaller0: entered promiscuous mode [ 255.848189][ T8458] syzkaller0: entered allmulticast mode [ 256.101946][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.112650][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.211980][ T8468] netlink: 'syz.0.669': attribute type 9 has an invalid length. [ 256.264808][ T8468] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.669'. [ 256.967964][ T8479] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.670'. [ 261.112465][ T8487] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.672'. [ 261.318579][ T8490] delete_channel: no stack [ 261.550045][ T8497] Ÿë: port 1(hsr_slave_0) entered blocking state [ 261.566991][ T8497] Ÿë: port 1(hsr_slave_0) entered disabled state [ 261.573964][ T8497] hsr_slave_0: entered allmulticast mode [ 261.589217][ T8497] hsr_slave_0: entered promiscuous mode [ 261.611166][ T8508] netlink: 148 bytes leftover after parsing attributes in process `syz.2.678'. [ 261.700301][ T8508] netlink: 168 bytes leftover after parsing attributes in process `syz.2.678'. [ 261.774858][ T8511] netlink: 'syz.1.679': attribute type 29 has an invalid length. [ 261.835239][ T8511] netlink: 'syz.1.679': attribute type 29 has an invalid length. [ 261.890413][ T8514] netlink: 'syz.0.680': attribute type 21 has an invalid length. [ 261.950283][ T8523] netlink: 'syz.3.681': attribute type 2 has an invalid length. [ 261.998130][ T8523] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 262.003789][ T8511] netlink: 'syz.1.679': attribute type 29 has an invalid length. [ 262.019787][ T8523] netlink: 'syz.3.681': attribute type 2 has an invalid length. [ 262.052882][ T8511] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.679'. [ 262.065340][ T8523] netlink: 198036 bytes leftover after parsing attributes in process `syz.3.681'. [ 262.087032][ T8522] netlink: 'syz.3.681': attribute type 2 has an invalid length. [ 262.108257][ T8522] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 262.129678][ T8522] netlink: 'syz.3.681': attribute type 2 has an invalid length. [ 262.149806][ T8522] netlink: 198036 bytes leftover after parsing attributes in process `syz.3.681'. [ 262.277482][ T8528] hsr_slave_0: left allmulticast mode [ 262.283994][ T8528] hsr_slave_0: left promiscuous mode [ 262.306839][ T8528] Ÿë: port 1(hsr_slave_0) entered disabled state [ 262.499939][ T8528] team0: Port device hsr_slave_0 added [ 262.659554][ T8538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.684'. [ 262.673938][ T8538] netlink: 60 bytes leftover after parsing attributes in process `syz.3.684'. [ 262.702863][ T8533] netlink: 60 bytes leftover after parsing attributes in process `syz.3.684'. [ 262.750572][ T8542] netlink: 60 bytes leftover after parsing attributes in process `syz.1.685'. [ 263.367935][ T8560] IPv6: NLM_F_CREATE should be specified when creating new route [ 263.394351][ T8560] IPv6: Can't replace route, no match found [ 263.496195][ T8565] syz.0.693[8565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.518369][ T8560] team0: Device wg1 is of different type [ 264.738784][ T8596] syz.2.701[8596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.739753][ T8596] syz.2.701[8596] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.552704][ T8637] syzkaller0: entered promiscuous mode [ 266.582573][ T8637] syzkaller0: entered allmulticast mode [ 269.475124][ T8646] __nla_validate_parse: 5 callbacks suppressed [ 269.475144][ T8646] netlink: 128 bytes leftover after parsing attributes in process `syz.1.714'. [ 269.510272][ T8646] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.473517][ T8668] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.721'. [ 270.796554][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.723'. [ 271.103015][ T8684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 271.111004][ T8684] IPv6: NLM_F_CREATE should be set when creating new route [ 271.119519][ T8684] IPv6: NLM_F_CREATE should be set when creating new route [ 271.127346][ T8684] IPv6: NLM_F_CREATE should be set when creating new route [ 271.136735][ T8688] validate_nla: 5 callbacks suppressed [ 271.136751][ T8688] netlink: 'syz.1.724': attribute type 9 has an invalid length. [ 271.205612][ T8688] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.724'. [ 271.253107][ T8690] netlink: 14 bytes leftover after parsing attributes in process `syz.3.725'. [ 271.606000][ T8684] netlink: 'syz.1.724': attribute type 9 has an invalid length. [ 271.619427][ T8684] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.724'. [ 272.180338][ T8699] netlink: 'syz.3.728': attribute type 22 has an invalid length. [ 272.205329][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.728'. [ 272.354930][ T8703] veth1_macvtap: left promiscuous mode [ 272.431056][ T8703] veth1_macvtap: entered promiscuous mode [ 272.441815][ T8703] macsec0: entered promiscuous mode [ 272.465234][ T8703] macsec0: entered allmulticast mode [ 272.470771][ T8703] veth1_macvtap: entered allmulticast mode [ 272.556502][ T8707] netlink: 'syz.3.731': attribute type 10 has an invalid length. [ 272.639070][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.675375][ T8707] bridge_slave_1: left allmulticast mode [ 272.684027][ T8707] bridge_slave_1: left promiscuous mode [ 272.690740][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.710933][ T8709] netlink: 'syz.2.730': attribute type 4 has an invalid length. [ 272.744447][ T8709] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.730'. [ 273.485577][ T8714] netlink: 'syz.3.733': attribute type 2 has an invalid length. [ 273.493640][ T8714] netlink: 'syz.3.733': attribute type 2 has an invalid length. [ 273.520896][ T8715] netlink: 14 bytes leftover after parsing attributes in process `syz.3.733'. [ 273.855969][ T8720] syzkaller0: entered promiscuous mode [ 273.861542][ T8720] syzkaller0: entered allmulticast mode [ 273.909278][ T8726] netlink: 14 bytes leftover after parsing attributes in process `syz.0.736'. [ 274.369410][ T8726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.011194][ T8726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.083588][ T8726] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 275.112081][ T8726] bond0 (unregistering): Released all slaves [ 275.399739][ T8777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.739'. [ 277.940212][ T8777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.739'. [ 277.958602][ T8796] netlink: 10 bytes leftover after parsing attributes in process `syz.3.744'. [ 278.217400][ T8806] netlink: 14 bytes leftover after parsing attributes in process `syz.2.747'. [ 278.403356][ T8816] raw_sendmsg: syz.3.749 forgot to set AF_INET. Fix it! [ 279.009006][ T8806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.110818][ T8806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.120411][ T8823] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.751'. [ 279.171108][ T8806] bond0 (unregistering): Released all slaves [ 282.279864][ T8888] netlink: 'syz.2.767': attribute type 21 has an invalid length. [ 282.305597][ T8888] netlink: 168 bytes leftover after parsing attributes in process `syz.2.767'. [ 284.548081][ T8933] netlink: 'syz.0.780': attribute type 27 has an invalid length. [ 284.574394][ T8933] netlink: 164 bytes leftover after parsing attributes in process `syz.0.780'. [ 285.083224][ T8943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 285.139716][ T8943] netlink: 'syz.3.783': attribute type 9 has an invalid length. [ 285.168849][ T8943] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.783'. [ 286.108012][ T8949] netlink: 'syz.3.783': attribute type 9 has an invalid length. [ 286.144462][ T8949] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.783'. [ 289.690716][ T8979] netlink: 'syz.2.792': attribute type 10 has an invalid length. [ 289.703989][ T8979] netlink: 2 bytes leftover after parsing attributes in process `syz.2.792'. [ 289.728111][ T8979] hsr0: entered promiscuous mode [ 289.753782][ T8979] bridge0: port 4(hsr0) entered blocking state [ 289.799586][ T8979] bridge0: port 4(hsr0) entered disabled state [ 289.818523][ T8979] hsr0: entered allmulticast mode [ 289.836327][ T8979] hsr_slave_0: entered allmulticast mode [ 289.941125][ T8979] bridge0: port 4(hsr0) entered blocking state [ 289.948218][ T8979] bridge0: port 4(hsr0) entered forwarding state [ 290.016837][ T8986] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.794'. [ 290.044967][ T8986] openvswitch: netlink: Flow key attribute not present in set flow. [ 291.426708][ T9012] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.801'. [ 291.927165][ T9029] netlink: 'syz.0.805': attribute type 29 has an invalid length. [ 291.974521][ T9029] netlink: 'syz.0.805': attribute type 29 has an invalid length. [ 291.985753][ T9024] : renamed from batadv0 (while UP) [ 292.072457][ T9024] : entered promiscuous mode [ 292.109722][ T9028] netlink: 'syz.0.805': attribute type 21 has an invalid length. [ 292.134665][ T9028] netlink: 164 bytes leftover after parsing attributes in process `syz.0.805'. [ 294.341927][ T9044] netlink: 128 bytes leftover after parsing attributes in process `syz.0.809'. [ 294.381844][ T9044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.411880][ T9047] netlink: 'syz.3.808': attribute type 7 has an invalid length. [ 294.424411][ T9047] netlink: 140 bytes leftover after parsing attributes in process `syz.3.808'. [ 294.448735][ T9041] netlink: 'syz.3.808': attribute type 7 has an invalid length. [ 294.464469][ T9041] netlink: 140 bytes leftover after parsing attributes in process `syz.3.808'. [ 295.027351][ T9055] netlink: 'syz.0.812': attribute type 49 has an invalid length. [ 295.035370][ T9055] netlink: 'syz.0.812': attribute type 49 has an invalid length. [ 295.498582][ T9064] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 295.509759][ T9064] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.816'. [ 295.531540][ T9071] netlink: 'syz.1.816': attribute type 27 has an invalid length. [ 295.553299][ T9071] netlink: 164 bytes leftover after parsing attributes in process `syz.1.816'. [ 296.528137][ T9085] netlink: 'syz.1.821': attribute type 4 has an invalid length. [ 296.549665][ T9085] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.821'. [ 296.711475][ T9085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.821'. [ 296.926672][ T9090] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.821'. [ 296.993471][ T9085] syzkaller0: entered promiscuous mode [ 297.004898][ T9085] syzkaller0: entered allmulticast mode [ 297.021561][ T9099] netlink: 'syz.2.825': attribute type 21 has an invalid length. [ 297.033873][ T9099] netlink: 128 bytes leftover after parsing attributes in process `syz.2.825'. [ 297.052320][ T9099] netlink: 'syz.2.825': attribute type 4 has an invalid length. [ 297.071564][ T9099] netlink: 'syz.2.825': attribute type 5 has an invalid length. [ 297.079752][ T9099] netlink: 3 bytes leftover after parsing attributes in process `syz.2.825'. [ 297.181799][ T9098] delete_channel: no stack [ 297.332273][ T9098] delete_channel: no stack [ 297.550450][ T9119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.830'. [ 297.715013][ T9123] netlink: 60 bytes leftover after parsing attributes in process `syz.3.830'. [ 300.129316][ T9119] netlink: 60 bytes leftover after parsing attributes in process `syz.3.830'. [ 300.918797][ T9166] netlink: 'syz.2.841': attribute type 29 has an invalid length. [ 300.956088][ T9165] netlink: 'syz.2.841': attribute type 29 has an invalid length. [ 301.329981][ T9174] delete_channel: no stack [ 301.378087][ T9166] netlink: 'syz.2.841': attribute type 29 has an invalid length. [ 301.396294][ T9169] netlink: 'syz.1.842': attribute type 3 has an invalid length. [ 301.457871][ T9172] netlink: 'syz.1.842': attribute type 2 has an invalid length. [ 301.579637][ T9178] netlink: 'syz.0.843': attribute type 39 has an invalid length. [ 301.889718][ T9184] netlink: 'syz.3.845': attribute type 9 has an invalid length. [ 301.898245][ T9184] __nla_validate_parse: 1 callbacks suppressed [ 301.898262][ T9184] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.845'. [ 302.053252][ T9183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.082588][ T9183] netlink: 'syz.3.845': attribute type 39 has an invalid length. [ 302.604577][ T9185] netlink: 'syz.3.845': attribute type 9 has an invalid length. [ 302.652452][ T9185] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.845'. [ 302.673885][ T9190] syz.2.847[9190] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.085308][ T9209] netlink: 132 bytes leftover after parsing attributes in process `syz.2.850'. [ 303.336181][ T9214] bridge0: port 3(team0) entered disabled state [ 304.265517][ T9226] netlink: 'syz.0.851': attribute type 64 has an invalid length. [ 304.484232][ T9235] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.856'. [ 304.634678][ T9232] netlink: 55 bytes leftover after parsing attributes in process `syz.1.856'. [ 306.066628][ T9254] netlink: 144 bytes leftover after parsing attributes in process `syz.2.861'. [ 306.119386][ T9258] validate_nla: 4 callbacks suppressed [ 306.119404][ T9258] netlink: 'syz.0.863': attribute type 3 has an invalid length. [ 306.161204][ T9258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.863'. [ 306.284252][ T9254] team0: Port device team_slave_0 removed [ 306.299774][ T9254] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 306.466553][ T9264] netlink: 'syz.3.864': attribute type 21 has an invalid length. [ 306.514944][ T9264] netlink: 100 bytes leftover after parsing attributes in process `syz.3.864'. [ 308.848340][ T9305] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.876'. [ 309.015103][ T9302] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.876'. [ 309.734003][ T9312] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.879'. [ 310.255558][ T9331] netlink: 'syz.3.884': attribute type 39 has an invalid length. [ 311.681865][ T9353] netlink: 209280 bytes leftover after parsing attributes in process `syz.1.889'. [ 311.714814][ T9353] openvswitch: netlink: Flow key attr not present in new flow. [ 312.149516][ T9358] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.891'. [ 312.185456][ T9358] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.891'. [ 312.449643][ T9367] netlink: 'syz.3.894': attribute type 3 has an invalid length. [ 312.459288][ T9367] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.894'. [ 312.637623][ T9367] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.894'. [ 313.327716][ T9378] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.897'. [ 314.499331][ T9396] netlink: 'syz.2.902': attribute type 3 has an invalid length. [ 314.542424][ T9396] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.902'. [ 314.696363][ T9398] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.903'. [ 315.210385][ T9391] delete_channel: no stack [ 316.479857][ T9426] netlink: 'syz.1.910': attribute type 64 has an invalid length. [ 316.849074][ T9440] netlink: 'syz.1.910': attribute type 29 has an invalid length. [ 316.935932][ T9438] veth1_macvtap: left promiscuous mode [ 316.960799][ T9440] netlink: 'syz.1.910': attribute type 29 has an invalid length. [ 316.974060][ T9439] netlink: 'syz.1.910': attribute type 29 has an invalid length. [ 317.290220][ T9445] netlink: 'syz.3.916': attribute type 2 has an invalid length. [ 317.314906][ T9445] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.916'. [ 317.469115][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.475804][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.815956][ T9460] netlink: 'syz.3.919': attribute type 21 has an invalid length. [ 317.845583][ T9460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.919'. [ 318.566358][ T9476] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.927'. [ 318.639154][ T9479] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.927'. [ 318.795267][ T9481] netlink: 'syz.1.926': attribute type 3 has an invalid length. [ 318.891897][ T9481] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.926'. [ 319.270310][ T9481] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.926'. [ 319.584896][ T9504] netlink: 'syz.2.933': attribute type 10 has an invalid length. [ 319.608410][ T9504] netlink: 40 bytes leftover after parsing attributes in process `syz.2.933'. [ 320.028273][ T9522] netlink: 'syz.2.935': attribute type 21 has an invalid length. [ 320.042295][ T9522] netlink: 156 bytes leftover after parsing attributes in process `syz.2.935'. [ 320.249902][ T9526] netlink: 'syz.0.937': attribute type 9 has an invalid length. [ 320.261830][ T9526] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.937'. [ 321.767447][ T9566] netlink: 'syz.1.948': attribute type 9 has an invalid length. [ 321.788888][ T9566] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.948'. [ 321.866693][ T9568] syzkaller0: entered promiscuous mode [ 321.872408][ T9568] syzkaller0: entered allmulticast mode [ 322.031863][ T9570] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.950'. [ 324.461112][ T9576] netlink: 'syz.0.951': attribute type 10 has an invalid length. [ 324.485849][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.521440][ T9576] bridge_slave_1: left allmulticast mode [ 324.540014][ T9576] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.953843][ T9603] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.960'. [ 325.276570][ T9610] netlink: 3554 bytes leftover after parsing attributes in process `syz.0.961'. [ 325.354952][ T9609] netlink: 3554 bytes leftover after parsing attributes in process `syz.0.961'. [ 326.667156][ T9630] netlink: 'syz.1.969': attribute type 10 has an invalid length. [ 326.688546][ T9630] netlink: 2 bytes leftover after parsing attributes in process `syz.1.969'. [ 326.768391][ T9630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 326.874489][ T9630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 326.925543][ T9632] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 327.086353][ T9633] netlink: 60 bytes leftover after parsing attributes in process `syz.1.969'. [ 327.536424][ T9651] netlink: 'syz.3.972': attribute type 21 has an invalid length. [ 327.565406][ T9645] netlink: 'syz.3.972': attribute type 21 has an invalid length. [ 327.641242][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.655686][ T9657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.685671][ T9657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.693153][ T9657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.816777][ T9648] delete_channel: no stack [ 328.207713][ T9674] netlink: 'syz.0.977': attribute type 21 has an invalid length. [ 328.221172][ T9674] IPv6: NLM_F_CREATE should be specified when creating new route [ 328.237395][ T9674] IPv6: Can't replace route, no match found [ 328.540118][ T9688] netlink: 'syz.1.980': attribute type 3 has an invalid length. [ 328.654643][ T9688] netlink: 98920 bytes leftover after parsing attributes in process `syz.1.980'. [ 330.162770][ T9701] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 330.170651][ T9701] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.984'. [ 330.480478][ T9714] netlink: 'syz.2.988': attribute type 6 has an invalid length. [ 330.493616][ T9714] netlink: 164 bytes leftover after parsing attributes in process `syz.2.988'. [ 330.508830][ T9721] netlink: 'syz.2.988': attribute type 6 has an invalid length. [ 330.516886][ T9721] netlink: 164 bytes leftover after parsing attributes in process `syz.2.988'. [ 333.086484][ T9730] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.136480][ T9731] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.143719][ T9731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.452768][ T9743] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.995'. [ 333.463943][ T9743] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 333.569626][ T9744] netlink: 'syz.0.994': attribute type 29 has an invalid length. [ 333.652849][ T9744] netlink: 'syz.0.994': attribute type 29 has an invalid length. [ 333.700401][ T9748] netlink: 'syz.0.994': attribute type 29 has an invalid length. [ 334.405070][ T9754] netlink: 132 bytes leftover after parsing attributes in process `syz.0.997'. [ 334.446002][ T9754] netlink: 830 bytes leftover after parsing attributes in process `syz.0.997'. [ 335.624847][ T9765] syzkaller0: entered promiscuous mode [ 335.644428][ T9765] syzkaller0: entered allmulticast mode [ 339.799140][ T9770] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1002'. [ 340.720708][ T9783] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 340.755790][ T9783] syzkaller0: entered promiscuous mode [ 340.775055][ T9783] syzkaller0: entered allmulticast mode [ 341.348772][ T5792] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 343.058645][ T9850] netlink: 'syz.2.1017': attribute type 11 has an invalid length. [ 343.126915][ T9850] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1017'. [ 344.028144][ T9884] netlink: 'syz.3.1026': attribute type 4 has an invalid length. [ 344.041729][ T9884] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1026'. [ 345.053702][ T9909] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1032'. [ 346.626079][ T9940] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.418837][ T9957] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1042'. [ 349.439851][ T9954] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1044'. [ 349.459431][ T9960] netlink: 'syz.3.1045': attribute type 9 has an invalid length. [ 349.471496][ T9956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 349.486808][ T9960] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1045'. [ 349.611053][ T9966] sock: sock_timestamping_bind_phc: sock not bind to device [ 349.651908][ T9956] netlink: 'syz.3.1045': attribute type 9 has an invalid length. [ 349.660090][ T9956] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1045'. [ 350.719273][ T9983] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1050'. [ 352.495627][ T9988] netlink: 'syz.3.1051': attribute type 13 has an invalid length. [ 352.503570][ T9988] netlink: 'syz.3.1051': attribute type 58 has an invalid length. [ 352.518701][ T9988] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1051'. [ 353.860868][T10014] netlink: set zone limit has 8 unknown bytes [ 354.635324][T10034] netlink: 'syz.2.1063': attribute type 10 has an invalid length. [ 354.668383][T10034] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.1063'. [ 354.899258][T10042] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1067'. [ 355.590951][T10058] netlink: 'syz.1.1073': attribute type 3 has an invalid length. [ 355.615572][T10058] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1073'. [ 357.120870][T10082] netlink: 'syz.3.1079': attribute type 10 has an invalid length. [ 357.129105][T10082] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1079'. [ 357.139395][T10082] ipvlan1: entered promiscuous mode [ 357.145426][T10082] ipvlan1: entered allmulticast mode [ 357.150854][T10082] veth0_vlan: entered allmulticast mode [ 357.178863][T10082] bridge0: port 2(ipvlan1) entered blocking state [ 357.224606][T10082] bridge0: port 2(ipvlan1) entered disabled state [ 357.256796][T10082] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 357.296040][T10079] Ÿë: port 1(hsr_slave_0) entered blocking state [ 357.325011][T10079] Ÿë: port 1(hsr_slave_0) entered disabled state [ 357.331780][T10079] hsr_slave_0: entered allmulticast mode [ 357.355947][T10079] hsr_slave_0: entered promiscuous mode [ 357.403852][T10085] netlink: 'syz.2.1080': attribute type 29 has an invalid length. [ 357.431013][T10085] netlink: 'syz.2.1080': attribute type 29 has an invalid length. [ 359.458417][T10109] syzkaller0: entered promiscuous mode [ 359.478296][T10109] syzkaller0: entered allmulticast mode [ 362.560631][T10129] netlink: 'syz.3.1091': attribute type 46 has an invalid length. [ 362.732843][T10137] netlink: 'syz.3.1094': attribute type 3 has an invalid length. [ 362.740849][T10137] netlink: 'syz.3.1094': attribute type 1 has an invalid length. [ 362.749007][T10137] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1094'. [ 363.019796][T10145] netlink: 'syz.3.1095': attribute type 29 has an invalid length. [ 364.690611][T10145] netlink: 'syz.3.1095': attribute type 29 has an invalid length. [ 364.889523][T10154] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1099'. [ 366.841967][T10186] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 366.854719][T10186] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 367.582597][T10189] syzkaller0: entered promiscuous mode [ 367.588416][T10189] syzkaller0: entered allmulticast mode [ 367.607821][T10197] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1110'. [ 367.947636][T10209] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 367.956118][T10209] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1113'. [ 370.711733][T10220] netlink: 'syz.2.1118': attribute type 21 has an invalid length. [ 370.721482][T10220] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1118'. [ 370.735206][T10220] netlink: 'syz.2.1118': attribute type 4 has an invalid length. [ 370.743102][T10220] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1118'. [ 371.085095][T10239] netlink: 'syz.2.1123': attribute type 10 has an invalid length. [ 371.116735][T10239] geneve0: entered promiscuous mode [ 371.459909][T10243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.551597][T10256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1127'. [ 371.816636][T10261] pim6reg1: entered promiscuous mode [ 371.822028][T10261] pim6reg1: entered allmulticast mode [ 371.855888][T10267] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1129'. [ 372.401822][T10277] netlink: 'syz.3.1132': attribute type 39 has an invalid length. [ 373.196925][T10297] netlink: 'syz.2.1137': attribute type 13 has an invalid length. [ 373.259919][T10297] netlink: 'syz.2.1137': attribute type 58 has an invalid length. [ 373.314607][T10297] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1137'. [ 373.472003][T10298] veth1_macvtap: left promiscuous mode [ 373.495320][T10298] macsec0: entered allmulticast mode [ 373.986727][T10313] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1144'. [ 374.014363][T10313] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1144'. [ 374.023585][T10313] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1144'. [ 375.069797][T10349] netlink: 'syz.1.1152': attribute type 3 has an invalid length. [ 375.088820][T10349] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1152'. [ 375.121469][T10352] netlink: 'syz.0.1153': attribute type 46 has an invalid length. [ 375.235281][T10357] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1156'. [ 375.663919][T10359] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1154'. [ 375.764078][T10359] bridge0: port 3(dummy0) entered disabled state [ 375.882138][T10359] bridge0: port 3(dummy0) entered disabled state [ 376.521795][T10395] netlink: 'syz.2.1162': attribute type 3 has an invalid length. [ 376.594951][T10395] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1162'. [ 378.816744][T10445] netlink: 'syz.0.1169': attribute type 3 has an invalid length. [ 378.884326][T10445] netlink: 'syz.0.1169': attribute type 8 has an invalid length. [ 378.910294][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.916702][T10445] netlink: 197324 bytes leftover after parsing attributes in process `syz.0.1169'. [ 378.932574][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.965956][T10440] syzkaller0: entered promiscuous mode [ 378.971629][T10440] syzkaller0: entered allmulticast mode [ 379.735767][T10459] netlink: 142516 bytes leftover after parsing attributes in process `syz.0.1175'. [ 381.393476][T10469] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1178'. [ 382.896210][T10474] netlink: set zone limit has 8 unknown bytes [ 383.410010][T10496] netlink: 'syz.2.1186': attribute type 1 has an invalid length. [ 383.424335][T10496] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1186'. [ 383.433768][T10496] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1186'. [ 383.461031][T10496] netlink: 'syz.2.1186': attribute type 9 has an invalid length. [ 383.508030][T10496] netlink: 152080 bytes leftover after parsing attributes in process `syz.2.1186'. [ 383.582374][T10509] netlink: 'syz.3.1188': attribute type 2 has an invalid length. [ 383.612856][T10509] netlink: 'syz.3.1188': attribute type 49 has an invalid length. [ 383.994531][T10519] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1189'. [ 385.121647][T10538] netlink: 'syz.0.1196': attribute type 10 has an invalid length. [ 385.135905][T10532] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1195'. [ 385.174814][T10532] bridge_slave_1: default FDB implementation only supports local addresses [ 385.448818][T10549] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1199'. [ 385.852259][T10550] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1198'. [ 386.298313][T10561] netlink: 'syz.1.1203': attribute type 10 has an invalid length. [ 386.313330][T10561] veth0_vlan: entered allmulticast mode [ 386.555270][T10574] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1206'. [ 386.611457][T10575] netlink: 'syz.2.1204': attribute type 11 has an invalid length. [ 386.687223][T10581] netlink: 'syz.3.1205': attribute type 1 has an invalid length. [ 386.698734][T10571] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 386.715067][T10581] netlink: 'syz.3.1205': attribute type 3 has an invalid length. [ 386.733169][T10571] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 386.745661][T10581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1205'. [ 386.782683][T10586] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.1206'. [ 386.798115][T10584] netlink: 'syz.3.1205': attribute type 10 has an invalid length. [ 386.817432][T10584] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1205'. [ 387.649707][T10598] netlink: 'syz.2.1210': attribute type 29 has an invalid length. [ 387.685675][T10598] netlink: 'syz.2.1210': attribute type 29 has an invalid length. [ 387.772213][T10595] netlink: 'syz.1.1211': attribute type 12 has an invalid length. [ 387.823575][T10595] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.1211'. [ 388.816047][T10604] netlink: 'syz.1.1211': attribute type 4 has an invalid length. [ 389.153345][T10624] C: renamed from team_slave_0 [ 389.199890][T10624] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1215'. [ 389.258749][T10624] tap0: tun_chr_ioctl cmd 1074820166 [ 389.719534][T10642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1220'. [ 389.744288][T10642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1220'. [ 389.767043][T10638] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1220'. [ 391.669324][T10651] validate_nla: 1 callbacks suppressed [ 391.669344][T10651] netlink: 'syz.0.1222': attribute type 33 has an invalid length. [ 391.695237][T10651] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1222'. [ 392.503841][T10678] netlink: 'syz.2.1230': attribute type 1 has an invalid length. [ 392.558445][T10678] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1230'. [ 392.751389][T10678] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.1230'. [ 392.961360][T10678] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1230'. [ 393.261336][T10689] netlink: 'syz.3.1232': attribute type 21 has an invalid length. [ 393.300106][T10689] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1232'. [ 393.362852][T10689] netlink: 'syz.3.1232': attribute type 4 has an invalid length. [ 393.411018][T10689] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1232'. [ 395.383804][T10692] macsec0: left allmulticast mode [ 396.735756][T10743] netlink: 'syz.3.1244': attribute type 17 has an invalid length. [ 396.744062][T10743] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1244'. [ 396.767418][T10743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.947254][T10746] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1246'. [ 397.202404][T10757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.268065][T10754] delete_channel: no stack [ 397.824474][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1254'. [ 398.325027][T10790] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1256'. [ 398.861352][T10821] netlink: 'syz.3.1262': attribute type 21 has an invalid length. [ 398.893695][T10821] netlink: 'syz.3.1262': attribute type 6 has an invalid length. [ 398.994406][T10821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1262'. [ 399.207852][T10824] netlink: 'syz.1.1263': attribute type 13 has an invalid length. [ 399.224426][T10824] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1263'. [ 400.632827][T10859] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1274'. [ 401.181884][T10869] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1276'. [ 401.333003][T10876] netlink: 'syz.0.1278': attribute type 21 has an invalid length. [ 401.344709][T10876] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1278'. [ 402.450996][T10905] netlink: 'syz.1.1285': attribute type 6 has an invalid length. [ 402.494798][T10905] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1285'. [ 403.981063][T10950] netlink: 'syz.1.1296': attribute type 16 has an invalid length. [ 404.003361][T10947] netlink: 'syz.0.1298': attribute type 12 has an invalid length. [ 404.017073][T10947] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.1298'. [ 404.035184][T10950] netlink: 'syz.1.1296': attribute type 3 has an invalid length. [ 404.042986][T10950] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1296'. [ 404.063908][T10948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1297'. [ 404.091820][T10942] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1297'. [ 404.114352][T10952] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.1299'. [ 404.144319][T10953] netlink: 'syz.2.1299': attribute type 41 has an invalid length. [ 404.464881][T10965] netlink: 'syz.0.1300': attribute type 2 has an invalid length. [ 404.516198][T10965] netlink: 'syz.0.1300': attribute type 8 has an invalid length. [ 404.538798][T10965] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1300'. [ 404.705822][T10972] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1302'. [ 404.861908][ T5792] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 405.785954][T11010] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1311'. [ 406.650410][T11019] netlink: 'syz.3.1314': attribute type 1 has an invalid length. [ 406.878555][T11019] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1314'. [ 408.016716][T11043] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 408.322578][T11052] netlink: 'syz.2.1321': attribute type 3 has an invalid length. [ 408.343507][T11052] netlink: 'syz.2.1321': attribute type 1 has an invalid length. [ 408.371402][T11052] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1321'. [ 409.315707][T11065] netlink: 'syz.2.1323': attribute type 3 has an invalid length. [ 409.323541][T11065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1323'. [ 411.687718][T11077] netlink: 185612 bytes leftover after parsing attributes in process `syz.2.1328'. [ 412.551736][T11077] syz.2.1328 (11077) used greatest stack depth: 18536 bytes left [ 413.010894][T11087] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 413.021824][T11087] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1330'. [ 413.033322][T11087] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 415.589678][T11075] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1327'. [ 415.916270][T11099] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1332'. [ 415.964595][T11099] netlink: 'syz.3.1332': attribute type 10 has an invalid length. [ 415.972547][T11099] hsr_slave_0: left allmulticast mode [ 415.996233][T11099] hsr_slave_0: left promiscuous mode [ 416.001895][T11099] Ÿë: port 1(hsr_slave_0) entered disabled state [ 416.049391][T11099] hsr_slave_0: entered promiscuous mode [ 416.055344][T11099] hsr_slave_0: entered allmulticast mode [ 416.062407][T11099] team0: Port device hsr_slave_0 added [ 416.070013][T11098] netlink: 'syz.1.1334': attribute type 21 has an invalid length. [ 416.078916][T11098] netlink: 'syz.1.1334': attribute type 1 has an invalid length. [ 416.088241][T11098] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1334'. [ 416.098039][T11100] netlink: 'syz.3.1332': attribute type 10 has an invalid length. [ 416.198509][T11104] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1335'. [ 416.460690][T11107] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1336'. [ 417.116700][T11122] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1339'. [ 417.678417][T11119] netlink: 'syz.3.1339': attribute type 21 has an invalid length. [ 417.699084][T11119] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1339'. [ 417.987247][T11132] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1344'. [ 418.046305][T11132] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 418.081408][T11132] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1344'. [ 418.353776][T11148] netlink: 209832 bytes leftover after parsing attributes in process `syz.1.1346'. [ 422.818740][T11221] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1366'. [ 422.897837][T11230] netlink: 'syz.3.1368': attribute type 21 has an invalid length. [ 423.251769][T11242] netlink: 'syz.2.1373': attribute type 2 has an invalid length. [ 423.328339][T11249] netlink: 'syz.0.1374': attribute type 1 has an invalid length. [ 423.354212][T11249] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1374'. [ 423.919917][T11265] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1377'. [ 423.956065][T11265] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 424.015223][T11271] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1379'. [ 424.099217][T11272] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1379'. [ 424.410799][T11276] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1381'. [ 425.749946][T11318] netlink: 'syz.1.1391': attribute type 12 has an invalid length. [ 425.760334][T11318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1391'. [ 425.781857][T11319] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 425.798803][T11319] netlink: 13854 bytes leftover after parsing attributes in process `syz.1.1391'. [ 426.004861][T11321] ================================================================== [ 426.013035][T11321] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 426.020918][T11321] Write of size 56 at addr ffff888023a4f310 by task syz.0.1392/11321 [ 426.029012][T11321] [ 426.031394][T11321] CPU: 0 PID: 11321 Comm: syz.0.1392 Not tainted syzkaller #0 [ 426.038883][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.048984][T11321] Call Trace: [ 426.052289][T11321] [ 426.055240][T11321] dump_stack_lvl+0x18c/0x250 [ 426.059961][T11321] ? read_lock_is_recursive+0x20/0x20 [ 426.065399][T11321] ? show_regs_print_info+0x20/0x20 [ 426.070635][T11321] ? load_image+0x420/0x420 [ 426.075167][T11321] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 426.080658][T11321] ? __virt_addr_valid+0x10c/0x380 [ 426.085802][T11321] ? __virt_addr_valid+0x10c/0x380 [ 426.090945][T11321] ? __virt_addr_valid+0x10c/0x380 [ 426.096091][T11321] print_report+0xa8/0x210 [ 426.100536][T11321] ? __bpf_get_stackid+0x6c7/0x900 [ 426.105680][T11321] kasan_report+0x117/0x150 [ 426.110209][T11321] ? __bpf_get_stackid+0x6c7/0x900 [ 426.115369][T11321] kasan_check_range+0x241/0x290 [ 426.120362][T11321] ? __bpf_get_stackid+0x6c7/0x900 [ 426.125527][T11321] __asan_memcpy+0x40/0x70 [ 426.130015][T11321] __bpf_get_stackid+0x6c7/0x900 [ 426.135011][T11321] bpf_get_stackid_pe+0x343/0x410 [ 426.140079][T11321] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 426.145594][T11321] bpf_overflow_handler+0x1fc/0x510 [ 426.150827][T11321] ? perf_prepare_header+0x1e0/0x1e0 [ 426.156163][T11321] ? bpf_overflow_handler+0xde/0x510 [ 426.161489][T11321] ? tp_perf_event_destroy+0x20/0x20 [ 426.166812][T11321] ? perf_trace_preemptirq_template+0xac/0x330 [ 426.173001][T11321] ? __perf_event_account_interrupt+0x187/0x280 [ 426.179278][T11321] __perf_event_overflow+0x461/0x660 [ 426.184602][T11321] perf_swevent_event+0x319/0x570 [ 426.189662][T11321] ? perf_tp_event+0x1550/0x1550 [ 426.194633][T11321] ___perf_sw_event+0x4ab/0x730 [ 426.199516][T11321] ? ___perf_sw_event+0x19e/0x730 [ 426.204585][T11321] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 426.211061][T11321] ? __lock_acquire+0x1336/0x7d80 [ 426.216126][T11321] ? strncpy_from_user+0x10b/0x2f0 [ 426.221282][T11321] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 426.227293][T11321] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 426.234527][T11321] ? lock_chain_count+0x20/0x20 [ 426.239415][T11321] __perf_sw_event+0x139/0x270 [ 426.244224][T11321] do_user_addr_fault+0x1242/0x12d0 [ 426.249460][T11321] ? rcu_is_watching+0x15/0xb0 [ 426.254259][T11321] exc_page_fault+0x64/0x100 [ 426.258881][T11321] asm_exc_page_fault+0x26/0x30 [ 426.263791][T11321] RIP: 0010:strncpy_from_user+0x10b/0x2f0 [ 426.269912][T11321] Code: 00 00 48 89 de e8 85 a5 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48 [ 426.289572][T11321] RSP: 0018:ffffc90004a6fb50 EFLAGS: 00050246 [ 426.295668][T11321] RAX: ffffffff8466ea0b RBX: 000000000000007f RCX: ffff8880244dbc00 [ 426.303662][T11321] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 426.311660][T11321] RBP: ffffc90004a6fd70 R08: ffff8880244dbc00 R09: 0000000000000003 [ 426.319660][T11321] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 426.327661][T11321] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 426.335669][T11321] ? strncpy_from_user+0xeb/0x2f0 [ 426.340738][T11321] bpf_prog_load+0xc9e/0x1610 [ 426.345446][T11321] ? map_freeze+0x420/0x420 [ 426.349978][T11321] ? __might_fault+0xaa/0x120 [ 426.354680][T11321] ? __might_fault+0xc6/0x120 [ 426.359401][T11321] ? __might_fault+0xaa/0x120 [ 426.364106][T11321] ? bpf_lsm_bpf+0x9/0x10 [ 426.368472][T11321] ? security_bpf+0x7e/0xa0 [ 426.373004][T11321] __sys_bpf+0x5ba/0x890 [ 426.377274][T11321] ? bpf_link_show_fdinfo+0x560/0x560 [ 426.382681][T11321] ? lock_chain_count+0x20/0x20 [ 426.387571][T11321] __x64_sys_bpf+0x7c/0x90 [ 426.392021][T11321] do_syscall_64+0x55/0xb0 [ 426.396468][T11321] ? clear_bhb_loop+0x40/0x90 [ 426.401178][T11321] ? clear_bhb_loop+0x40/0x90 [ 426.405887][T11321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.411818][T11321] RIP: 0033:0x7f702019e159 [ 426.416261][T11321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.435904][T11321] RSP: 002b:00007f7021146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.444344][T11321] RAX: ffffffffffffffda RBX: 00007f7020425fa0 RCX: 00007f702019e159 [ 426.452343][T11321] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 426.460338][T11321] RBP: 00007f702023506b R08: 0000000000000000 R09: 0000000000000000 [ 426.468358][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.476362][T11321] R13: 00007f7020426038 R14: 00007f7020425fa0 R15: 00007ffc16485598 [ 426.484370][T11321] [ 426.487407][T11321] [ 426.489743][T11321] Allocated by task 11321: [ 426.494176][T11321] kasan_set_track+0x4e/0x70 [ 426.498805][T11321] __kasan_kmalloc+0x8f/0xa0 [ 426.503433][T11321] __kmalloc_node+0xb6/0x240 [ 426.508068][T11321] bpf_map_area_alloc+0x5e/0x110 [ 426.513046][T11321] prealloc_elems_and_freelist+0x86/0x1c0 [ 426.518804][T11321] stack_map_alloc+0x32b/0x4b0 [ 426.523600][T11321] map_create+0x877/0x12f0 [ 426.528039][T11321] __sys_bpf+0x651/0x890 [ 426.532299][T11321] __x64_sys_bpf+0x7c/0x90 [ 426.536743][T11321] do_syscall_64+0x55/0xb0 [ 426.541186][T11321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.547103][T11321] [ 426.549440][T11321] The buggy address belongs to the object at ffff888023a4f300 [ 426.549440][T11321] which belongs to the cache kmalloc-cg-64 of size 64 [ 426.563620][T11321] The buggy address is located 16 bytes inside of [ 426.563620][T11321] allocated 40-byte region [ffff888023a4f300, ffff888023a4f328) [ 426.577625][T11321] [ 426.579970][T11321] The buggy address belongs to the physical page: [ 426.586414][T11321] page:ffffea00008e93c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23a4f [ 426.596588][T11321] memcg:ffff88807978e401 [ 426.600855][T11321] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 426.608432][T11321] page_type: 0xffffffff() [ 426.612790][T11321] raw: 00fff00000000800 ffff888017c4da00 ffffea000099a700 dead000000000006 [ 426.621401][T11321] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88807978e401 [ 426.630018][T11321] page dumped because: kasan: bad access detected [ 426.636462][T11321] page_owner tracks the page as allocated [ 426.642191][T11321] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5785, tgid 5785 (syz-executor), ts 94554043511, free_ts 94553481798 [ 426.660449][T11321] post_alloc_hook+0x1c1/0x200 [ 426.665249][T11321] get_page_from_freelist+0x2181/0x22a0 [ 426.670818][T11321] __alloc_pages+0x1f0/0x460 [ 426.675434][T11321] alloc_slab_page+0x5d/0x180 [ 426.680214][T11321] new_slab+0x87/0x2d0 [ 426.684310][T11321] ___slab_alloc+0xc5c/0x12f0 [ 426.689006][T11321] __kmem_cache_alloc_node+0x11f/0x250 [ 426.694494][T11321] kmalloc_trace+0x2a/0xe0 [ 426.698944][T11321] alloc_fdtable+0xca/0x2c0 [ 426.703472][T11321] dup_fd+0x747/0xa20 [ 426.707474][T11321] copy_files+0xaf/0x110 [ 426.711736][T11321] copy_process+0x157d/0x3da0 [ 426.716434][T11321] kernel_clone+0x24b/0x8a0 [ 426.720959][T11321] __x64_sys_clone+0x1b7/0x230 [ 426.725742][T11321] do_syscall_64+0x55/0xb0 [ 426.730191][T11321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.736107][T11321] page last free stack trace: [ 426.740789][T11321] free_unref_page_prepare+0x7d7/0x8f0 [ 426.746278][T11321] free_unref_page+0x32/0x2e0 [ 426.750986][T11321] vfree+0x1a7/0x340 [ 426.754902][T11321] do_ip6t_get_ctl+0xf01/0x1220 [ 426.759785][T11321] nf_getsockopt+0x262/0x280 [ 426.764399][T11321] ipv6_getsockopt+0x233/0x2e0 [ 426.769201][T11321] do_sock_getsockopt+0x379/0x450 [ 426.774252][T11321] __x64_sys_getsockopt+0x1d6/0x280 [ 426.779472][T11321] do_syscall_64+0x55/0xb0 [ 426.783911][T11321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.789830][T11321] [ 426.792180][T11321] Memory state around the buggy address: [ 426.797832][T11321] ffff888023a4f200: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 426.805911][T11321] ffff888023a4f280: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 426.813988][T11321] >ffff888023a4f300: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 426.822086][T11321] ^ [ 426.827475][T11321] ffff888023a4f380: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 426.835557][T11321] ffff888023a4f400: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 426.843635][T11321] ================================================================== [ 426.851729][T11321] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 426.858938][T11321] CPU: 0 PID: 11321 Comm: syz.0.1392 Not tainted syzkaller #0 [ 426.866414][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.876497][T11321] Call Trace: [ 426.879796][T11321] [ 426.882749][T11321] dump_stack_lvl+0x18c/0x250 [ 426.887466][T11321] ? show_regs_print_info+0x20/0x20 [ 426.892697][T11321] ? load_image+0x420/0x420 [ 426.897233][T11321] panic+0x2ca/0x720 [ 426.901153][T11321] ? __lock_acquire+0x7d80/0x7d80 [ 426.906220][T11321] ? bpf_jit_dump+0xd0/0xd0 [ 426.910776][T11321] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 426.916709][T11321] ? _raw_spin_unlock+0x40/0x40 [ 426.921601][T11321] ? __bpf_get_stackid+0x6c7/0x900 [ 426.926744][T11321] check_panic_on_warn+0x84/0xa0 [ 426.931715][T11321] ? __bpf_get_stackid+0x6c7/0x900 [ 426.936856][T11321] end_report+0x6f/0x130 [ 426.941134][T11321] kasan_report+0x128/0x150 [ 426.945685][T11321] ? __bpf_get_stackid+0x6c7/0x900 [ 426.950846][T11321] kasan_check_range+0x241/0x290 [ 426.955826][T11321] ? __bpf_get_stackid+0x6c7/0x900 [ 426.960979][T11321] __asan_memcpy+0x40/0x70 [ 426.965435][T11321] __bpf_get_stackid+0x6c7/0x900 [ 426.970411][T11321] bpf_get_stackid_pe+0x343/0x410 [ 426.975467][T11321] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 426.980953][T11321] bpf_overflow_handler+0x1fc/0x510 [ 426.986190][T11321] ? perf_prepare_header+0x1e0/0x1e0 [ 426.991503][T11321] ? bpf_overflow_handler+0xde/0x510 [ 426.996845][T11321] ? tp_perf_event_destroy+0x20/0x20 [ 427.002167][T11321] ? perf_trace_preemptirq_template+0xac/0x330 [ 427.008390][T11321] ? __perf_event_account_interrupt+0x187/0x280 [ 427.014676][T11321] __perf_event_overflow+0x461/0x660 [ 427.020000][T11321] perf_swevent_event+0x319/0x570 [ 427.025071][T11321] ? perf_tp_event+0x1550/0x1550 [ 427.030065][T11321] ___perf_sw_event+0x4ab/0x730 [ 427.034966][T11321] ? ___perf_sw_event+0x19e/0x730 [ 427.040021][T11321] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 427.046461][T11321] ? __lock_acquire+0x1336/0x7d80 [ 427.051521][T11321] ? strncpy_from_user+0x10b/0x2f0 [ 427.056675][T11321] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 427.062687][T11321] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 427.069916][T11321] ? lock_chain_count+0x20/0x20 [ 427.074798][T11321] __perf_sw_event+0x139/0x270 [ 427.079595][T11321] do_user_addr_fault+0x1242/0x12d0 [ 427.084826][T11321] ? rcu_is_watching+0x15/0xb0 [ 427.089629][T11321] exc_page_fault+0x64/0x100 [ 427.094239][T11321] asm_exc_page_fault+0x26/0x30 [ 427.099115][T11321] RIP: 0010:strncpy_from_user+0x10b/0x2f0 [ 427.104865][T11321] Code: 00 00 48 89 de e8 85 a5 20 fd 48 83 fb 07 0f 86 9d 00 00 00 49 c7 c6 f8 ff ff ff 45 31 e4 4c 89 3c 24 4c 89 6c 24 08 4d 89 e5 <4f> 8b 3c 27 48 b8 ff fe fe fe fe fe fe fe 4d 8d 24 07 4c 89 fd 48 [ 427.124506][T11321] RSP: 0018:ffffc90004a6fb50 EFLAGS: 00050246 [ 427.130600][T11321] RAX: ffffffff8466ea0b RBX: 000000000000007f RCX: ffff8880244dbc00 [ 427.138626][T11321] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 427.146638][T11321] RBP: ffffc90004a6fd70 R08: ffff8880244dbc00 R09: 0000000000000003 [ 427.154657][T11321] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 427.162746][T11321] R13: 0000000000000000 R14: fffffffffffffff8 R15: 0000000000000000 [ 427.170773][T11321] ? strncpy_from_user+0xeb/0x2f0 [ 427.175845][T11321] bpf_prog_load+0xc9e/0x1610 [ 427.180561][T11321] ? map_freeze+0x420/0x420 [ 427.185105][T11321] ? __might_fault+0xaa/0x120 [ 427.189808][T11321] ? __might_fault+0xc6/0x120 [ 427.194508][T11321] ? __might_fault+0xaa/0x120 [ 427.199212][T11321] ? bpf_lsm_bpf+0x9/0x10 [ 427.203574][T11321] ? security_bpf+0x7e/0xa0 [ 427.208130][T11321] __sys_bpf+0x5ba/0x890 [ 427.212402][T11321] ? bpf_link_show_fdinfo+0x560/0x560 [ 427.217822][T11321] ? lock_chain_count+0x20/0x20 [ 427.222704][T11321] __x64_sys_bpf+0x7c/0x90 [ 427.227144][T11321] do_syscall_64+0x55/0xb0 [ 427.231600][T11321] ? clear_bhb_loop+0x40/0x90 [ 427.236312][T11321] ? clear_bhb_loop+0x40/0x90 [ 427.241020][T11321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.246942][T11321] RIP: 0033:0x7f702019e159 [ 427.251382][T11321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.271014][T11321] RSP: 002b:00007f7021146028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 427.279452][T11321] RAX: ffffffffffffffda RBX: 00007f7020425fa0 RCX: 00007f702019e159 [ 427.287461][T11321] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 427.295474][T11321] RBP: 00007f702023506b R08: 0000000000000000 R09: 0000000000000000 [ 427.303474][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.311478][T11321] R13: 00007f7020426038 R14: 00007f7020425fa0 R15: 00007ffc16485598 [ 427.319487][T11321] [ 427.323130][T11321] Kernel Offset: disabled [ 427.327498][T11321] Rebooting in 86400 seconds..