last executing test programs: 3.820028638s ago: executing program 3 (id=10197): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0x2, &(0x7f0000000040)=r2, 0x17) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f000000000000000020000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100000001ff95000000000000007d0afeff00000000bf91000000000000b702000002000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x11, &(0x7f0000000cc0)=""/4096, 0x41100, 0x5}, 0x94) 3.818130538s ago: executing program 3 (id=10199): socket$kcm(0x2, 0x3, 0x106) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x26, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000300000000000000", @ANYRES32, @ANYBLOB="0000dd00000045471660ff2469da3a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3b, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}], 0x30, 0x0, 0x0, &(0x7f0000000440), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r6}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4000, r7}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000140), &(0x7f0000000200)=r8}, 0x20) 3.619764302s ago: executing program 1 (id=10200): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x4}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001cc0)=@bpf_tracing={0x1a, 0x1, &(0x7f00000002c0)=@raw=[@ldst={0x2, 0x3, 0x1, 0x6, 0x5, 0xfffffffffffffff4, 0xffffffffffffffff}], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x60, &(0x7f0000000740)=""/96, 0x41000, 0x48, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x9, 0x100, 0x5}, 0x10, 0x1e650, 0xffffffffffffffff, 0x3, &(0x7f0000000bc0)=[r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x4004, 0x1, 0x6}, {0x2, 0x1, 0x1}, {0x0, 0x3, 0xb, 0xb}], 0x10, 0x6}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r3, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$inet(r0, &(0x7f0000000d80)={&(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000880)=[{&(0x7f00000005c0)="d63649b9fc81dce005aad55117b707e3f5f10149c6fdc6371e07f9411e38b754", 0x20}, {&(0x7f0000000600)="97dba23bf464f6667ca50ffc61a7e1170ec28ea5cdb23a22594f65273b6c25e5578acbf18bfd51d55089e9903f5f6d296faf2f1dd0b3089cddb1b832b5f6bccb198997eb70de3b69c76614090deb04458d79a7ff15c23a9e52490753fb9a1e5fe7f5b25db528fbd924e2abf84c1001042e633b636e6c0a22580ce57d1e1498301761d44917464b2612c070625a718b79", 0x90}, {&(0x7f00000006c0)="3d5bccd6f7b5c11c7eba9bf8da2cd226c8a8c3fb21501c3c6b7d699e0fd88eeca6a99734935176995fca75fe40b821dcfce680d31b5d2c9996a22e6c439769770d68161deff22d4eab1b270692f76865b0e4d9fc0a6e6c1a9483a3f32126945de89f9bac829bf3c61dea0797143b670f3b36a43b2391e7e30470a64b11669d261fa7ef30391bc5b29404d0208710a709c370eb0256f9858a644bf7c64801a05dc0bd030e2d976d70cc104770f6952d794a915ba1e75d463d2c532b119c9a62819d23846910f3a288014d7fc9829a7ac21230d3fd", 0xd4}, {&(0x7f00000007c0)="3548e25fee38f7917430a34ee76e84b8c1dfbdd69f4781cfd25dab76d4b8e433b9d176bf4995", 0x26}, {&(0x7f0000000800)="45d37e142809ec84e4316e99a515cdc8becc0131e82e5bf8b7fbcca93317f278a2fc9253c625be97d5bc05ab90d90f9c7460ea6707fa85356c24af90a3522745b784220fb9ac", 0x46}], 0x5, &(0x7f0000000c00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2400}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x6a, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @loopback}}}], 0x110}, 0x60) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xe7d}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x36, &(0x7f0000000580)=[@cred, @rights]}, 0x493e4dd4a2269370) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3c, &(0x7f0000000500)=r6, 0x4) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB="020000000000000000000000000000430000000014ebb45585b1b42071049ed10d2a03000000000000821c0cc79fbed2e6fbbe358a6ee9cddc6bfe669bee1fe0ca13244d6c97497b0d0e924dad19b02b341402e17830b85d2cba1156ce59a3f409764e162e51cfaef2b01375e24918f82578c244e36244bfd403f92db56207e71fee4200e3", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r8, &(0x7f00000000c0), 0x0}, 0x20) setsockopt$sock_attach_bpf(r5, 0x84, 0x11, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"}) 3.296019954s ago: executing program 1 (id=10202): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000040), 0x3f00}], 0x1}, 0x0) close(0x3) 2.966943106s ago: executing program 1 (id=10204): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) close(0x3) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x1002100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.805839578s ago: executing program 3 (id=10205): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003fffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0480000000000000000000000052c93778557233aaf313a7f2b20b45a846ae81d1417e1b71cbc22673837adfa6bca72cb3bca10a3d0e13f9c6ca6ab4813b8c37e5fa0ca373a533ae7bc575854f04324c1059339572619fc54e83715257974d3a72737afe7703a34125b23d776f3acd6760aee8a9c92469aa2b339c185e000000000000000000", @ANYRES64=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r5, &(0x7f0000000380)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x14, &(0x7f0000000340)=[{&(0x7f0000000200)="b3", 0x1}, {0x0}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="120000000a0000000800000002"], 0x48) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x80, 0xbecb, 0x0, 0x0, 0x4, 0x4, 0xc5}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x80, 0xbecb, 0x0, 0x0, 0x4, 0x4, 0xc5}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r8}, 0x8) write$cgroup_int(r9, &(0x7f00000001c0), 0xfffffdef) perf_event_open$cgroup(&(0x7f00000005c0)={0x5, 0x80, 0x7f, 0xca, 0x7, 0x6, 0x0, 0x7, 0x88008, 0x18, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800000, 0x4, @perf_bp={&(0x7f0000000580), 0xc}, 0x2010, 0xaee, 0x3, 0x9, 0xffffffffffffffff, 0x4, 0x96, 0x0, 0x1, 0x0, 0x2}, r8, 0xd, 0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7}, &(0x7f0000000180), &(0x7f0000000100)=r6}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x0, 0x3ff}, 0x1000, 0x8, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r10, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x400000c0) perf_event_open(0x0, 0x0, 0x4, r0, 0x0) close(r2) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x15}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.173475931s ago: executing program 1 (id=10206): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x16, 0x0, 0x0, 0x3}]}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0xf, 0x0, 0xa, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000340), 0x3}, 0xc, 0x7, 0x8, 0x0, 0xffffffff00000000, 0x7, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff9}, 0x0, 0x4, 0xffffffffffffffff, 0x1) sendmsg$sock(r0, &(0x7f0000000e00)={&(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="0b01c7bbc1f7aedd74a6ad5ac5c5043eb1bc1545de7efeca1702396299bd71015ee7deaf943ac2237b4a383b2d1295ee81728c09414a18b623d961b0d7725d021c21306d57a046fc6bc92bee4c2f5ffce90e2c9939d1670b3c28e95ee12c720a1c02a7e61fa4c1e9e55b3b9fc554e15ac9ed5ca9cfc55180b9e14ab80ccbcf070c79d4a58228ead1fc607f0dd20734d9eac8e280ea72b23e016c0e276a197da4525d1838deb7642a3a0b562da8d8ec16e219d213ae373fc0eaabd463de812f8373d45a177c255a74bcf80aeee4e8c1a442b356212207b971f9c564933a", 0xdd}, {0x0}], 0x2}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x8, 0x68, 0x5, 0x0, 0x101, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x5b40, 0x3ff, 0x3, 0x5, 0x40, 0x241, 0x80, 0x0, 0x4, 0x0, 0x45e}, r5, 0x8, r6, 0x0) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4038, r7}, 0x18) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r9, 0x0, 0xfffffdef) socketpair(0xf, 0x1, 0x1, &(0x7f0000000280)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1a, r9, 0x8, &(0x7f0000000840)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x4, 0xf, 0x8, 0x7}, 0x10, 0x20fed, r2, 0x4, 0x0, &(0x7f00000008c0)=[{0x5, 0x2, 0xd, 0x8}, {0x3, 0x4, 0x7, 0x4}, {0x4, 0x3, 0x6, 0xc}, {0x0, 0x4, 0x9, 0x8}], 0x10, 0x4}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) 2.077572398s ago: executing program 2 (id=10207): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.049424719s ago: executing program 0 (id=10208): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0xa40, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) 1.941498147s ago: executing program 3 (id=10209): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="26008b29c076def5bc20706829836f5d8de600"/28, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 1.517700836s ago: executing program 2 (id=10210): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x7c, 0x0, 0xa, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000000000000020000002781800004000000186200000900000000000000130b000085100000fdffffff5462000000000000181100"/68, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000000406050023fcffff95000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x4, &(0x7f0000000340)=""/4, 0x41100, 0x80, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r4], 0x0, 0x10, 0xb621}, 0x94) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/7, 0x7}, {&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000740)=""/250, 0xfa}], 0x3, &(0x7f0000000880)=""/88, 0x58}, 0x104) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890b, &(0x7f0000000180)={r1, r5}) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$kcm(0x29, 0x6, 0x0) r8 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x6) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000c1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000006c0)="00000000000000c88526faac0646", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f00000005c0)=r8, 0x12) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x2, 0x5, 0x84) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r12, 0x84, 0x78, &(0x7f0000000040)=r13, 0x4) 1.507296357s ago: executing program 3 (id=10211): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) close(0x3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x17}, 0x12000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r6, 0x10f, 0x8a, &(0x7f0000000180)=r5, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r3, r5, 0x1, 0x4, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000940)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x5}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x7d3, 0x0, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="620ac4ff000000007110b3000000000085000000750000009500faf646798000999946a044619a2e949f7c00852ad4ddef037b5e6b7d83a38ebec12c722c8a6558a2c4ef85530c581d0b52349f48bcb0c1545cb9f9b9d130982acc523f15443b5d97cc94bef639e7e4c10f9a77f9d3d1f5a96fdf72a7516fc3344a130ba84b0de77f"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10040) socket$kcm(0x2, 0x200000000000001, 0x106) 1.164199401s ago: executing program 0 (id=10212): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x6}, 0x410, 0x2000000, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x10000, 0x0, 0xfffffffffffffffc}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x2, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0xdf, 0x0, 0x80, 0x0, 0x0, 0x2, 0xe30e, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x8000, 0x3, 0x4000, 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0xfffffffe, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0xa) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1100000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="020000000000008b2d00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) socket$kcm(0x2, 0x200000000000001, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000049185e54417e5a760000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$TUNSETSNDBUF(r0, 0x894c, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) 852.663762ms ago: executing program 0 (id=10213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8, 0x8, 0x4, 0x6}]}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x800}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'vlan0\x00', @broadcast}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000180)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18, r0}, 0x18) (async) r2 = getpid() (async) r3 = perf_event_open$cgroup(&(0x7f0000000300)={0x1, 0x80, 0xf, 0xff, 0x7, 0x7, 0x0, 0x100000000, 0x40, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xff, 0x3}, 0x4400, 0xcbb, 0x4, 0x4, 0xa, 0x6, 0x28b, 0x0, 0x4, 0x0, 0x1c2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x9) r4 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x3, 0x8, 0xc0, 0x41, 0x0, 0x8, 0x802, 0x4, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000240), 0x1}, 0x8000, 0x6, 0x15, 0x7, 0x23464742, 0xfffffffe, 0x21cf, 0x0, 0x19, 0x0, 0xf9}, r2, 0x7, r3, 0x9) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x200) (async) r6 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001b00)={&(0x7f00000003c0)=@llc={0x1a, 0x30f, 0xec, 0x6, 0x2, 0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000440)="b5fea6ddd249aec16d8140bd989806cd4a7b761308101ada505863384d8b693cae3cc7b76487f6af5f2ecab6878e7114c56b76b77d3466d277b1bea285d71b321cbc38feb18459141a988b6dc39069a2b5e7e4b862302ef98b4ca90dc036348bb4ba6f2a2e7c9d486811b0722219abb79aaf2fd77da6961d816d0e9e104ef91a32080d6d3399b7430a61976fd44d6a566ab1e674a6a276103263cda21e7618d264084772ce0dfd5289f3d4e48f7289bd5cdc85731d668f18601219a09a7bbf14d63cf02d72a132b739304b09b5b9e5f32f111bb8a7993822984e37763e090058", 0xe0}, {&(0x7f0000000540)="163e4065ddbf61d17f27e0bf4c273cdbfbf9b24b9ccf9c12dd89161f36e4055a31629ddf15df9a7b0ea4ece5a03cf299fa97bd8288aa42d3994ca6b9754d6bbf77856ca6349ef084a424ef9aeac46754fb257d94cb2dc811d8faf0cb9fc628a428c489df4046af1cb0cd4428ab1dfa9522b80f1b6c135f2b809b098823cc5e198c3f5d392414b107a258b503a9172447accd486f507389ba4579c497172b650a76a1545c9eae7b51ec422df08d9958233d63a61f92a17ae118202b816fa72fa02896dbb4e633e4e64cf45f40ef6fdcdd2927601966fe36a6e5bde8bc19281ea030a93c", 0xe3}, {&(0x7f0000000640)="a2d256dc082beda2dd8d1a4bc9f9db0e4e48b2db9d12fce9fdf9836da469e419e17495e1ea6688a1b189ee4fb1cb3004ee45703bbc8b7a159b4100c2cf33d5a0a9ff1de24973a8d0959213a82f4451672a12f23a0789ad5b81ce1edbef5a9019ce7bc29f78639895f667da07a22c95e96408921a135bdd0656f3516ab8add2131d554b37bd9d65d9e3250513faf158e04fec72eb4225ddaac4d8686b67d089ed531cc318a1d7d39e4371219d59388a7c78e9542ec2f1b2e5dfdcac33c4f7cf7f3e3f42d3ead95d83a11c87ab0727d3506d1ed6c35e600d49d157d5c1bdba39", 0xdf}, {&(0x7f0000000740)="a4a98ace37578be70259c4d43f33dcf2a78228ebf4aadf070ba5c4a98177aea9c8ff69a056c858f51dd7405995f5ee40e3a4d6225ef5af4bc1b3020d043da6bd1c0045f47daecf71a026e3b59c48e683920cfabcca90e92457fb4d045523d9d3d5e2c579e7579a0e5f6651e794e8ba499999a15d4ae5c1c205b4dae77d82b333c7ab1ffab8be763a76b71412f3df5145b9cb9fd1593e780da51b6d7fecf6bbe32f72d9608319e151ec03b6557c6f26fadf6256f3816a341488a2f310d1f35b5d905fd0e361cf43be6f25edef7bccc1ed6969d217243e5ebaf68e438ed77a011d0e44c8acb6193ada", 0xe8}, {&(0x7f0000000840)="8f249890163a329e899f8527cae1118a486e836d1eeb1beb0a7e07dff310e4dd29ce9956ad83ae31ad9a957118276092e9e9f13a7f4a5c86d10219f18bd55415151d0b32f4228d9780cbbcd3ce967233de071147da83109463bbb619ecaf67d295ae7f1ebfde4881b59bac4ef8077bdbcae8812e3377f24de92ca76e124cb815b3028cc9bf91bd9fdfa205f7cbb89b7bd9c736ba1025a1c58fff2872db0eceadb5f5cbca660e65be1ce3b6b7faa71a21f82cd453e627a33128720bc7675c57e69d84db3b2c1fecfe", 0xc8}, {&(0x7f0000000940)="5be114bb378bf6266e44dd28d6ffc416fd47bcb7e74578fb054d9798e97d", 0x1e}, {&(0x7f0000000980)="619a5f7f7d084a47838de2cd6aac1ba638c299bad8783b839337219fa6b20c0c8c44bad79aa342eedc4ef8d0046383ab2cdedc03e228be6fdf092e40c8b442e0475f77b4661722b519c52585054cdd0793b581981d6662da8fad0c4e38b6e1f69ebe994be4955b4b74c70d67f4046dd95b799e9a072f74301d9ee271a1ac8d0eeead6d220cc0db67c3686816b90c27945151cc501bfdc573d6b69fdd42", 0x9d}], 0x7, &(0x7f0000000ac0)=[{0x1010, 0x11, 0xa, "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"}], 0x1010}, 0xc010) (async) r7 = perf_event_open(&(0x7f0000001b80)={0x1, 0x80, 0x19, 0x1, 0x2, 0x40, 0x0, 0x1000, 0x170ac, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x31e, 0x4, @perf_bp={&(0x7f0000001b40)}, 0x10002, 0x81, 0xbe, 0x4, 0x9e2, 0xa1, 0x1fc, 0x0, 0xe, 0x0, 0x35fd}, r2, 0x9, r4, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001c40)={r2, r7, 0x0, 0x1, &(0x7f0000001c00)='\x00'}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c80)='./cgroup.net/syz0\x00', 0x1ff) (async) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001cc0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r8, &(0x7f0000001d00)='tasks\x00', 0x2, 0x0) (async) r9 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000001d40)={r6}) r10 = openat$cgroup_devices(r8, &(0x7f0000001d80)='devices.deny\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r10, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001dc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000001e80)=[{}, {}], 0x10, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) (async) socketpair(0x3a, 0x80000, 0xfffffe01, &(0x7f00000020c0)) (async) r11 = openat$cgroup_ro(r8, &(0x7f0000002100)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000002140)) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000002180)={'pimreg\x00', 0x2000}) (async) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000021c0)={'pimreg\x00', @local}) 808.446175ms ago: executing program 1 (id=10214): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20) close(0x3) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) 712.966281ms ago: executing program 0 (id=10215): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg0\x00', 0x1}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8927, &(0x7f0000000280)={'batadv_slave_0\x00'}) 711.151131ms ago: executing program 2 (id=10216): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="000000000402"}) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="6b1108b2b8765c9c1782dc196ff9711803731b99db4aad2ce3d1bae7650431530edb50fc976c4ef74d95b14dc4824de8ccffcf298e4c2c4d84eaf16f8879885420b28e69a831f27f14cd6979179a1c51ed9eea623c3230c71cc8f0df2dca004eea8ef8c549b59d7c08c7b6e8469e02b9f83c7cae5df351492732ee7689c4f6cb240e90f7d8f4a3a37673d629b371831af3046f3bad09a3da3a652466de58876f5e57e0e3d62779e1d809", 0xaa}, {0x0}, {&(0x7f0000000540)="3dbef7410a1726186c0615aead293e4c6914f00d19dedd9ab4370fe5638c4cef79f95adfdcc13fa6ddff0b02d1fbee78a7d6bc6edace5a8602ffdca8e9b844ba02d377594fdd655d696a970adbc341ff7cf31639fcb8405cdd66a57976a09ac2c3b7aa87b66a253061a1ae5638ab4086e89e19a6a5dcdef492be59763e403e3db47f684b822eed0fe1a5eae393418717ed55026894c5fdfda3c28e3c9b0ade4dd76c441c082713167cbb0e0d46a9237e3fdeed0d0d84dcc0498085341319f341366f1ce15a", 0xc5}, {&(0x7f0000000640)="2975176aee417a093976167193f3a94f56fa9fc9f0e9781551478e51d4d3d5f148fb288bf6ab06c51ad95d6332", 0x2d}], 0x4, &(0x7f0000000700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x18}, 0x40041) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x8, 0x41}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000004707f92e2c1550ca09427b8af8ff00000000bfa200000000000000b7040000000000008500000003000000000000003cc637b916725ca16b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x6, 0x0) (async) bpf$ITER_CREATE(0xb, 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x1f, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2007ffe}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x58, &(0x7f0000000180)}, 0x10) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x1ffffffffffffdd5, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x3, 0x73) 597.551509ms ago: executing program 1 (id=10217): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a80)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00'}, 0x90) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff01c}, {0x16, 0x0, 0x0, 0x3}]}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0xf, 0x0, 0xa, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000340), 0x3}, 0xc, 0x7, 0x8, 0x0, 0xffffffff00000000, 0x7, 0x3, 0x0, 0x3, 0x0, 0xfffffffffffffff9}, 0x0, 0x4, 0xffffffffffffffff, 0x1) sendmsg$sock(r0, &(0x7f0000000e00)={&(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x2}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="0b01c7bbc1f7aedd74a6ad5ac5c5043eb1bc1545de7efeca1702396299bd71015ee7deaf943ac2237b4a383b2d1295ee81728c09414a18b623d961b0d7725d021c21306d57a046fc6bc92bee4c2f5ffce90e2c9939d1670b3c28e95ee12c720a1c02a7e61fa4c1e9e55b3b9fc554e15ac9ed5ca9cfc55180b9e14ab80ccbcf070c79d4a58228ead1fc607f0dd20734d9eac8e280ea72b23e016c0e276a197da4525d1838deb7642a3a0b562da8d8ec16e219d213ae373fc0eaabd463de812f8373d45a177c255a74bcf80aeee4e8c1a442b356212207b971f9c564933a", 0xdd}, {0x0}], 0x2}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x8, 0x68, 0x5, 0x0, 0x101, 0x1000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x2}, 0x5b40, 0x3ff, 0x3, 0x5, 0x40, 0x241, 0x80, 0x0, 0x4, 0x0, 0x45e}, r4, 0x8, r5, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a40)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4038, r6}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x3, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r7, 0x0, 0xfffffdef) socketpair(0xf, 0x1, 0x1, &(0x7f0000000280)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) 569.144021ms ago: executing program 0 (id=10218): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c500", 0x2c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 503.171866ms ago: executing program 2 (id=10219): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x4}]}, 0x94) (async) r1 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x45) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) (async) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000f1ffffff850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)="cb57", 0x1, 0x0, 0x7}, 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r10 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000080)={r5, r0}) (async) close(r9) (async) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) (async) close(r5) 301.598989ms ago: executing program 2 (id=10220): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000900)=r2, 0x4) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r2}, 0xc) 256.054843ms ago: executing program 3 (id=10221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1}, 0x86) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2000000, 0x7}, 0x891, 0x0, 0x6, 0x7, 0xfffffffffdf7bc00, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0x200000000}, 0x0, 0x4000000000e, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1e030f00fd", @ANYRES8], 0xd208) 215.732466ms ago: executing program 0 (id=10222): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000b0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000040)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@generic={0x1, "cb8db8704d5c5ca55a8edf10e8ed3f5a5090e9f7c449b0075f3de7447578995c7f350d558674acba80ac38a8ce3643a9c18503eebd7d7edc5cd2aac271c800d24f54710369e0a24d07b7e433ff41125387e30099d9000b7c669be8bb99c0c4f5adb51a382804f5252bea2d4f7d5ff1745d88639edfcd8078ac2b7f7fd599"}, 0x80, 0x0}, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20009, 0x2, @perf_bp={0x0, 0x13}, 0x18001, 0x0, 0x0, 0x8, 0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)='%-5lx \x00'}, 0x20) (async) close(r3) (async, rerun: 32) r4 = socket$kcm(0xa, 0x5, 0x0) (rerun: 32) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890c, &(0x7f0000000000)) 0s ago: executing program 2 (id=10223): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xa, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88641100404863332121ac14142ce934a0a662079f4b4d2f87e56dca6aab845013f208001a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x20005, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6d1b942e, 0x6}, 0x100720, 0x9, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r6, 0x1, 0xd, &(0x7f0000000080), 0x24) kernel console output (not intermixed with test programs): 4519] ___sys_sendmsg+0x2a6/0x360 [ 1720.068542][ T4519] ? __sys_sendmsg+0x2a0/0x2a0 [ 1720.073406][ T4519] __se_sys_sendmsg+0x1c2/0x2b0 [ 1720.078303][ T4519] ? __x64_sys_sendmsg+0x80/0x80 [ 1720.083407][ T4519] ? lockdep_hardirqs_on+0x98/0x150 [ 1720.088639][ T4519] do_syscall_64+0x55/0xa0 [ 1720.093355][ T4519] ? clear_bhb_loop+0x40/0x90 [ 1720.098524][ T4519] ? clear_bhb_loop+0x40/0x90 [ 1720.103265][ T4519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1720.109181][ T4519] RIP: 0033:0x7fe891d9c819 [ 1720.113612][ T4519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.133680][ T4519] RSP: 002b:00007fe892ca2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1720.142109][ T4519] RAX: ffffffffffffffda RBX: 00007fe892015fa0 RCX: 00007fe891d9c819 [ 1720.150088][ T4519] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 1720.158358][ T4519] RBP: 00007fe891e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1720.166420][ T4519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1720.174517][ T4519] R13: 00007fe892016038 R14: 00007fe892015fa0 R15: 00007fff6146c3e8 [ 1720.182594][ T4519] [ 1720.522751][ T4529] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8635'. [ 1720.571559][ T4529] bridge0: port 4(veth0_to_bridge) entered blocking state [ 1720.589264][ T4529] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1720.630938][ T4529] veth0_to_bridge: entered allmulticast mode [ 1720.664125][ T4529] veth0_to_bridge: entered promiscuous mode [ 1720.917943][ T4545] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.8639'. [ 1721.046842][ T4550] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8641'. [ 1728.019019][ T4586] €Â0: renamed from batadv_slave_1 (while UP) [ 1728.229115][ T4593] __nla_validate_parse: 1 callbacks suppressed [ 1728.229132][ T4593] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8654'. [ 1731.132338][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.138910][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.453505][ T4606] netlink: 'syz.1.8657': attribute type 3 has an invalid length. [ 1731.470847][ T4607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1731.478762][ T4607] IPv6: NLM_F_CREATE should be set when creating new route [ 1731.486384][ T4607] IPv6: NLM_F_CREATE should be set when creating new route [ 1731.493930][ T4607] IPv6: NLM_F_CREATE should be set when creating new route [ 1731.832044][ T4627] netlink: 'syz.1.8663': attribute type 19 has an invalid length. [ 1731.842699][ T4627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8663'. [ 1731.856723][ T4628] netlink: 'syz.1.8663': attribute type 19 has an invalid length. [ 1731.867728][ T4628] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8663'. [ 1731.912309][ T4632] netlink: 199816 bytes leftover after parsing attributes in process `syz.3.8662'. [ 1732.163610][ T4641] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8666'. [ 1732.269056][ T4648] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.8668'. [ 1733.016235][T19127] Bluetooth: hci2: ISO packet for unknown connection handle 1854 [ 1733.071428][T19127] Bluetooth: hci0: command 0x0406 tx timeout [ 1733.494427][ T4659] syzkaller0: entered promiscuous mode [ 1733.500638][ T4659] syzkaller0: entered allmulticast mode [ 1733.592465][ T4663] netlink: 'syz.0.8672': attribute type 10 has an invalid length. [ 1733.610846][ T4663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8672'. [ 1737.219562][ T4663] netlink: 'syz.0.8672': attribute type 10 has an invalid length. [ 1737.231838][ T4663] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8672'. [ 1737.243138][ T4680] C: renamed from team_slave_0 (while UP) [ 1737.252937][ T4680] netlink: 'syz.3.8676': attribute type 3 has an invalid length. [ 1737.261829][ T4680] netlink: 'syz.3.8676': attribute type 1 has an invalid length. [ 1737.270138][ T4680] netlink: 116 bytes leftover after parsing attributes in process `syz.3.8676'. [ 1737.279792][ T4680] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1737.384873][ T4692] netlink: 'syz.0.8679': attribute type 4 has an invalid length. [ 1739.183201][ T4734] netlink: 'syz.3.8690': attribute type 10 has an invalid length. [ 1739.272139][ T4729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1739.365453][ T4734] geneve1: entered promiscuous mode [ 1739.381091][ T4734] geneve1: entered allmulticast mode [ 1739.401798][ T4734] team0: Port device geneve1 added [ 1739.427119][ T4742] netlink: 'syz.0.8692': attribute type 7 has an invalid length. [ 1739.628981][ T4753] netlink: 'syz.0.8695': attribute type 9 has an invalid length. [ 1739.661156][ T4753] netlink: 399 bytes leftover after parsing attributes in process `syz.0.8695'. [ 1741.444914][ T4783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.801435][ T4807] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.8707'. [ 1742.410653][ T4822] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1743.966026][ T4863] netlink: 10 bytes leftover after parsing attributes in process `syz.1.8720'. [ 1744.168115][ T4855] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8715'. [ 1744.526246][ T4874] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8723'. [ 1744.834379][ T4883] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.8725'. [ 1745.267303][ T4896] : port 1(ip6gretap0) entered blocking state [ 1745.274943][ T4896] : port 1(ip6gretap0) entered disabled state [ 1745.282698][ T4896] ip6gretap0: entered allmulticast mode [ 1745.308363][ T4896] ip6gretap0: entered promiscuous mode [ 1745.378631][ T4902] ip6gretap0: left allmulticast mode [ 1745.389887][ T4902] ip6gretap0: left promiscuous mode [ 1745.403779][ T4902] : port 1(ip6gretap0) entered disabled state [ 1745.628783][ T4909] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8733'. [ 1746.177136][ T4922] can: request_module (can-proto-0) failed. [ 1747.074622][ T4941] netlink: 830 bytes leftover after parsing attributes in process `syz.1.8741'. [ 1747.504815][ T4951] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.8744'. [ 1747.538125][ T4957] netlink: 'syz.0.8745': attribute type 21 has an invalid length. [ 1748.128895][ T4980] netlink: 117700 bytes leftover after parsing attributes in process `syz.1.8753'. [ 1749.156672][ T5001] netlink: 'syz.1.8757': attribute type 2 has an invalid length. [ 1749.166782][ T5001] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8757'. [ 1749.193082][ T5006] mac80211_hwsim hwsim106 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1749.482161][ T5032] netlink: 'syz.3.8765': attribute type 3 has an invalid length. [ 1749.497258][ T5032] netlink: 'syz.3.8765': attribute type 1 has an invalid length. [ 1749.505982][ T5032] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.8765'. [ 1749.807308][ T5049] netlink: 144 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1749.847866][ T5049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1749.861757][ T5049] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1749.880109][ T5050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1749.893703][ T5050] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8769'. [ 1750.112963][ T5055] netlink: 'syz.3.8771': attribute type 10 has an invalid length. [ 1750.582843][ T5066] netlink: 'syz.2.8773': attribute type 21 has an invalid length. [ 1753.225791][ T5180] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.8801'. [ 1753.526014][ T5187] netlink: 'syz.3.8803': attribute type 4 has an invalid length. [ 1753.538482][ T5187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8803'. [ 1753.872366][ T5187] .`: renamed from bond0 (while UP) [ 1753.973464][ T5192] netlink: 'syz.0.8805': attribute type 21 has an invalid length. [ 1753.982191][ T5192] netlink: 'syz.0.8805': attribute type 1 has an invalid length. [ 1753.997168][ T5192] netlink: 16050 bytes leftover after parsing attributes in process `syz.0.8805'. [ 1754.030419][ T5197] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8803'. [ 1754.249226][ T5204] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8808'. [ 1754.808266][ T5222] netlink: 'syz.3.8812': attribute type 29 has an invalid length. [ 1754.834722][ T5222] netlink: 'syz.3.8812': attribute type 29 has an invalid length. [ 1754.869794][ T5222] netlink: 'syz.3.8812': attribute type 29 has an invalid length. [ 1754.897853][ T5222] netlink: 'syz.3.8812': attribute type 29 has an invalid length. [ 1756.120075][ T5250] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8818'. [ 1756.210249][ T5242] netlink: 'syz.3.8818': attribute type 21 has an invalid length. [ 1756.220243][ T5242] netlink: 'syz.3.8818': attribute type 1 has an invalid length. [ 1756.230824][ T5242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8818'. [ 1756.270008][ T5253] netlink: 'syz.0.8821': attribute type 10 has an invalid length. [ 1756.279058][ T5253] netlink: 56823 bytes leftover after parsing attributes in process `syz.0.8821'. [ 1756.467814][ T5267] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1756.485982][ T5267] ±ÿ: renamed from team_slave_1 (while UP) [ 1756.562580][ T5263] veth1_to_bond: entered allmulticast mode [ 1756.626752][ T5267] netlink: 209684 bytes leftover after parsing attributes in process `syz.1.8825'. [ 1757.647685][ T5283] netlink: 12226 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1758.059309][ T5295] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8836'. [ 1758.101706][ T5295] batman_adv: batadv0: Adding interface: veth0_vlan [ 1758.134432][ T5295] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1758.171567][ T5295] batman_adv: batadv0: Interface activated: veth0_vlan [ 1758.319708][ T5307] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.8839'. [ 1758.333604][ T5307] netlink: zone id is out of range [ 1758.339378][ T5307] netlink: zone id is out of range [ 1758.346110][ T5307] netlink: zone id is out of range [ 1758.377969][ T5307] netlink: zone id is out of range [ 1758.390117][ T5307] netlink: zone id is out of range [ 1758.400240][ T5307] netlink: zone id is out of range [ 1758.409982][ T5307] netlink: zone id is out of range [ 1758.424034][ T5307] netlink: zone id is out of range [ 1758.429738][ T5307] netlink: zone id is out of range [ 1760.511467][ T5369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8854'. [ 1760.541114][ T5369] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8854'. [ 1760.557480][ T5367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8854'. [ 1760.711014][ T5367] validate_nla: 10 callbacks suppressed [ 1760.711041][ T5367] netlink: 'syz.3.8854': attribute type 21 has an invalid length. [ 1760.918070][ T5382] netlink: 'syz.3.8858': attribute type 1 has an invalid length. [ 1765.324525][ T5479] IPv6: NLM_F_CREATE should be specified when creating new route [ 1765.358758][ T5479] __nla_validate_parse: 3 callbacks suppressed [ 1765.358778][ T5479] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8882'. [ 1765.592212][ T5497] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.8889'. [ 1767.131659][ T5540] netlink: 'syz.1.8896': attribute type 9 has an invalid length. [ 1768.150992][ T5554] netlink: 'syz.3.8903': attribute type 10 has an invalid length. [ 1768.172537][ T5554] bridge0: port 4(team0) entered disabled state [ 1768.183220][ T5554] bridge0: port 3(hsr0) entered disabled state [ 1768.192215][ T5554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1768.204811][ T5554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1768.397005][ T5554] .`: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1768.515036][ T5554] bridge0: port 4(team0) entered blocking state [ 1768.522860][ T5554] bridge0: port 4(team0) entered forwarding state [ 1768.531908][ T5554] bridge0: port 3(hsr0) entered blocking state [ 1768.539749][ T5554] bridge0: port 3(hsr0) entered forwarding state [ 1768.548655][ T5554] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.557715][ T5554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.567598][ T5554] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.577021][ T5554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1768.646756][ T5554] .`: (slave bridge0): Enslaving as an active interface with an up link [ 1768.777447][ T5559] netlink: 'syz.0.8905': attribute type 39 has an invalid length. [ 1770.262230][ T5580] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8910'. [ 1770.525235][ T5587] netlink: 'syz.0.8912': attribute type 10 has an invalid length. [ 1770.540833][ T5587] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8912'. [ 1770.872923][ T5594] netlink: 'syz.0.8915': attribute type 10 has an invalid length. [ 1770.891266][ T5594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1770.952757][ T5594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1770.975765][ T764] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1771.003281][ T5594] batadv_slave_0: entered promiscuous mode [ 1771.010293][ T5594] batadv_slave_0: entered allmulticast mode [ 1771.032527][ T5594] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1771.063507][ T5598] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 1771.071551][ T5600] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.8916'. [ 1771.138525][ T5603] netlink: 'syz.0.8918': attribute type 10 has an invalid length. [ 1771.284787][ T5603] team0 (unregistering): Port device team_slave_0 removed [ 1771.321994][ T5603] team0 (unregistering): Port device team_slave_1 removed [ 1771.356515][ T5603] team0 (unregistering): Port device geneve1 removed [ 1771.368128][ T5603] bridge0: port 3(bond0) entered disabled state [ 1771.376777][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.384286][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.433235][ T5603] team0 (unregistering): Port device bridge0 removed [ 1771.906342][ T5622] tap0: tun_chr_ioctl cmd 1074025675 [ 1771.920127][ T5622] tap0: persist enabled [ 1772.248142][ T5627] netlink: 164 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1772.310747][ T5627] netlink: 'syz.1.8925': attribute type 33 has an invalid length. [ 1772.339498][ T5627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8925'. [ 1772.527066][ T5639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1772.667062][ T5637] syzkaller0: entered promiscuous mode [ 1772.678881][ T5637] syzkaller0: entered allmulticast mode [ 1772.690539][ T5646] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8930'. [ 1772.710566][ T5646] net_ratelimit: 217 callbacks suppressed [ 1772.710667][ T5646] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1772.831185][ T5649] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8931'. [ 1774.145948][ T5674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1774.182556][ T5674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1774.216333][ T5674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1774.259301][ T5674] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8938'. [ 1774.351947][ T5682] netlink: 'syz.0.8941': attribute type 10 has an invalid length. [ 1774.360857][ T5682] netlink: 'syz.0.8941': attribute type 10 has an invalid length. [ 1774.369690][ T5682] openvswitch: netlink: Message has 4 unknown bytes. [ 1775.046443][ T5705] netlink: 'syz.3.8946': attribute type 29 has an invalid length. [ 1775.083679][ T5705] netlink: 'syz.3.8946': attribute type 29 has an invalid length. [ 1775.564792][ T5715] netlink: 'syz.3.8947': attribute type 3 has an invalid length. [ 1775.580575][ T5715] __nla_validate_parse: 1 callbacks suppressed [ 1775.580599][ T5715] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8947'. [ 1776.700623][ T5732] netlink: 'syz.0.8953': attribute type 21 has an invalid length. [ 1776.710025][ T5732] netlink: 'syz.0.8953': attribute type 3 has an invalid length. [ 1776.722425][ T5732] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8953'. [ 1776.778743][ T5734] IPv6: NLM_F_CREATE should be specified when creating new route [ 1776.787194][ T5734] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8953'. [ 1776.823301][ T5732] netlink: 'syz.0.8953': attribute type 10 has an invalid length. [ 1777.103231][ T5747] netlink: 830 bytes leftover after parsing attributes in process `syz.3.8956'. [ 1777.854167][ T5779] macsec0: entered promiscuous mode [ 1777.864097][ T5779] macsec0: entered allmulticast mode [ 1777.870144][ T5779] veth1_macvtap: entered allmulticast mode [ 1778.190209][ T5793] netlink: 'syz.0.8966': attribute type 8 has an invalid length. [ 1778.223793][ T5791] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8965'. [ 1778.224367][ T5793] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8966'. [ 1782.197121][ T5827] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8975'. [ 1784.757206][ T5838] netlink: 'syz.1.8979': attribute type 2 has an invalid length. [ 1784.767202][ T5838] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8979'. [ 1784.960044][ T5847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8980'. [ 1786.029019][ T5865] netlink: 'syz.3.8985': attribute type 10 has an invalid length. [ 1786.088369][ T5865] netlink: 'syz.3.8985': attribute type 9 has an invalid length. [ 1786.110228][ T5865] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8985'. [ 1786.235165][ T5877] netlink: 'syz.0.8986': attribute type 2 has an invalid length. [ 1786.343902][ T5872] netlink: 'syz.3.8985': attribute type 9 has an invalid length. [ 1786.370566][ T5872] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8985'. [ 1786.736549][ T5882] netlink: 'syz.0.8989': attribute type 10 has an invalid length. [ 1786.760539][ T5882] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8989'. [ 1786.833377][ T5894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1786.856971][ T5894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1786.882032][ T5892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1786.918457][ T5892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8992'. [ 1787.017185][ T5901] netlink: zone id is out of range [ 1787.021480][ T5904] netlink: 'syz.0.8996': attribute type 10 has an invalid length. [ 1787.042611][ T5901] netlink: zone id is out of range [ 1787.048322][ T5901] netlink: zone id is out of range [ 1787.089514][ T5901] netlink: zone id is out of range [ 1787.095488][ T5901] netlink: zone id is out of range [ 1787.116050][ T5901] netlink: zone id is out of range [ 1787.141537][ T5901] netlink: zone id is out of range [ 1787.146823][ T5901] netlink: zone id is out of range [ 1787.170469][ T5901] netlink: zone id is out of range [ 1787.175758][ T5901] netlink: zone id is out of range [ 1787.263348][ T5908] syzkaller0: entered promiscuous mode [ 1787.290503][ T5908] syzkaller0: entered allmulticast mode [ 1787.319815][ T5914] __nla_validate_parse: 2 callbacks suppressed [ 1787.319832][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8998'. [ 1787.336391][ T5916] delete_channel: no stack [ 1787.908315][ T5924] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.9001'. [ 1791.137666][ T5915] IPv6: Can't replace route, no match found [ 1791.148643][ T5926] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9002'. [ 1791.351586][ T5936] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9006'. [ 1791.386764][ T5936] netlink: 6 bytes leftover after parsing attributes in process `syz.1.9006'. [ 1791.402313][ T5936] netlink: 'syz.1.9006': attribute type 16 has an invalid length. [ 1791.410691][ T5936] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9006'. [ 1791.552641][ T5944] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9009'. [ 1791.578552][ T5944] netlink: 164 bytes leftover after parsing attributes in process `syz.1.9009'. [ 1791.615779][ T5942] netlink: 'syz.0.9008': attribute type 27 has an invalid length. [ 1791.635386][ T5942] netlink: 'syz.0.9008': attribute type 4 has an invalid length. [ 1791.644286][ T5942] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9008'. [ 1792.090759][ T5964] netlink: 'syz.2.9014': attribute type 21 has an invalid length. [ 1792.447494][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.455288][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.708420][ T5985] netlink: 'syz.2.9021': attribute type 153 has an invalid length. [ 1792.750579][ T5985] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.9021'. [ 1794.362073][ T6038] macvlan1: entered promiscuous mode [ 1794.370072][ T6038] macvlan1: entered allmulticast mode [ 1794.380783][ T6038] veth1_vlan: entered allmulticast mode [ 1794.387686][ T6041] netlink: 184 bytes leftover after parsing attributes in process `syz.2.9034'. [ 1794.419774][ T6035] netlink: 'syz.2.9034': attribute type 10 has an invalid length. [ 1794.438173][ T6035] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9034'. [ 1794.629709][ T6051] netlink: 'syz.2.9039': attribute type 30 has an invalid length. [ 1795.768876][ T6083] syzkaller0: entered promiscuous mode [ 1795.796299][ T6083] syzkaller0: entered allmulticast mode [ 1796.631105][ T6104] netlink: 'syz.3.9052': attribute type 3 has an invalid length. [ 1796.639347][ T6104] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9052'. [ 1801.245430][ T6150] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9063'. [ 1801.265095][ T6150] net_ratelimit: 102 callbacks suppressed [ 1801.265116][ T6150] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1801.318264][ T6150] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1801.509422][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9064'. [ 1801.523656][ T6153] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9064'. [ 1801.944423][ T6179] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.9072'. [ 1805.298259][ T6179] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.9072'. [ 1805.308462][ T6179] tipc: Started in network mode [ 1805.316888][ T6179] tipc: Node identity b, cluster identity 73 [ 1805.323716][ T6179] tipc: Node number set to 11 [ 1805.329195][ T6187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9074'. [ 1805.408332][ T6193] netlink: 'syz.0.9075': attribute type 21 has an invalid length. [ 1805.874416][ T764] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 1806.457655][ T6247] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9092'. [ 1806.475902][ T6248] netlink: 'syz.2.9092': attribute type 19 has an invalid length. [ 1806.503983][ T6248] netlink: 172 bytes leftover after parsing attributes in process `syz.2.9092'. [ 1806.505260][ T6247] netlink: get zone limit has 4 unknown bytes [ 1806.545423][ T6250] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.9093'. [ 1806.847483][ T6256] netlink: 'syz.1.9095': attribute type 10 has an invalid length. [ 1806.900521][ T6256] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.9095'. [ 1807.197131][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9097'. [ 1807.534554][ T6273] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1807.601919][ T6276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9099'. [ 1809.150932][ T6318] netlink: 'syz.1.9113': attribute type 10 has an invalid length. [ 1809.193617][ T6320] netlink: 'syz.3.9114': attribute type 22 has an invalid length. [ 1809.697080][ T6344] netlink: 'syz.3.9121': attribute type 7 has an invalid length. [ 1814.842915][ T6356] netlink: 'syz.2.9124': attribute type 10 has an invalid length. [ 1815.870670][ T6413] netlink: 'syz.1.9139': attribute type 3 has an invalid length. [ 1815.878652][ T6413] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.9139'. [ 1816.012954][ T6421] netlink: 'syz.0.9142': attribute type 33 has an invalid length. [ 1816.030581][ T6421] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1816.485206][ T6444] netlink: 180 bytes leftover after parsing attributes in process `syz.1.9147'. [ 1816.929521][ T6449] netlink: 'syz.0.9148': attribute type 10 has an invalid length. [ 1817.061157][ T6449] bond0: (slave netdevsim0): Releasing backup interface [ 1817.091533][ T6449] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1817.119256][ T6449] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1817.139642][ T6449] batman_adv: batadv0: Adding interface: netdevsim0 [ 1817.146668][ T6449] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1817.175773][ T6449] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1817.194789][ T6452] netlink: 'syz.0.9148': attribute type 10 has an invalid length. [ 1817.213909][ T6452] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9148'. [ 1817.228247][ T6452] hsr0: entered promiscuous mode [ 1817.234065][ T6452] bridge0: port 4(hsr0) entered blocking state [ 1817.240957][ T6452] bridge0: port 4(hsr0) entered disabled state [ 1817.248224][ T6452] hsr0: entered allmulticast mode [ 1817.254161][ T6452] hsr_slave_0: entered allmulticast mode [ 1817.260078][ T6452] hsr_slave_1: entered allmulticast mode [ 1817.524651][ T6470] netlink: 'syz.3.9155': attribute type 13 has an invalid length. [ 1817.551811][ T6470] netlink: 160 bytes leftover after parsing attributes in process `syz.3.9155'. [ 1817.571852][ T6470] erspan0: refused to change device tx_queue_len [ 1817.596673][ T6470] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1817.842457][ T6484] netlink: 'syz.3.9159': attribute type 9 has an invalid length. [ 1820.390705][ T6526] netlink: 'syz.1.9169': attribute type 22 has an invalid length. [ 1821.522530][ T6549] netlink: 'syz.2.9176': attribute type 10 has an invalid length. [ 1821.745802][ T6549] dummy0: left allmulticast mode [ 1821.776426][ T6549] dummy0: left promiscuous mode [ 1821.814239][ T6549] bridge0: port 3(dummy0) entered disabled state [ 1821.997407][ T6549] team0: Port device dummy0 added [ 1822.036726][ T6564] netlink: 'syz.0.9180': attribute type 10 has an invalid length. [ 1822.059032][ T6564] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.080576][ T6564] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.100987][ T6564] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.123270][ T6564] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.163989][ T6563] netlink: 'syz.0.9180': attribute type 9 has an invalid length. [ 1822.182915][ T6563] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9180'. [ 1822.468685][ T6570] netlink: 'syz.0.9180': attribute type 9 has an invalid length. [ 1822.490544][ T6570] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9180'. [ 1822.491639][ T6573] delete_channel: no stack [ 1822.501505][ T6576] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.9184'. [ 1822.545097][ T6576] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1822.795641][ T6584] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9187'. [ 1824.383692][ T6616] netlink: 'syz.2.9196': attribute type 13 has an invalid length. [ 1824.403699][ T6616] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9196'. [ 1824.507166][ T6616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1824.515084][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 1824.523154][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 1824.530880][ T6616] IPv6: NLM_F_CREATE should be set when creating new route [ 1827.250026][ T6664] netlink: 'syz.0.9211': attribute type 10 has an invalid length. [ 1827.263228][ T6664] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9211'. [ 1827.273265][ T6665] netlink: 'syz.0.9211': attribute type 10 has an invalid length. [ 1827.282903][ T6665] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9211'. [ 1827.356049][ T6668] netlink: 56863 bytes leftover after parsing attributes in process `syz.1.9212'. [ 1827.855709][ T6685] netlink: 6 bytes leftover after parsing attributes in process `syz.3.9217'. [ 1827.865528][ T6685] openvswitch: netlink: Flow key attr not present in new flow. [ 1828.291913][ T6694] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9219'. [ 1828.691540][ T6700] netlink: 'syz.0.9222': attribute type 2 has an invalid length. [ 1828.738860][ T6697] netlink: 'syz.1.9221': attribute type 10 has an invalid length. [ 1828.765642][ T6697] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9221'. [ 1828.803068][ T6697] team0: entered promiscuous mode [ 1828.819731][ T6697] C: entered promiscuous mode [ 1828.849591][ T6697] ±ÿ: entered promiscuous mode [ 1828.868233][ T6697] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1828.897856][ T6697] geneve1: entered promiscuous mode [ 1828.926569][ T6697] team0: entered allmulticast mode [ 1828.968493][ T6697] ±ÿ: entered allmulticast mode [ 1828.989311][ T6697] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1829.009996][ T6697] geneve1: entered allmulticast mode [ 1829.106100][ T6697] 8021q: adding VLAN 0 to HW filter on device team0 [ 1829.140856][ T6697] bridge0: port 3(team0) entered blocking state [ 1829.150275][ T6697] bridge0: port 3(team0) entered disabled state [ 1829.318635][ T6700] netlink: 'syz.0.9222': attribute type 10 has an invalid length. [ 1829.331864][ T6700] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9222'. [ 1829.820040][ T6722] netlink: 'syz.0.9231': attribute type 15 has an invalid length. [ 1829.830461][ T6722] netlink: 'syz.0.9231': attribute type 7 has an invalid length. [ 1830.503273][ T6732] syzkaller0: entered promiscuous mode [ 1830.509109][ T6732] syzkaller0: entered allmulticast mode [ 1830.558845][ T6732] netlink: 'syz.1.9233': attribute type 2 has an invalid length. [ 1830.620884][ T6732] netlink: 'syz.1.9233': attribute type 10 has an invalid length. [ 1830.629321][ T6732] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9233'. [ 1833.748784][ T6754] netlink: 'syz.3.9245': attribute type 2 has an invalid length. [ 1834.371891][ T6742] syzkaller0: entered promiscuous mode [ 1834.377844][ T6742] syzkaller0: entered allmulticast mode [ 1834.450532][ T6755] netlink: 'syz.3.9245': attribute type 10 has an invalid length. [ 1834.474021][ T6755] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9245'. [ 1834.609063][ T6757] netlink: 'syz.0.9237': attribute type 10 has an invalid length. [ 1834.620547][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9237'. [ 1837.886566][ T6785] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.9248'. [ 1837.907512][ T6785] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.9248'. [ 1839.067291][ T6799] netlink: 'syz.2.9250': attribute type 2 has an invalid length. [ 1839.367587][ T6796] syzkaller0: entered promiscuous mode [ 1839.568997][ T6796] syzkaller0: entered allmulticast mode [ 1839.693456][ T6800] netlink: 'syz.2.9250': attribute type 10 has an invalid length. [ 1839.710597][ T6800] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9250'. [ 1844.819520][ T6812] netlink: 'syz.2.9252': attribute type 10 has an invalid length. [ 1844.848852][ T6812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9252'. [ 1844.868946][ T6812] team0: entered promiscuous mode [ 1844.884594][ T6812] C: entered promiscuous mode [ 1844.900956][ T6812] team_slave_1: entered promiscuous mode [ 1844.907731][ T6812] geneve1: entered promiscuous mode [ 1844.931820][ T6812] dummy0: entered promiscuous mode [ 1844.937613][ T6812] team0: entered allmulticast mode [ 1844.949926][ T6812] C: entered allmulticast mode [ 1844.955750][ T6812] team_slave_1: entered allmulticast mode [ 1844.977585][ T6812] geneve1: entered allmulticast mode [ 1844.985136][ T6812] dummy0: entered allmulticast mode [ 1844.995760][ T6812] bridge0: port 3(team0) entered blocking state [ 1845.004138][ T6812] bridge0: port 3(team0) entered disabled state [ 1845.849628][ T6838] netlink: 'syz.0.9263': attribute type 10 has an invalid length. [ 1845.882573][ T6838] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9263'. [ 1846.468209][ T6850] netlink: 'syz.2.9265': attribute type 2 has an invalid length. [ 1846.498646][ T6839] netlink: 'syz.0.9263': attribute type 9 has an invalid length. [ 1846.516065][ T6839] netlink: 391 bytes leftover after parsing attributes in process `syz.0.9263'. [ 1846.578378][ T6846] syzkaller0: entered promiscuous mode [ 1846.584211][ T6846] syzkaller0: entered allmulticast mode [ 1846.608366][ T6846] netlink: 'syz.1.9264': attribute type 2 has an invalid length. [ 1846.648340][ T6846] netlink: 'syz.1.9264': attribute type 10 has an invalid length. [ 1846.657238][ T6846] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9264'. [ 1847.091551][ T6870] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.9271'. [ 1847.136780][ T6870] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1847.155862][ T6870] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1850.142296][ T6866] netlink: 'syz.3.9270': attribute type 2 has an invalid length. [ 1850.151013][ T6870] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9271'. [ 1851.303687][ T6889] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.9277'. [ 1853.025363][ T6926] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.9287'. [ 1853.877616][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.884597][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.267691][ T6955] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9294'. [ 1854.303611][ T6955] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1855.220638][ T6973] netlink: 'syz.3.9303': attribute type 9 has an invalid length. [ 1855.252146][ T6973] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.9303'. [ 1855.699038][ T6978] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9302'. [ 1856.731301][ T7011] netlink: 'syz.0.9319': attribute type 29 has an invalid length. [ 1856.795711][ T7011] netlink: 'syz.0.9319': attribute type 3 has an invalid length. [ 1856.863339][ T7011] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9319'. [ 1856.864109][ T7020] netlink: 'syz.0.9319': attribute type 10 has an invalid length. [ 1856.925232][ T7020] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9319'. [ 1857.650028][ T7024] netlink: 'syz.0.9315': attribute type 2 has an invalid length. [ 1857.755103][ T7024] netlink: 'syz.0.9315': attribute type 10 has an invalid length. [ 1857.790496][ T7024] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9315'. [ 1858.374006][ T7033] netlink: 'syz.0.9318': attribute type 9 has an invalid length. [ 1858.393159][ T7038] netlink: 'syz.2.9321': attribute type 29 has an invalid length. [ 1858.395104][ T7033] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.9318'. [ 1858.416958][ T7038] netlink: 'syz.2.9321': attribute type 29 has an invalid length. [ 1858.742005][ T7044] netlink: 'syz.2.9322': attribute type 21 has an invalid length. [ 1859.424187][ T7062] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9328'. [ 1861.497933][ T7086] validate_nla: 2 callbacks suppressed [ 1861.497952][ T7086] netlink: 'syz.1.9332': attribute type 9 has an invalid length. [ 1861.720604][ T7086] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.9332'. [ 1862.940680][ T7104] syzkaller0: entered promiscuous mode [ 1862.954285][ T7104] syzkaller0: entered allmulticast mode [ 1862.992034][ T7104] netlink: 'syz.2.9339': attribute type 2 has an invalid length. [ 1863.042196][ T7110] netlink: 'syz.1.9340': attribute type 27 has an invalid length. [ 1863.056797][ T7110] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9340'. [ 1870.928783][ T7172] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9355'. [ 1870.939043][ T7172] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1871.173275][ T7179] netlink: 'syz.2.9358': attribute type 2 has an invalid length. [ 1871.214272][ T7177] syzkaller0: entered promiscuous mode [ 1871.231853][ T7177] syzkaller0: entered allmulticast mode [ 1875.084049][ T7190] netlink: 'syz.0.9361': attribute type 21 has an invalid length. [ 1875.396431][ T7194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9362'. [ 1875.418642][ T7193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9362'. [ 1875.597421][ T7210] netlink: 168 bytes leftover after parsing attributes in process `syz.2.9365'. [ 1875.643682][ T7211] netlink: 'syz.2.9365': attribute type 39 has an invalid length. [ 1876.725296][ T7238] netlink: 'syz.2.9371': attribute type 2 has an invalid length. [ 1876.872233][ T7237] syzkaller0: entered promiscuous mode [ 1876.910831][ T7237] syzkaller0: entered allmulticast mode [ 1882.153466][ T7269] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9380'. [ 1883.258273][ T7291] netlink: 'syz.3.9386': attribute type 2 has an invalid length. [ 1883.334367][ T7291] netlink: 'syz.3.9386': attribute type 1 has an invalid length. [ 1883.922245][ T7304] netlink: 'syz.3.9388': attribute type 2 has an invalid length. [ 1883.989841][ T7303] syzkaller0: entered promiscuous mode [ 1884.024738][ T7303] syzkaller0: entered allmulticast mode [ 1884.038613][ T7304] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9388'. [ 1888.403440][ T7329] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9395'. [ 1888.614175][ T7343] netlink: 'syz.0.9400': attribute type 9 has an invalid length. [ 1888.623730][ T7343] netlink: 399 bytes leftover after parsing attributes in process `syz.0.9400'. [ 1888.837575][ T7351] netlink: 'syz.1.9401': attribute type 21 has an invalid length. [ 1888.863050][ T7351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9401'. [ 1888.884445][ T7351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9401'. [ 1888.984578][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9401'. [ 1889.465362][ T7353] netlink: 'syz.3.9402': attribute type 2 has an invalid length. [ 1889.480576][ T7353] netlink: 'syz.3.9402': attribute type 1 has an invalid length. [ 1889.655516][ T7361] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9412'. [ 1889.666332][ T7361] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 1890.820853][ T7373] syzkaller0: entered promiscuous mode [ 1890.826586][ T7373] syzkaller0: entered allmulticast mode [ 1890.931235][ T7373] netlink: 'syz.1.9406': attribute type 2 has an invalid length. [ 1890.964839][ T7373] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.9406'. [ 1894.460242][ T7384] netlink: 'syz.2.9409': attribute type 12 has an invalid length. [ 1894.475796][ T7384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9409'. [ 1894.543960][ T7384] netlink: 'syz.2.9409': attribute type 10 has an invalid length. [ 1894.616685][ T7384] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.9409'. [ 1894.974214][ T7384] netlink: 'syz.2.9409': attribute type 12 has an invalid length. [ 1895.011408][ T7384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9409'. [ 1895.728980][ T7410] netlink: 'syz.2.9416': attribute type 1 has an invalid length. [ 1895.740545][ T7410] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.9416'. [ 1895.889223][ T7415] syzkaller0: entered promiscuous mode [ 1895.895035][ T7415] syzkaller0: entered allmulticast mode [ 1895.913093][ T7415] netlink: 'syz.1.9419': attribute type 2 has an invalid length. [ 1895.935570][ T7415] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.9419'. [ 1896.161009][ T7430] netlink: 'syz.3.9422': attribute type 4 has an invalid length. [ 1896.168917][ T7430] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9422'. [ 1899.861051][ T7452] C: renamed from team_slave_0 [ 1899.875447][ T7452] netlink: 'syz.0.9427': attribute type 3 has an invalid length. [ 1899.885132][ T7452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1900.090249][ T7462] netlink: 'syz.0.9430': attribute type 1 has an invalid length. [ 1900.148011][ T7462] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.9430'. [ 1900.182547][ T7462] netlink: 9 bytes leftover after parsing attributes in process `syz.0.9430'. [ 1900.913071][ T7484] netlink: 'syz.0.9437': attribute type 2 has an invalid length. [ 1900.956629][ T7485] netlink: 188 bytes leftover after parsing attributes in process `syz.1.9436'. [ 1900.978160][ T7485] Ù: renamed from bond_slave_1 [ 1901.213304][ T7500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9438'. [ 1902.315718][ T7522] netlink: 'syz.3.9449': attribute type 2 has an invalid length. [ 1902.410475][ T7520] syzkaller0: entered promiscuous mode [ 1902.422307][ T7520] syzkaller0: entered allmulticast mode [ 1903.795125][ T7543] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.9453'. [ 1907.294124][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9458'. [ 1907.353123][ T7558] netlink: 'syz.0.9458': attribute type 10 has an invalid length. [ 1907.362731][ T7558] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1907.500211][ T7558] batman_adv: batadv0: Removing interface: veth0_vlan [ 1908.677972][T30787] tipc: Subscription rejected, illegal request [ 1909.216951][ T7597] netlink: 'syz.3.9465': attribute type 2 has an invalid length. [ 1909.334659][ T7595] syzkaller0: entered promiscuous mode [ 1909.340260][ T7595] syzkaller0: entered allmulticast mode [ 1909.401766][ T7599] netlink: 'syz.0.9467': attribute type 33 has an invalid length. [ 1909.459022][ T7599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9467'. [ 1913.716275][ T7611] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.9470'. [ 1913.815365][ T7619] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9473'. [ 1913.837377][ T7619] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.9473'. [ 1914.483182][ T7639] netlink: 'syz.3.9478': attribute type 33 has an invalid length. [ 1914.496239][ T7639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9478'. [ 1915.355216][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.370642][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.959787][ T7659] syzkaller0: entered promiscuous mode [ 1915.973561][ T7659] syzkaller0: entered allmulticast mode [ 1916.063991][ T7659] netlink: 'syz.3.9483': attribute type 2 has an invalid length. [ 1916.133250][ T7659] netlink: 'syz.3.9483': attribute type 10 has an invalid length. [ 1916.167355][ T7659] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9483'. [ 1918.482731][T30786] tipc: Subscription rejected, illegal request [ 1921.241122][ T7680] netlink: 'syz.1.9488': attribute type 2 has an invalid length. [ 1921.249078][ T7680] netlink: 'syz.1.9488': attribute type 4 has an invalid length. [ 1921.257397][ T7680] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9488'. [ 1922.560118][ T7739] netlink: 'syz.2.9502': attribute type 2 has an invalid length. [ 1922.606095][ T7733] syzkaller0: entered promiscuous mode [ 1922.620659][ T7733] syzkaller0: entered allmulticast mode [ 1922.669544][ T7739] netlink: 'syz.2.9502': attribute type 10 has an invalid length. [ 1922.675770][ T7746] netlink: 'syz.3.9505': attribute type 3 has an invalid length. [ 1922.686305][ T7739] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9502'. [ 1922.697265][ T7744] netlink: 'syz.0.9504': attribute type 3 has an invalid length. [ 1922.708513][ T7746] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9505'. [ 1926.350120][ T7759] lo: entered promiscuous mode [ 1926.358794][ T7759] lo: entered allmulticast mode [ 1926.459042][ T7762] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9509'. [ 1927.511947][ T7789] netlink: 'syz.2.9517': attribute type 10 has an invalid length. [ 1927.531337][ T7789] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9517'. [ 1927.552819][ T7789] hsr0: entered promiscuous mode [ 1927.568878][ T7789] bridge0: port 5(hsr0) entered blocking state [ 1927.589549][ T7789] bridge0: port 5(hsr0) entered disabled state [ 1927.624192][ T7789] hsr0: entered allmulticast mode [ 1927.639069][ T7789] hsr_slave_0: entered allmulticast mode [ 1927.647466][ T7789] hsr_slave_1: entered allmulticast mode [ 1927.898512][ T7800] netlink: 'syz.2.9520': attribute type 2 has an invalid length. [ 1927.962050][ T7800] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9520'. [ 1929.056585][ T7815] netlink: 'syz.3.9524': attribute type 21 has an invalid length. [ 1929.070650][ T7815] netlink: 'syz.3.9524': attribute type 12 has an invalid length. [ 1929.082819][ T7815] netlink: 'syz.3.9524': attribute type 13 has an invalid length. [ 1929.095839][ T7815] netlink: 'syz.3.9524': attribute type 14 has an invalid length. [ 1929.113123][ T7815] netlink: 'syz.3.9524': attribute type 15 has an invalid length. [ 1929.129453][ T7815] netlink: 'syz.3.9524': attribute type 16 has an invalid length. [ 1929.145969][ T7815] netlink: 'syz.3.9524': attribute type 19 has an invalid length. [ 1929.157995][ T7815] netlink: 'syz.3.9524': attribute type 21 has an invalid length. [ 1929.170608][ T7815] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.9524'. [ 1929.192165][ T7822] netlink: 399 bytes leftover after parsing attributes in process `syz.1.9526'. [ 1930.463415][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1930.486251][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1930.659505][ T7834] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9529'. [ 1930.794072][ T7844] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9533'. [ 1930.973450][ T7844] netlink: 822 bytes leftover after parsing attributes in process `syz.3.9533'. [ 1931.744266][ T7855] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9536'. [ 1932.504658][ T7864] netlink: 399 bytes leftover after parsing attributes in process `syz.3.9537'. [ 1932.788958][ T7872] validate_nla: 7 callbacks suppressed [ 1932.788977][ T7872] netlink: 'syz.2.9540': attribute type 1 has an invalid length. [ 1933.755579][ T7886] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9544'. [ 1933.879683][ T7886] netlink: 822 bytes leftover after parsing attributes in process `syz.1.9544'. [ 1934.099157][ T7892] netlink: 'syz.1.9545': attribute type 10 has an invalid length. [ 1934.119676][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9545'. [ 1934.161904][ T7892] netlink: 'syz.1.9545': attribute type 10 has an invalid length. [ 1934.169897][ T7892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9545'. [ 1935.020295][ T7902] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9549'. [ 1935.076832][ T7902] netlink: 'syz.3.9549': attribute type 33 has an invalid length. [ 1935.122591][ T7902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9549'. [ 1935.258041][ T7904] netlink: 'syz.0.9548': attribute type 10 has an invalid length. [ 1935.318853][ T7904] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1935.484399][ T7904] bridge0: port 4(hsr0) entered blocking state [ 1935.492853][ T7904] bridge0: port 4(hsr0) entered listening state [ 1935.501240][ T7904] bridge0: port 3(bond0) entered blocking state [ 1935.507809][ T7904] bridge0: port 3(bond0) entered listening state [ 1935.516493][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1935.525318][ T7904] bridge0: port 2(bridge_slave_1) entered listening state [ 1935.534960][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1935.544236][ T7904] bridge0: port 1(bridge_slave_0) entered listening state [ 1935.586559][ T7910] netlink: 'syz.1.9550': attribute type 29 has an invalid length. [ 1935.624222][ T7904] bridge0: port 4(hsr0) entered disabled state [ 1935.632961][ T7904] bridge0: port 3(bond0) entered disabled state [ 1935.641212][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1935.650397][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1935.821433][ T7910] netlink: 'syz.1.9550': attribute type 29 has an invalid length. [ 1936.350908][ T7922] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9555'. [ 1936.369489][ T7920] netlink: 'syz.3.9554': attribute type 1 has an invalid length. [ 1936.397639][ T7922] netlink: 822 bytes leftover after parsing attributes in process `syz.2.9555'. [ 1937.654539][ T7942] netlink: 'syz.2.9560': attribute type 2 has an invalid length. [ 1937.674735][ T7939] syzkaller0: entered promiscuous mode [ 1937.698523][ T7939] syzkaller0: entered allmulticast mode [ 1937.724091][ T7942] netlink: 'syz.2.9560': attribute type 10 has an invalid length. [ 1937.740883][ T7942] __nla_validate_parse: 1 callbacks suppressed [ 1937.740901][ T7942] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9560'. [ 1938.958261][ T7948] netlink: 164 bytes leftover after parsing attributes in process `syz.0.9561'. [ 1942.348383][ T7949] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9569'. [ 1942.370577][ T7948] netlink: 'syz.0.9561': attribute type 33 has an invalid length. [ 1942.378807][ T7948] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9561'. [ 1942.579236][ T7956] netlink: 'syz.2.9563': attribute type 10 has an invalid length. [ 1942.664769][ T7963] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.9566'. [ 1942.677631][ T7963] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1943.033923][ T7967] netlink: 'syz.1.9567': attribute type 1 has an invalid length. [ 1943.568117][ T7984] netlink: 'syz.0.9571': attribute type 10 has an invalid length. [ 1944.034703][ T7996] netlink: 'syz.3.9574': attribute type 10 has an invalid length. [ 1944.062727][ T7996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9574'. [ 1944.126301][ T7999] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9572'. [ 1944.146098][ T7990] syzkaller0: entered promiscuous mode [ 1944.168109][ T7990] syzkaller0: entered allmulticast mode [ 1944.175711][ T7999] netlink: 'syz.2.9572': attribute type 33 has an invalid length. [ 1944.184975][ T7999] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9572'. [ 1944.253270][ T7990] netlink: 'syz.1.9573': attribute type 2 has an invalid length. [ 1944.310592][ T7990] netlink: 'syz.1.9573': attribute type 10 has an invalid length. [ 1944.328522][ T7990] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9573'. [ 1945.056817][ T8018] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9579'. [ 1945.084687][ T8018] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1947.905226][ T8013] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 1948.061075][ T8030] netlink: 'syz.0.9584': attribute type 10 has an invalid length. [ 1948.069827][ T8030] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1948.108995][ T8030] bridge0: port 4(hsr0) entered blocking state [ 1948.116880][ T8030] bridge0: port 4(hsr0) entered listening state [ 1948.126706][ T8030] bridge0: port 3(bond0) entered blocking state [ 1948.134827][ T8030] bridge0: port 3(bond0) entered listening state [ 1948.143007][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.151463][ T8030] bridge0: port 2(bridge_slave_1) entered listening state [ 1948.160852][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.168791][ T8030] bridge0: port 1(bridge_slave_0) entered listening state [ 1948.218235][ T8030] bridge0: port 4(hsr0) entered disabled state [ 1948.225804][ T8030] bridge0: port 3(bond0) entered disabled state [ 1948.233612][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.242582][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.457676][ T8035] netlink: 'syz.1.9582': attribute type 2 has an invalid length. [ 1949.088503][ T8035] netlink: 'syz.1.9582': attribute type 10 has an invalid length. [ 1949.110913][ T8035] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9582'. [ 1949.243691][ T8055] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9590'. [ 1949.472367][ T8061] netlink: 'syz.1.9591': attribute type 2 has an invalid length. [ 1949.524411][ T8060] syzkaller0: entered promiscuous mode [ 1949.530071][ T8060] syzkaller0: entered allmulticast mode [ 1949.549337][ T8059] netlink: 'syz.2.9592': attribute type 10 has an invalid length. [ 1949.982196][ T8059] wg1: entered promiscuous mode [ 1950.003518][ T8059] wg1: entered allmulticast mode [ 1950.017697][ T8059] team0: Device wg1 is of different type [ 1950.228598][ T8061] netlink: 'syz.1.9591': attribute type 10 has an invalid length. [ 1950.240478][ T8061] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9591'. [ 1950.269832][ T8064] netlink: 'syz.3.9593': attribute type 10 has an invalid length. [ 1950.287151][ T8064] bridge0: port 4(team0) entered disabled state [ 1950.294035][ T8064] bridge0: port 3(hsr0) entered disabled state [ 1950.300479][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.308284][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.454964][ T8097] netlink: 'syz.3.9600': attribute type 2 has an invalid length. [ 1954.487692][ T8096] syzkaller0: entered promiscuous mode [ 1954.504454][ T8096] syzkaller0: entered allmulticast mode [ 1954.583537][ T8096] netlink: 'syz.3.9600': attribute type 10 has an invalid length. [ 1954.593080][ T8096] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9600'. [ 1956.011681][ T8123] netlink: 'syz.0.9607': attribute type 2 has an invalid length. [ 1958.435893][ T8106] hsr0: left allmulticast mode [ 1958.442285][ T8106] hsr_slave_0: left allmulticast mode [ 1958.449609][ T8106] hsr_slave_1: left allmulticast mode [ 1958.457646][ T8106] bridge0: port 5(hsr0) entered disabled state [ 1958.468837][ T8106] bridge0: port 3(team0) entered disabled state [ 1958.478866][ T8106] veth0_to_bridge: left allmulticast mode [ 1958.485109][ T8106] veth0_to_bridge: left promiscuous mode [ 1958.492282][ T8106] bridge0: port 4(veth0_to_bridge) entered disabled state [ 1958.503536][ T8106] bridge_slave_1: left allmulticast mode [ 1958.509478][ T8106] bridge_slave_1: left promiscuous mode [ 1958.524782][ T8106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.546316][ T8106] bridge_slave_0: left allmulticast mode [ 1958.552331][ T8106] bridge_slave_0: left promiscuous mode [ 1958.558303][ T8106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1958.669096][ T8106] bond0: (slave bridge0): Releasing backup interface [ 1958.684606][ T8106] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 1958.769583][ T8108] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9603'. [ 1958.779449][ T8109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9604'. [ 1958.814241][ T8123] netlink: 'syz.0.9607': attribute type 10 has an invalid length. [ 1958.836746][ T8123] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9607'. [ 1958.984981][ T8131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9610'. [ 1959.007027][ T8137] netlink: 'syz.0.9611': attribute type 10 has an invalid length. [ 1959.034657][ T8139] netlink: 'syz.2.9612': attribute type 10 has an invalid length. [ 1959.042545][ T8137] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.9611'. [ 1959.048970][ T8139] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9612'. [ 1959.055512][ T8137] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1959.080099][ T8139] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1959.090246][ T8139] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1959.100794][ T8139] team0: Port device virt_wifi0 added [ 1959.906322][ T8155] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9618'. [ 1960.093478][ T8160] netlink: 'syz.1.9619': attribute type 2 has an invalid length. [ 1960.282400][ T8158] syzkaller0: entered promiscuous mode [ 1960.289458][ T8158] syzkaller0: entered allmulticast mode [ 1960.318607][ T8162] netlink: 'syz.1.9619': attribute type 10 has an invalid length. [ 1960.328043][ T8162] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9619'. [ 1960.448354][ T8164] syzkaller0: left promiscuous mode [ 1960.458413][ T8164] syzkaller0: left allmulticast mode [ 1960.900715][ T8174] netlink: 'syz.3.9623': attribute type 4 has an invalid length. [ 1960.912266][ T8174] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9623'. [ 1965.139981][ T8168] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9621'. [ 1965.156493][ T8199] netlink: 'syz.3.9631': attribute type 21 has an invalid length. [ 1965.190900][ T8199] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9631'. [ 1967.028714][ T8240] netlink: 'syz.0.9643': attribute type 2 has an invalid length. [ 1967.055812][ T8239] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.9644'. [ 1967.073159][ T8241] netlink: 'syz.2.9642': attribute type 2 has an invalid length. [ 1967.096687][ T8239] netlink: zone id is out of range [ 1967.109505][ T8235] syzkaller0: entered promiscuous mode [ 1967.122341][ T8235] syzkaller0: entered allmulticast mode [ 1967.162110][ T8239] netlink: zone id is out of range [ 1967.168099][ T8239] netlink: zone id is out of range [ 1967.174696][ T8237] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.9643'. [ 1967.208374][ T8239] netlink: zone id is out of range [ 1967.217030][ T8239] netlink: zone id is out of range [ 1967.238392][ T8239] netlink: zone id is out of range [ 1967.255444][ T8239] netlink: zone id is out of range [ 1967.280977][ T8239] netlink: zone id is out of range [ 1967.290830][ T8241] netlink: 'syz.2.9642': attribute type 10 has an invalid length. [ 1967.299879][ T8239] netlink: zone id is out of range [ 1967.302113][ T8241] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9642'. [ 1967.318805][ T8239] netlink: zone id is out of range [ 1967.695339][T30787] tipc: Subscription rejected, illegal request [ 1971.572001][ T8247] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9646'. [ 1971.584254][ T8251] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9646'. [ 1971.774866][ T8266] netlink: 'syz.3.9652': attribute type 10 has an invalid length. [ 1971.787542][ T8264] tap0: tun_chr_ioctl cmd 1074025677 [ 1971.794849][ T8264] tap0: linktype set to 805 [ 1971.844261][ T8270] netlink: 'syz.0.9654': attribute type 29 has an invalid length. [ 1971.859661][ T8270] netlink: 'syz.0.9654': attribute type 29 has an invalid length. [ 1973.091589][ T8294] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9660'. [ 1973.116490][ T8294] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9660'. [ 1973.272811][ T8290] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9658'. [ 1973.320357][ T8292] netlink: 'syz.1.9659': attribute type 3 has an invalid length. [ 1973.361115][ T8292] netlink: 81332 bytes leftover after parsing attributes in process `syz.1.9659'. [ 1973.442099][ T8295] netlink: 'syz.1.9659': attribute type 2 has an invalid length. [ 1973.450286][ T8295] netlink: 'syz.1.9659': attribute type 8 has an invalid length. [ 1973.518063][ T8295] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9659'. [ 1973.601476][ T8308] netlink: 'syz.2.9664': attribute type 10 has an invalid length. [ 1973.609416][ T8308] mac80211_hwsim hwsim106 wlan1: left allmulticast mode [ 1973.677534][ T8308] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1973.690857][ T8310] netlink: 'syz.2.9664': attribute type 10 has an invalid length. [ 1973.759423][ T8310] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1973.846784][ T8310] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1973.894653][ T8310] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1973.940460][ T8310] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1973.959662][ T8318] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.9668'. [ 1974.872912][ T8326] netlink: 'syz.0.9669': attribute type 3 has an invalid length. [ 1974.896816][ T8326] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9669'. [ 1974.962681][ T8330] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9670'. [ 1975.291954][ T8342] syzkaller0: entered promiscuous mode [ 1975.298653][ T8342] syzkaller0: entered allmulticast mode [ 1975.325970][ T8340] delete_channel: no stack [ 1975.693415][ T8345] netlink: 'syz.3.9675': attribute type 3 has an invalid length. [ 1976.006377][ T8363] syzkaller0: entered promiscuous mode [ 1976.025164][ T8363] syzkaller0: entered allmulticast mode [ 1976.763936][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.771564][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.438824][ T8370] __nla_validate_parse: 6 callbacks suppressed [ 1979.438837][ T8370] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9681'. [ 1979.454925][ T8371] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9681'. [ 1979.475911][ T8375] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.9683'. [ 1979.694998][ T8383] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.9684'. [ 1979.755632][ T8388] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9686'. [ 1979.892389][ T8401] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9692'. [ 1979.909475][ T8401] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9692'. [ 1979.995122][ T8404] validate_nla: 4 callbacks suppressed [ 1979.995142][ T8404] netlink: 'syz.0.9693': attribute type 10 has an invalid length. [ 1980.020748][ T8404] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9693'. [ 1980.087054][ T8406] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9694'. [ 1980.116446][ T8406] netlink: 'syz.2.9694': attribute type 8 has an invalid length. [ 1980.127229][ T8406] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.9694'. [ 1980.913944][ T8432] syzkaller0: entered promiscuous mode [ 1980.919681][ T8432] syzkaller0: entered allmulticast mode [ 1980.945951][ T8432] netlink: 'syz.1.9704': attribute type 10 has an invalid length. [ 1981.270638][ T8445] net_ratelimit: 35 callbacks suppressed [ 1981.270656][ T8445] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1981.285143][ T8445] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1984.834559][ T8459] __nla_validate_parse: 5 callbacks suppressed [ 1984.834581][ T8459] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9712'. [ 1984.867128][ T8461] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9712'. [ 1984.917014][ T8465] netlink: 'syz.1.9714': attribute type 8 has an invalid length. [ 1985.067305][ T8471] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.9717'. [ 1985.692011][ T8489] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9723'. [ 1985.733273][ T8489] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9723'. [ 1987.074911][ T8522] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9732'. [ 1987.096267][ T8522] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9732'. [ 1987.502264][ T8536] netlink: 'syz.1.9735': attribute type 10 has an invalid length. [ 1987.511913][ T8536] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9735'. [ 1987.521825][ T8536] batadv0: entered promiscuous mode [ 1987.527519][ T8536] batadv0: entered allmulticast mode [ 1987.535358][ T8536] bridge0: port 5(batadv0) entered blocking state [ 1987.545887][ T8536] bridge0: port 5(batadv0) entered disabled state [ 1987.792048][T30800] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1987.801659][T30800] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1988.055151][ T8550] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9741'. [ 1988.089763][ T8550] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9741'. [ 1988.491265][ T8556] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1988.522073][ T8560] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1988.539296][ T8560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1988.556228][ T8560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1988.613313][ T8560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1988.650797][ T8560] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1988.660076][ T8560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1988.726280][ T8564] netlink: 'syz.2.9744': attribute type 21 has an invalid length. [ 1989.771438][ T8587] delete_channel: no stack [ 1989.971621][ T8586] __nla_validate_parse: 3 callbacks suppressed [ 1989.971638][ T8586] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9750'. [ 1989.992343][ T8587] netlink: 'syz.3.9749': attribute type 10 has an invalid length. [ 1990.005502][ T8588] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9750'. [ 1990.017657][ T8578] delete_channel: no stack [ 1990.027719][ T8559] chnl_net:caif_netlink_parms(): no params data found [ 1990.174691][ T8559] bridge0: port 1(bridge_slave_0) entered blocking state [ 1990.192255][ T8559] bridge0: port 1(bridge_slave_0) entered disabled state [ 1990.199884][ T8559] bridge_slave_0: entered allmulticast mode [ 1990.208861][ T8559] bridge_slave_0: entered promiscuous mode [ 1990.275027][T30800] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.308963][ T8559] bridge0: port 2(bridge_slave_1) entered blocking state [ 1990.350780][ T8559] bridge0: port 2(bridge_slave_1) entered disabled state [ 1990.358341][ T8559] bridge_slave_1: entered allmulticast mode [ 1990.401751][ T8559] bridge_slave_1: entered promiscuous mode [ 1990.556705][T30800] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.727824][T30800] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.760758][ T764] Bluetooth: hci1: command tx timeout [ 1990.777137][ T8559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1990.931152][ T8559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1991.193361][ T8559] team0: Port device team_slave_0 added [ 1991.214281][ T8559] team0: Port device team_slave_1 added [ 1991.494651][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1991.553263][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.601695][ T8559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1991.617372][ T8559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1991.625819][ T8559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.680565][ T8559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1991.819089][T30800] tipc: Left network mode [ 1992.551854][ T8559] hsr_slave_0: entered promiscuous mode [ 1992.681989][ T8559] hsr_slave_1: entered promiscuous mode [ 1992.744073][ T8559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1992.760493][ T8559] Cannot create hsr debugfs directory [ 1992.843858][ T764] Bluetooth: hci1: command tx timeout [ 1992.900778][ T8633] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9759'. [ 1992.940933][ T8634] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9759'. [ 1993.589740][ T8655] netlink: 188 bytes leftover after parsing attributes in process `syz.0.9765'. [ 1993.845243][ T8655] Ù: renamed from bond_slave_1 (while UP) [ 1994.910547][ T764] Bluetooth: hci1: command tx timeout [ 1995.918867][ T8681] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1995.960778][ T8683] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9770'. [ 1996.826275][ T8700] syzkaller0: entered promiscuous mode [ 1996.835701][ T8700] syzkaller0: entered allmulticast mode [ 1996.856964][ T8698] netlink: 'syz.2.9773': attribute type 10 has an invalid length. [ 1996.873464][ T8698] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.9773'. [ 1996.941127][ T8559] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1997.013940][ T764] Bluetooth: hci1: command tx timeout [ 2000.453379][ T8559] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2000.467982][ T8559] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2000.483927][ T8559] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2000.513713][ T8707] netlink: 'syz.0.9775': attribute type 2 has an invalid length. [ 2000.522360][ T8713] netlink: 14 bytes leftover after parsing attributes in process `syz.0.9775'. [ 2000.588484][ T8712] netlink: 'syz.3.9774': attribute type 10 has an invalid length. [ 2000.894049][ T8729] netlink: 10 bytes leftover after parsing attributes in process `syz.3.9780'. [ 2000.933912][ T8729] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9780'. [ 2001.108692][ T8559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2001.400203][ T8559] 8021q: adding VLAN 0 to HW filter on device team0 [ 2001.458993][T30805] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.466643][T30805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2001.513641][ T8745] netlink: 'syz.3.9784': attribute type 10 has an invalid length. [ 2001.534965][ T8745] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9784'. [ 2001.585217][T30805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.592504][T30805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2002.150832][ T8755] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2002.683773][T30800] hsr_slave_0: left promiscuous mode [ 2002.704318][T30800] hsr_slave_1: left promiscuous mode [ 2002.724929][T30800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2002.745114][T30800] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2002.767099][T30800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2002.781089][T30800] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2002.814187][T30800] bridge0: port 5(batadv0) entered disabled state [ 2002.842517][T30800] bridge0: port 3(team0) entered disabled state [ 2002.874106][T30800] bridge0: port 4(hsr0) entered disabled state [ 2002.895220][T30800] bridge_slave_1: left allmulticast mode [ 2002.914782][T30800] bridge_slave_1: left promiscuous mode [ 2002.941375][T30800] bridge0: port 2(bridge_slave_1) entered disabled state [ 2002.963311][T30800] bridge_slave_0: left promiscuous mode [ 2002.969355][T30800] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.021613][ T8786] netlink: 'syz.2.9790': attribute type 3 has an invalid length. [ 2003.029682][ T8786] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9790'. [ 2003.030841][T30800] veth1_macvtap: left promiscuous mode [ 2003.067560][T30800] veth1_vlan: left allmulticast mode [ 2003.085779][T30800] veth1_vlan: left promiscuous mode [ 2003.106034][T30800] veth0_vlan: left promiscuous mode [ 2003.451920][T30800] geneve1 (unregistering): left promiscuous mode [ 2003.459192][T30800] geneve1 (unregistering): left allmulticast mode [ 2003.497046][T30800] team0 (unregistering): Port device geneve1 removed [ 2003.895448][T30800] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 2003.904158][T30800] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 2003.913925][T30800] team0 (unregistering): Port device virt_wifi0 removed [ 2004.352083][T30800] ±ÿ (unregistering): left promiscuous mode [ 2004.358261][T30800] ±ÿ (unregistering): left allmulticast mode [ 2004.367272][T30800] team0 (unregistering): Port device 26±ÿ removed [ 2004.429872][T30800] C (unregistering): left promiscuous mode [ 2004.438565][T30800] team0 (unregistering): Port device C removed [ 2005.239163][ T8793] netlink: 'syz.0.9788': attribute type 10 has an invalid length. [ 2005.528860][ T8559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2005.554022][ T8813] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9792'. [ 2005.577165][ T8815] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9792'. [ 2005.632726][ T8814] netlink: 'syz.3.9793': attribute type 10 has an invalid length. [ 2005.658106][ T8814] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9793'. [ 2005.713972][ T8559] veth0_vlan: entered promiscuous mode [ 2005.776942][ T8559] veth1_vlan: entered promiscuous mode [ 2006.004063][ T8559] veth0_macvtap: entered promiscuous mode [ 2006.075123][ T8559] veth1_macvtap: entered promiscuous mode [ 2006.095618][ T8832] delete_channel: no stack [ 2006.100221][ T8832] delete_channel: no stack [ 2006.159553][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2006.235393][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2006.246739][ T8836] delete_channel: no stack [ 2006.264899][ T8836] delete_channel: no stack [ 2006.298055][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2006.311777][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 2006.323356][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2006.338294][ T8559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2006.356085][ T8559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2006.392267][ T8559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2006.399891][ T8832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9797'. [ 2006.510131][ T8559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2006.576212][ T8559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2006.624142][ T8559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2006.648334][ T8559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2006.790684][ T8842] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9798'. [ 2006.977714][T30787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2007.007220][T30787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2007.046634][T30809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2007.061556][T30809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2007.289109][ T8865] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9803'. [ 2007.990812][ T8875] netlink: 'syz.0.9807': attribute type 10 has an invalid length. [ 2008.118094][ T8875] bond0: (slave bond_slave_0): Releasing backup interface [ 2008.174184][ T8875] bond_slave_0: left promiscuous mode [ 2008.228758][ T8875] bond_slave_0: left allmulticast mode [ 2008.455964][ T8880] netlink: 'syz.1.9804': attribute type 10 has an invalid length. [ 2008.490201][ T8880] team0: Device ipvlan1 failed to register rx_handler [ 2011.133390][ T8922] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9816'. [ 2011.176117][ T8928] netlink: 'syz.0.9817': attribute type 10 has an invalid length. [ 2011.200630][ T8928] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.9817'. [ 2011.251229][ T8933] netlink: 'syz.3.9818': attribute type 10 has an invalid length. [ 2011.347644][ T8943] netlink: 'syz.2.9822': attribute type 2 has an invalid length. [ 2011.358049][ T8943] netlink: 'syz.2.9822': attribute type 1 has an invalid length. [ 2011.368510][ T8943] netlink: 152 bytes leftover after parsing attributes in process `syz.2.9822'. [ 2011.486328][ T8952] netlink: 'syz.3.9824': attribute type 10 has an invalid length. [ 2011.574354][ T8952] .`: (slave bond_slave_0): Releasing backup interface [ 2011.671796][ T8955] netlink: 830 bytes leftover after parsing attributes in process `syz.1.9825'. [ 2011.728607][ T8959] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.9826'. [ 2011.792091][ T8959] netlink: zone id is out of range [ 2011.797434][ T8959] netlink: zone id is out of range [ 2011.815986][ T8959] netlink: zone id is out of range [ 2011.823610][ T8959] netlink: zone id is out of range [ 2011.828902][ T8959] netlink: zone id is out of range [ 2011.889061][ T8959] netlink: zone id is out of range [ 2011.918789][ T8959] netlink: zone id is out of range [ 2011.933965][ T8959] netlink: zone id is out of range [ 2011.939260][ T8959] netlink: zone id is out of range [ 2011.947196][ T8959] netlink: zone id is out of range [ 2012.366984][ T8973] netlink: 'syz.1.9830': attribute type 10 has an invalid length. [ 2012.375390][ T8973] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.9830'. [ 2012.415357][ T8975] netlink: 'syz.0.9836': attribute type 21 has an invalid length. [ 2012.426033][ T8975] netlink: 168 bytes leftover after parsing attributes in process `syz.0.9836'. [ 2012.468212][ T8980] netlink: 'syz.3.9831': attribute type 10 has an invalid length. [ 2012.500013][ T8980] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9831'. [ 2012.695973][ T8983] netlink: 'syz.1.9832': attribute type 10 has an invalid length. [ 2012.720551][ T8983] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9832'. [ 2013.962118][ T9009] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9842'. [ 2014.166777][ T9012] netlink: 'syz.1.9843': attribute type 10 has an invalid length. [ 2014.195812][ T9012] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.9843'. [ 2014.397535][ T8979] netlink: 'syz.2.9828': attribute type 10 has an invalid length. [ 2014.924770][ T8979] team0: Device ipvlan1 failed to register rx_handler [ 2015.251998][ T9022] netlink: 'syz.3.9845': attribute type 10 has an invalid length. [ 2015.259853][ T9022] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.9845'. [ 2015.283623][ T9029] netlink: 'syz.1.9847': attribute type 3 has an invalid length. [ 2015.292472][ T9029] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9847'. [ 2016.381309][ T9072] netlink: 'syz.2.9863': attribute type 3 has an invalid length. [ 2016.924779][ T9086] __nla_validate_parse: 4 callbacks suppressed [ 2016.924798][ T9086] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9866'. [ 2016.979292][ T9085] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9867'. [ 2017.255015][ T9093] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9870'. [ 2017.364149][ T9089] netlink: 60 bytes leftover after parsing attributes in process `syz.0.9868'. [ 2017.505043][ T9097] netlink: 207496 bytes leftover after parsing attributes in process `syz.1.9871'. [ 2017.744531][ T764] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 2018.310410][ T9124] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9879'. [ 2018.689944][ T9129] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9881'. [ 2019.029700][ T9137] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.9884'. [ 2019.800920][ T764] Bluetooth: hci3: command 0x0406 tx timeout [ 2022.777092][ T9162] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9890'. [ 2022.891991][ T9164] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.9891'. [ 2023.011347][ T9166] netlink: 'syz.0.9893': attribute type 27 has an invalid length. [ 2023.019507][ T9166] netlink: 'syz.0.9893': attribute type 3 has an invalid length. [ 2023.171795][ T9179] netlink: 830 bytes leftover after parsing attributes in process `syz.2.9892'. [ 2023.585275][ T9195] netlink: 'syz.1.9900': attribute type 10 has an invalid length. [ 2023.744920][ T9195] veth0_vlan: left promiscuous mode [ 2023.746865][ T9204] netlink: 'syz.3.9901': attribute type 9 has an invalid length. [ 2023.775816][ T9204] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.9901'. [ 2023.790054][ T9195] veth0_vlan: entered promiscuous mode [ 2023.836747][ T9195] team0: Device veth0_vlan failed to register rx_handler [ 2024.485494][ T9202] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9902'. [ 2024.649176][ T9213] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.9903'. [ 2024.763828][ T9220] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9907'. [ 2024.815044][ T9222] netlink: 60931 bytes leftover after parsing attributes in process `syz.1.9906'. [ 2025.074704][ T9233] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9911'. [ 2025.340057][ T9236] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.9913'. [ 2026.859450][ T9281] netlink: 'syz.1.9929': attribute type 3 has an invalid length. [ 2026.980295][ T9285] pim6reg1: entered promiscuous mode [ 2026.989614][ T9285] pim6reg1: entered allmulticast mode [ 2028.019660][ T9306] __nla_validate_parse: 8 callbacks suppressed [ 2028.019679][ T9306] netlink: 10 bytes leftover after parsing attributes in process `syz.1.9939'. [ 2028.270445][ T9312] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9941'. [ 2028.372062][ T9314] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9942'. [ 2028.425480][ T9314] netlink: 'syz.1.9942': attribute type 21 has an invalid length. [ 2028.473847][ T9318] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.9945'. [ 2028.518831][ T9319] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9944'. [ 2029.675315][ T9344] netlink: 830 bytes leftover after parsing attributes in process `syz.3.9952'. [ 2029.837638][T29164] tipc: Subscription rejected, illegal request [ 2029.918385][ T9349] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.9955'. [ 2030.498105][ T9354] mac80211_hwsim hwsim117 wlan1: entered allmulticast mode [ 2030.564281][ T9360] netlink: 'syz.2.9959': attribute type 3 has an invalid length. [ 2030.574646][ T9360] netlink: 'syz.2.9959': attribute type 6 has an invalid length. [ 2030.592515][ T9357] netlink: 830 bytes leftover after parsing attributes in process `syz.0.9958'. [ 2030.606002][ T9360] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.9959'. [ 2030.674834][ T9364] FAULT_INJECTION: forcing a failure. [ 2030.674834][ T9364] name failslab, interval 1, probability 0, space 0, times 0 [ 2030.697486][ T9364] CPU: 1 PID: 9364 Comm: syz.3.9961 Not tainted syzkaller #0 [ 2030.705499][ T9364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2030.716659][ T9364] Call Trace: [ 2030.720142][ T9364] [ 2030.723821][ T9364] dump_stack_lvl+0x18c/0x250 [ 2030.729190][ T9364] ? show_regs_print_info+0x20/0x20 [ 2030.734870][ T9364] ? load_image+0x420/0x420 [ 2030.740222][ T9364] ? __might_sleep+0xe0/0xe0 [ 2030.745161][ T9364] ? __lock_acquire+0x7d40/0x7d40 [ 2030.750680][ T9364] should_fail_ex+0x39d/0x4d0 [ 2030.755506][ T9364] should_failslab+0x9/0x20 [ 2030.760158][ T9364] slab_pre_alloc_hook+0x59/0x310 [ 2030.765539][ T9364] kmem_cache_alloc_node+0x60/0x320 [ 2030.770779][ T9364] ? __alloc_skb+0x103/0x2c0 [ 2030.775655][ T9364] __alloc_skb+0x103/0x2c0 [ 2030.780283][ T9364] qrtr_port_remove+0x81/0x430 [ 2030.785164][ T9364] qrtr_release+0x1ea/0x2a0 [ 2030.789950][ T9364] sock_close+0xbd/0x230 [ 2030.794207][ T9364] ? sock_mmap+0xa0/0xa0 [ 2030.798724][ T9364] __fput+0x234/0x970 [ 2030.802735][ T9364] __se_sys_close+0x15f/0x220 [ 2030.808335][ T9364] do_syscall_64+0x55/0xa0 [ 2030.813035][ T9364] ? clear_bhb_loop+0x40/0x90 [ 2030.818266][ T9364] ? clear_bhb_loop+0x40/0x90 [ 2030.823018][ T9364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2030.829247][ T9364] RIP: 0033:0x7fad4b79c819 [ 2030.833956][ T9364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2030.854600][ T9364] RSP: 002b:00007fad4c740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 2030.863401][ T9364] RAX: ffffffffffffffda RBX: 00007fad4ba15fa0 RCX: 00007fad4b79c819 [ 2030.871645][ T9364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 2030.880106][ T9364] RBP: 00007fad4c740090 R08: 0000000000000000 R09: 0000000000000000 [ 2030.888560][ T9364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2030.896935][ T9364] R13: 00007fad4ba16038 R14: 00007fad4ba15fa0 R15: 00007ffd7be25418 [ 2030.905205][ T9364] [ 2030.964985][ T9370] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.9963'. [ 2031.807481][ T9403] GPL: port 1(syz_tun) entered blocking state [ 2031.835727][ T9403] GPL: port 1(syz_tun) entered disabled state [ 2031.852107][ T9403] syz_tun: entered allmulticast mode [ 2031.867877][ T9403] syz_tun: entered promiscuous mode [ 2032.026937][ T9406] syzkaller0: entered promiscuous mode [ 2032.051665][ T9406] syzkaller0: entered allmulticast mode [ 2032.620212][ T9436] FAULT_INJECTION: forcing a failure. [ 2032.620212][ T9436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2032.636133][ T8929] failed to send hello msg [ 2032.645111][ T8929] failed while handling packet from 1:16384 [ 2032.665247][ T9436] CPU: 1 PID: 9436 Comm: syz.0.9984 Not tainted syzkaller #0 [ 2032.667281][ T9434] netlink: 'syz.3.9983': attribute type 4 has an invalid length. [ 2032.671556][ T9436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2032.671579][ T9436] Call Trace: [ 2032.671590][ T9436] [ 2032.671600][ T9436] dump_stack_lvl+0x18c/0x250 [ 2032.671636][ T9436] ? show_regs_print_info+0x20/0x20 [ 2032.671657][ T9436] ? load_image+0x420/0x420 [ 2032.671680][ T9436] ? __lock_acquire+0x7d40/0x7d40 [ 2032.671700][ T9436] ? snprintf+0xe9/0x140 [ 2032.671722][ T9436] should_fail_ex+0x39d/0x4d0 [ 2032.671751][ T9436] _copy_to_user+0x2f/0xa0 [ 2032.738580][ T9436] simple_read_from_buffer+0xe7/0x150 [ 2032.744211][ T9436] proc_fail_nth_read+0x1e8/0x260 [ 2032.749543][ T9436] ? proc_fault_inject_write+0x360/0x360 [ 2032.755504][ T9436] ? fsnotify_perm+0x271/0x5e0 [ 2032.760503][ T9436] ? proc_fault_inject_write+0x360/0x360 [ 2032.766293][ T9436] vfs_read+0x28b/0x970 [ 2032.770655][ T9436] ? kernel_read+0x1e0/0x1e0 [ 2032.775307][ T9436] ? __fget_files+0x28/0x4b0 [ 2032.779997][ T9436] ? __fget_files+0x28/0x4b0 [ 2032.784598][ T9436] ? __fget_files+0x43d/0x4b0 [ 2032.789354][ T9436] ? __fdget_pos+0x2a3/0x330 [ 2032.793962][ T9436] ? ksys_read+0x75/0x260 [ 2032.798387][ T9436] ksys_read+0x150/0x260 [ 2032.802752][ T9436] ? vfs_write+0x990/0x990 [ 2032.807171][ T9436] ? lockdep_hardirqs_on+0x98/0x150 [ 2032.812374][ T9436] do_syscall_64+0x55/0xa0 [ 2032.816873][ T9436] ? clear_bhb_loop+0x40/0x90 [ 2032.821578][ T9436] ? clear_bhb_loop+0x40/0x90 [ 2032.826261][ T9436] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2032.832296][ T9436] RIP: 0033:0x7f42fe75d04e [ 2032.836796][ T9436] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2032.856674][ T9436] RSP: 002b:00007f42ff595fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2032.865186][ T9436] RAX: ffffffffffffffda RBX: 00007f42ff5966c0 RCX: 00007f42fe75d04e [ 2032.873507][ T9436] RDX: 000000000000000f RSI: 00007f42ff5960a0 RDI: 0000000000000004 [ 2032.881565][ T9436] RBP: 00007f42ff596090 R08: 0000000000000000 R09: 0000000000000000 [ 2032.889534][ T9436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2032.898053][ T9436] R13: 00007f42fea16038 R14: 00007f42fea15fa0 R15: 00007ffec29759d8 [ 2032.906432][ T9436] [ 2033.183659][T30787] failed to send hello msg [ 2033.188312][T30787] failed while handling packet from 1:16384 [ 2034.732666][ T9496] __nla_validate_parse: 3 callbacks suppressed [ 2034.739221][ T9496] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10001'. [ 2035.138514][ T9496] bond0 (unregistering): left allmulticast mode [ 2035.151000][ T9496] Ù: left allmulticast mode [ 2035.167689][ T9496] batadv_slave_0: left allmulticast mode [ 2035.174843][ T9496] bridge0: port 3(bond0) entered disabled state [ 2035.233164][ T9496] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 2035.248260][ T9496] Ù: left promiscuous mode [ 2035.317030][ T9496] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2035.329474][ T9496] batadv_slave_0: left promiscuous mode [ 2035.394031][ T9496] bond0 (unregistering): Released all slaves [ 2035.432531][ T9508] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.10004'. [ 2035.484012][ T9511] mac80211_hwsim hwsim142 wlan1: entered allmulticast mode [ 2035.553547][ T9519] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10008'. [ 2035.577334][ T9521] netlink: 'syz.3.10007': attribute type 21 has an invalid length. [ 2035.674257][ T9525] FAULT_INJECTION: forcing a failure. [ 2035.674257][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2035.720059][ T9525] CPU: 1 PID: 9525 Comm: syz.2.10010 Not tainted syzkaller #0 [ 2035.727855][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2035.738216][ T9525] Call Trace: [ 2035.741614][ T9525] [ 2035.744587][ T9525] dump_stack_lvl+0x18c/0x250 [ 2035.749316][ T9525] ? show_regs_print_info+0x20/0x20 [ 2035.754563][ T9525] ? load_image+0x420/0x420 [ 2035.759294][ T9525] ? __might_fault+0xaa/0x120 [ 2035.764089][ T9525] ? __lock_acquire+0x7d40/0x7d40 [ 2035.769630][ T9525] should_fail_ex+0x39d/0x4d0 [ 2035.774795][ T9525] _copy_from_user+0x2f/0xe0 [ 2035.779582][ T9525] ___sys_sendmsg+0x1c7/0x360 [ 2035.784281][ T9525] ? get_pid_task+0x20/0x1e0 [ 2035.788992][ T9525] ? __sys_sendmsg+0x2a0/0x2a0 [ 2035.793793][ T9525] ? __lock_acquire+0x7d40/0x7d40 [ 2035.798963][ T9525] __se_sys_sendmsg+0x1c2/0x2b0 [ 2035.803904][ T9525] ? __x64_sys_sendmsg+0x80/0x80 [ 2035.808881][ T9525] ? lockdep_hardirqs_on+0x98/0x150 [ 2035.814092][ T9525] do_syscall_64+0x55/0xa0 [ 2035.818508][ T9525] ? clear_bhb_loop+0x40/0x90 [ 2035.823190][ T9525] ? clear_bhb_loop+0x40/0x90 [ 2035.827958][ T9525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2035.833955][ T9525] RIP: 0033:0x7fe891d9c819 [ 2035.838460][ T9525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2035.858384][ T9525] RSP: 002b:00007fe892ca2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2035.867001][ T9525] RAX: ffffffffffffffda RBX: 00007fe892015fa0 RCX: 00007fe891d9c819 [ 2035.875003][ T9525] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2035.883007][ T9525] RBP: 00007fe892ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 2035.891011][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2035.899323][ T9525] R13: 00007fe892016038 R14: 00007fe892015fa0 R15: 00007fff6146c3e8 [ 2035.907772][ T9525] [ 2036.230763][ T9537] GPL: port 1(syz_tun) entered blocking state [ 2036.241961][ T9537] GPL: port 1(syz_tun) entered disabled state [ 2036.252056][ T9537] syz_tun: entered allmulticast mode [ 2036.264484][ T9537] syz_tun: entered promiscuous mode [ 2036.519985][ T9541] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.10016'. [ 2037.059331][ T9547] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10019'. [ 2037.341462][ T9552] mac80211_hwsim hwsim133 wlan1: entered allmulticast mode [ 2037.368572][ T9555] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10023'. [ 2037.576466][ T9564] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.10026'. [ 2037.972487][ T9586] GPL: port 1(syz_tun) entered blocking state [ 2037.978718][ T9586] GPL: port 1(syz_tun) entered disabled state [ 2038.090731][ T9586] syz_tun: entered allmulticast mode [ 2038.117333][ T9586] syz_tun: entered promiscuous mode [ 2038.211040][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.217704][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.270192][ T9589] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.10034'. [ 2038.353046][ T9589] net_ratelimit: 332 callbacks suppressed [ 2038.353084][ T9589] netlink: zone id is out of range [ 2038.387645][ T9593] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10035'. [ 2038.410117][ T9589] netlink: zone id is out of range [ 2038.427662][ T9589] netlink: zone id is out of range [ 2038.449613][ T9589] netlink: zone id is out of range [ 2038.465927][ T9589] netlink: zone id is out of range [ 2038.488461][ T9589] netlink: zone id is out of range [ 2038.515913][ T9589] netlink: zone id is out of range [ 2038.536749][ T9589] netlink: zone id is out of range [ 2038.568218][ T9589] netlink: zone id is out of range [ 2038.609589][ T9589] netlink: zone id is out of range [ 2038.928560][ T9602] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10038'. [ 2038.945246][ T9603] bridge_slave_1: default FDB implementation only supports local addresses [ 2039.006085][ T9609] netlink: 'syz.2.10042': attribute type 10 has an invalid length. [ 2039.411511][ T9630] netlink: 'syz.1.10050': attribute type 27 has an invalid length. [ 2039.506154][ T9634] netlink: 'syz.0.10052': attribute type 40 has an invalid length. [ 2039.714700][ T9645] netlink: 'syz.2.10055': attribute type 29 has an invalid length. [ 2039.753008][ T9645] netlink: 'syz.2.10055': attribute type 29 has an invalid length. [ 2039.764915][ T9652] netlink: 'syz.2.10055': attribute type 29 has an invalid length. [ 2039.819349][ T9645] veth0_vlan: entered allmulticast mode [ 2040.135259][ T9661] __nla_validate_parse: 5 callbacks suppressed [ 2040.135301][ T9661] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10060'. [ 2040.173064][ T9665] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.10062'. [ 2040.201389][ T9663] FAULT_INJECTION: forcing a failure. [ 2040.201389][ T9663] name failslab, interval 1, probability 0, space 0, times 0 [ 2040.215593][ T9663] CPU: 0 PID: 9663 Comm: syz.3.10061 Not tainted syzkaller #0 [ 2040.223197][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2040.233374][ T9663] Call Trace: [ 2040.236685][ T9663] [ 2040.239638][ T9663] dump_stack_lvl+0x18c/0x250 [ 2040.244364][ T9663] ? show_regs_print_info+0x20/0x20 [ 2040.249630][ T9663] ? load_image+0x420/0x420 [ 2040.254184][ T9663] ? __might_sleep+0xe0/0xe0 [ 2040.258914][ T9663] ? __lock_acquire+0x7d40/0x7d40 [ 2040.264172][ T9663] should_fail_ex+0x39d/0x4d0 [ 2040.269392][ T9663] should_failslab+0x9/0x20 [ 2040.273928][ T9663] slab_pre_alloc_hook+0x59/0x310 [ 2040.278986][ T9663] kmem_cache_alloc_node+0x60/0x320 [ 2040.284306][ T9663] ? lock_chain_count+0x20/0x20 [ 2040.289165][ T9663] ? dup_task_struct+0x57/0x7c0 [ 2040.294113][ T9663] dup_task_struct+0x57/0x7c0 [ 2040.298907][ T9663] ? lockdep_hardirqs_on+0x98/0x150 [ 2040.304107][ T9663] copy_process+0x586/0x3d80 [ 2040.308896][ T9663] ? __might_fault+0xaa/0x120 [ 2040.313777][ T9663] ? get_pid_task+0x20/0x1e0 [ 2040.318641][ T9663] ? __pidfd_prepare+0x140/0x140 [ 2040.323684][ T9663] kernel_clone+0x24b/0x8a0 [ 2040.328277][ T9663] ? create_io_thread+0x190/0x190 [ 2040.333405][ T9663] __x64_sys_clone+0x1b7/0x230 [ 2040.338169][ T9663] ? __fget_files+0x43d/0x4b0 [ 2040.343126][ T9663] ? __ia32_sys_vfork+0x140/0x140 [ 2040.348728][ T9663] ? lock_chain_count+0x20/0x20 [ 2040.353615][ T9663] ? lockdep_hardirqs_on+0x98/0x150 [ 2040.358922][ T9663] do_syscall_64+0x55/0xa0 [ 2040.363698][ T9663] ? clear_bhb_loop+0x40/0x90 [ 2040.368568][ T9663] ? clear_bhb_loop+0x40/0x90 [ 2040.373614][ T9663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2040.379877][ T9663] RIP: 0033:0x7fad4b79c819 [ 2040.384302][ T9663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2040.404186][ T9663] RSP: 002b:00007fad4c73ffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2040.412798][ T9663] RAX: ffffffffffffffda RBX: 00007fad4ba15fa0 RCX: 00007fad4b79c819 [ 2040.420973][ T9663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 2040.428967][ T9663] RBP: 00007fad4c740090 R08: 0000000000000000 R09: 0000000000000000 [ 2040.437132][ T9663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2040.445549][ T9663] R13: 00007fad4ba16038 R14: 00007fad4ba15fa0 R15: 00007ffd7be25418 [ 2040.453749][ T9663] [ 2040.501873][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10063'. [ 2040.763566][ T9681] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10067'. [ 2040.925875][ T9678] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2040.964514][ T9678] .` (unregistering): (slave bridge0): Releasing backup interface [ 2040.981053][ T9678] .` (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 2041.001407][ T9678] .` (unregistering): Released all slaves [ 2041.159769][ T9701] netlink: 'syz.2.10072': attribute type 10 has an invalid length. [ 2041.178348][ T9701] netlink: 65023 bytes leftover after parsing attributes in process `syz.2.10072'. [ 2041.426650][ T9706] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10074'. [ 2042.057859][ T9732] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10082'. [ 2042.352240][ T7684] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 2042.375634][ T9732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2042.413820][ T9756] netlink: 'syz.1.10087': attribute type 21 has an invalid length. [ 2042.479055][ T9732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2042.565249][ T9732] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2042.618240][ T9732] bond0 (unregistering): Released all slaves [ 2043.171183][ T9777] netlink: 'syz.1.10093': attribute type 2 has an invalid length. [ 2043.179327][ T9777] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.10093'. [ 2043.240921][ T9779] FAULT_INJECTION: forcing a failure. [ 2043.240921][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 2043.256917][ T9777] netlink: 164 bytes leftover after parsing attributes in process `syz.1.10093'. [ 2043.266468][ T9779] CPU: 0 PID: 9779 Comm: syz.2.10094 Not tainted syzkaller #0 [ 2043.266494][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2043.266505][ T9779] Call Trace: [ 2043.266513][ T9779] [ 2043.266523][ T9779] dump_stack_lvl+0x18c/0x250 [ 2043.266558][ T9779] ? show_regs_print_info+0x20/0x20 [ 2043.300960][ T9779] ? load_image+0x420/0x420 [ 2043.305519][ T9779] ? __lock_acquire+0x7d40/0x7d40 [ 2043.310586][ T9779] should_fail_ex+0x39d/0x4d0 [ 2043.315323][ T9779] should_failslab+0x9/0x20 [ 2043.319874][ T9779] slab_pre_alloc_hook+0x59/0x310 [ 2043.324944][ T9779] ? kernel_clone+0x24b/0x8a0 [ 2043.329946][ T9779] ? __x64_sys_clone+0x1b7/0x230 [ 2043.335132][ T9779] ? do_syscall_64+0x55/0xa0 [ 2043.339773][ T9779] kmem_cache_alloc_node+0x60/0x320 [ 2043.345201][ T9779] ? alloc_vmap_area+0x1b4/0x1e30 [ 2043.350259][ T9779] alloc_vmap_area+0x1b4/0x1e30 [ 2043.355237][ T9779] ? vm_map_ram+0xcb0/0xcb0 [ 2043.359768][ T9779] ? rcu_is_watching+0x15/0xb0 [ 2043.364560][ T9779] __get_vm_area_node+0x162/0x370 [ 2043.369620][ T9779] __vmalloc_node_range+0x36e/0x1330 [ 2043.374927][ T9779] ? copy_process+0x586/0x3d80 [ 2043.379816][ T9779] ? free_vm_area+0x50/0x50 [ 2043.384355][ T9779] ? arch_dup_task_struct+0x57/0xd0 [ 2043.389683][ T9779] ? __asan_memcpy+0x40/0x70 [ 2043.394312][ T9779] dup_task_struct+0x3d0/0x7c0 [ 2043.399213][ T9779] ? copy_process+0x586/0x3d80 [ 2043.404011][ T9779] ? lockdep_hardirqs_on+0x98/0x150 [ 2043.409353][ T9779] copy_process+0x586/0x3d80 [ 2043.414231][ T9779] ? __might_fault+0xaa/0x120 [ 2043.419118][ T9779] ? get_pid_task+0x20/0x1e0 [ 2043.423839][ T9779] ? __pidfd_prepare+0x140/0x140 [ 2043.428814][ T9779] kernel_clone+0x24b/0x8a0 [ 2043.433343][ T9779] ? create_io_thread+0x190/0x190 [ 2043.438585][ T9779] __x64_sys_clone+0x1b7/0x230 [ 2043.443547][ T9779] ? __fget_files+0x43d/0x4b0 [ 2043.448257][ T9779] ? __ia32_sys_vfork+0x140/0x140 [ 2043.453319][ T9779] ? lock_chain_count+0x20/0x20 [ 2043.458227][ T9779] ? lockdep_hardirqs_on+0x98/0x150 [ 2043.463453][ T9779] do_syscall_64+0x55/0xa0 [ 2043.468007][ T9779] ? clear_bhb_loop+0x40/0x90 [ 2043.472846][ T9779] ? clear_bhb_loop+0x40/0x90 [ 2043.477656][ T9779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2043.483564][ T9779] RIP: 0033:0x7fe891d9c819 [ 2043.488072][ T9779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2043.507792][ T9779] RSP: 002b:00007fe892ca1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2043.516234][ T9779] RAX: ffffffffffffffda RBX: 00007fe892015fa0 RCX: 00007fe891d9c819 [ 2043.524587][ T9779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 2043.532579][ T9779] RBP: 00007fe892ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 2043.540657][ T9779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2043.548641][ T9779] R13: 00007fe892016038 R14: 00007fe892015fa0 R15: 00007fff6146c3e8 [ 2043.556905][ T9779] [ 2043.621271][ T9779] syz.2.10094: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 2043.645926][ T9779] CPU: 1 PID: 9779 Comm: syz.2.10094 Not tainted syzkaller #0 [ 2043.653633][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2043.663870][ T9779] Call Trace: [ 2043.667169][ T9779] [ 2043.670183][ T9779] dump_stack_lvl+0x18c/0x250 [ 2043.674915][ T9779] ? show_regs_print_info+0x20/0x20 [ 2043.680431][ T9779] ? load_image+0x420/0x420 [ 2043.685165][ T9779] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2043.691721][ T9779] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2043.698532][ T9779] warn_alloc+0x246/0x340 [ 2043.702931][ T9779] ? slab_free_freelist_hook+0x130/0x1a0 [ 2043.709035][ T9779] ? zone_watermark_ok_safe+0x230/0x230 [ 2043.714888][ T9779] ? __get_vm_area_node+0x17b/0x370 [ 2043.720739][ T9779] ? __get_vm_area_node+0x17b/0x370 [ 2043.726052][ T9779] __vmalloc_node_range+0x393/0x1330 [ 2043.731577][ T9779] ? free_vm_area+0x50/0x50 [ 2043.736384][ T9779] ? arch_dup_task_struct+0x57/0xd0 [ 2043.741698][ T9779] ? __asan_memcpy+0x40/0x70 [ 2043.746466][ T9779] dup_task_struct+0x3d0/0x7c0 [ 2043.751478][ T9779] ? copy_process+0x586/0x3d80 [ 2043.757803][ T9779] ? lockdep_hardirqs_on+0x98/0x150 [ 2043.763399][ T9779] copy_process+0x586/0x3d80 [ 2043.768163][ T9779] ? __might_fault+0xaa/0x120 [ 2043.773165][ T9779] ? get_pid_task+0x20/0x1e0 [ 2043.777869][ T9779] ? __pidfd_prepare+0x140/0x140 [ 2043.782930][ T9779] kernel_clone+0x24b/0x8a0 [ 2043.787465][ T9779] ? create_io_thread+0x190/0x190 [ 2043.792687][ T9779] __x64_sys_clone+0x1b7/0x230 [ 2043.797712][ T9779] ? __fget_files+0x43d/0x4b0 [ 2043.802407][ T9779] ? __ia32_sys_vfork+0x140/0x140 [ 2043.807532][ T9779] ? lock_chain_count+0x20/0x20 [ 2043.812601][ T9779] ? lockdep_hardirqs_on+0x98/0x150 [ 2043.817940][ T9779] do_syscall_64+0x55/0xa0 [ 2043.822913][ T9779] ? clear_bhb_loop+0x40/0x90 [ 2043.827883][ T9779] ? clear_bhb_loop+0x40/0x90 [ 2043.832736][ T9779] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2043.838908][ T9779] RIP: 0033:0x7fe891d9c819 [ 2043.843342][ T9779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2043.863572][ T9779] RSP: 002b:00007fe892ca1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2043.872179][ T9779] RAX: ffffffffffffffda RBX: 00007fe892015fa0 RCX: 00007fe891d9c819 [ 2043.880157][ T9779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001000000 [ 2043.888220][ T9779] RBP: 00007fe892ca2090 R08: 0000000000000000 R09: 0000000000000000 [ 2043.896207][ T9779] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 2043.904285][ T9779] R13: 00007fe892016038 R14: 00007fe892015fa0 R15: 00007fff6146c3e8 [ 2043.912291][ T9779] [ 2043.930198][ T9779] Mem-Info: [ 2043.934640][ T9779] active_anon:13124 inactive_anon:0 isolated_anon:0 [ 2043.934640][ T9779] active_file:19394 inactive_file:40689 isolated_file:0 [ 2043.934640][ T9779] unevictable:768 dirty:547 writeback:0 [ 2043.934640][ T9779] slab_reclaimable:11463 slab_unreclaimable:102194 [ 2043.934640][ T9779] mapped:24915 shmem:1361 pagetables:565 [ 2043.934640][ T9779] sec_pagetables:0 bounce:0 [ 2043.934640][ T9779] kernel_misc_reclaimable:0 [ 2043.934640][ T9779] free:1324615 free_pcp:8520 free_cma:0 [ 2043.990513][ T9779] Node 0 active_anon:52496kB inactive_anon:0kB active_file:77576kB inactive_file:162556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99560kB dirty:2184kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10736kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no [ 2044.025252][ T9779] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2044.060116][ T9779] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2044.090300][ T9779] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2044.096470][ T9779] Node 0 DMA32 free:1373232kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:52556kB inactive_anon:0kB active_file:77576kB inactive_file:161728kB unevictable:1536kB writepending:2184kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:28760kB local_pcp:13684kB free_cma:0kB [ 2044.151504][ T9779] lowmem_reserve[]: 0 0 0 0 0 [ 2044.156384][ T9779] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2044.184081][ T9779] lowmem_reserve[]: 0 0 0 0 0 [ 2044.188980][ T9779] Node 1 Normal free:3909416kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:5728kB local_pcp:5728kB free_cma:0kB [ 2044.221736][ T9779] lowmem_reserve[]: 0 0 0 0 0 [ 2044.227390][ T9779] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2044.257197][ T9779] Node 0 DMA32: 848*4kB (U) 766*8kB (UM) 1744*16kB (UME) 824*32kB (UME) 1020*64kB (UME) 920*128kB (UME) 360*256kB (UME) 146*512kB (UME) 55*1024kB (UME) 5*2048kB (UM) 218*4096kB (UM) = 1373232kB [ 2044.277696][ T9779] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2044.290441][ T9779] Node 1 Normal: 260*4kB (UME) 53*8kB (UME) 51*16kB (UME) 230*32kB (UME) 90*64kB (UME) 26*128kB (UM) 8*256kB (UME) 1*512kB (U) 1*1024kB (U) 2*2048kB (UE) 948*4096kB (M) = 3909416kB [ 2044.309510][ T9779] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2044.332000][ T9779] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2044.342307][ T9779] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2044.354122][ T9779] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2044.364282][ T9779] 61446 total pagecache pages [ 2044.369041][ T9779] 0 pages in swap cache [ 2044.373655][ T9779] Free swap = 124996kB [ 2044.378005][ T9779] Total swap = 124996kB [ 2044.385551][ T9779] 2097051 pages RAM [ 2044.396717][ T9792] netlink: 'syz.3.10097': attribute type 3 has an invalid length. [ 2044.405033][ T9779] 0 pages HighMem/MovableOnly [ 2044.409815][ T9779] 416926 pages reserved [ 2044.410728][ T9792] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.10097'. [ 2044.414895][ T9779] 0 pages cma reserved [ 2044.969248][ T9811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2045.002936][ T9811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2045.038051][ T9811] bond0 (unregistering): Released all slaves [ 2045.223365][ T9822] bridge0: port 4(team0) entered disabled state [ 2045.247396][ T9822] hsr0: left allmulticast mode [ 2045.254738][ T9822] hsr_slave_0: left allmulticast mode [ 2045.264513][ T9822] bridge0: port 3(hsr0) entered disabled state [ 2045.274907][ T9822] bridge_slave_1: left allmulticast mode [ 2045.280869][ T9822] bridge_slave_1: left promiscuous mode [ 2045.288067][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state [ 2045.314769][ T9822] bridge_slave_0: left allmulticast mode [ 2045.323148][ T9822] bridge_slave_0: left promiscuous mode [ 2045.331361][ T9822] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.433722][ T9830] netlink: 'syz.1.10111': attribute type 3 has an invalid length. [ 2045.471502][ T9830] __nla_validate_parse: 2 callbacks suppressed [ 2045.471540][ T9830] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.10111'. [ 2045.835643][ T9842] netlink: 'syz.3.10115': attribute type 5 has an invalid length. [ 2046.093584][ T9847] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.10118'. [ 2046.124138][ T9847] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.10118'. [ 2046.146579][ T9848] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10117'. [ 2046.826484][ T9856] syzkaller0: entered promiscuous mode [ 2046.848594][ T9856] syzkaller0: entered allmulticast mode [ 2046.870919][ T9851] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10119'. [ 2051.824069][ T9871] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10125'. [ 2051.849017][ T9881] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10127'. [ 2052.166292][ T9888] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10129'. [ 2052.396678][ T9898] netlink: 'syz.2.10134': attribute type 19 has an invalid length. [ 2052.422060][ T9898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10134'. [ 2054.488612][ T8560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2054.506908][ T8560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2054.517979][ T8560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2054.532116][ T8560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2054.544339][ T8560] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2054.552125][ T8560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2054.654080][ T760] syz_tun (unregistering): left allmulticast mode [ 2054.670670][ T760] syz_tun (unregistering): left promiscuous mode [ 2054.677199][ T760] GPL: port 1(syz_tun) entered disabled state [ 2054.740985][ T9922] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 2054.765023][ T9922] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 2054.908269][T29113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.091637][T29113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.219047][T29113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.422235][T29113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2055.515898][ T9925] chnl_net:caif_netlink_parms(): no params data found [ 2055.606161][ T9949] netlink: 'syz.3.10146': attribute type 10 has an invalid length. [ 2055.670661][ T9949] netlink: 65023 bytes leftover after parsing attributes in process `syz.3.10146'. [ 2055.835677][ T9925] bridge0: port 1(bridge_slave_0) entered blocking state [ 2055.866153][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2055.912468][ T9954] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.10147'. [ 2055.922531][ T9925] bridge_slave_0: entered allmulticast mode [ 2056.000501][ T9925] bridge_slave_0: entered promiscuous mode [ 2056.058382][ T9954] netlink: 'syz.3.10147': attribute type 9 has an invalid length. [ 2056.123371][ T9954] netlink: 379 bytes leftover after parsing attributes in process `syz.3.10147'. [ 2056.168608][ T9925] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.202268][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2056.222380][ T9925] bridge_slave_1: entered allmulticast mode [ 2056.245218][ T9925] bridge_slave_1: entered promiscuous mode [ 2056.374728][ T9925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2056.463995][ T9925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2056.496365][ T9961] netlink: 'syz.3.10149': attribute type 9 has an invalid length. [ 2056.513847][ T8925] failed to send hello msg [ 2056.523286][ T8925] failed while handling packet from 1:16384 [ 2056.523437][ T9961] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10149'. [ 2056.593017][ T764] Bluetooth: hci2: command tx timeout [ 2056.637271][ T9925] team0: Port device team_slave_0 added [ 2056.828253][ T9925] team0: Port device team_slave_1 added [ 2056.858686][ T9971] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10153'. [ 2056.872439][ T9973] netlink: 'syz.1.10154': attribute type 10 has an invalid length. [ 2056.884035][ T9973] netlink: 65023 bytes leftover after parsing attributes in process `syz.1.10154'. [ 2056.905324][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2056.925435][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.967346][ T9925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2057.067514][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2057.093877][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2057.130529][ T9925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2057.143304][ T9976] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10155'. [ 2057.389035][ T9925] hsr_slave_0: entered promiscuous mode [ 2057.497274][ T9925] hsr_slave_1: entered promiscuous mode [ 2057.530473][ T9925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2057.573791][ T9925] Cannot create hsr debugfs directory [ 2058.023937][T10011] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.10162'. [ 2058.403842][T10017] netlink: 'syz.0.10163': attribute type 10 has an invalid length. [ 2058.423230][T10017] netlink: 65023 bytes leftover after parsing attributes in process `syz.0.10163'. [ 2058.574739][T10026] netlink: 'syz.0.10165': attribute type 2 has an invalid length. [ 2058.594044][T10026] netlink: 'syz.0.10165': attribute type 1 has an invalid length. [ 2058.681443][ T764] Bluetooth: hci2: command tx timeout [ 2060.760519][ T764] Bluetooth: hci2: command tx timeout [ 2061.911625][T10022] netlink: 830 bytes leftover after parsing attributes in process `syz.3.10164'. [ 2062.095636][T10038] netlink: 830 bytes leftover after parsing attributes in process `syz.1.10167'. [ 2062.229582][T10043] netlink: 'syz.3.10169': attribute type 21 has an invalid length. [ 2062.258735][T10044] netlink: 'syz.3.10169': attribute type 10 has an invalid length. [ 2062.281632][T10044] hsr_slave_0: left promiscuous mode [ 2062.436169][T10050] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10174'. [ 2062.830551][ T764] Bluetooth: hci2: command tx timeout [ 2062.926110][T10060] netlink: 'syz.1.10171': attribute type 29 has an invalid length. [ 2062.994450][T10060] netlink: 'syz.1.10171': attribute type 29 has an invalid length. [ 2063.596248][ T9925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2063.654812][T10080] netlink: 'syz.3.10173': attribute type 10 has an invalid length. [ 2063.663329][T10080] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.10173'. [ 2063.673538][ T9925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2063.692123][ T9925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2063.900892][T29113] hsr_slave_0: left promiscuous mode [ 2063.983193][T29113] hsr_slave_1: left promiscuous mode [ 2064.781106][T29113] veth0_macvtap: left promiscuous mode [ 2064.786938][T29113] veth1_vlan: left promiscuous mode [ 2064.855589][T29113] veth0_vlan: left promiscuous mode [ 2069.445596][T29113] geneve1 (unregistering): left promiscuous mode [ 2069.452876][T29113] geneve1 (unregistering): left allmulticast mode [ 2069.466000][T29113] team0 (unregistering): Port device geneve1 removed [ 2069.911050][T29113] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 2069.919558][T29113] net veth1_virt_wifi virt_wifi0 (unregistering): left allmulticast mode [ 2069.930881][T29113] team0 (unregistering): Port device virt_wifi0 removed [ 2070.368425][T29113] team_slave_1 (unregistering): left promiscuous mode [ 2070.375739][T29113] team_slave_1 (unregistering): left allmulticast mode [ 2070.385369][T29113] team0 (unregistering): Port device team_slave_1 removed [ 2070.447791][T29113] C (unregistering): left promiscuous mode [ 2070.454039][T29113] C (unregistering): left allmulticast mode [ 2070.463792][T29113] team0 (unregistering): Port device C removed [ 2070.935694][T29113] dummy0 (unregistering): left promiscuous mode [ 2070.944249][T29113] dummy0 (unregistering): left allmulticast mode [ 2070.954553][T29113] team0 (unregistering): Port device dummy0 removed [ 2071.048808][ T9925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2071.063011][T10095] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10178'. [ 2071.307748][T10112] netlink: 'syz.0.10184': attribute type 10 has an invalid length. [ 2071.322228][T10112] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.10184'. [ 2071.398815][ T9925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2071.420047][T10113] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.10185'. [ 2071.474554][ T9925] 8021q: adding VLAN 0 to HW filter on device team0 [ 2071.528906][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 2071.536141][ T8925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2071.683893][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 2071.691256][ T8925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2071.907439][T10125] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10186'. [ 2072.849373][T10157] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10192'. [ 2072.950563][T10162] netlink: 'syz.1.10193': attribute type 10 has an invalid length. [ 2072.958834][T10162] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.10193'. [ 2073.121655][ T9925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2073.206691][T10166] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.10194'. [ 2073.592828][ T9925] veth0_vlan: entered promiscuous mode [ 2073.644459][ T9925] veth1_vlan: entered promiscuous mode [ 2073.712647][ T9925] veth0_macvtap: entered promiscuous mode [ 2073.748645][ T9925] veth1_macvtap: entered promiscuous mode [ 2073.794906][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.812034][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.822676][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2073.834533][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.858290][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2073.900300][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 2073.919492][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.938144][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.949930][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2073.976327][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2073.998676][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2074.008438][T10188] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.10203'. [ 2074.016434][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2074.035853][T10182] netlink: 830 bytes leftover after parsing attributes in process `syz.0.10198'. [ 2074.058244][ T9925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.090195][T10191] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.10199'. [ 2074.111500][ T9925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.130899][ T9925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.139672][ T9925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.446153][T29113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.465647][T29113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.574271][T30787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.620431][T30787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.664717][T30787] failed to send hello msg [ 2074.686903][T30787] failed while handling packet from 1:16384 [ 2077.108372][T10276] __nla_validate_parse: 1 callbacks suppressed [ 2077.108391][T10276] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10216'. [ 2077.130313][T10276] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10216'. [ 2077.152189][T10276] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.10216'. [ 2077.600963][T10291] netlink: 830 bytes leftover after parsing attributes in process `syz.2.10220'. [ 2077.767100][ C0] [ 2077.767113][ C0] ================================ [ 2077.767119][ C0] WARNING: inconsistent lock state [ 2077.767129][ C0] syzkaller #0 Not tainted [ 2077.767138][ C0] -------------------------------- [ 2077.767143][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 2077.767150][ C0] syz.3.10221/10294 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 2077.767169][ C0] ffff8880287f81a0 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 2077.767216][ C0] {INITIAL USE} state was registered at: [ 2077.767227][ C0] lock_acquire+0x19e/0x420 [ 2077.767245][ C0] _raw_spin_lock+0x2e/0x40 [ 2077.767263][ C0] htab_lock_bucket+0x17d/0x300 [ 2077.767277][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 2077.767292][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 2077.767309][ C0] bpf_overflow_handler+0x1fc/0x510 [ 2077.767330][ C0] __perf_event_overflow+0x447/0x630 [ 2077.767345][ C0] perf_swevent_event+0x319/0x570 [ 2077.767360][ C0] perf_bp_event+0x319/0x430 [ 2077.767374][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 2077.767392][ C0] notifier_call_chain+0x197/0x380 [ 2077.767409][ C0] atomic_notifier_call_chain+0xda/0x180 [ 2077.767426][ C0] notify_die+0x145/0x1a0 [ 2077.767442][ C0] notify_debug+0x2e/0x50 [ 2077.767455][ C0] noist_exc_debug+0x77/0x120 [ 2077.767469][ C0] asm_exc_debug+0x33/0x40 [ 2077.767485][ C0] irq event stamp: 3176 [ 2077.767490][ C0] hardirqs last enabled at (3175): [] seqcount_lockdep_reader_access+0x10a/0x190 [ 2077.767508][ C0] hardirqs last disabled at (3176): [] exc_debug+0x73/0x140 [ 2077.767520][ C0] softirqs last enabled at (3132): [] inet6_fill_ifla6_attrs+0x11fc/0x21f0 [ 2077.767539][ C0] softirqs last disabled at (3130): [] inet6_fill_ifla6_attrs+0x11c4/0x21f0 [ 2077.767557][ C0] [ 2077.767557][ C0] other info that might help us debug this: [ 2077.767562][ C0] Possible unsafe locking scenario: [ 2077.767562][ C0] [ 2077.767566][ C0] CPU0 [ 2077.767569][ C0] ---- [ 2077.767572][ C0] lock(&htab->lockdep_key); [ 2077.767583][ C0] [ 2077.767586][ C0] lock(&htab->lockdep_key); [ 2077.767594][ C0] [ 2077.767594][ C0] *** DEADLOCK *** [ 2077.767594][ C0] [ 2077.767598][ C0] no locks held by syz.3.10221/10294. [ 2077.767605][ C0] [ 2077.767605][ C0] stack backtrace: [ 2077.767610][ C0] CPU: 0 PID: 10294 Comm: syz.3.10221 Not tainted syzkaller #0 [ 2077.767625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2077.767635][ C0] Call Trace: [ 2077.767642][ C0] <#DB> [ 2077.767650][ C0] dump_stack_lvl+0x18c/0x250 [ 2077.767681][ C0] ? show_regs_print_info+0x20/0x20 [ 2077.767714][ C0] ? print_usage_bug+0x475/0x690 [ 2077.767734][ C0] ? verify_lock_unused+0x18/0x140 [ 2077.767758][ C0] lock_acquire+0x2c2/0x420 [ 2077.767783][ C0] ? htab_lock_bucket+0x17d/0x300 [ 2077.767804][ C0] ? read_lock_is_recursive+0x20/0x20 [ 2077.767842][ C0] _raw_spin_lock+0x2e/0x40 [ 2077.767859][ C0] ? htab_lock_bucket+0x17d/0x300 [ 2077.767876][ C0] htab_lock_bucket+0x17d/0x300 [ 2077.767903][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 2077.767926][ C0] ? verify_lock_unused+0x18/0x140 [ 2077.767948][ C0] ? jhash+0x34e/0x740 [ 2077.767969][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 2077.768003][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 2077.768022][ C0] ? perf_callchain+0x220/0x220 [ 2077.768050][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 2077.768070][ C0] bpf_overflow_handler+0x1fc/0x510 [ 2077.768097][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 2077.768113][ C0] ? bpf_overflow_handler+0xde/0x510 [ 2077.768135][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 2077.768167][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 2077.768190][ C0] __perf_event_overflow+0x447/0x630 [ 2077.768220][ C0] perf_swevent_event+0x319/0x570 [ 2077.768243][ C0] ? perf_tp_event+0x1520/0x1520 [ 2077.768259][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 2077.768282][ C0] ? trace_call_bpf+0xc3/0x6c0 [ 2077.768319][ C0] perf_bp_event+0x319/0x430 [ 2077.768346][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 2077.768364][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2077.768425][ C0] ? lock_acquire+0x2c2/0x420 [ 2077.768455][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 2077.768482][ C0] notifier_call_chain+0x197/0x380 [ 2077.768507][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 2077.768530][ C0] atomic_notifier_call_chain+0xda/0x180 [ 2077.768554][ C0] notify_die+0x145/0x1a0 [ 2077.768578][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 2077.768607][ C0] ? rcu_is_watching+0x15/0xb0 [ 2077.768634][ C0] notify_debug+0x2e/0x50 [ 2077.768650][ C0] exc_debug+0xde/0x140 [ 2077.768673][ C0] asm_exc_debug+0x1e/0x40 [ 2077.768690][ C0] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 2077.768708][ C0] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 2077.768721][ C0] RSP: 0018:ffffc90003b07838 EFLAGS: 00050206 [ 2077.768735][ C0] RAX: ffffffff8427e301 RBX: 0000000000001000 RCX: 0000000000000d80 [ 2077.768746][ C0] RDX: 0000000000000001 RSI: 0000200000000319 RDI: ffff888056a40280 [ 2077.768757][ C0] RBP: ffffc90003b07998 R08: ffff888056a40fff R09: 1ffff1100ad481ff [ 2077.768769][ C0] R10: dffffc0000000000 R11: ffffed100ad48200 R12: ffff888056a40000 [ 2077.768780][ C0] R13: 0000200000000099 R14: ffffc90003b07db8 R15: 1ffff92000760fb7 [ 2077.768803][ C0] ? _copy_from_iter+0x181/0x12e0 [ 2077.768837][ C0] [ 2077.768841][ C0] [ 2077.768846][ C0] _copy_from_iter+0x24e/0x12e0 [ 2077.768868][ C0] ? __might_fault+0xaa/0x120 [ 2077.768889][ C0] ? _copy_from_iter+0x24e/0x12e0 [ 2077.768911][ C0] ? __virt_addr_valid+0x18c/0x540 [ 2077.768934][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 2077.768954][ C0] ? copyout_mc+0x70/0x70 [ 2077.768981][ C0] ? copyout_mc+0x70/0x70 [ 2077.769007][ C0] ? __virt_addr_valid+0x18c/0x540 [ 2077.769032][ C0] ? page_copy_sane+0x16a/0x270 [ 2077.769059][ C0] copy_page_from_iter+0x7b/0x100 [ 2077.769087][ C0] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 2077.769124][ C0] tun_get_user+0x15db/0x3ca0 [ 2077.769159][ C0] ? aa_file_perm+0x11b/0xee0 [ 2077.769190][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 2077.769225][ C0] ? tun_get+0x1c/0x2e0 [ 2077.769245][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 2077.769272][ C0] ? tun_get+0x1c/0x2e0 [ 2077.769302][ C0] tun_chr_write_iter+0x119/0x200 [ 2077.769326][ C0] vfs_write+0x46c/0x990 [ 2077.769355][ C0] ? file_end_write+0x250/0x250 [ 2077.769383][ C0] ? __fget_files+0x43d/0x4b0 [ 2077.769417][ C0] ? __fdget_pos+0x1d8/0x330 [ 2077.769435][ C0] ? ksys_write+0x75/0x260 [ 2077.769460][ C0] ksys_write+0x150/0x260 [ 2077.769485][ C0] ? __ia32_sys_read+0x90/0x90 [ 2077.769512][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 2077.769537][ C0] do_syscall_64+0x55/0xa0 [ 2077.769550][ C0] ? clear_bhb_loop+0x40/0x90 [ 2077.769568][ C0] ? clear_bhb_loop+0x40/0x90 [ 2077.769590][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2077.769608][ C0] RIP: 0033:0x7fad4b79c819 [ 2077.769622][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2077.769634][ C0] RSP: 002b:00007fad4c740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2077.769650][ C0] RAX: ffffffffffffffda RBX: 00007fad4ba15fa0 RCX: 00007fad4b79c819 [ 2077.769661][ C0] RDX: 000000000000d208 RSI: 0000200000000080 RDI: 0000000000000003 [ 2077.769671][ C0] RBP: 00007fad4b832c91 R08: 0000000000000000 R09: 0000000000000000 [ 2077.769680][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2077.769690][ C0] R13: 00007fad4ba16038 R14: 00007fad4ba15fa0 R15: 00007ffd7be25418 [ 2077.769723][ C0]