last executing test programs: 2m42.853819222s ago: executing program 0 (id=620): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') ioctl$TUNSETIFF(r1, 0xb701, 0x0) 2m41.057246079s ago: executing program 0 (id=622): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01286941070008000600821b3062eda40002", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x11, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0x3) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='freezer.state\x00', 0x0, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001680)=@generic={&(0x7f0000001840)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001780)=@bpf_ext={0x1c, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010001000000000007000000181a0000", @ANYRES32=r1, @ANYBLOB="00000000000000000b120000", @ANYRES32, @ANYBLOB="000000000000000085000000540000008520000003000000183700000500000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1000, &(0x7f0000000580)=""/4096, 0x40f00, 0x0, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001600)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000001640)={0x2, 0x3, 0x7f, 0x2}, 0x10, 0xfb6d, r4, 0x2, &(0x7f0000001700)=[0xffffffffffffffff, r1, r1, r1, r0, r1], &(0x7f0000001740)=[{0x4, 0x5, 0xa, 0x9}, {0x0, 0x5, 0x2, 0xa}], 0x10, 0xfffffff3}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xfffffffffffffff9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x408, 0xca, 0x0, 0x2, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYRES8=r7], 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x100}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000740)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000", @ANYRES16=r9, @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00272a09008597d1da0000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r10, &(0x7f00000001c0)="e716147d7cd190f67ba4cdf1a3b5cdaabfe1f77a3aa7c31d56e9b15f4d3913c18d57064206ddd7d30a983f73538b7ab03a2ec4440dd1bc70f7011699423a751909caacbbe969f4a4f3b801415f24873da964e291244c2e5fa8b5b257790cbad4a48d17e944e4fc551235a0122ed224fce9fe5a634a68c6c56ddfe6a859b6eb60f9fe076cc0d81883f8f33f83550aff2e5d25c710e706cb6d90dd6aa5e05fe1a604cd3f6e73994bdc48ed0486b9bdcdd631d0b41bc592631fb6ac4308362f09c12b723472ed8c", &(0x7f00000000c0)=""/42}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000080)) 2m39.818222495s ago: executing program 0 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x8, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="1f80195ee104000b", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7, @ANYRES64=r5], 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x1}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xc74, '\x00', r9, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) (async) socket$kcm(0x10, 0x2, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000340)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup, 0x8, 0x1, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r2}, 0x8) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x0) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x2}, 0x8) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="1f80195ee104000b", @ANYRES32=r4, @ANYBLOB, @ANYRES32=r7, @ANYRES64=r5], 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x1}, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000180)}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x1f00, 0x0, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xc74, '\x00', r9, 0xffffffffffffffff, 0x4}, 0x50) (async) 2m37.133949581s ago: executing program 0 (id=628): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, 0xffffffffffffff9a) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x0, 0x8001, 0xc, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400000}, 0x50) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0xfe33) write$cgroup_devices(r3, 0x0, 0x0) recvmsg(r3, &(0x7f0000000e00)={&(0x7f00000001c0)=@ax25={{}, [@default, @rose, @default, @null, @null, @rose, @remote, @netrom]}, 0x80, &(0x7f0000000c40)=[{&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000380)=""/140, 0x8c}, {&(0x7f0000000840)=""/156, 0x9c}, {&(0x7f0000000540)=""/120, 0x78}, {&(0x7f0000000900)=""/45, 0x2d}, {&(0x7f0000000940)=""/88, 0x58}, {&(0x7f00000009c0)=""/147, 0x93}, {&(0x7f0000000a80)=""/64, 0x40}, {&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000bc0)=""/98, 0x62}], 0xa, &(0x7f0000000d00)=""/223, 0xdf}, 0x20000160) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 2m35.979516963s ago: executing program 0 (id=633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000280), &(0x7f0000000400)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000074c176e77b8af8ff000000bfa24b62f56e58ea7ba50cfb00b7e7ffffff00000085000000c3000000950000000007401434000000000014f8a8da5e55f795b1db23c872be9fbeadf748856f06125d87140078d2917cacf17d41972cb7c700347ec3b302ff5bb2fd5ba3464f94a8a93ecb23e96ef668c79bf9a5a55d7d7d4a3a28850aa6bf68731f54ae783f151d7dbcc3048f417b4c38637f1ae0b3718cc29da673446d5b14ce89005e08921d85b05e903105a200d9db83431b9c330e744fb22a505fc5d9c1295c6d49080fc3ff1a75d59edfd18c8f0361c3f16f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m35.68592008s ago: executing program 0 (id=636): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) (async) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/25, 0xfffffffffffffefd}, {&(0x7f0000000400)=""/64}, {&(0x7f0000000680)=""/197}, {&(0x7f0000001500)=""/4096}, {&(0x7f0000002500)=""/4096}, {&(0x7f0000000780)=""/175}, {&(0x7f00000003c0)=""/42}, {&(0x7f0000000840)=""/68}], 0x0, &(0x7f0000000900)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) socket$kcm(0x21, 0x2, 0xa) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000000000b1b09b1aa1687c0586a41e3f2c0f1b38d57126b1c390512c8d2831885ec978c1e593b91f762f50dfc1a0d66f0663fda9c04ff95c6dcf7f44b63a6370f3b0cc846fdd7a13db13da2ec7a8d52c0e8f12b9bd67e7588d4f794a9fdb9708e4915feb975627640dbb474caff068574926fbc02ce7706ff3e7b4ab44fd3914e4e040778303189abcbaa168078"], 0x0, 0x1a, 0x0, 0x9, 0x1000}, 0x28) 2m20.662213992s ago: executing program 32 (id=636): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) (async) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) (async) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000000c0)=""/25, 0xfffffffffffffefd}, {&(0x7f0000000400)=""/64}, {&(0x7f0000000680)=""/197}, {&(0x7f0000001500)=""/4096}, {&(0x7f0000002500)=""/4096}, {&(0x7f0000000780)=""/175}, {&(0x7f00000003c0)=""/42}, {&(0x7f0000000840)=""/68}], 0x0, &(0x7f0000000900)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r7 = socket$kcm(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) socket$kcm(0x21, 0x2, 0xa) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000200000000000b1b09b1aa1687c0586a41e3f2c0f1b38d57126b1c390512c8d2831885ec978c1e593b91f762f50dfc1a0d66f0663fda9c04ff95c6dcf7f44b63a6370f3b0cc846fdd7a13db13da2ec7a8d52c0e8f12b9bd67e7588d4f794a9fdb9708e4915feb975627640dbb474caff068574926fbc02ce7706ff3e7b4ab44fd3914e4e040778303189abcbaa168078"], 0x0, 0x1a, 0x0, 0x9, 0x1000}, 0x28) 7.261853239s ago: executing program 3 (id=1450): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async, rerun: 64) r1 = socket$kcm(0x11, 0x2, 0x0) (async, rerun: 64) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async, rerun: 32) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002940)=""/4055, 0xfd7}, {&(0x7f0000000740)=""/142, 0x8e}, {&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000340)=""/86, 0x56}], 0x4}, 0x2100) (async, rerun: 32) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0x13, &(0x7f0000000800)=r0, 0x4) (async) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000100)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYRES32=r4], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) (async) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) 6.485765449s ago: executing program 3 (id=1455): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001500), 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000001600)={0x0, r0}, 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40)=0xffffffffffffffff, 0x12) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x44}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r5, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000000}, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, r5, 0xfffffffdffffffff, r6, 0x0) socket$kcm(0x2c, 0x3, 0x0) (async) socket$kcm(0x2c, 0x3, 0x0) (async) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0x2}, 0x80, 0x0}, 0x0) (async, rerun: 64) sendmsg$kcm(r7, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="5c0000007a006bcd9e3fe3dc6e08000007200000010000204da60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1931fe71197ef", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r4, 0x0, 0x240408c5) (async) recvmsg$kcm(r4, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async, rerun: 32) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000780fc0b09000300", 0x33fe0}], 0x1}, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async, rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x19, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000010000000000000001000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000050000008500000082000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7050000080d0a0085000000b60000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 6.092868099s ago: executing program 3 (id=1460): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x6, 0x5, 0x7ff, 0x23200, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0xc}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x94) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0xa, &(0x7f0000000800)=@raw=[@alu={0x4, 0x0, 0xb, 0xb, 0x9, 0xffffffffffffffe0, 0x1}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x38}, @map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0x5, 0xa, 0xfffffffffffffffc, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x56e2276d, 0x0, 0x0, 0x0, 0xffff75d8}], &(0x7f0000000880)='GPL\x00', 0x400, 0xee, &(0x7f00000008c0)=""/238, 0x40f00, 0xc, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x0, 0x10, 0x6, 0xc659}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000b80)=[r7, r8], &(0x7f0000000bc0)=[{0x4, 0x5, 0xf}, {0x2, 0x4, 0x7, 0x2}, {0x0, 0x5, 0x10}, {0x2, 0x5, 0xd, 0x5}, {0x0, 0x2, 0x2, 0x1}], 0x10, 0xca3}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x3, 0x0, 0x4000e, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x24}, 0x1c0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x7fff}, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000950000000000"], &(0x7f0000000c80)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb27f, 0x829b0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe11b, 0x0, @perf_config_ext={0x8, 0xfff}, 0xc486d19d431ce5be, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe9}, 0x0, 0x100000000000000d, 0xffffffffffffffff, 0x8) r10 = perf_event_open$cgroup(&(0x7f0000000580)={0x3, 0x80, 0x23, 0x4, 0x7, 0x3, 0x0, 0x5, 0x80, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xc, 0x1, @perf_bp={&(0x7f00000001c0), 0xc}, 0x8200, 0x0, 0x3ff, 0x3, 0x1, 0x7, 0x6, 0x0, 0x2, 0x0, 0x9}, r9, 0xd, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x81, 0x9, 0x8, 0x8, 0x0, 0x100000001, 0x40200, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000180)}, 0x101e0a, 0x1, 0x914e, 0x1, 0x7, 0x6, 0xd230, 0x0, 0x3, 0x0, 0x996}, 0xffffffffffffffff, 0x5, r10, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a) 5.60565159s ago: executing program 3 (id=1465): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40502000000000071108c0000000000660000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 5.306603506s ago: executing program 3 (id=1470): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9ea1fd98b5106c0d3fe3dc6e48ff7f086b87003080000000000000160a99b83299f473f3fa959050bbe4bbd0e51753cd60bc26eab556a705251e618294080000261fcc4e82bb2352d1f006baa45e3bbd225a89006a10c494aca970ae571e3d5d64", 0x69}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4.93519468s ago: executing program 3 (id=1472): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x800008, @local, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[{0x28, 0x29, 0x7a09, "977b3d2f56cfdf8bb5f2ac6dd52d09ebcb"}], 0x28}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x800000, @local, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="28000000000000002900000032000000977b3d2f56cfdf8bb5f2ac6dd52d09eb06"], 0x28}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000100)="b9ff0307684426", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000340)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0xa000000, 0x3, 0x0, &(0x7f0000000640)="920955", &(0x7f0000000100)}, 0x50) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000400)=0x1) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) 3.178014893s ago: executing program 2 (id=1482): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@float={0x7, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x0, 0x5f, 0x5f, 0x2e, 0x61, 0x2e]}}, 0x0, 0x2c}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0xd, &(0x7f0000000140)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000380), 0x40f00, 0x18, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000000)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 2.689819355s ago: executing program 2 (id=1485): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.374751878s ago: executing program 2 (id=1487): r0 = socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x20000880) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120) sendmsg$inet(r0, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x20000800) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000000), 0xff7b) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400030404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4000050) 1.867292077s ago: executing program 2 (id=1491): socketpair(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x80, 0x0}, 0x2004c040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x703, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x400000, 0x4}, 0x80, 0x0}, 0x20040010) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1af06, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000540), 0x10, 0x8}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000180)=@phonet={0x23, 0x6, 0x7, 0xfa}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="93f6556354d8137f49dde2", 0xb}, {&(0x7f0000000240)="70182e485ce8a4218bd673aae3bdb9754aaadb49cb18a2134c94951895b5c3b0fe569b5206d06842ddc14fcbffb4492f9635d7d7854cd4e9b0667044de7ac5f71bf2b4bd59305b8aea9c6041cffb46ee13243da54680c508707cd19725daa8a192477992e48dd5fb04adb7499d823fcd1579611fe1ccec9c58ffaf1109f51439a538d9f369ceff136c4497c59cb1d701b3b94841644b83f343b98787c299b35e8628a64e7431e6a8f705f1ecec74af74f0d565708c254f036a21f79766224f8f4e1c3ee061fd73503c28", 0xca}], 0x2}, 0x40000) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0xc}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121fb719b6", 0x31}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e", 0x9}, {0x0}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x29, 0xf, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) close(r5) close(r6) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) 1.610674261s ago: executing program 4 (id=1493): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104111, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/179, 0xb3, 0x0, &(0x7f0000000000)=""/15, 0xf}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1a, 0x2000000000000060, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 1.485168118s ago: executing program 4 (id=1495): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xc0045878, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022, 0x1}]}, 0x94) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.296557494s ago: executing program 1 (id=1496): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="1400000034000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x810) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0xb, 0x0, 0x11) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'vlan1\x00', 0x100}) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x32}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x5, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x7}, 0x11efa, 0x6, 0x98, 0x0, 0x2, 0x2ce, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, 0x0}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000100000000000000000000181100002c4d29f2a2fe8e0aea7f50c8bee6dab4a9b1", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000085000000070000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394", 0xf}], 0x1}, 0x40000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) sendmsg$kcm(r9, &(0x7f0000000240)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x4000004, @local, 0x6, 0x4}, 0x80, &(0x7f0000000100)}, 0x0) 1.015618784s ago: executing program 1 (id=1497): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x2, 0x8}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0xa859, 0x8}, 0xc) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x10}, 0x18) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff8000}, [@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0xa5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000340)='GPL\x00', 0x8, 0xb8, &(0x7f0000000380)=""/184, 0x40f00, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x7, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0x3, 0x7fffffff, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r4, r5, 0x1, r6, r7, r8, r9], 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000b00)={r7, 0x58, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={r10, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000c80)=[{}, {}], 0x10, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0x9a, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x9, 0xfffffff1, 0xb72f, 0x8, r0, 0xa4c, '\x00', 0x0, r3, 0x5, 0x0, 0x3, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000fc0)={{r9, 0xffffffffffffffff}, &(0x7f0000000f40), &(0x7f0000000f80)=r10}, 0x20) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x18, 0x1d, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0x8, 0x9, 0x7, 0x182, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x3, 0x2, 0x2, 0x9, 0x5, 0x100, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f00000009c0)='GPL\x00', 0x6, 0x44, &(0x7f0000000a00)=""/68, 0x41100, 0x7a, '\x00', r11, @fallback=0x34, r12, 0x8, &(0x7f0000000b80)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r13, r10, 0x2, &(0x7f0000001000)=[r14, r15, r0, r6, r6], &(0x7f0000001040)=[{0x0, 0x4, 0xd, 0x5}, {0x3, 0x2, 0xf, 0x3}], 0x10, 0xb06}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000001140)={0xffffffffffffffff}) recvmsg$kcm(r17, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001180)=""/111, 0x6f}, {&(0x7f0000001200)=""/134, 0x86}], 0x2, &(0x7f0000001300)=""/151, 0x97}, 0x80) r18 = perf_event_open(&(0x7f0000001440)={0x3, 0x80, 0xaf, 0x9, 0x68, 0xff, 0x0, 0xa9b, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000001400), 0xc}, 0x8020, 0x2d77, 0x8c, 0x0, 0x40, 0x4a494d4d, 0xfff, 0x0, 0x1, 0x0, 0xb2}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r18, 0x40042408, r16) r19 = syz_clone(0x20000, &(0x7f0000001540)="d008fbc4002831d893fadad4e4a7042ba5a7081270c8350bd91be1f77950a0769e36aea85d97c5e651755a7114efb9f0487600f37847287a6cc660fa4899e7e510e387360228c4052e03a2366abfed36436fd9", 0x53, &(0x7f00000015c0), &(0x7f0000001600), &(0x7f0000001640)="a467de728493c0ae629d135864fad655904994f6e2128a4b0051cd24219eacb60b52c53362a0d00e5b49be29366df1528d3570b3440bf15b243a3ffbe5d8bb53d92f32891ffdd6f5a9639efde57d77b04e1ef64d2d7fd6e6755159ed2afbd5ec32e8fe17490ccb90d2a2f9") perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x1d, 0x8, 0x3, 0x7, 0x0, 0x100000001, 0x89200, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x1, 0x5d9}, 0x14200, 0xfff, 0xffff6af6, 0x0, 0x8000000000000001, 0x1, 0x1, 0x0, 0x7, 0x0, 0x5c4e}, r19, 0x3, r18, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000019c0)={r10, 0xe0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001800), &(0x7f0000001840), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000001880)}}, 0x10) r21 = bpf$TOKEN_CREATE(0x24, &(0x7f0000001a80)={0x0, r14}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0x3, 0x3, 0x3, 0x10020, 0xffffffffffffffff, 0x7c, '\x00', r20, r12, 0x5, 0x0, 0x3, 0xb, @void, @value, @value=r21}, 0x50) r22 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001c00)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001bc0)={@cgroup=r22, 0x2e, 0x0, 0x15d7, &(0x7f0000001ac0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001b40)=[0x0], &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r24 = openat$cgroup_procs(r23, &(0x7f0000001c40)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r24, &(0x7f0000001c80), 0x12) 787.586122ms ago: executing program 1 (id=1498): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x6990, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000680)="3a1f1bc6089f345b07a3b23ef6007bb8e07eaf573bf4f9b3c795a348e9dcb025b0dc30a06d54ea1c79bf7276944c24e5685cb180ed13e7b592aa66ffa41e8e08bc740084de0390b352e41e610879ecadc1626e21e2de41d7afc668124885a5ca93a2c6ef9ce4df28c50bc81a9a2a937bec967c774c18925830d8011cf002194a4d34f325ef7e2f312f635960ea3bf31581fe38a83803b8355c1045427ad2e5a17266fd75d614aeda8bb222dd70576c5c42064d77080f760fd4c2065cdf0132ced54d2571d09a00aeb7f58b9fae7c869965960e519e35fc319f", &(0x7f0000000e80)=""/4096, 0x4}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) openat$ppp(0xffffffffffffff9c, &(0x7f0000000e40), 0x600c01, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r1}, 0x18) 784.757542ms ago: executing program 4 (id=1499): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x21, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x21, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async) 593.643397ms ago: executing program 1 (id=1500): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=0x1, 0x32, 0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x70) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r2, @ANYBLOB, @ANYRES64=r1], 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0xd9e, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x1], &(0x7f0000000580)=[{0x4, 0x5, 0xb, 0x2}, {0x0, 0x5, 0xb, 0xa}, {0x4, 0x5, 0xb, 0x2}, {0x5, 0x3, 0x10}, {0x1, 0x1, 0x0, 0x3}, {0x4, 0x1, 0x5, 0xc}], 0x10, 0xac0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex=r3, r0, 0x19, 0x0, 0x0, @void, @value=r4, @void, @void, r1}, 0x20) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008e000000c9e7000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/23], 0x50) (async, rerun: 32) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) (async, rerun: 64) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x0, 0x0, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async, rerun: 32) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000840)}) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r6) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x20, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x1000000000000, 0xf}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) socket$kcm(0x1e, 0x1, 0x0) 593.251377ms ago: executing program 2 (id=1501): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x4000) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x0) 590.868557ms ago: executing program 4 (id=1502): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x4000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0x1, &(0x7f0000000740)="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", &(0x7f00000001c0)=""/213, 0x4}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89ee, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe8, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_bp={0x0, 0xf}, 0x2, 0x1, 0x7, 0x4, 0x7f, 0x8, 0xe, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) 389.842371ms ago: executing program 1 (id=1503): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800067c00001001a8001600a40003400300", 0x3a}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a00", 0x36}], 0x1}, 0x20000880) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000000c0)=r4}, 0x20) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000340)={r2, r3}, 0xc) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000bc0)={r6}, 0x8) (async) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@base={0x16, 0x1000, 0x4, 0x1, 0x681b4, r5, 0x6, '\x00', 0x0, r7, 0x1, 0x5, 0x1, 0x0, @value=r8}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb018900000000000000000c0000000c0000000200000008000000000000040000000000008d40bb45d94a9246ef4a1dc15bb37d1c5140c0bdbd01b8c91debef1fb018"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000, @value=r7}, 0x28) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r10, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_int(r6, &(0x7f0000000240)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) (async) close(r6) (async) openat$cgroup_int(r6, &(0x7f00000001c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x2361, '\x00', r11, r9, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r9}, 0x94) (async) recvmsg$kcm(r1, &(0x7f0000000980)={&(0x7f0000000540)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000740)=""/150, 0x96}, {&(0x7f0000000800)=""/227, 0xe3}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000900)=""/86, 0x56}], 0x4}, 0x141) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) (async) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) 318.975178ms ago: executing program 1 (id=1504): r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x0, {0xa, 0x4e20, 0x2, @remote, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x3, 0x1, 0xffff}}, 0x80, 0x0}, 0x200008d5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x2e, &(0x7f0000000000)=r4, 0x4) recvmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10002) r5 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="3659ff23a200", @ANYRESHEX=r0, @ANYBLOB="7fbaa064bac3a4fc93c1cd41d0e63b5b6ea0f1c847d20a89f586f73edfb5834b441f6689bf5372ed0b4b79c31f6ce0e66da8e1c7e9afbdd9a8444dcfc366c30ff121748ff922f4a72eadd49830783afe3337d780b563b6328dd653bb78e73829839d485449c9e34d34f8a6008cc07a2cfe1e38e81d69196f49474943b9ddb8c03d90344c8ce01bc1f01cfe7d5e6cb10701d577bb00b461b1a86a7e237454bb12fc019e3a3d36f5cdb3c025524276fcdede9b5a9522f91f78e83fdac153983b15e2f583ae944336e925432cb4d3", @ANYRESHEX=r2, @ANYRESDEC=r3, @ANYRES32=r5], 0x82d7) r7 = socket$kcm(0x11, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000340)=@ll={0x11, 0x4, r9, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x80, 0x0}, 0x20005) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x14}], 0x1}, 0x2404c084) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r11) 236.927973ms ago: executing program 4 (id=1505): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071108c000000000066000000000000ec9f0329fb59009500"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) 22.436204ms ago: executing program 2 (id=1506): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000000)=@raw=[@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff}}, @jmp={0x5, 0x0, 0x6, 0x9, 0x5, 0x4, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @jmp={0x5, 0x1, 0x1, 0x9, 0x8, 0x10}, @map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x2, 0x0, 0x3, 0x50, 0xfffffffffffffff7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @alu={0x7, 0x1, 0xe, 0xa, 0x3, 0x2, 0x4}, @map_fd={0x18, 0x1}], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x82000, 0x40, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x15345, 0xffffffffffffffff, 0x4, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000180)=[{0x3, 0x2, 0xe, 0x7}, {0x0, 0x1, 0x4, 0x1}, {0x4, 0x3, 0xc, 0x8}, {0x5, 0x3, 0x10, 0x1}], 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0, r1}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7, 0x2, 0x5, 0x4480, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0xc}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000014c0)={r2, &(0x7f00000003c0)="6a9978e8028aedf017388f52d38600a28101865af9642e50f9e4619d8c41de03e92c7c93345858a5a28bd84f5022f150c9f104e4798a727ab10fe792a0bd9b019edce44ecc955f35512afa9c3b91167a76da6f4344f840b27d6c65a688b7a8995e2a15f88a21c04b03b03f625fac2fa1e7c5aa1754ed5f9d6d3a9aa8323b16319ecac9d7992c3d3e8e4788047d18488c9e8b616d55123a9e13719a8603d24d0bc22c4ff528d589c8a9ee06394169455c30d429265b475c2d25459b4b1764c90f8c29f1722f9fc89e84e37125b8225e452ceb", &(0x7f00000004c0)=""/4096, 0x4}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r0, 0xe0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf, &(0x7f00000016c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001700), &(0x7f0000001740), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000001780)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001900), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000019c0)={0x1, 0x0}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@bloom_filter={0x1e, 0xfffffffe, 0x2, 0x0, 0x18a04, r1, 0x32f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0xa}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x17, 0xb, &(0x7f0000001500)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000001580)='syzkaller\x00', 0x401, 0xd, &(0x7f00000015c0)=""/13, 0x41100, 0x45, '\x00', r3, @fallback=0x7, r4, 0x8, &(0x7f0000001940)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x1, 0xc, 0x3, 0x1}, 0x10, r5, r0, 0x3, &(0x7f0000001a80)=[r2, r6, r1, r1, r1, r2], &(0x7f0000001ac0)=[{0x1, 0x1, 0xc, 0x3}, {0x1, 0x1, 0xc, 0x2}, {0x2, 0xe74, 0x8, 0xb}], 0x10, 0x1}, 0x94) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001bc0)={0xffffffffffffffff, 0x9}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001c80)={r6, 0x58, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001cc0)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0xf70, '\x00', r9, r4, 0x0, 0x3, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r0, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001ec0)=[0x0, 0x0, 0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000001f40)=[{}], 0x8, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0x79, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002480)={0x6, 0x17, &(0x7f0000002200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x9, 0xfffffffffffffff0, 0x10}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @jmp={0x5, 0x1, 0x0, 0x2, 0x7, 0xfffffffffffffff4, 0xc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000022c0)='syzkaller\x00', 0x1434, 0x20, &(0x7f0000002300)=""/32, 0x40f00, 0xa, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000002380)={0x4, 0x8, 0xf8000000, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000023c0)=[r1, r6, r6, r8], &(0x7f0000002400)=[{0x3, 0x2, 0xa}, {0x5, 0x2, 0x2, 0x6}, {0x1, 0x2, 0x0, 0x8}, {0x0, 0x1, 0xa, 0x2}, {0x1, 0x5, 0xf, 0x3}, {0x2, 0x4, 0xd, 0x9}, {0x3, 0x5, 0xa, 0x1}, {0x3, 0x4, 0x1, 0x1}], 0x10, 0xa}, 0x94) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002580)=@bpf_ext={0x1c, 0x5, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x6, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000001d80)='GPL\x00', 0x2, 0x9e, &(0x7f0000001dc0)=""/158, 0x0, 0x4, '\x00', r11, 0x0, r4, 0x8, &(0x7f0000002180)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000021c0)={0x4, 0x6, 0x9, 0x120000}, 0x10, 0x1954c, r12, 0x0, &(0x7f0000002540)=[r1, r1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffffe}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000002640)=@bloom_filter={0x1e, 0xffffba0c, 0xfffffff8, 0xe876, 0x2001, r8, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0xe}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000027c0)={@ifindex=r11, 0x22, 0x1, 0x81, &(0x7f00000026c0)=[0x0], 0x1, 0x0, &(0x7f0000002700)=[0x0, 0x0], &(0x7f0000002740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002800)={@fallback=r6, r12, 0x2b, 0x11, r12, @void, @value, @void, @void, r15}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002840)={r13, r1}, 0xc) r16 = bpf$TOKEN_CREATE(0x24, &(0x7f00000029c0)={0x0, r7}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002980)={&(0x7f0000002880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@var={0xb, 0x0, 0x0, 0xe, 0x5, 0x1}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x78, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x9, 0x5}, {0x1, 0x3}, {0x0, 0x1}, {0xf}]}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x1, 0x1}]}, {0x0, [0x30]}}, &(0x7f0000002900)=""/71, 0x7f, 0x47, 0x1, 0x7ff, 0x10000, @value=r16}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002a00)={0xffffffffffffffff}) recvmsg(r17, &(0x7f0000002e40)={&(0x7f0000002a40)=@can, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002ac0)=""/184, 0xb8}, {&(0x7f0000002b80)=""/218, 0xda}, {&(0x7f0000002c80)=""/219, 0xdb}], 0x3, &(0x7f0000002dc0)=""/93, 0x5d}, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f0000002e80)={'veth1_macvtap\x00', 0x8000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000030c0)={r14, 0x58, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003200)={0x6, 0x18, &(0x7f0000002ec0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @call={0x85, 0x0, 0x0, 0xd3}, @map_fd={0x18, 0x9, 0x1, 0x0, r10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @exit, @call={0x85, 0x0, 0x0, 0xa2}], &(0x7f0000002f80)='GPL\x00', 0x2, 0x7c, &(0x7f0000002fc0)=""/124, 0x41000, 0x42, '\x00', r18, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000003100)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000003140)=[{0x1, 0x3, 0xa, 0x2}, {0x5, 0x5, 0x7, 0x6}, {0x3, 0x3, 0xe, 0x9}, {0x1, 0x2}, {0x3, 0x5, 0x8, 0xba016e723235febc}, {0x4, 0x3, 0x4, 0x3}, {0x4, 0x3, 0x6, 0x8}, {0x2, 0x5, 0xb, 0x6}, {0x4, 0x3, 0x8, 0x8}, {0x3, 0x5, 0xd, 0xa}], 0x10, 0x9}, 0x94) r19 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r19, &(0x7f0000003800)={&(0x7f00000032c0)=@isdn={0x22, 0xa4, 0x11, 0x9, 0xd9}, 0x80, &(0x7f0000003540)=[{&(0x7f0000003340)="dfe82ea8292abffad1037b05afcc7c3165c994bb87fa26548eb7d76e85101882", 0x20}, {&(0x7f0000003380)="0f33a41e08ecb6b42790b29373cc2c4fc73b37e7f00456359ed6552d769953b7bbeaa287138b14c164add49ac4066779677521304c33f3000071f806631a5262e0fe44816530c1f536592901e6b0f4cdfdc71ca2ed49d3dd19244444816c93d5b267511d3d0b37b7b69ea88fe101d8fcb9c98a4a9baaf89986bc3f2e0901108a814b63c38963ef561068fb4392887f22f5f7a1b36e58c531b54297353ad60ac2ef65ed99b1689c32b254bf2c84a431fc6bbbfdb64402c0bd88d3b7bb7e328c80181ba96fd25b5b0e70d7e18e7cbfcd85bc4bb984350db58bf35294f7399c1ee32835dcce97f59f49774917b772a5a08aebefde39", 0xf4}, {&(0x7f0000003480)="bb07e997a31b24160be2c046d197e07b960f9da16a39cb4a1324170f470e5df33011b4baae447ac773bbd6517f1b6c5c8c691c7943c42af1b836f85029d195ff3ecaf9ece9984d748b8a0a48894c3da551af3a2b3b3947255cc839447812f27ee6eaefd8360dd8d5d05ccff02aa8131048c18bb39c63b39e4bc3f0fd68f9ec2a4881f0998dce13bd40eaceff05054868dc1bcc84407712dcc271f85cdfd1", 0x9e}], 0x3, &(0x7f0000003580)=[{0x30, 0x103, 0x6, "ff9ff19fe514b9c0d41f1b4beda1ab9babe2af40d022258735"}, {0x48, 0x29, 0x6, "0eabb54d0146ad27468cc2852c797c1da583d36cc58406ef56e8afc214edd55d379c9eadd385752abda74744fa6f35fc092bd10195"}, {0x18, 0x10f, 0x2, "8b2e190be0ae"}, {0xb8, 0x109, 0x3, "305070cedb2757f05701eda11d169a557eb308601acac8f155dd9948815e3c931c9c11b104d22e9923ac599ae160b84afbd51004ee97761e4f61e12f1384319c17041514d7bf52ad79f03c358f6d574c65c8a6a6769d824b023a289d0c93b7e02eff48ae1e16b82935b66b5936657711f40dae8ff6568a5e94368d25b60cff4b38f848694e13d3e85ac974bcc0b67ac11092276e7e87b7f6f337a1d194a4bcece8"}, {0x20, 0x84, 0xff, "fdb9e8ede7f786c0cd"}, {0x40, 0x6, 0xab, "a732728c2f50af37d00d0ee8f003e00dfc933b6709168e6e79dda664c75c2d226952e04509c04c358096ad3294"}, {0xb0, 0x112, 0x0, "0b4c5f4caaf31d084ceca1df97699b3142bb145c942255fc8b5fe0a5bdb5d4b02586aaecd69ad063333efbb2afc1018d74c0c27e5d2cd388bbe589fb1c89a03ec4364589c09a21cf999018ee853a9142656cc3ef5a56c97d929b25b1782a8c79c404614c9eb465aa58f8b75a314bc7c6c9aee4735d12d24c8b8bb2cb985a7d54276fa252868e49a6f44c7988e33f22ab08c2172ffe954c89de49f7a3"}], 0x258}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000003840), 0x2801, 0x0) 0s ago: executing program 4 (id=1507): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x50) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xc0045878, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a0038001d00", 0x73}, {&(0x7f0000000080)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3bc7664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022, 0x1}]}, 0x94) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 438.694626][ T5806] cgroup: Unknown subsys name 'net' [ 438.834649][ T5806] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 440.360644][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.367645][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.591244][ T5806] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 442.597380][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 442.608150][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.616995][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 442.624670][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 442.632624][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 442.640769][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 442.649043][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 442.657406][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 442.664645][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 442.672170][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.681917][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 442.706680][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 442.717630][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 442.725107][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 442.732790][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 442.740517][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 442.756426][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.776601][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 442.785946][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 442.795128][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 442.825585][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.838504][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.848348][ T5829] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 442.856058][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.234115][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 443.377959][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 443.435065][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 443.460075][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 443.532941][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.541678][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.549343][ T5823] bridge_slave_0: entered allmulticast mode [ 443.558195][ T5823] bridge_slave_0: entered promiscuous mode [ 443.567814][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.575014][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.582592][ T5823] bridge_slave_1: entered allmulticast mode [ 443.590091][ T5823] bridge_slave_1: entered promiscuous mode [ 443.719049][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.726539][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.733772][ T5825] bridge_slave_0: entered allmulticast mode [ 443.741861][ T5825] bridge_slave_0: entered promiscuous mode [ 443.752633][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.792407][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.800481][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.808485][ T5825] bridge_slave_1: entered allmulticast mode [ 443.816147][ T5825] bridge_slave_1: entered promiscuous mode [ 443.824657][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.901513][ T5823] team0: Port device team_slave_0 added [ 443.907962][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.915189][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.922975][ T5828] bridge_slave_0: entered allmulticast mode [ 443.930550][ T5828] bridge_slave_0: entered promiscuous mode [ 443.939434][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.947024][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.954878][ T5828] bridge_slave_1: entered allmulticast mode [ 443.962629][ T5828] bridge_slave_1: entered promiscuous mode [ 443.970120][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.977627][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.984829][ T5826] bridge_slave_0: entered allmulticast mode [ 443.993059][ T5826] bridge_slave_0: entered promiscuous mode [ 444.003147][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.018375][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.030043][ T5823] team0: Port device team_slave_1 added [ 444.061266][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.068565][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.075723][ T5826] bridge_slave_1: entered allmulticast mode [ 444.083034][ T5826] bridge_slave_1: entered promiscuous mode [ 444.136188][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.175439][ T5825] team0: Port device team_slave_0 added [ 444.184965][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.208636][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.221797][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.232873][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.240329][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.267037][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.281126][ T5825] team0: Port device team_slave_1 added [ 444.321244][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.328783][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.355050][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.401023][ T5826] team0: Port device team_slave_0 added [ 444.422401][ T5828] team0: Port device team_slave_0 added [ 444.429629][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.445093][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.471404][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.495424][ T5826] team0: Port device team_slave_1 added [ 444.506536][ T5828] team0: Port device team_slave_1 added [ 444.513066][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.520412][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.547215][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.571702][ T5823] hsr_slave_0: entered promiscuous mode [ 444.578771][ T5823] hsr_slave_1: entered promiscuous mode [ 444.633252][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.640886][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.667255][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.687140][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.694581][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.720864][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.766960][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.774058][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.800343][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.813579][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.820767][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.847554][ T51] Bluetooth: hci0: command tx timeout [ 444.847574][ T5829] Bluetooth: hci3: command tx timeout [ 444.853513][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.861246][ T5829] Bluetooth: hci2: command tx timeout [ 444.904800][ T5825] hsr_slave_0: entered promiscuous mode [ 444.911701][ T5825] hsr_slave_1: entered promiscuous mode [ 444.917482][ T5829] Bluetooth: hci1: command tx timeout [ 444.923915][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.932336][ T5825] Cannot create hsr debugfs directory [ 444.984573][ T5828] hsr_slave_0: entered promiscuous mode [ 444.991232][ T5828] hsr_slave_1: entered promiscuous mode [ 444.997993][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.005757][ T5828] Cannot create hsr debugfs directory [ 445.117870][ T5826] hsr_slave_0: entered promiscuous mode [ 445.124484][ T5826] hsr_slave_1: entered promiscuous mode [ 445.130954][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.138697][ T5826] Cannot create hsr debugfs directory [ 445.467686][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.480540][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.523734][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.545185][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.646302][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 445.671180][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 445.699147][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 445.731715][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 445.771969][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 445.785370][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 445.798403][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 445.830172][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 445.929136][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.948659][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.960606][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.974279][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.985283][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 446.058826][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.091304][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.098748][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.110744][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.117954][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.145824][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.239509][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.285635][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.292900][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.313890][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.321582][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.335239][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.403606][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.418669][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.465478][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.473069][ T5869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.502302][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.509527][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.532056][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.605558][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.612817][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.658905][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.666171][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.811034][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.917721][ T5829] Bluetooth: hci3: command tx timeout [ 446.918326][ T51] Bluetooth: hci0: command tx timeout [ 446.927566][ T5829] Bluetooth: hci2: command tx timeout [ 446.962928][ T5823] veth0_vlan: entered promiscuous mode [ 446.997625][ T5829] Bluetooth: hci1: command tx timeout [ 447.021861][ T5823] veth1_vlan: entered promiscuous mode [ 447.064029][ T5823] veth0_macvtap: entered promiscuous mode [ 447.079948][ T5823] veth1_macvtap: entered promiscuous mode [ 447.140473][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.211554][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.232037][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.274463][ T5823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.295008][ T5823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.304685][ T5823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.314028][ T5823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.382050][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.481547][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.539126][ T5828] veth0_vlan: entered promiscuous mode [ 447.570217][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.581636][ T5828] veth1_vlan: entered promiscuous mode [ 447.597105][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.620938][ T5826] veth0_vlan: entered promiscuous mode [ 447.675884][ T5869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.690135][ T5826] veth1_vlan: entered promiscuous mode [ 447.695698][ T5869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.734619][ T5828] veth0_macvtap: entered promiscuous mode [ 447.769440][ T5828] veth1_macvtap: entered promiscuous mode [ 447.825254][ T5825] veth0_vlan: entered promiscuous mode [ 447.882518][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.894087][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.910436][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.920831][ T5826] veth0_macvtap: entered promiscuous mode [ 447.944168][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.961982][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.978279][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.986302][ T5825] veth1_vlan: entered promiscuous mode [ 448.000427][ T5826] veth1_macvtap: entered promiscuous mode [ 448.055389][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.067534][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.078282][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.087125][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.144049][ C1] hrtimer: interrupt took 36092 ns [ 448.215009][ T5825] veth0_macvtap: entered promiscuous mode [ 448.235673][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.247779][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.259462][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.271200][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.289432][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.301149][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.313111][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.323720][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.335314][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.351006][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.368879][ T5825] veth1_macvtap: entered promiscuous mode [ 448.424959][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.434580][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.445501][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.454755][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.551848][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.561284][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.599701][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.627341][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.639338][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.650185][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.660288][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 448.670908][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.685176][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.728433][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.747014][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.762750][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.773690][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.784336][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 448.796441][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.808879][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.852112][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.883733][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.898710][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.908182][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.924154][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.963783][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.996407][ T5829] Bluetooth: hci0: command tx timeout [ 449.008244][ T5829] Bluetooth: hci2: command tx timeout [ 449.008258][ T51] Bluetooth: hci3: command tx timeout [ 449.027814][ T5869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.035696][ T5869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.076930][ T5829] Bluetooth: hci1: command tx timeout [ 449.253015][ T5852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.271232][ T5852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.362075][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.418101][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.518749][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.535318][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.892572][ T5909] netlink: 'syz.1.8': attribute type 13 has an invalid length. [ 449.907445][ T5909] netlink: 'syz.1.8': attribute type 58 has an invalid length. [ 449.929898][ T5909] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8'. [ 450.105284][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 450.108576][ T5914] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3'. [ 450.748678][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 451.077228][ T5829] Bluetooth: hci3: command tx timeout [ 451.082715][ T5829] Bluetooth: hci2: command tx timeout [ 451.083041][ T51] Bluetooth: hci0: command tx timeout [ 451.166344][ T5839] Bluetooth: hci1: command tx timeout [ 451.658085][ T5942] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 451.665997][ T5942] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 452.228858][ T5958] netlink: 'syz.3.20': attribute type 1 has an invalid length. [ 452.277474][ T5958] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.20'. [ 452.329504][ T5958] netlink: 'syz.3.20': attribute type 1 has an invalid length. [ 452.419239][ T5960] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.19'. [ 453.091413][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23'. [ 453.108965][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23'. [ 453.131532][ T5974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23'. [ 453.144056][ T5969] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23'. [ 456.753703][ T5986] sit0: entered allmulticast mode [ 456.936383][ T5987] sit0: entered promiscuous mode [ 457.889680][ T5990] netlink: 3752 bytes leftover after parsing attributes in process `syz.1.28'. [ 458.164025][ T5999] bridge_slave_1: left allmulticast mode [ 458.210716][ T5999] bridge_slave_1: left promiscuous mode [ 458.239106][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.399908][ T5999] bridge_slave_0: left allmulticast mode [ 458.451087][ T5999] bridge_slave_0: left promiscuous mode [ 458.479095][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.961229][ T6022] netlink: 'syz.0.36': attribute type 29 has an invalid length. [ 459.046833][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.31'. [ 459.115280][ T6022] netlink: 'syz.0.36': attribute type 29 has an invalid length. [ 459.150940][ T6025] netlink: 60931 bytes leftover after parsing attributes in process `syz.0.36'. [ 459.206226][ T6023] netlink: 'syz.0.36': attribute type 29 has an invalid length. [ 459.216328][ T6024] netlink: 'syz.0.36': attribute type 29 has an invalid length. [ 459.496733][ T6035] warning: `syz.0.39' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 460.048472][ T6056] Illegal XDP return value 730529792 on prog (id 40) dev N/A, expect packet loss! [ 460.391278][ T6061] can: request_module (can-proto-3) failed. [ 460.561178][ T6069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.49'. [ 461.035371][ T6079] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.53'. [ 461.683640][ T6095] netlink: 'syz.2.58': attribute type 3 has an invalid length. [ 461.704455][ T6095] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.58'. [ 462.226787][ T6104] netlink: 156 bytes leftover after parsing attributes in process `syz.0.61'. [ 462.941486][ T6119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.66'. [ 463.012493][ T6121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.65'. [ 463.038434][ T6119] netlink: 60 bytes leftover after parsing attributes in process `syz.1.66'. [ 463.072467][ T6120] netlink: 60 bytes leftover after parsing attributes in process `syz.1.66'. [ 463.101583][ T6119] netlink: 'syz.1.66': attribute type 12 has an invalid length. [ 463.114329][ T6119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.66'. [ 463.149941][ T6122] netlink: 60 bytes leftover after parsing attributes in process `syz.1.66'. [ 463.375157][ T6126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.67'. [ 463.411674][ T6126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.67'. [ 463.444579][ T6126] netlink: 60 bytes leftover after parsing attributes in process `syz.3.67'. [ 463.713031][ T6133] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.69'. [ 464.034245][ T6139] netlink: 'syz.3.71': attribute type 6 has an invalid length. [ 464.723099][ T6150] netlink: 'syz.3.74': attribute type 7 has an invalid length. [ 465.682553][ T6182] syzkaller0: entered promiscuous mode [ 465.727057][ T6182] syzkaller0: entered allmulticast mode [ 465.849039][ T5869] syzkaller0: tun_net_xmit 48 [ 465.891868][ T6190] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 467.670945][ T6195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.692652][ T6195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.705043][ T6195] bond0 (unregistering): Released all slaves [ 467.732032][ T6202] netlink: 'syz.0.89': attribute type 10 has an invalid length. [ 467.754189][ T6202] team0: Device hsr_slave_0 failed to register rx_handler [ 467.905789][ T6209] netlink: 'syz.2.91': attribute type 21 has an invalid length. [ 468.312190][ T6212] syz.2.91 uses obsolete (PF_INET,SOCK_PACKET) [ 468.383529][ T6214] netlink: 'syz.3.92': attribute type 4 has an invalid length. [ 468.413043][ T6214] __nla_validate_parse: 5 callbacks suppressed [ 468.413114][ T6214] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.92'. [ 469.925127][ T6240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'. [ 470.259972][ T6248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.101'. [ 470.497175][ T6255] netlink: 'syz.2.104': attribute type 4 has an invalid length. [ 470.763181][ T6256] netlink: 'syz.1.105': attribute type 21 has an invalid length. [ 470.792704][ T6262] sit0: entered promiscuous mode [ 470.815175][ T6262] sit0: entered allmulticast mode [ 470.890030][ T6267] Zero length message leads to an empty skb [ 471.391636][ T6273] netlink: 'syz.1.109': attribute type 33 has an invalid length. [ 471.486840][ T6273] netlink: 152 bytes leftover after parsing attributes in process `syz.1.109'. [ 472.349019][ T6296] netlink: 'syz.3.116': attribute type 6 has an invalid length. [ 474.052472][ T6308] sit0: left promiscuous mode [ 474.523938][ T5839] Bluetooth: hci3: Malformed Event: 0x13 [ 475.624023][ T6350] netlink: 'syz.3.127': attribute type 10 has an invalid length. [ 475.716512][ T6350] hsr_slave_0: left promiscuous mode [ 475.746583][ T6350] hsr_slave_1: left promiscuous mode [ 477.374418][ T6386] netlink: 'syz.1.138': attribute type 4 has an invalid length. [ 477.634312][ T5839] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 479.157080][ T6397] netlink: 'syz.0.143': attribute type 13 has an invalid length. [ 479.237181][ T6397] netlink: 160 bytes leftover after parsing attributes in process `syz.0.143'. [ 480.471416][ T6438] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 480.506699][ T6438] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.152'. [ 481.699323][ T6468] lo: entered allmulticast mode [ 481.699377][ T5839] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 481.702925][ T51] Bluetooth: hci0: hardware error 0x0f [ 481.751584][ T6469] netlink: 'syz.2.160': attribute type 9 has an invalid length. [ 481.866457][ T6469] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.160'. [ 481.878756][ T6470] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.160'. [ 481.889645][ T6470] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 482.048805][ T6476] netlink: 188076 bytes leftover after parsing attributes in process `syz.3.161'. [ 482.091941][ T6476] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 482.303110][ T6472] netlink: 'syz.3.161': attribute type 9 has an invalid length. [ 482.321794][ T6472] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.161'. [ 482.694660][ T6482] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.163'. [ 482.716500][ T6482] netlink: 6324 bytes leftover after parsing attributes in process `syz.2.163'. [ 483.320655][ T6506] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 483.372741][ T6506] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.169'. [ 483.522205][ T6506] netlink: 'syz.3.169': attribute type 16 has an invalid length. [ 483.566386][ T6506] netlink: 156 bytes leftover after parsing attributes in process `syz.3.169'. [ 483.796377][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 483.859162][ T6521] netlink: 'syz.1.173': attribute type 3 has an invalid length. [ 484.279784][ T6535] netlink: zone id is out of range [ 484.285005][ T6535] netlink: set zone limit has 8 unknown bytes [ 484.883879][ T6551] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 484.892468][ T6551] __nla_validate_parse: 2 callbacks suppressed [ 484.892482][ T6551] netlink: 164 bytes leftover after parsing attributes in process `syz.3.183'. [ 485.444278][ T6554] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.185'. [ 485.619045][ T6560] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.186'. [ 485.809083][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.843598][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 485.891518][ T6566] netlink: 'syz.1.188': attribute type 29 has an invalid length. [ 485.901371][ T6564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 485.912232][ T6564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.238998][ T6566] netlink: 'syz.1.188': attribute type 29 has an invalid length. [ 486.367150][ T6568] veth0_vlan: entered allmulticast mode [ 487.024173][ T6588] syzkaller0: entered promiscuous mode [ 487.032554][ T6588] syzkaller0: entered allmulticast mode [ 490.870047][ T6622] pim6reg1: entered promiscuous mode [ 490.875405][ T6622] pim6reg1: entered allmulticast mode [ 491.133643][ T6628] Q6`Ҙ: renamed from lo (while UP) [ 491.967611][ T6646] netlink: 'syz.2.211': attribute type 11 has an invalid length. [ 491.975601][ T6646] netlink: 168 bytes leftover after parsing attributes in process `syz.2.211'. [ 492.090217][ T6651] netlink: 'syz.0.210': attribute type 33 has an invalid length. [ 492.126540][ T6651] netlink: 152 bytes leftover after parsing attributes in process `syz.0.210'. [ 492.179755][ T6651] `: renamed from ip6tnl0 (while UP) [ 492.371985][ T6651] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 492.592896][ T6672] netlink: 'syz.2.213': attribute type 10 has an invalid length. [ 492.705453][ T6684] netlink: 'syz.0.216': attribute type 2 has an invalid length. [ 492.769689][ T6684] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.216'. [ 493.708168][ T6729] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.223'. [ 496.025258][ T6718] IPv6: Can't replace route, no match found [ 496.033137][ T6724] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 496.069168][ T6744] netlink: 'syz.0.227': attribute type 33 has an invalid length. [ 496.086171][ T6744] netlink: 152 bytes leftover after parsing attributes in process `syz.0.227'. [ 496.111496][ T6745] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 496.198994][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.250971][ T6745] team0: Port device bond0 added [ 497.128510][ T6756] netlink: 180 bytes leftover after parsing attributes in process `syz.0.230'. [ 499.010184][ T6773] IPv6: Can't replace route, no match found [ 499.298151][ T6788] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.239'. [ 499.459714][ T6769] syzkaller0: entered allmulticast mode [ 499.696766][ T6795] netlink: 56599 bytes leftover after parsing attributes in process `syz.0.243'. [ 500.038658][ T6799] FAULT_INJECTION: forcing a failure. [ 500.038658][ T6799] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 500.125716][ T6799] CPU: 1 PID: 6799 Comm: syz.3.244 Not tainted syzkaller #0 [ 500.133095][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.143225][ T6799] Call Trace: [ 500.146558][ T6799] [ 500.149532][ T6799] dump_stack_lvl+0x18c/0x250 [ 500.154276][ T6799] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 500.160481][ T6799] ? show_regs_print_info+0x20/0x20 [ 500.165925][ T6799] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 500.172171][ T6799] should_fail_ex+0x39d/0x4d0 [ 500.177020][ T6799] _copy_from_user+0x2f/0xe0 [ 500.181759][ T6799] ___sys_sendmsg+0x1c7/0x360 [ 500.186486][ T6799] ? __sys_sendmsg+0x2a0/0x2a0 [ 500.191353][ T6799] __se_sys_sendmsg+0x1c2/0x2b0 [ 500.196251][ T6799] ? __x64_sys_sendmsg+0x80/0x80 [ 500.201256][ T6799] ? syscall_enter_from_user_mode+0x2e/0x80 [ 500.207246][ T6799] do_syscall_64+0x55/0xa0 [ 500.211720][ T6799] ? clear_bhb_loop+0x40/0x90 [ 500.216449][ T6799] ? clear_bhb_loop+0x40/0x90 [ 500.221184][ T6799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.227125][ T6799] RIP: 0033:0x7f451d79c799 [ 500.231593][ T6799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.251228][ T6799] RSP: 002b:00007f451e730028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 500.259695][ T6799] RAX: ffffffffffffffda RBX: 00007f451da15fa0 RCX: 00007f451d79c799 [ 500.267689][ T6799] RDX: 00000000040e4804 RSI: 0000200000000300 RDI: 0000000000000006 [ 500.275690][ T6799] RBP: 00007f451e730090 R08: 0000000000000000 R09: 0000000000000000 [ 500.283686][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.291687][ T6799] R13: 00007f451da16038 R14: 00007f451da15fa0 R15: 00007ffe68733428 [ 500.299710][ T6799] [ 501.811826][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.826272][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.198437][ T6829] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.251'. [ 502.237057][ T6828] : renamed from veth1_macvtap (while UP) [ 502.468049][ T6829] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 503.276463][ T6839] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.252'. [ 503.314149][ T6843] FAULT_INJECTION: forcing a failure. [ 503.314149][ T6843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.327940][ T6843] CPU: 0 PID: 6843 Comm: syz.0.253 Not tainted syzkaller #0 [ 503.335270][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 503.345351][ T6843] Call Trace: [ 503.348655][ T6843] [ 503.351620][ T6843] dump_stack_lvl+0x18c/0x250 [ 503.356443][ T6843] ? show_regs_print_info+0x20/0x20 [ 503.361687][ T6843] ? load_image+0x400/0x400 [ 503.366244][ T6843] ? __lock_acquire+0x7d40/0x7d40 [ 503.371297][ T6843] ? snprintf+0xe9/0x140 [ 503.375568][ T6843] should_fail_ex+0x39d/0x4d0 [ 503.380286][ T6843] _copy_to_user+0x2f/0xa0 [ 503.384729][ T6843] simple_read_from_buffer+0xe7/0x150 [ 503.390149][ T6843] proc_fail_nth_read+0x1e8/0x260 [ 503.395206][ T6843] ? proc_fault_inject_write+0x360/0x360 [ 503.400873][ T6843] ? fsnotify_perm+0x271/0x5e0 [ 503.405671][ T6843] ? proc_fault_inject_write+0x360/0x360 [ 503.411419][ T6843] vfs_read+0x28b/0x970 [ 503.415611][ T6843] ? kernel_read+0x1e0/0x1e0 [ 503.420229][ T6843] ? __fget_files+0x28/0x4b0 [ 503.424845][ T6843] ? __fget_files+0x28/0x4b0 [ 503.429467][ T6843] ? __fget_files+0x43d/0x4b0 [ 503.434186][ T6843] ? __fdget_pos+0x2a3/0x330 [ 503.439066][ T6843] ? ksys_read+0x75/0x260 [ 503.443427][ T6843] ksys_read+0x150/0x260 [ 503.447700][ T6843] ? vfs_write+0x990/0x990 [ 503.452696][ T6843] ? lockdep_hardirqs_on+0x98/0x150 [ 503.457959][ T6843] do_syscall_64+0x55/0xa0 [ 503.462424][ T6843] ? clear_bhb_loop+0x40/0x90 [ 503.467142][ T6843] ? clear_bhb_loop+0x40/0x90 [ 503.471854][ T6843] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.477777][ T6843] RIP: 0033:0x7f547f15cfce [ 503.482217][ T6843] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.501869][ T6843] RSP: 002b:00007f547ffb0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.510329][ T6843] RAX: ffffffffffffffda RBX: 00007f547ffb16c0 RCX: 00007f547f15cfce [ 503.518328][ T6843] RDX: 000000000000000f RSI: 00007f547ffb10a0 RDI: 0000000000000007 [ 503.526339][ T6843] RBP: 00007f547ffb1090 R08: 0000000000000000 R09: 0000000000000000 [ 503.534332][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.542328][ T6843] R13: 00007f547f416128 R14: 00007f547f416090 R15: 00007ffcd327fb98 [ 503.550359][ T6843] [ 504.057090][ T6852] netlink: 'syz.2.255': attribute type 10 has an invalid length. [ 504.177759][ T6852] team0: Device hsr_slave_0 failed to register rx_handler [ 504.218714][ T6817] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.248'. [ 504.588559][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 504.597091][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 505.115727][ T6870] netlink: 'syz.3.260': attribute type 21 has an invalid length. [ 505.135005][ T6870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.260'. [ 505.746109][ T6879] IPv6: Can't replace route, no match found [ 505.764688][ T6883] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 506.268258][ T6885] netlink: 'syz.1.264': attribute type 3 has an invalid length. [ 506.322174][ T6885] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.264'. [ 507.166555][ T6919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.275'. [ 507.597246][ T6938] netlink: 'syz.3.277': attribute type 10 has an invalid length. [ 507.605072][ T6938] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.277'. [ 507.627021][ T6933] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 507.654649][ T6933] syzkaller0: entered promiscuous mode [ 507.662214][ T6933] syzkaller0: entered allmulticast mode [ 508.619151][ T6961] netlink: 10 bytes leftover after parsing attributes in process `syz.3.289'. [ 512.968896][ T6984] netlink: 'syz.0.294': attribute type 2 has an invalid length. [ 513.228722][ T6990] netlink: 'syz.2.297': attribute type 10 has an invalid length. [ 513.260556][ T6990] team0: Device hsr_slave_0 failed to register rx_handler [ 514.061107][ T7005] netlink: 40451 bytes leftover after parsing attributes in process `syz.3.301'. [ 514.917408][ T7021] netlink: 'syz.1.304': attribute type 10 has an invalid length. [ 514.955065][ T7021] netlink: 55 bytes leftover after parsing attributes in process `syz.1.304'. [ 515.079667][ T7025] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.305'. [ 515.491374][ T7028] netlink: 'syz.3.307': attribute type 10 has an invalid length. [ 515.522866][ T7028] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.307'. [ 515.533997][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 516.333877][ T7039] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 516.344816][ T7039] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.311'. [ 518.682887][ T7092] netlink: 'syz.3.322': attribute type 11 has an invalid length. [ 518.716738][ T7092] netlink: 126332 bytes leftover after parsing attributes in process `syz.3.322'. [ 519.016011][ T7095] pim6reg1: entered promiscuous mode [ 519.068473][ T7095] pim6reg1: entered allmulticast mode [ 519.539761][ T7102] netlink: 197612 bytes leftover after parsing attributes in process `syz.0.326'. [ 519.699839][ T7102] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.326'. [ 519.857611][ T7102] netlink: 9 bytes leftover after parsing attributes in process `syz.0.326'. [ 522.195337][ T7145] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.339'. [ 522.274951][ T7145] openvswitch: netlink: Flow key attribute not present in set flow. [ 525.960469][ T7180] netlink: 'syz.1.347': attribute type 10 has an invalid length. [ 525.999063][ T7180] team0: Device vxcan1 is of different type [ 528.007078][ T7213] netlink: 'syz.3.357': attribute type 21 has an invalid length. [ 528.015532][ T7213] netlink: 132 bytes leftover after parsing attributes in process `syz.3.357'. [ 532.541021][ T7281] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.375'. [ 532.550638][ T7278] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.373'. [ 532.594065][ T7281] netlink: zone id is out of range [ 532.603047][ T7281] netlink: zone id is out of range [ 532.609098][ T7281] netlink: zone id is out of range [ 532.614349][ T7281] netlink: zone id is out of range [ 532.622979][ T7281] netlink: zone id is out of range [ 532.636904][ T7281] netlink: zone id is out of range [ 532.660945][ T7276] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.374'. [ 532.660960][ T7281] netlink: zone id is out of range [ 532.695057][ T7281] netlink: zone id is out of range [ 532.746813][ T7281] netlink: zone id is out of range [ 532.781754][ T7288] netlink: 'syz.2.377': attribute type 12 has an invalid length. [ 532.790127][ T7281] netlink: zone id is out of range [ 532.793471][ T7288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.377'. [ 533.462523][ T7298] TCP: TCP_TX_DELAY enabled [ 534.222588][ T7312] syzkaller0: entered promiscuous mode [ 534.246172][ T7312] syzkaller0: entered allmulticast mode [ 534.265884][ T7313] netlink: 132 bytes leftover after parsing attributes in process `syz.1.384'. [ 537.401336][ T7319] netlink: 'syz.0.387': attribute type 10 has an invalid length. [ 537.409288][ T7319] netlink: 2 bytes leftover after parsing attributes in process `syz.0.387'. [ 537.418849][ T7319] bond0: entered promiscuous mode [ 537.423937][ T7319] bond_slave_0: entered promiscuous mode [ 537.430392][ T7319] bond_slave_1: entered promiscuous mode [ 537.456599][ T7319] team0: Port device bond0 removed [ 537.462773][ T7319] bridge0: port 3(bond0) entered blocking state [ 537.516448][ T7319] bridge0: port 3(bond0) entered disabled state [ 537.525227][ T7319] bond0: entered allmulticast mode [ 537.536899][ T7319] bond_slave_0: entered allmulticast mode [ 537.546912][ T7319] bond_slave_1: entered allmulticast mode [ 538.724680][ T7365] netlink: 188 bytes leftover after parsing attributes in process `syz.1.399'. [ 539.919369][ T7398] IPv6: Can't replace route, no match found [ 540.510291][ T7413] netlink: 'syz.3.413': attribute type 39 has an invalid length. [ 541.153402][ T7442] netlink: 'syz.1.422': attribute type 7 has an invalid length. [ 541.652482][ T7459] netlink: 'syz.1.427': attribute type 2 has an invalid length. [ 541.664351][ T7459] netlink: 51 bytes leftover after parsing attributes in process `syz.1.427'. [ 541.871622][ T7467] netlink: 'syz.2.428': attribute type 21 has an invalid length. [ 541.880008][ T7467] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 541.888737][ T7467] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.428'. [ 542.318383][ T7471] raw_sendmsg: syz.1.431 forgot to set AF_INET. Fix it! [ 542.322991][ T7480] netlink: 'syz.2.434': attribute type 27 has an invalid length. [ 542.333586][ T7480] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.434'. [ 542.381227][ T7471] netlink: 'syz.1.431': attribute type 3 has an invalid length. [ 542.397316][ T7471] netlink: 'syz.1.431': attribute type 1 has an invalid length. [ 542.407208][ T7471] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.431'. [ 542.433960][ T7471] netlink: 'syz.1.431': attribute type 21 has an invalid length. [ 542.501704][ T7471] netlink: 128 bytes leftover after parsing attributes in process `syz.1.431'. [ 542.511124][ T7471] netlink: 'syz.1.431': attribute type 4 has an invalid length. [ 542.526474][ T7471] netlink: 3 bytes leftover after parsing attributes in process `syz.1.431'. [ 542.830186][ T7493] netlink: 40 bytes leftover after parsing attributes in process `syz.2.436'. [ 542.915252][ T7496] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.436'. [ 542.971579][ T7496] net_ratelimit: 315 callbacks suppressed [ 542.971600][ T7496] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 543.752748][ T7524] syzkaller0: entered promiscuous mode [ 543.763206][ T7524] syzkaller0: entered allmulticast mode [ 544.243186][ T7527] netlink: 399 bytes leftover after parsing attributes in process `syz.3.444'. [ 544.320440][ T7527] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.444'. [ 547.068363][ T7563] __nla_validate_parse: 6 callbacks suppressed [ 547.068381][ T7563] netlink: 60 bytes leftover after parsing attributes in process `syz.3.455'. [ 549.076144][ T7588] netlink: 14 bytes leftover after parsing attributes in process `syz.0.461'. [ 549.345393][ T7592] netlink: 14 bytes leftover after parsing attributes in process `syz.0.461'. [ 552.472088][ T7639] validate_nla: 3 callbacks suppressed [ 552.472104][ T7639] netlink: 'syz.2.473': attribute type 21 has an invalid length. [ 552.799976][ T7641] : port 1(ip6gretap0) entered blocking state [ 552.826346][ T7641] : port 1(ip6gretap0) entered disabled state [ 552.847944][ T7641] ip6gretap0: entered allmulticast mode [ 552.879002][ T7641] ip6gretap0: entered promiscuous mode [ 554.134281][ T7667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.481'. [ 554.331347][ T7667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.481'. [ 554.353401][ T7669] netlink: 60 bytes leftover after parsing attributes in process `syz.3.481'. [ 554.382744][ T7670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.481'. [ 555.792383][ T7691] netlink: 'syz.3.484': attribute type 21 has an invalid length. [ 555.816691][ T7691] netlink: 128 bytes leftover after parsing attributes in process `syz.3.484'. [ 555.866790][ T7691] netlink: 'syz.3.484': attribute type 5 has an invalid length. [ 555.874524][ T7691] netlink: 'syz.3.484': attribute type 6 has an invalid length. [ 555.914987][ T7691] netlink: 3 bytes leftover after parsing attributes in process `syz.3.484'. [ 556.193683][ T7699] sctp: [Deprecated]: syz.2.486 (pid 7699) Use of int in maxseg socket option. [ 556.193683][ T7699] Use struct sctp_assoc_value instead [ 556.660109][ T7708] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.491'. [ 556.681145][ T7709] delete_channel: no stack [ 556.698071][ T7709] delete_channel: no stack [ 557.066133][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.078664][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.112789][ T7723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.138058][ T7723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.608502][ T7741] netlink: 14 bytes leftover after parsing attributes in process `syz.2.495'. [ 557.978148][ T7741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.019787][ T7741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.059014][ T7741] bond0 (unregistering): Released all slaves [ 558.910065][ T7763] netlink: 60 bytes leftover after parsing attributes in process `syz.2.503'. [ 558.929119][ T7763] netlink: 60 bytes leftover after parsing attributes in process `syz.2.503'. [ 558.958559][ T7762] netlink: 'syz.2.503': attribute type 46 has an invalid length. [ 559.170463][ T7769] __nla_validate_parse: 2 callbacks suppressed [ 559.170479][ T7769] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.506'. [ 559.190158][ T7767] netlink: 132 bytes leftover after parsing attributes in process `syz.3.504'. [ 560.263286][ T7785] netlink: 52 bytes leftover after parsing attributes in process `syz.2.511'. [ 560.285227][ T7786] netlink: 52 bytes leftover after parsing attributes in process `syz.2.511'. [ 560.352467][ T7789] netlink: 'syz.3.512': attribute type 3 has an invalid length. [ 560.375895][ T7789] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.512'. [ 560.507201][ T7791] delete_channel: no stack [ 560.903650][ T7806] netlink: 830 bytes leftover after parsing attributes in process `syz.1.517'. [ 561.258652][ T7816] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.522'. [ 561.447672][ T7816] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.522'. [ 561.679488][ T7831] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 561.708228][ T7830] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 561.738520][ T7828] netlink: 'syz.0.525': attribute type 21 has an invalid length. [ 561.747164][ T7827] netlink: 830 bytes leftover after parsing attributes in process `syz.0.525'. [ 561.759681][ T7830] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 561.952623][ T7835] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.527'. [ 563.244562][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.251154][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.305962][ T7880] netlink: 'syz.2.541': attribute type 4 has an invalid length. [ 563.338915][ T7880] netlink: 'syz.2.541': attribute type 25 has an invalid length. [ 563.359924][ T7880] netlink: 'syz.2.541': attribute type 29 has an invalid length. [ 563.422573][ T7877] syzkaller0: entered promiscuous mode [ 563.428715][ T7877] syzkaller0: entered allmulticast mode [ 563.438532][ T7883] bridge_slave_1: left allmulticast mode [ 563.444845][ T7883] bridge_slave_1: left promiscuous mode [ 563.452624][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.470581][ T7883] bridge_slave_0: left allmulticast mode [ 563.479321][ T7883] bridge_slave_0: left promiscuous mode [ 563.487230][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.869284][ T7899] __nla_validate_parse: 2 callbacks suppressed [ 564.869303][ T7899] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.546'. [ 565.320863][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 565.327044][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 565.335509][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 565.682770][ T7886] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 565.715116][ T7886] team0: Port device macvlan0 added [ 565.722826][ T7888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.544'. [ 565.932887][ T7910] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.940950][ T7910] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.970993][ T7910] bridge0: entered allmulticast mode [ 566.419748][ T7931] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.555'. [ 567.496426][ T7943] netlink: 'syz.2.558': attribute type 22 has an invalid length. [ 568.505974][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.511542][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.517370][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.522794][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.528353][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.533746][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.540316][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.552039][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.557800][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.563468][ T7966] tap0: tun_chr_ioctl cmd 1074025677 [ 568.569995][ T7966] tap0: linktype set to 805 [ 568.575107][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.581171][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.596306][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.616311][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.621780][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.636940][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.650966][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 568.658358][ T7967] tap0: tun_chr_ioctl cmd 1074025673 [ 569.321166][ T7997] can: request_module (can-proto-4) failed. [ 569.869776][ T8021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.580'. [ 570.343208][ T8044] netlink: 'syz.3.585': attribute type 39 has an invalid length. [ 570.654593][ T8051] syz.2.587[8051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.654834][ T8051] syz.2.587[8051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.677887][ T8051] syz.2.587[8051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 570.718246][ T8051] syz.2.587[8051] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 571.065122][ T8074] netlink: 'syz.1.593': attribute type 2 has an invalid length. [ 571.132312][ T8074] netlink: 184 bytes leftover after parsing attributes in process `syz.1.593'. [ 571.664744][ T8079] netlink: 60 bytes leftover after parsing attributes in process `syz.3.597'. [ 571.904562][ T8101] netlink: 'syz.2.601': attribute type 10 has an invalid length. [ 572.002326][ T8101] veth0_macvtap: left promiscuous mode [ 572.386521][ T8107] netlink: 'syz.1.598': attribute type 10 has an invalid length. [ 572.394346][ T8107] netlink: 55 bytes leftover after parsing attributes in process `syz.1.598'. [ 573.133019][ T8138] netlink: 'syz.3.610': attribute type 9 has an invalid length. [ 573.157962][ T8138] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.610'. [ 573.185243][ T8130] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.607'. [ 573.855401][ T8155] IPv6: Can't replace route, no match found [ 576.477020][ T8178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.622'. [ 576.633420][ T8180] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.622'. [ 576.678674][ T8180] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 580.449029][ T8213] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.630'. [ 580.524294][ T8213] netlink: zone id is out of range [ 580.552209][ T8213] netlink: zone id is out of range [ 580.582149][ T8213] netlink: zone id is out of range [ 580.618490][ T8213] netlink: zone id is out of range [ 580.649832][ T8213] netlink: zone id is out of range [ 580.684724][ T8213] netlink: zone id is out of range [ 580.720371][ T8213] netlink: zone id is out of range [ 580.750636][ T8213] netlink: zone id is out of range [ 580.816340][ T8213] netlink: zone id is out of range [ 581.106541][ T8211] IPv6: Can't replace route, no match found [ 581.157691][ T8218] pim6reg1: entered promiscuous mode [ 581.163082][ T8218] pim6reg1: entered allmulticast mode [ 583.571171][ T8284] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.646'. [ 587.247538][ T8324] : port 1(vlan0) entered blocking state [ 587.253568][ T8324] : port 1(vlan0) entered disabled state [ 587.263387][ T8324] vlan0: entered allmulticast mode [ 587.275374][ T8324] veth0_vlan: entered allmulticast mode [ 587.285504][ T8324] vlan0: entered promiscuous mode [ 587.339734][ T8323] : port 1(vlan0) entered blocking state [ 587.346692][ T8323] : port 1(vlan0) entered forwarding state [ 587.664327][ T8335] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.663'. [ 587.674160][ T8335] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.663'. [ 588.605187][ T8347] netlink: 'syz.2.667': attribute type 10 has an invalid length. [ 588.642832][ T8347] team0: Port device wlan1 added [ 589.630652][ T8369] sit0: entered allmulticast mode [ 589.695208][ T8369] sit0: entered promiscuous mode [ 592.033251][ T8451] netlink: 'syz.1.694': attribute type 22 has an invalid length. [ 592.057207][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 594.658059][ T8467] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.699'. [ 595.269700][ T8490] netlink: 'syz.2.705': attribute type 3 has an invalid length. [ 595.277777][ T8490] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.705'. [ 595.291556][ T8490] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.705'. [ 595.301267][ T8490] net_ratelimit: 332 callbacks suppressed [ 595.301280][ T8490] openvswitch: netlink: Key type 4112 is out of range max 32 [ 596.244069][ T8525] netlink: 'syz.3.716': attribute type 21 has an invalid length. [ 596.256250][ T8525] IPv6: NLM_F_CREATE should be specified when creating new route [ 596.643832][ T8536] netlink: 'syz.2.720': attribute type 10 has an invalid length. [ 596.807377][ T8536] team0: Port device dummy0 added [ 596.896709][ T8536] syz.2.720 (8536) used greatest stack depth: 18344 bytes left [ 597.144052][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.166230][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.187497][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.195927][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.207835][ T5829] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 597.215375][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 597.730857][ T8542] chnl_net:caif_netlink_parms(): no params data found [ 597.924187][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.955203][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.969629][ T8542] bridge_slave_0: entered allmulticast mode [ 597.982446][ T8542] bridge_slave_0: entered promiscuous mode [ 597.995942][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.007035][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.014477][ T8542] bridge_slave_1: entered allmulticast mode [ 598.027922][ T8542] bridge_slave_1: entered promiscuous mode [ 598.094326][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 598.129083][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 598.194364][ T8542] team0: Port device team_slave_0 added [ 598.269767][ T6712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.294489][ T8542] team0: Port device team_slave_1 added [ 598.364633][ T6712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.389327][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.403531][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.435125][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.483359][ T6712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.521633][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.544884][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.574205][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.632726][ T6712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.748488][ T8542] hsr_slave_0: entered promiscuous mode [ 598.755415][ T8542] hsr_slave_1: entered promiscuous mode [ 598.762216][ T8542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 598.771287][ T8542] Cannot create hsr debugfs directory [ 599.316983][ T5829] Bluetooth: hci0: command tx timeout [ 599.789062][ T8542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 599.887157][ T8542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.020737][ T8542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.073953][ T8542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.840730][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.920362][ T8635] netlink: 60 bytes leftover after parsing attributes in process `syz.2.737'. [ 601.017026][ T8635] netlink: 60 bytes leftover after parsing attributes in process `syz.2.737'. [ 601.037033][ T8636] netlink: 60 bytes leftover after parsing attributes in process `syz.2.737'. [ 601.119316][ T8634] netlink: 60 bytes leftover after parsing attributes in process `syz.2.737'. [ 601.403490][ T5829] Bluetooth: hci0: command tx timeout [ 603.479557][ T5829] Bluetooth: hci0: command tx timeout [ 603.618936][ T8542] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.652984][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.660226][ T6694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.684502][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.691751][ T6694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 603.790955][ T8659] netlink: 'syz.2.739': attribute type 4 has an invalid length. [ 603.865648][ T6712] hsr_slave_0: left promiscuous mode [ 603.878908][ T6712] hsr_slave_1: left promiscuous mode [ 603.889546][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 603.915853][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.946797][ T6712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 603.954290][ T6712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 603.964866][ T6712] bond0: left allmulticast mode [ 603.969861][ T6712] bond_slave_0: left allmulticast mode [ 603.975456][ T6712] bond_slave_1: left allmulticast mode [ 603.982594][ T6712] bridge0: port 3(bond0) entered disabled state [ 603.995515][ T6712] bridge_slave_1: left allmulticast mode [ 604.001720][ T6712] bridge_slave_1: left promiscuous mode [ 604.011159][ T6712] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.022604][ T6712] bridge_slave_0: left allmulticast mode [ 604.030849][ T6712] bridge_slave_0: left promiscuous mode [ 604.037165][ T6712] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.064469][ T6712] veth1_macvtap: left promiscuous mode [ 604.070686][ T6712] veth0_macvtap: left promiscuous mode [ 604.076635][ T6712] veth1_vlan: left promiscuous mode [ 604.082295][ T6712] veth0_vlan: left promiscuous mode [ 604.442416][ T6712] team0 (unregistering): Port device macvlan0 removed [ 604.760454][ T6712] team0 (unregistering): Port device team_slave_1 removed [ 604.814414][ T6712] team0 (unregistering): Port device team_slave_0 removed [ 604.864314][ T6712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.873222][ T6712] bond_slave_1 (unregistering): left promiscuous mode [ 604.919245][ T6712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.935084][ T6712] bond_slave_0 (unregistering): left promiscuous mode [ 605.246399][ T6712] bond0 (unregistering): Released all slaves [ 605.556373][ T5829] Bluetooth: hci0: command tx timeout [ 606.365866][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.668560][ T8695] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.747'. [ 606.699472][ T8695] tc_dump_action: action bad kind [ 606.839588][ T8701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.747'. [ 607.395277][ T8542] veth0_vlan: entered promiscuous mode [ 607.443183][ T8542] veth1_vlan: entered promiscuous mode [ 607.635328][ T8542] veth0_macvtap: entered promiscuous mode [ 607.722501][ T8542] veth1_macvtap: entered promiscuous mode [ 607.976303][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.006203][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.039210][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.093487][ T8542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.115204][ T8542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.158534][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.187184][ T8735] syzkaller0: entered promiscuous mode [ 608.197977][ T8735] syzkaller0: entered allmulticast mode [ 608.211456][ T8542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.227689][ T8734] netlink: 60 bytes leftover after parsing attributes in process `syz.2.755'. [ 608.246587][ T8542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.255364][ T8542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.276111][ T8542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.745131][ T6694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.780429][ T6694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.869095][ T6695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.886919][ T6695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.177984][ T8763] netlink: 'syz.2.761': attribute type 5 has an invalid length. [ 609.185815][ T8763] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 609.215530][ T8763] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.761'. [ 610.112799][ T8792] @0: renamed from bond_slave_1 [ 610.703849][ T8805] netlink: 'syz.1.767': attribute type 33 has an invalid length. [ 610.739371][ T8805] netlink: 152 bytes leftover after parsing attributes in process `syz.1.767'. [ 610.853471][ T8805] `: renamed from team0 (while UP) [ 611.547806][ T8830] : port 1(vlan0) entered blocking state [ 611.571866][ T8830] : port 1(vlan0) entered disabled state [ 611.595060][ T8830] vlan0: entered allmulticast mode [ 611.621138][ T8830] veth0_vlan: entered allmulticast mode [ 611.642942][ T8830] vlan0: entered promiscuous mode [ 611.692529][ T8828] : port 1(vlan0) entered blocking state [ 611.699833][ T8828] : port 1(vlan0) entered forwarding state [ 612.054987][ T8841] netlink: 152 bytes leftover after parsing attributes in process `syz.2.775'. [ 612.068571][ T8841] tc_dump_action: action bad kind [ 612.077455][ T8841] netlink: 'syz.2.775': attribute type 21 has an invalid length. [ 612.091101][ T8841] netlink: 156 bytes leftover after parsing attributes in process `syz.2.775'. [ 612.106488][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 612.174077][ T8841] netlink: 128 bytes leftover after parsing attributes in process `syz.2.775'. [ 612.211451][ T8847] netlink: 'syz.3.777': attribute type 17 has an invalid length. [ 612.236269][ T8847] netlink: 152 bytes leftover after parsing attributes in process `syz.3.777'. [ 612.258155][ T8847] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 613.355566][ T8880] netlink: 'syz.2.782': attribute type 3 has an invalid length. [ 613.364175][ T8880] netlink: 'syz.2.782': attribute type 1 has an invalid length. [ 613.379021][ T8880] netlink: 193404 bytes leftover after parsing attributes in process `syz.2.782'. [ 613.482194][ T8881] netlink: 'syz.3.783': attribute type 27 has an invalid length. [ 613.490320][ T8881] netlink: 'syz.3.783': attribute type 4 has an invalid length. [ 613.498583][ T8881] netlink: 132 bytes leftover after parsing attributes in process `syz.3.783'. [ 613.585335][ T8881] netlink: 'syz.3.783': attribute type 29 has an invalid length. [ 614.156179][ T8895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.781'. [ 614.811690][ T8922] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.791'. [ 615.081510][ T8935] C: renamed from team_slave_0 (while UP) [ 615.196742][ T8935] validate_nla: 2 callbacks suppressed [ 615.196778][ T8935] netlink: 'syz.1.793': attribute type 4 has an invalid length. [ 615.213260][ T8939] delete_channel: no stack [ 615.221415][ T8939] delete_channel: no stack [ 615.265136][ T8935] netlink: 116 bytes leftover after parsing attributes in process `syz.1.793'. [ 615.331870][ T8935] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 615.772089][ T8963] : left promiscuous mode [ 616.469866][ T8982] netlink: 'syz.1.804': attribute type 11 has an invalid length. [ 617.318634][ T8982] netlink: 668 bytes leftover after parsing attributes in process `syz.1.804'. [ 617.358281][ T8982] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 617.422865][ T8982] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 617.838917][ T9017] netlink: 'syz.4.812': attribute type 29 has an invalid length. [ 617.882245][ T9017] netlink: 'syz.4.812': attribute type 29 has an invalid length. [ 617.929618][ T9018] netlink: 'syz.4.812': attribute type 29 has an invalid length. [ 617.964369][ T9026] netlink: 'syz.4.812': attribute type 29 has an invalid length. [ 618.274726][ T9036] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.816'. [ 618.317324][ T9036] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 618.947883][ T9047] netlink: 'syz.4.819': attribute type 1 has an invalid length. [ 618.958386][ T9047] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.819'. [ 620.198031][ T5829] Bluetooth: hci0: ISO packet for unknown connection handle 35 [ 620.247195][ T9066] netlink: 'syz.4.823': attribute type 3 has an invalid length. [ 620.255372][ T9066] netlink: 132 bytes leftover after parsing attributes in process `syz.4.823'. [ 620.668635][ T9086] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.827'. [ 621.772440][ T9107] netlink: 'syz.4.832': attribute type 27 has an invalid length. [ 621.792238][ T9107] netlink: 'syz.4.832': attribute type 4 has an invalid length. [ 621.816199][ T9107] netlink: 132 bytes leftover after parsing attributes in process `syz.4.832'. [ 621.886317][ T9108] netlink: 'syz.2.833': attribute type 21 has an invalid length. [ 621.925397][ T9107] netlink: 'syz.4.832': attribute type 29 has an invalid length. [ 621.934455][ T9108] netlink: 156 bytes leftover after parsing attributes in process `syz.2.833'. [ 621.994016][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 622.101026][ T9107] netlink: 'syz.4.832': attribute type 29 has an invalid length. [ 622.177303][ T9112] netlink: 128 bytes leftover after parsing attributes in process `syz.2.833'. [ 623.079482][ T9136] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.838'. [ 624.314886][ T9152] netlink: 40 bytes leftover after parsing attributes in process `syz.1.843'. [ 624.464160][ T9154] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.843'. [ 624.557235][ T9154] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 624.682125][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.688576][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.927953][ T9173] netlink: 763 bytes leftover after parsing attributes in process `syz.4.846'. [ 624.997125][ T9176] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.847'. [ 625.170859][ T9187] netlink: 'syz.1.849': attribute type 21 has an invalid length. [ 626.865264][ T9228] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.855'. [ 626.888353][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.898732][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.909289][ T9230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.926288][ T9230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.051990][ T9236] : renamed from vlan1 (while UP) [ 627.080722][ T9228] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 627.110407][ T9233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.857'. [ 627.262262][ T9240] netlink: 'syz.3.859': attribute type 4 has an invalid length. [ 627.954853][ T9269] netlink: 'syz.1.867': attribute type 1 has an invalid length. [ 627.993372][ T9269] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.867'. [ 628.573787][ T9294] pim6reg1: entered promiscuous mode [ 628.592743][ T9294] pim6reg1: entered allmulticast mode [ 628.913680][ T9308] netlink: 14 bytes leftover after parsing attributes in process `syz.3.874'. [ 629.228916][ T9306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.422608][ T9323] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.878'. [ 629.462014][ T9327] netlink: 'syz.1.879': attribute type 3 has an invalid length. [ 629.520919][ T9327] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.879'. [ 630.660136][ T9346] netlink: 'syz.4.885': attribute type 21 has an invalid length. [ 630.668212][ T9346] netlink: 164 bytes leftover after parsing attributes in process `syz.4.885'. [ 634.012166][ T9445] netlink: 'syz.4.900': attribute type 10 has an invalid length. [ 634.049550][ T9445] hsr_slave_0: left promiscuous mode [ 634.086510][ T9445] hsr_slave_1: left promiscuous mode [ 634.606258][ T9460] netlink: 'syz.3.902': attribute type 3 has an invalid length. [ 634.632060][ T9460] netlink: 132 bytes leftover after parsing attributes in process `syz.3.902'. [ 634.719505][ T9462] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.902'. [ 634.911984][ T9466] netlink: 'syz.4.903': attribute type 25 has an invalid length. [ 635.181649][ T9481] netlink: 'syz.4.905': attribute type 153 has an invalid length. [ 635.214215][ T9481] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.905'. [ 635.338809][ T5829] Bluetooth: hci0: ISO packet for unknown connection handle 3853 [ 635.537137][ T9486] netlink: 22 bytes leftover after parsing attributes in process `syz.3.906'. [ 635.562681][ T9478] netlink: 'syz.3.906': attribute type 21 has an invalid length. [ 635.570819][ T9478] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 635.792149][ T9491] netlink: 'syz.4.907': attribute type 21 has an invalid length. [ 635.812816][ T9491] netlink: 128 bytes leftover after parsing attributes in process `syz.4.907'. [ 635.829152][ T9491] netlink: 'syz.4.907': attribute type 5 has an invalid length. [ 635.868469][ T9491] netlink: 'syz.4.907': attribute type 6 has an invalid length. [ 635.886001][ T9491] netlink: 3 bytes leftover after parsing attributes in process `syz.4.907'. [ 637.212334][ T9550] netlink: 'syz.4.917': attribute type 29 has an invalid length. [ 638.002490][ T9572] netlink: 6 bytes leftover after parsing attributes in process `syz.3.922'. [ 638.027011][ T9572] openvswitch: netlink: Flow actions attr not present in new flow. [ 639.158006][ T9613] netlink: 152 bytes leftover after parsing attributes in process `syz.3.931'. [ 639.222334][ T9616] validate_nla: 2 callbacks suppressed [ 639.222384][ T9616] netlink: 'syz.4.933': attribute type 9 has an invalid length. [ 639.240075][ T9616] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.933'. [ 639.565250][ T9628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.937'. [ 639.612031][ T9628] netlink: 'syz.1.937': attribute type 10 has an invalid length. [ 639.711840][ T9630] __nla_validate_parse: 1 callbacks suppressed [ 639.711914][ T9630] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.938'. [ 639.977783][ T9635] netlink: 6 bytes leftover after parsing attributes in process `syz.1.940'. [ 639.987320][ T9635] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 640.019953][ T9638] netlink: 188 bytes leftover after parsing attributes in process `syz.2.941'. [ 640.030746][ T9637] netlink: 188 bytes leftover after parsing attributes in process `syz.2.941'. [ 640.141648][ T9640] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 640.194569][ T9642] netlink: 'syz.3.942': attribute type 9 has an invalid length. [ 640.238799][ T9642] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.942'. [ 640.528377][ T9650] netdevsim netdevsim1 4͢P: renamed from netdevsim0 (while UP) [ 640.631173][ T9641] netlink: 'syz.3.942': attribute type 9 has an invalid length. [ 640.650185][ T9641] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.942'. [ 640.678822][ T9656] pim6reg1: entered promiscuous mode [ 640.698289][ T9656] pim6reg1: entered allmulticast mode [ 640.942435][ T9670] netlink: 172 bytes leftover after parsing attributes in process `syz.3.948'. [ 641.174146][ T9676] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.950'. [ 641.232063][ T9676] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 641.262294][ T9676] CPU: 1 PID: 9676 Comm: syz.2.950 Not tainted syzkaller #0 [ 641.269751][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.279861][ T9676] Call Trace: [ 641.283230][ T9676] [ 641.286215][ T9676] dump_stack_lvl+0x18c/0x250 [ 641.290964][ T9676] ? show_regs_print_info+0x20/0x20 [ 641.296230][ T9676] ? load_image+0x400/0x400 [ 641.300811][ T9676] sysfs_warn_dup+0x8e/0xa0 [ 641.305410][ T9676] sysfs_do_create_link_sd+0xc0/0x110 [ 641.310872][ T9676] device_add_class_symlinks+0x1cf/0x240 [ 641.316571][ T9676] device_add+0x507/0xc20 [ 641.320966][ T9676] wiphy_register+0x1dad/0x2ae0 [ 641.325896][ T9676] ? cfg80211_event_work+0x40/0x40 [ 641.331081][ T9676] ? minstrel_ht_alloc+0x88a/0x990 [ 641.336317][ T9676] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 641.342470][ T9676] ieee80211_register_hw+0x3464/0x4250 [ 641.348036][ T9676] ? ieee80211_tasklet_handler+0x20/0x20 [ 641.353759][ T9676] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 641.359917][ T9676] ? __debug_object_init+0xec/0x450 [ 641.365189][ T9676] ? __asan_memset+0x22/0x40 [ 641.369853][ T9676] ? __hrtimer_init+0x186/0x270 [ 641.374812][ T9676] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 641.380662][ T9676] ? mac80211_hwsim_free+0x220/0x220 [ 641.386018][ T9676] ? rcu_is_watching+0x15/0xb0 [ 641.390852][ T9676] ? kstrndup+0xbd/0x140 [ 641.395171][ T9676] hwsim_new_radio_nl+0xdc9/0x1a90 [ 641.400371][ T9676] ? __nla_validate+0x50/0x50 [ 641.405133][ T9676] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 641.411545][ T9676] ? __nla_parse+0x40/0x50 [ 641.416204][ T9676] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 641.422598][ T9676] genl_family_rcv_msg_doit+0x211/0x310 [ 641.428237][ T9676] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 641.434181][ T9676] ? lockdep_hardirqs_on+0x98/0x150 [ 641.439458][ T9676] ? genl_rcv_msg+0x5f6/0x7a0 [ 641.444208][ T9676] genl_rcv_msg+0x619/0x7a0 [ 641.448829][ T9676] ? genl_bind+0x360/0x360 [ 641.453296][ T9676] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 641.459704][ T9676] ? perf_trace_lock+0xfc/0x3b0 [ 641.464664][ T9676] netlink_rcv_skb+0x241/0x4d0 [ 641.469495][ T9676] ? genl_bind+0x360/0x360 [ 641.473983][ T9676] ? netlink_ack+0x1180/0x1180 [ 641.478856][ T9676] ? genl_bind+0x360/0x360 [ 641.483346][ T9676] genl_rcv+0x28/0x40 [ 641.487391][ T9676] netlink_unicast+0x751/0x8d0 [ 641.492236][ T9676] netlink_sendmsg+0x8d0/0xbf0 [ 641.497094][ T9676] ? netlink_getsockopt+0x590/0x590 [ 641.502397][ T9676] ? aa_sock_msg_perm+0x94/0x150 [ 641.507390][ T9676] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 641.512831][ T9676] ? security_socket_sendmsg+0x80/0xa0 [ 641.518350][ T9676] ? netlink_getsockopt+0x590/0x590 [ 641.523631][ T9676] ____sys_sendmsg+0x5ba/0x960 [ 641.528471][ T9676] ? __asan_memset+0x22/0x40 [ 641.533134][ T9676] ? __sys_sendmsg_sock+0x30/0x30 [ 641.538210][ T9676] ? __import_iovec+0x5f2/0x850 [ 641.543150][ T9676] ? import_iovec+0x73/0xa0 [ 641.547709][ T9676] ___sys_sendmsg+0x2a6/0x360 [ 641.552454][ T9676] ? __sys_sendmsg+0x2a0/0x2a0 [ 641.557354][ T9676] __se_sys_sendmsg+0x1c2/0x2b0 [ 641.562268][ T9676] ? __x64_sys_sendmsg+0x80/0x80 [ 641.567292][ T9676] ? syscall_enter_from_user_mode+0x2e/0x80 [ 641.573248][ T9676] do_syscall_64+0x55/0xa0 [ 641.577774][ T9676] ? clear_bhb_loop+0x40/0x90 [ 641.582525][ T9676] ? clear_bhb_loop+0x40/0x90 [ 641.587275][ T9676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 641.593427][ T9676] RIP: 0033:0x7fe7d879c799 [ 641.597903][ T9676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.617672][ T9676] RSP: 002b:00007fe7d9644028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 641.626165][ T9676] RAX: ffffffffffffffda RBX: 00007fe7d8a15fa0 RCX: 00007fe7d879c799 [ 641.634376][ T9676] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 641.642410][ T9676] RBP: 00007fe7d8832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 641.650443][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.658566][ T9676] R13: 00007fe7d8a16038 R14: 00007fe7d8a15fa0 R15: 00007ffce238baf8 [ 641.666651][ T9676] [ 641.871017][ T9678] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.950'. [ 642.661082][ T9711] netlink: 40 bytes leftover after parsing attributes in process `syz.3.957'. [ 642.799985][ T9714] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.331216][ T9717] netlink: 'syz.4.959': attribute type 11 has an invalid length. [ 643.467406][ T9717] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 643.531062][ T9728] netlink: 'syz.1.961': attribute type 11 has an invalid length. [ 643.612892][ T9725] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 643.717491][ T9729] netlink: 'syz.2.960': attribute type 21 has an invalid length. [ 643.726892][ T9729] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 647.264180][ T9761] syzkaller0: entered promiscuous mode [ 647.273707][ T9761] syzkaller0: entered allmulticast mode [ 647.320044][ T9767] syzkaller0: entered allmulticast mode [ 649.513181][ T9783] veth1_to_bond: entered allmulticast mode [ 649.642288][ T9786] __nla_validate_parse: 4 callbacks suppressed [ 649.642304][ T9786] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.977'. [ 649.687783][ T9785] netlink: 56537 bytes leftover after parsing attributes in process `syz.3.977'. [ 649.760783][ T9788] netlink: 180 bytes leftover after parsing attributes in process `syz.1.978'. [ 650.327789][ T9818] netlink: 14 bytes leftover after parsing attributes in process `syz.3.986'. [ 651.531867][ T9835] netlink: 'syz.2.992': attribute type 22 has an invalid length. [ 651.545315][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.992'. [ 651.564451][ T9839] IPv6: Can't replace route, no match found [ 651.740701][ T9847] netlink: 'syz.3.997': attribute type 2 has an invalid length. [ 651.750137][ T9847] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.997'. [ 651.770334][ T9845] netlink: 44 bytes leftover after parsing attributes in process `syz.1.996'. [ 653.078082][ T9900] netlink: 'syz.1.1007': attribute type 46 has an invalid length. [ 653.148606][ T9900] netlink: 'syz.1.1007': attribute type 46 has an invalid length. [ 653.324877][ T9907] netlink: 'syz.2.1009': attribute type 10 has an invalid length. [ 653.372154][ T9909] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1010'. [ 653.404471][ T9909] netlink: 16126 bytes leftover after parsing attributes in process `syz.4.1010'. [ 653.947698][ T9917] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1011'. [ 654.368062][ T9924] netlink: 'syz.2.1014': attribute type 21 has an invalid length. [ 654.389229][ T9924] netlink: 'syz.2.1014': attribute type 1 has an invalid length. [ 654.652007][ T9935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 655.075898][ T9951] netlink: 'syz.4.1021': attribute type 21 has an invalid length. [ 655.085666][ T9951] netlink: 'syz.4.1021': attribute type 1 has an invalid length. [ 655.106186][ T9951] __nla_validate_parse: 1 callbacks suppressed [ 655.106201][ T9951] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.1021'. [ 656.410585][ T9974] netlink: 'syz.3.1026': attribute type 39 has an invalid length. [ 656.448524][ T9975] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1024'. [ 656.783179][ T9990] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1029'. [ 656.808724][ T9990] openvswitch: netlink: Key type 29 is not supported [ 656.861599][ T9988] netlink: 'syz.3.1030': attribute type 1 has an invalid length. [ 657.004653][ T9996] netlink: zone id is out of range [ 657.016441][ T9996] netlink: set zone limit has 8 unknown bytes [ 659.312820][T10033] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1044'. [ 659.423938][T10035] netlink: 'syz.4.1043': attribute type 9 has an invalid length. [ 659.465929][T10036] netlink: 'syz.2.1045': attribute type 9 has an invalid length. [ 659.476230][T10035] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1043'. [ 659.495779][T10039] netlink: 'syz.1.1046': attribute type 22 has an invalid length. [ 659.511951][T10039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 659.529947][T10036] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1045'. [ 660.177042][T10056] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1050'. [ 660.192695][T10056] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1050'. [ 660.214997][T10056] tipc: Started in network mode [ 660.235530][T10056] tipc: Node identity d, cluster identity 56 [ 660.269120][T10056] tipc: Node number set to 13 [ 661.265261][T10080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1056'. [ 661.379107][T10080] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1056'. [ 661.538135][T10091] netlink: 'syz.4.1058': attribute type 153 has an invalid length. [ 661.570561][T10091] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.1058'. [ 661.582932][T10092] ip6gretap0: refused to change device tx_queue_len [ 661.629396][T10092] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1059'. [ 661.699935][T10098] netlink: 'syz.2.1061': attribute type 25 has an invalid length. [ 661.756074][T10098] netlink: 'syz.2.1061': attribute type 3 has an invalid length. [ 661.825895][T10098] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1061'. [ 662.340328][T10115] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1066'. [ 662.870706][T10122] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1067'. [ 663.768513][T10134] tc_dump_action: action bad kind [ 663.830635][T10136] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1073'. [ 663.899764][T10136] can: request_module (can-proto-0) failed. [ 664.096513][T10141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 665.009862][T10164] netlink: 'syz.1.1081': attribute type 29 has an invalid length. [ 665.046462][T10164] netlink: 'syz.1.1081': attribute type 29 has an invalid length. [ 665.097788][T10164] netlink: 'syz.1.1081': attribute type 29 has an invalid length. [ 665.116786][T10164] netlink: 'syz.1.1081': attribute type 29 has an invalid length. [ 665.185057][T10164] netlink: 'syz.1.1081': attribute type 29 has an invalid length. [ 665.865002][T10182] macsec0: entered promiscuous mode [ 666.015765][T10182] macsec0: entered allmulticast mode [ 666.102676][T10182] veth1_macvtap: entered allmulticast mode [ 666.744046][T10207] netlink: 'syz.2.1094': attribute type 29 has an invalid length. [ 666.841425][T10207] netlink: 'syz.2.1094': attribute type 29 has an invalid length. [ 666.973125][T10212] netlink: 'syz.2.1094': attribute type 29 has an invalid length. [ 667.087424][T10214] netlink: 'syz.2.1094': attribute type 29 has an invalid length. [ 667.149745][T10220] netlink: 'syz.2.1094': attribute type 29 has an invalid length. [ 667.690691][T10238] __nla_validate_parse: 1 callbacks suppressed [ 667.690708][T10238] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1105'. [ 667.741384][T10238] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1105'. [ 667.962711][T10242] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1107'. [ 670.047523][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 670.255961][ T6694] tipc: Subscription rejected, illegal request [ 670.299450][T10280] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 670.348695][T10281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 670.377522][T10281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 670.406486][T10286] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1117'. [ 670.449772][T10282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 670.535211][T10282] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1115'. [ 671.061193][T10296] IPv6: Can't replace route, no match found [ 671.099900][T10296] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 672.367413][T10318] validate_nla: 3 callbacks suppressed [ 672.367431][T10318] netlink: 'syz.1.1124': attribute type 21 has an invalid length. [ 672.802893][T10317] netlink: 'syz.3.1125': attribute type 1 has an invalid length. [ 672.841863][T10317] __nla_validate_parse: 23 callbacks suppressed [ 672.842026][T10317] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1125'. [ 673.451375][T10336] netlink: 17263 bytes leftover after parsing attributes in process `syz.3.1131'. [ 673.477069][T10336] netlink: 17263 bytes leftover after parsing attributes in process `syz.3.1131'. [ 673.489864][T10336] netlink: 17263 bytes leftover after parsing attributes in process `syz.3.1131'. [ 673.844544][T10344] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1132'. [ 673.877864][T10344] netlink: del zone limit has 4 unknown bytes [ 675.001780][T10368] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1140'. [ 676.788660][T10400] IPv6: NLM_F_CREATE should be specified when creating new route [ 677.946508][T10415] syzkaller0: entered promiscuous mode [ 678.004092][T10415] syzkaller0: entered allmulticast mode [ 678.026468][T10416] C: renamed from team_slave_0 (while UP) [ 678.053927][T10415] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 678.075817][T10416] netlink: 'syz.3.1154': attribute type 3 has an invalid length. [ 678.116781][T10416] netlink: 'syz.3.1154': attribute type 1 has an invalid length. [ 678.127774][T10416] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1154'. [ 678.148444][T10416] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 678.428954][T10428] netlink: 'syz.4.1158': attribute type 21 has an invalid length. [ 678.975613][T10422] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.1155'. [ 679.053428][T10421] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.1155'. [ 679.480119][T10438] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.532389][T10443] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1160'. [ 679.723204][T10450] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1163'. [ 680.059873][T10456] netlink: 'syz.4.1165': attribute type 11 has an invalid length. [ 680.093379][T10456] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1165'. [ 680.240057][T10456] tun0: tun_chr_ioctl cmd 1074025675 [ 680.245524][T10456] tun0: persist enabled [ 680.608757][T10464] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1168'. [ 680.849811][T10464] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 680.861159][T10464] CPU: 1 PID: 10464 Comm: syz.4.1168 Not tainted syzkaller #0 [ 680.868720][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.878857][T10464] Call Trace: [ 680.882200][T10464] [ 680.885188][T10464] dump_stack_lvl+0x18c/0x250 [ 680.889967][T10464] ? show_regs_print_info+0x20/0x20 [ 680.895258][T10464] ? load_image+0x400/0x400 [ 680.899889][T10464] sysfs_warn_dup+0x8e/0xa0 [ 680.904471][T10464] sysfs_do_create_link_sd+0xc0/0x110 [ 680.909921][T10464] device_add_class_symlinks+0x1cf/0x240 [ 680.915644][T10464] device_add+0x507/0xc20 [ 680.920148][T10464] wiphy_register+0x1dad/0x2ae0 [ 680.925130][T10464] ? cfg80211_event_work+0x40/0x40 [ 680.930428][T10464] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 680.936585][T10464] ieee80211_register_hw+0x3464/0x4250 [ 680.942194][T10464] ? ieee80211_tasklet_handler+0x20/0x20 [ 680.947909][T10464] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 680.953972][T10464] ? __debug_object_init+0xec/0x450 [ 680.959274][T10464] ? __asan_memset+0x22/0x40 [ 680.963945][T10464] ? __hrtimer_init+0x186/0x270 [ 680.968884][T10464] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 680.974767][T10464] ? mac80211_hwsim_free+0x220/0x220 [ 680.980226][T10464] ? rcu_is_watching+0x15/0xb0 [ 680.985081][T10464] ? kstrndup+0xbd/0x140 [ 680.989425][T10464] hwsim_new_radio_nl+0xdc9/0x1a90 [ 680.994646][T10464] ? __nla_validate+0x50/0x50 [ 680.999472][T10464] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 681.006110][T10464] ? __nla_parse+0x40/0x50 [ 681.010613][T10464] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 681.017034][T10464] genl_family_rcv_msg_doit+0x211/0x310 [ 681.022655][T10464] ? end_current_label_crit_section+0x170/0x170 [ 681.028992][T10464] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 681.034978][T10464] ? bpf_lsm_capable+0x9/0x10 [ 681.039815][T10464] ? security_capable+0x89/0xb0 [ 681.044758][T10464] genl_rcv_msg+0x619/0x7a0 [ 681.049349][T10464] ? genl_bind+0x360/0x360 [ 681.053829][T10464] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 681.060252][T10464] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 681.067354][T10464] ? perf_trace_lock+0xfc/0x3b0 [ 681.072322][T10464] netlink_rcv_skb+0x241/0x4d0 [ 681.077172][T10464] ? genl_bind+0x360/0x360 [ 681.081652][T10464] ? netlink_ack+0x1180/0x1180 [ 681.086538][T10464] ? __lock_acquire+0x7d40/0x7d40 [ 681.091658][T10464] ? down_read+0x1ac/0x2e0 [ 681.096158][T10464] genl_rcv+0x28/0x40 [ 681.100288][T10464] netlink_unicast+0x751/0x8d0 [ 681.105158][T10464] netlink_sendmsg+0x8d0/0xbf0 [ 681.110000][T10464] ? lockdep_hardirqs_on+0x98/0x150 [ 681.115286][T10464] ? netlink_getsockopt+0x590/0x590 [ 681.120571][T10464] ? __sanitizer_cov_trace_pc+0x17/0x60 [ 681.126205][T10464] ? security_socket_sendmsg+0x80/0xa0 [ 681.131818][T10464] ? netlink_getsockopt+0x590/0x590 [ 681.137103][T10464] ____sys_sendmsg+0x5ba/0x960 [ 681.141996][T10464] ? __asan_memset+0x22/0x40 [ 681.146667][T10464] ? __sys_sendmsg_sock+0x30/0x30 [ 681.151760][T10464] ? __import_iovec+0x5f2/0x850 [ 681.156723][T10464] ? import_iovec+0x73/0xa0 [ 681.161304][T10464] ___sys_sendmsg+0x2a6/0x360 [ 681.166047][T10464] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 681.171768][T10464] ? __sys_sendmsg+0x2a0/0x2a0 [ 681.176738][T10464] __se_sys_sendmsg+0x1c2/0x2b0 [ 681.181661][T10464] ? __x64_sys_sendmsg+0x80/0x80 [ 681.186728][T10464] ? lockdep_hardirqs_on+0x98/0x150 [ 681.192004][T10464] do_syscall_64+0x55/0xa0 [ 681.196496][T10464] ? clear_bhb_loop+0x40/0x90 [ 681.201240][T10464] ? clear_bhb_loop+0x40/0x90 [ 681.205986][T10464] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 681.211948][T10464] RIP: 0033:0x7fe3cdf9c799 [ 681.216428][T10464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.236105][T10464] RSP: 002b:00007fe3cee37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.244598][T10464] RAX: ffffffffffffffda RBX: 00007fe3ce215fa0 RCX: 00007fe3cdf9c799 [ 681.252758][T10464] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 681.260798][T10464] RBP: 00007fe3ce032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 681.268835][T10464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.276873][T10464] R13: 00007fe3ce216038 R14: 00007fe3ce215fa0 R15: 00007fff7bce7d28 [ 681.284952][T10464] [ 681.567836][T10473] netlink: 'syz.2.1171': attribute type 27 has an invalid length. [ 681.598330][T10473] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1171'. [ 681.851022][T10483] netlink: 'syz.2.1173': attribute type 21 has an invalid length. [ 681.880255][T10483] IPv6: NLM_F_CREATE should be specified when creating new route [ 682.169023][T10483] syzkaller0: entered promiscuous mode [ 682.186203][T10483] syzkaller0: entered allmulticast mode [ 682.848187][T10505] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1179'. [ 683.213820][T10505] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1179'. [ 683.327724][T10513] netlink: 'syz.2.1181': attribute type 3 has an invalid length. [ 683.397894][T10513] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1181'. [ 684.398690][T10549] netlink: 'syz.3.1190': attribute type 1 has an invalid length. [ 684.432810][T10549] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1190'. [ 684.484913][T10554] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1192'. [ 684.517840][T10554] netlink: 'syz.2.1192': attribute type 2 has an invalid length. [ 684.562444][T10554] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1192'. [ 684.602305][T10554] netlink: 'syz.2.1192': attribute type 2 has an invalid length. [ 684.986329][T10562] veth0_to_batadv: entered promiscuous mode [ 684.992743][T10562] veth0_to_batadv: entered allmulticast mode [ 685.411049][T10571] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1196'. [ 685.466584][T10571] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.1196'. [ 685.486629][T10571] tipc: Started in network mode [ 685.496365][T10571] tipc: Node identity d, cluster identity 56 [ 685.509522][T10571] tipc: Node number set to 13 [ 685.646967][T10573] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1197'. [ 685.759207][T10579] netlink: 'syz.1.1200': attribute type 33 has an invalid length. [ 685.779882][T10579] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1200'. [ 685.816972][T10576] netlink: 'syz.2.1198': attribute type 21 has an invalid length. [ 685.824972][T10576] netlink: 'syz.2.1198': attribute type 4 has an invalid length. [ 685.855104][T10576] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1198'. [ 686.124974][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.131425][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.300842][T10593] syzkaller0: entered promiscuous mode [ 686.317655][T10593] syzkaller0: entered allmulticast mode [ 686.366638][T10593] syzkaller0: left promiscuous mode [ 686.523613][T10602] netlink: 'syz.2.1206': attribute type 3 has an invalid length. [ 686.546277][T10602] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 686.682227][T10605] netlink: 'syz.3.1207': attribute type 21 has an invalid length. [ 688.252492][T10649] __nla_validate_parse: 3 callbacks suppressed [ 688.252509][T10649] netlink: 193404 bytes leftover after parsing attributes in process `syz.1.1218'. [ 688.343507][T10654] validate_nla: 3 callbacks suppressed [ 688.343544][T10654] netlink: 'syz.2.1221': attribute type 4 has an invalid length. [ 688.377234][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 688.409518][T10653] netlink: 'syz.2.1221': attribute type 4 has an invalid length. [ 688.430418][T10653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1221'. [ 688.834920][T10661] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.1222'. [ 689.842226][T10697] netlink: 'syz.2.1232': attribute type 9 has an invalid length. [ 689.948253][T10697] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.1232'. [ 690.192292][T10685] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1227'. [ 690.331350][T10688] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1227'. [ 690.510948][T10704] netlink: 'syz.3.1233': attribute type 21 has an invalid length. [ 690.542072][T10704] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1233'. [ 690.589563][T10704] netlink: 'syz.3.1233': attribute type 4 has an invalid length. [ 691.077493][T10714] netlink: 'syz.4.1235': attribute type 3 has an invalid length. [ 691.150752][T10714] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1235'. [ 691.725786][T10721] tap0: tun_chr_ioctl cmd 1074025677 [ 691.802127][T10721] tap0: linktype set to 778 [ 695.560440][T10771] pimreg0: tun_chr_ioctl cmd 1074025681 [ 695.949897][T10779] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.1256'. [ 696.007127][T10779] openvswitch: netlink: Duplicate key (type 0). [ 697.510273][T10819] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1262'. [ 697.557908][T10819] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1262'. [ 698.035612][T10809] delete_channel: no stack [ 698.285351][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1269'. [ 698.462851][T10843] netlink: 'syz.1.1271': attribute type 1 has an invalid length. [ 698.500655][T10843] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1271'. [ 698.527343][T10843] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1271'. [ 698.696756][T10851] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1273'. [ 700.109162][T10878] netlink: 'syz.1.1280': attribute type 6 has an invalid length. [ 700.135248][T10878] netlink: 'syz.1.1280': attribute type 1 has an invalid length. [ 700.182386][T10878] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1280'. [ 702.045743][T10930] netlink: 49920 bytes leftover after parsing attributes in process `syz.4.1295'. [ 702.199915][T10933] netlink: 'syz.2.1297': attribute type 10 has an invalid length. [ 702.540648][T10933] veth1_macvtap (unregistering): left allmulticast mode [ 703.108348][T10948] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 703.198660][T10948] team0: Port device macvlan0 added [ 703.212360][T10944] syzkaller0: entered promiscuous mode [ 703.221256][T10944] syzkaller0: entered allmulticast mode [ 703.293341][T10951] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1302'. [ 703.418693][T10956] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1304'. [ 704.936304][T10987] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 704.945813][T10986] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 704.971208][T10987] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 704.998315][T10990] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 705.025781][T10986] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 705.079474][T10989] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1315'. [ 705.107421][T10987] netlink: 'syz.3.1314': attribute type 29 has an invalid length. [ 705.142740][T10992] netlink: 'syz.1.1316': attribute type 10 has an invalid length. [ 705.154545][T10992] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1316'. [ 705.210185][T10992] netlink: 'syz.1.1316': attribute type 11 has an invalid length. [ 705.226079][T10992] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1316'. [ 705.255561][T10992] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 705.278997][T10992] CPU: 0 PID: 10992 Comm: syz.1.1316 Not tainted syzkaller #0 [ 705.286538][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 705.296638][T10992] Call Trace: [ 705.299956][T10992] [ 705.302940][T10992] dump_stack_lvl+0x18c/0x250 [ 705.307701][T10992] ? show_regs_print_info+0x20/0x20 [ 705.312985][T10992] ? load_image+0x400/0x400 [ 705.317567][T10992] sysfs_warn_dup+0x8e/0xa0 [ 705.322119][T10992] sysfs_do_create_link_sd+0xc0/0x110 [ 705.327591][T10992] device_add_class_symlinks+0x1cf/0x240 [ 705.333286][T10992] device_add+0x507/0xc20 [ 705.337682][T10992] wiphy_register+0x1dad/0x2ae0 [ 705.342602][T10992] ? cfg80211_event_work+0x40/0x40 [ 705.347758][T10992] ? minstrel_ht_alloc+0x88a/0x990 [ 705.352934][T10992] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 705.359061][T10992] ieee80211_register_hw+0x3464/0x4250 [ 705.364798][T10992] ? ieee80211_tasklet_handler+0x20/0x20 [ 705.370504][T10992] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 705.376463][T10992] ? __debug_object_init+0xec/0x450 [ 705.381733][T10992] ? __asan_memset+0x22/0x40 [ 705.386400][T10992] ? __hrtimer_init+0x186/0x270 [ 705.391335][T10992] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 705.397150][T10992] ? mac80211_hwsim_free+0x220/0x220 [ 705.402510][T10992] ? rcu_is_watching+0x15/0xb0 [ 705.407371][T10992] ? kstrndup+0xbd/0x140 [ 705.411950][T10992] hwsim_new_radio_nl+0xdc9/0x1a90 [ 705.417231][T10992] ? __nla_validate+0x50/0x50 [ 705.421996][T10992] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 705.428435][T10992] ? __nla_parse+0x40/0x50 [ 705.432923][T10992] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 705.439333][T10992] genl_family_rcv_msg_doit+0x211/0x310 [ 705.444950][T10992] ? end_current_label_crit_section+0x170/0x170 [ 705.451254][T10992] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 705.457228][T10992] ? bpf_lsm_capable+0x9/0x10 [ 705.461979][T10992] ? security_capable+0x89/0xb0 [ 705.466895][T10992] genl_rcv_msg+0x619/0x7a0 [ 705.471487][T10992] ? genl_bind+0x360/0x360 [ 705.475953][T10992] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 705.482354][T10992] ? ref_tracker_free+0x690/0x840 [ 705.487467][T10992] netlink_rcv_skb+0x241/0x4d0 [ 705.492317][T10992] ? genl_bind+0x360/0x360 [ 705.496819][T10992] ? netlink_ack+0x1180/0x1180 [ 705.501659][T10992] ? __lock_acquire+0x7d40/0x7d40 [ 705.506790][T10992] ? down_read+0x1ac/0x2e0 [ 705.511269][T10992] genl_rcv+0x28/0x40 [ 705.515321][T10992] netlink_unicast+0x751/0x8d0 [ 705.520162][T10992] netlink_sendmsg+0x8d0/0xbf0 [ 705.525320][T10992] ? netlink_getsockopt+0x590/0x590 [ 705.530588][T10992] ? aa_sock_msg_perm+0x94/0x150 [ 705.535587][T10992] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 705.541020][T10992] ? security_socket_sendmsg+0x80/0xa0 [ 705.546535][T10992] ? netlink_getsockopt+0x590/0x590 [ 705.551796][T10992] ____sys_sendmsg+0x5ba/0x960 [ 705.556638][T10992] ? __asan_memset+0x22/0x40 [ 705.561297][T10992] ? __sys_sendmsg_sock+0x30/0x30 [ 705.566376][T10992] ? __import_iovec+0x5f2/0x850 [ 705.571302][T10992] ? import_iovec+0x73/0xa0 [ 705.575848][T10992] ___sys_sendmsg+0x2a6/0x360 [ 705.580588][T10992] ? __sys_sendmsg+0x2a0/0x2a0 [ 705.585465][T10992] __se_sys_sendmsg+0x1c2/0x2b0 [ 705.590364][T10992] ? __x64_sys_sendmsg+0x80/0x80 [ 705.595363][T10992] ? lockdep_hardirqs_on+0x98/0x150 [ 705.600635][T10992] do_syscall_64+0x55/0xa0 [ 705.605113][T10992] ? clear_bhb_loop+0x40/0x90 [ 705.609845][T10992] ? clear_bhb_loop+0x40/0x90 [ 705.614680][T10992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 705.620716][T10992] RIP: 0033:0x7f06c259c799 [ 705.625186][T10992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.645128][T10992] RSP: 002b:00007f06c3535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.653601][T10992] RAX: ffffffffffffffda RBX: 00007f06c2815fa0 RCX: 00007f06c259c799 [ 705.661633][T10992] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 705.669657][T10992] RBP: 00007f06c2632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 705.677680][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.685711][T10992] R13: 00007f06c2816038 R14: 00007f06c2815fa0 R15: 00007ffe0fd3c348 [ 705.693769][T10992] [ 705.718428][T11008] syz.4.1321[11008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 705.718939][T11008] syz.4.1321[11008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.330353][T11037] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1328'. [ 706.761506][T11056] IPv6: pim6reg1: Disabled Multicast RS [ 707.059049][T11065] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.1337'. [ 707.106769][T11065] netlink: zone id is out of range [ 707.123457][T11065] netlink: zone id is out of range [ 707.135133][T11065] netlink: zone id is out of range [ 707.154546][T11065] netlink: zone id is out of range [ 707.168861][T11065] netlink: zone id is out of range [ 707.185704][T11065] netlink: zone id is out of range [ 707.198955][T11065] netlink: zone id is out of range [ 707.222313][T11065] netlink: zone id is out of range [ 707.237676][T11065] netlink: zone id is out of range [ 707.251255][T11065] netlink: zone id is out of range [ 707.930242][T11079] netlink: 'syz.2.1341': attribute type 58 has an invalid length. [ 707.942723][T11079] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1341'. [ 708.174089][T11095] netlink: 'syz.1.1344': attribute type 4 has an invalid length. [ 708.182729][T11095] netlink: 'syz.1.1344': attribute type 3 has an invalid length. [ 708.192640][T11083] syzkaller0: entered promiscuous mode [ 708.194195][T11095] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1344'. [ 708.200846][T11083] syzkaller0: entered allmulticast mode [ 708.221784][T11094] netlink: 56843 bytes leftover after parsing attributes in process `syz.2.1345'. [ 708.368153][T11102] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1347'. [ 710.875280][T11105] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1347'. [ 710.977203][T11119] netlink: 'syz.1.1349': attribute type 10 has an invalid length. [ 711.340980][T11131] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1353'. [ 712.617434][T11148] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1358'. [ 713.259343][T11161] netlink: 'syz.2.1361': attribute type 21 has an invalid length. [ 713.299131][T11161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 713.306618][T11161] IPv6: NLM_F_CREATE should be set when creating new route [ 713.314229][T11161] IPv6: NLM_F_CREATE should be set when creating new route [ 713.321558][T11161] IPv6: NLM_F_CREATE should be set when creating new route [ 716.576194][T11202] netlink: 'syz.1.1372': attribute type 39 has an invalid length. [ 717.044871][T11216] netlink: 'syz.3.1376': attribute type 3 has an invalid length. [ 717.073724][T11216] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 717.109673][T11216] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1376'. [ 717.235581][T11222] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.1378'. [ 717.714067][T11236] netlink: 'syz.3.1383': attribute type 21 has an invalid length. [ 717.734570][T11236] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1383'. [ 717.761074][T11236] netlink: 'syz.3.1383': attribute type 4 has an invalid length. [ 717.774487][T11236] netlink: 'syz.3.1383': attribute type 5 has an invalid length. [ 717.787879][T11236] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1383'. [ 718.237565][T11254] netlink: 'syz.1.1389': attribute type 41 has an invalid length. [ 718.628646][T11266] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1392'. [ 722.345462][ T51] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 722.601337][T11311] netlink: 'syz.4.1401': attribute type 29 has an invalid length. [ 722.621783][T11311] netlink: 'syz.4.1401': attribute type 29 has an invalid length. [ 722.924397][T11318] aaaaaaaaaaaaaaa: entered promiscuous mode [ 724.041052][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 724.309656][T11333] IPv6: Can't replace route, no match found [ 724.454548][T11340] netlink: 'syz.4.1408': attribute type 3 has an invalid length. [ 724.481180][T11340] netlink: 'syz.4.1408': attribute type 1 has an invalid length. [ 724.490201][T11340] netlink: 193404 bytes leftover after parsing attributes in process `syz.4.1408'. [ 724.786362][T11353] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1412'. [ 724.989817][ T5829] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 725.716977][T11383] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1420'. [ 725.742239][T11383] netlink: 'syz.3.1420': attribute type 17 has an invalid length. [ 725.751442][T11383] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1420'. [ 725.765329][T11384] netlink: 'syz.4.1422': attribute type 2 has an invalid length. [ 725.777633][T11384] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1422'. [ 726.712921][T11387] netlink: 'syz.3.1423': attribute type 6 has an invalid length. [ 726.731233][T11387] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1423'. [ 727.674552][T11421] netlink: 'syz.4.1432': attribute type 11 has an invalid length. [ 728.625043][T11448] netlink: 'syz.2.1439': attribute type 21 has an invalid length. [ 728.641151][T11446] netlink: 'syz.1.1438': attribute type 1 has an invalid length. [ 728.729985][T11446] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1438'. [ 730.334013][T11491] netlink: 'syz.3.1450': attribute type 29 has an invalid length. [ 730.376396][T11491] netlink: 'syz.3.1450': attribute type 29 has an invalid length. [ 730.427772][T11502] netlink: 'syz.2.1451': attribute type 2 has an invalid length. [ 730.528628][T11502] netlink: 'syz.2.1451': attribute type 9 has an invalid length. [ 730.554661][T11502] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 730.597813][T11502] netlink: 'syz.2.1451': attribute type 11 has an invalid length. [ 730.619895][T11502] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1451'. [ 730.673015][T11494] netlink: 'syz.2.1451': attribute type 10 has an invalid length. [ 730.948041][T11494] team0: Device wg1 is of different type [ 731.372988][ T5829] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 732.034614][T11557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1470'. [ 732.506542][T11569] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1472'. [ 732.944602][T11584] validate_nla: 2 callbacks suppressed [ 732.944623][T11584] netlink: 'syz.4.1478': attribute type 10 has an invalid length. [ 732.986086][T11584] netlink: 'syz.4.1478': attribute type 19 has an invalid length. [ 733.008910][T11584] netlink: 14536 bytes leftover after parsing attributes in process `syz.4.1478'. [ 733.629132][T11577] net_ratelimit: 331 callbacks suppressed [ 733.629151][T11577] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 733.773737][T11590] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 733.976972][T11597] netlink: 'syz.4.1480': attribute type 21 has an invalid length. [ 734.016492][T11597] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1480'. [ 734.025663][T11597] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1480'. [ 734.370812][T11611] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1483'. [ 734.392314][T11609] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1483'. [ 734.420172][T11611] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1483'. [ 735.128820][T11622] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1488'. [ 735.764051][T11644] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1491'. [ 735.765820][T11640] netlink: 'syz.4.1495': attribute type 29 has an invalid length. [ 735.823348][T11640] netlink: 'syz.4.1495': attribute type 29 has an invalid length. [ 736.068020][T11644] netlink: 'syz.2.1491': attribute type 29 has an invalid length. [ 736.132265][T11644] netlink: 'syz.2.1491': attribute type 29 has an invalid length. [ 736.176160][T11646] netlink: 'syz.2.1491': attribute type 29 has an invalid length. [ 736.211463][T11649] netlink: 'syz.2.1491': attribute type 29 has an invalid length. [ 737.328501][ T29] INFO: task syz.0.636:8239 blocked for more than 143 seconds. [ 737.340215][ T29] Not tainted syzkaller #0 [ 737.347404][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.366440][ T29] task:syz.0.636 state:D stack:25008 pid:8239 ppid:5823 flags:0x00004002 [ 737.382884][ T29] Call Trace: [ 737.389410][ T29] [ 737.401013][ T29] __schedule+0x1553/0x45a0 [ 737.424260][ T29] ? rcu_is_watching+0x15/0xb0 [ 737.435099][ T29] ? asan.module_dtor+0x20/0x20 [ 737.449796][ T29] ? trace_contention_end+0x39/0xe0 [ 737.466301][ T29] ? task_work_cancel+0xa5/0x220 [ 737.474192][ T29] ? task_work_cancel_func+0x210/0x210 [ 737.487542][ T29] schedule+0xbd/0x170 [ 737.500208][ T29] ? _free_event+0xfe/0xf30 [ 737.512068][ T29] _free_event+0x174/0xf30 [ 737.533187][ T29] perf_event_release_kernel+0x842/0x8d0 [ 737.550469][ T29] ? __might_sleep+0xe0/0xe0 [ 737.562355][ T29] ? calc_timer_values+0x400/0x400 [ 737.577440][ T29] ? __fput+0x61c/0x970 [ 737.586307][ T29] ? perf_mmap+0x15c0/0x15c0 [ 737.591054][ T29] perf_release+0x3b/0x40 [ 737.595465][ T29] __fput+0x234/0x970 [ 737.599918][ T29] task_work_run+0x1d4/0x260 [ 737.604604][ T29] ? task_work_cancel+0x220/0x220 [ 737.610110][ T29] do_exit+0x95a/0x2460 [ 737.614386][ T29] ? put_task_struct+0xc0/0xc0 [ 737.619602][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 737.625660][ T29] ? get_signal+0x1068/0x13f0 [ 737.630791][ T29] ? lock_chain_count+0x20/0x20 [ 737.635729][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 737.640988][ T29] do_group_exit+0x21b/0x2d0 [ 737.645658][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 737.661853][ T29] get_signal+0x12fc/0x13f0 [ 737.666863][ T29] arch_do_signal_or_restart+0xc2/0x800 [ 737.672537][ T29] ? get_sigframe_size+0x20/0x20 [ 737.678052][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 737.683593][ T29] exit_to_user_mode_loop+0x70/0x110 [ 737.696249][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 737.701912][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 737.716415][ T29] do_syscall_64+0x61/0xa0 [ 737.720948][ T29] ? clear_bhb_loop+0x40/0x90 [ 737.725698][ T29] ? clear_bhb_loop+0x40/0x90 [ 737.746109][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 737.752619][ T29] RIP: 0033:0x7f547f19c799 [ 737.766175][ T29] RSP: 002b:00007f547ffb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 737.774693][ T29] RAX: 0000000000000004 RBX: 00007f547f416090 RCX: 00007f547f19c799 [ 737.796220][ T29] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000000 [ 737.804292][ T29] RBP: 00007f547f232bd9 R08: 0000000000000000 R09: 0000000000000000 [ 737.826044][ T29] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 737.834119][ T29] R13: 00007f547f416128 R14: 00007f547f416090 R15: 00007ffcd327fb98 [ 737.842258][ T29] [ 737.845418][ T29] [ 737.845418][ T29] Showing all locks held in the system: [ 737.862650][ T29] 1 lock held by khungtaskd/29: [ 737.873165][ T29] #0: ffffffff8d132060 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 737.889809][ T29] 2 locks held by getty/5528: [ 737.894608][ T29] #0: ffff88814cd6c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 737.913978][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 737.936095][ T29] 2 locks held by kworker/1:4/5871: [ 737.941381][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 737.964421][ T29] #1: ffffc9000498fd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 737.988461][ T29] 5 locks held by kworker/u4:19/6704: [ 737.997447][ T29] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 738.016030][ T29] #1: ffffc90003a57d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 738.034096][ T29] #2: ffffffff8e3b3d10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 738.051112][ T29] #3: ffffffff8e3c0d48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xd4/0x370 [ 738.077187][ T29] #4: ffffffff8d137a38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 738.100826][ T29] 1 lock held by syz.2.1443/11482: [ 738.114708][ T29] 2 locks held by syz.1.1504/11673: [ 738.125588][ T29] #0: ffff888051ce0820 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 738.144157][ T29] #1: ffffffff8d137a38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 738.162332][ T29] 1 lock held by syz.4.1507/11679: [ 738.171344][ T29] #0: ffffffff8d1921e8 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 738.190126][ T29] 2 locks held by syz.4.1507/11681: [ 738.200034][ T29] [ 738.202415][ T29] ============================================= [ 738.202415][ T29] [ 738.225635][ T29] NMI backtrace for cpu 1 [ 738.230034][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 738.237273][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.247369][ T29] Call Trace: [ 738.250693][ T29] [ 738.253668][ T29] dump_stack_lvl+0x18c/0x250 [ 738.258422][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 738.263573][ T29] ? show_regs_print_info+0x20/0x20 [ 738.268825][ T29] ? load_image+0x400/0x400 [ 738.273410][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 738.278389][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 738.284585][ T29] ? _printk+0xde/0x130 [ 738.288797][ T29] ? load_image+0x400/0x400 [ 738.293332][ T29] ? load_image+0x400/0x400 [ 738.297870][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 738.303984][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 738.309990][ T29] watchdog+0xf3d/0xf80 [ 738.314173][ T29] ? watchdog+0x1e1/0xf80 [ 738.318540][ T29] kthread+0x2fa/0x390 [ 738.322632][ T29] ? hungtask_pm_notify+0x90/0x90 [ 738.327687][ T29] ? kthread_blkcg+0xd0/0xd0 [ 738.332310][ T29] ret_from_fork+0x48/0x80 [ 738.336781][ T29] ? kthread_blkcg+0xd0/0xd0 [ 738.341402][ T29] ret_from_fork_asm+0x11/0x20 [ 738.346210][ T29] [ 738.349705][ T29] Sending NMI from CPU 1 to CPUs 0: [ 738.354976][ C0] NMI backtrace for cpu 0 [ 738.355005][ C0] CPU: 0 PID: 5874 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 738.355022][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.355032][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 738.355053][ C0] RIP: 0010:memset_orig+0x29/0xac [ 738.355076][ C0] Code: 90 66 0f 1f 00 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 41 89 f9 41 83 e1 07 75 6c 48 89 d1 48 c1 e9 06 <74> 35 0f 1f 44 00 00 48 ff c9 48 89 07 48 89 47 08 48 89 47 10 48 [ 738.355090][ C0] RSP: 0018:ffffc900049bf678 EFLAGS: 00000002 [ 738.355103][ C0] RAX: 0000000000000000 RBX: ffffc900049bf9a0 RCX: 0000000000000001 [ 738.355114][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: ffffc900049bf6c0 [ 738.355125][ C0] RBP: ffffc900049bf770 R08: ffffc900049bf6ff R09: 0000000000000000 [ 738.355142][ C0] R10: ffffc900049bf6c0 R11: fffff52000937ee0 R12: ffffc900049bf6c0 [ 738.355154][ C0] R13: dffffc0000000000 R14: ffffc900049bf9a0 R15: ffffc900049bf7c0 [ 738.355167][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 738.355181][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 738.355192][ C0] CR2: 00002000000030c0 CR3: 0000000026784000 CR4: 00000000003506f0 [ 738.355207][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 738.355217][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 738.355229][ C0] Call Trace: [ 738.355234][ C0] [ 738.355239][ C0] chacha_block_generic+0xac/0xdd0 [ 738.355267][ C0] ? __crypto_xor+0x1760/0x1760 [ 738.355302][ C0] crng_fast_key_erasure+0x165/0x270 [ 738.355331][ C0] ? extract_entropy+0x890/0x890 [ 738.355354][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 738.355385][ C0] crng_make_state+0x259/0x700 [ 738.355412][ C0] ? crng_make_state+0x142/0x700 [ 738.355436][ C0] ? urandom_read_iter+0x140/0x140 [ 738.355470][ C0] _get_random_bytes+0x100/0x250 [ 738.355494][ C0] ? get_random_bytes+0x20/0x20 [ 738.355536][ C0] nsim_dev_trap_report_work+0x646/0xb00 [ 738.355565][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 738.355587][ C0] process_scheduled_works+0xa5d/0x15d0 [ 738.355626][ C0] ? worker_attach_to_pool+0x380/0x380 [ 738.355652][ C0] ? assign_work+0x3d2/0x5d0 [ 738.355676][ C0] worker_thread+0xa55/0xfc0 [ 738.355717][ C0] kthread+0x2fa/0x390 [ 738.355732][ C0] ? pr_cont_work+0x560/0x560 [ 738.355753][ C0] ? kthread_blkcg+0xd0/0xd0 [ 738.355769][ C0] ret_from_fork+0x48/0x80 [ 738.355788][ C0] ? kthread_blkcg+0xd0/0xd0 [ 738.355805][ C0] ret_from_fork_asm+0x11/0x20 [ 738.355844][ C0] [ 738.750848][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 738.757790][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 738.765027][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.775131][ T29] Call Trace: [ 738.778447][ T29] [ 738.781410][ T29] dump_stack_lvl+0x18c/0x250 [ 738.786149][ T29] ? show_regs_print_info+0x20/0x20 [ 738.791409][ T29] ? load_image+0x400/0x400 [ 738.795987][ T29] panic+0x2dc/0x730 [ 738.800026][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 738.805732][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 738.810287][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 738.815908][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 738.822107][ T29] watchdog+0xf7c/0xf80 [ 738.826303][ T29] ? watchdog+0x1e1/0xf80 [ 738.830674][ T29] kthread+0x2fa/0x390 [ 738.834776][ T29] ? hungtask_pm_notify+0x90/0x90 [ 738.839833][ T29] ? kthread_blkcg+0xd0/0xd0 [ 738.844471][ T29] ret_from_fork+0x48/0x80 [ 738.848918][ T29] ? kthread_blkcg+0xd0/0xd0 [ 738.853561][ T29] ret_from_fork_asm+0x11/0x20 [ 738.858396][ T29] [ 738.862028][ T29] Kernel Offset: disabled [ 738.866387][ T29] Rebooting in 86400 seconds..