last executing test programs: 5.338012597s ago: executing program 3 (id=3520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b62, &(0x7f0000000200)=[{&(0x7f0000000040)="e03f030033000b35d25a80000a000200053582c137153e37000c0680058802000300"/46, 0x33fe0}, {&(0x7f0000000180)="6207322d369385a5d8f1146dbb143947c6dc10af03548cc906e40481709052b3dbd4c85aee496caeb30b2e19e75b8b3fb9881b19cdd9bc9dffcb8292e9979b52985b8053b33effe6cb36f1d2f9b081742918bfb9e54c92be007458b5"}], 0x1}, 0x8000) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r3 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x5411, &(0x7f0000000240)) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) openat$cgroup(r4, &(0x7f0000000200)='syz1\x00', 0x200002, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) close(r0) 5.008348686s ago: executing program 3 (id=3524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000063132200000000008510000002000000850000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x7fffffff}, 0x0, 0xe, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4ed, 0x3}, 0x823, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000000c0)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000008c0)=0xffffffffffffffff, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r5}, 0x8) gettid() perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0xfa, 0x10, 0xf7, 0xe8, 0x0, 0x2, 0x40101, 0x10dda94a6b23ff15, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2d, 0x4, @perf_bp={&(0x7f0000000940), 0x8}, 0x102400, 0x8, 0x5, 0x4, 0x8000000000000000, 0x6, 0xffff, 0x0, 0x3, 0x0, 0x8000}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@ifindex, 0x12, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@map=r2, r1, 0xc, 0xc, 0x0, @void, @value=r1, @void, @void, r6}, 0x20) r7 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x8, 0x4f, 0xb9, 0xa2, 0x0, 0x3593, 0x2a208, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f00000001c0), 0xb}, 0x11ab3, 0x6, 0x116d, 0x1, 0xd, 0x9, 0x8, 0x0, 0xff, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x1) r8 = perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x8, 0x0, 0x42, 0xa1, 0x0, 0x4d4d, 0x2010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xc, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x202, 0x4, 0xff, 0x4, 0xcb1a, 0x401, 0x8001, 0x0, 0xff, 0x0, 0xfffffffffffff3c0}, 0xffffffffffffffff, 0xb, r7, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000480)='\xd8\v\vD\xe8\xa8j\x98\xa9\xc5\a\xa7\\\xec\xdd\nV\x8eh\fb\xbe}\x8f\xb0\xb4\xc43\xdd\x16$]\a`\xfala-\xb7\x83n&\\\x9f~\xe7\xe62?+\xbeU\xac\xfe\x96\xca\xc3#9\x144\xa4\xee\x97\xee\x98`\xc8q6\xc8A_\xad\x84\tD\x96\xe1\xf2\xa1\x17\xfc\xdb\x9fTFO\xfa\xeeO\xec\x97\fm0\xd1\x0e\xfc\xeeL #\xea\xf7\x16\x83\xc0\xe0f\xf6\xdd\xe6B\x90*\xaf\xdd\x1d\xa3v\xea\xbe\x1aUO\t\aAY\x83`\x8e\xd1\v\xa5\x1a\"\x9a\x93\'4\xdeg\xe5\x11Q\x88\xc4\'\x02\x88\xab\x13\x1e\xd2\xcc\x9a\xb8\xaf{\t\xa1\xc1\x01\xdd\xfa;\x1f\x91\xf6I\xa5\x9d\x8cqDb\xc8\xcd\x9c&hm\xad\xd9\x86y\xc0\xe3\xb1\x9f\xc8\xa1\xd6\x03\xa4\x10\xa8\xbe\xea\x0ee\x9fK^.\xf1_\xaf8\xe8<>?\xcb\xb9x\x16\xe7\xa5x\x85p\xaa1\x98R\xfc\xe9\'\x80l\xbc\x10X~\x94R\x87\xcf\xc8\xb3F\xd3\x017\xd8w\xa1\x98\x86@\xfa7\xfcL\xef\xddiKjw.\x99o\xe8\x9b\x14c\xc09\x86\xb1\xd1\xf9Y\xa7\xab\xa9\xd0B\xea\x1cU>\xde\x04\xf98\x03\x11\x17\x90\xfe\xb3\x1b20\xad>W\xbb\xa8\x95\xddI=z\xe0C]\xc8\\\xc5}\xc6qb\x8c\buIuL\xf2\x9a\x06]\v\xc2]\x18\xf9]\x86-\xc0.\xea\x8c\xf8\x02\xf75\x0e`>\xedF6TT\xf4\xef\xd5\x1e.*\xab\xa4\xbdw\xcb2s\x05\x17je\x7fa\xb7t\x97$=!b\xac\xe5j:\xb1Z\nFx\x01\n\x05\x01\xa0XJ\xc9}\xae\xead\xbfiKF\xd6x\xda\xa4p\x9bO`\xd5p\xd1*Z\xec\xa0-;t\xeaq\x01O\xdd8u\xb6\xb8\v\xb7\xe5\x8d\x90\xad=\xf7\x18*\xb01Vn\x94\x10Q\x03*\xa0\a\x89\x87V\xac\xb5N\x02@\xff/\xdc\x14I\xd9\x8d\x9e\xe8\x1d\x87\x1a\x05\a\x80\x02\xa7\xefH\xb12\x81\x91O\x91\xd3%B\f\xa6\x99\x139\n\xfb3\xa7\xaf\xce^\xaf\xc7J\xf3\x89!p\xf4\x90h\xael\xbd\x96\x8aLx\xdfE\xad\xe39\x88\xe5\xd3\x01o\xab{ \x81\x7f\xa8T:\xd1n\'\xd0OA\xed\xa0\x19\x8e\xb3\xdd\xae\x8de\x00\x00\xa31\x16\xe8\n\xcf\xd2;\x9b\xed\xe2;i\x1a}2\xa6\xd0\xb3\x82\xd5\r\xa8lUV&\x80\x92\x94Z\xc0\xe2\x8b\x16\xe30x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010101}}}], 0x20}, 0x48000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0xff5, &(0x7f0000002e00)=""/4085, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) 4.843900171s ago: executing program 0 (id=3526): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x3, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0xb, 0x800000, 0x0, 0x2, 0x2, 0x6, 0x0, 0x8000, 0x0, 0xc0}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x1) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800", 0x2}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x4, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x40, 0x2, 0x0, 0x6, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={&(0x7f0000000580)="a0", &(0x7f00000005c0)=""/247, &(0x7f00000007c0)="b2d68162d4b74974610762df7b4011ddcfc7569dd4daf401db969857f0bfc250963f8eb1409565892a0b9f2962aa5f60673e15117bacfb5cd01657713423a74eed08acbe7f4946e12f3c2450b94929", &(0x7f0000000880)="0cbe1b7b7754ea07b459a91bec34ea391442348759538bc63206f160086affdfd3a03eaafa1734f45d5c0e8e6b17292004b33e", 0x5}, 0x38) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2}, 0xc) (async) openat$cgroup_freezer_state(r4, &(0x7f0000000380), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) (async) r5 = socket$kcm(0x10, 0x2, 0x4) close(r5) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000900000006001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) (async) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x29, 0x1, 0x4, 0x0, 0x0, 0x4, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 4.706109175s ago: executing program 3 (id=3527): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020008000000b70400000100000085000000820000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$kcm(0xa, 0x5, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xf7) (async) r4 = socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="1400000029000b92d25a80648c2594070224fc60", 0x14}], 0x1}, 0x4000000) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x11c044, 0xcdd, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="e03f03002a000b05d25a806c8c6f94f90524fc60a602640400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x2e}]}, 0x880) 4.275784678s ago: executing program 0 (id=3528): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000900)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x2000d085) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={0x0}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x100) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x3004c0c4) socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 4.234235668s ago: executing program 1 (id=3529): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c", 0x16}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x8, 0x0, 0x1, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYRES16=r0], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r3 = socket$kcm(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x13, 0x0, 0xfcd8) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1280001000002020000000000080005007a010401a80016002000034004020000035c0461c900004f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316", 0x5f}], 0x1}, 0x20014000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="1400000029000b92d25a80080000000000000047", 0x14}], 0x1}, 0x4000000) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe9, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x4, @perf_config_ext={0x40, 0x2}, 0x100904, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x11, 0x0, 0x40019) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000321053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 4.001647175s ago: executing program 3 (id=3531): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 3.379236123s ago: executing program 0 (id=3532): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc040ca1800004000000000000000010003a0e0037000f001e0bbc82a91401eb", 0x2e}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x1b, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1830000075000000000000000500000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000003000000850000000600000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000180100002020692500000000002020207b1af8ff00000000bfe79c000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xf8, &(0x7f0000000100)=""/248, 0x0, 0x2c}, 0x24) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x8}]}, {0x0, [0x61, 0x61, 0x2e, 0x20]}}, &(0x7f0000001900)=""/221, 0x2a, 0xdd, 0x1}, 0x28) 3.027394853s ago: executing program 3 (id=3533): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f00000000c0), 0x6}, 0x10c002, 0x89, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x461c574afe861d41) r1 = syz_clone(0xc3000480, &(0x7f0000000c40), 0x0, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="2d749115443e0fc696f38278d7c61a2d6ca6732c98d72ca2a5b1655cad6b92bf6fd479123bd61d7f6bbdfdef271ee56789a87cf5dafd3f9ec0f707139150f0308ec2b1e0c79c6169b2c876f617d8b0749feb9a245935927278a77891fa05352f93b0cc5cbe3b7343689405aa5d234b766d32dc8fc299611d2157b848d1ce74") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f36702f, 0x0, @perf_bp={&(0x7f0000000100), 0x8}}, r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xea58}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000000000)=[{&(0x7f0000000300)=',', 0x1}], 0x1, 0x0, 0x0, 0x10000000}, 0x4048050) close(0x3) 1.73665583s ago: executing program 0 (id=3534): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f00000001c0)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_netprio_ifpriomap(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) 1.574953875s ago: executing program 1 (id=3536): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x2, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x100020, 0x0, 0xd, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}, 0x24000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$kcm(r0, &(0x7f0000001980)={&(0x7f0000000140)=@tipc, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/8, 0x8}, {&(0x7f0000001480)=""/245, 0xf5}, {&(0x7f0000001580)=""/155, 0x9b}, {&(0x7f0000001640)=""/203, 0xcb}, {0x0}], 0x6, &(0x7f0000001940)=""/47, 0x2f}, 0x40002101) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000)=r3, 0x8) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10090a, 0xd3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb4b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000240), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="1100000006000000080041000000000000000000142a17338c42c0ebd8a868b5e6bea28d2b197161b8b1fb2a2dcfd1ee4445b83871adc7dfae3598a2093d377172f2d501ed20348dfaa8c94066b9521dcbec143603548cec188730b7991ac382981465ac84201568505d65a54ab6092515cfda07361c143b13bcf9dc223a06f1d7bf8bf28b5d960ba6087ecb4437b124bfd577a621358f6a743993313a6e8be504", @ANYRES32=r3, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000000000000300"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={r6, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@ifindex=r7, r3, 0x3a, 0x0, 0x0, @void, @value=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r8 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r8, &(0x7f0000000a40)={&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000440)=""/51, 0x33}], 0x1}, 0x10001) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d80000001d0081054e81f783db4cb9040a09000000000000e8fc55a10a0015000600142613600e1208000f0000000401a80001000047880000000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32=r10, @ANYBLOB="010000000020000000000000", @ANYRES32=r3, @ANYBLOB="ac4e06ac81dcff054ad0276389666eb30e30b3e8037111a33addda5a2a4603f4933ec300d9a93b4578cf507c311abcfe", @ANYRES64=0x0], 0x20) close(r10) socket$kcm(0x10, 0x2, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r4, 0x2402, 0xa9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) ioctl$SIOCSIFHWADDR(r10, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) 1.363236611s ago: executing program 2 (id=3537): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xc, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xe, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)='%pI4 \x00'}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x0, 0x10}, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5a467acd836d510e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfb32}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x75, &(0x7f0000000080)=""/117, 0x40f00, 0x2, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0x0, 0x85, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0xffffffffffffffff, r2, 0x1, r3, r4, 0xffffffffffffffff, r5, 0x1, r6, r7], 0x0, 0x10, 0x7}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r9, 0x800454e0, &(0x7f0000000940)=r8) socketpair(0x3, 0x809, 0xb, &(0x7f0000000980)) r10 = perf_event_open(&(0x7f00000009c0)={0x5, 0x80, 0x5, 0xc4, 0x25, 0x3, 0x0, 0x100, 0xe78b496530275dc8, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xf5, 0x9}, 0x8001, 0x400, 0x1, 0x4, 0x0, 0xd, 0x8000, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000a40)='%pI4 \x00') r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000bc0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@cgroup=r11, 0x9, 0x0, 0xc7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000ac0)=[0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000c40)={0x9, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c00)={@map=r7, r8, 0x32, 0x2030, 0x0, @void, @void, @value=r14, @void, r13}, 0x20) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e40)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x16, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe4a7, 0x0, 0x0, 0x0, 0x4}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x3, 0x86, &(0x7f0000000d80)=""/134, 0x41000, 0x0, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f0000000e80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000ec0)=[{0x0, 0x2, 0xa, 0xb}, {0x0, 0x1, 0x1, 0x8}, {0x1, 0x2, 0x4, 0x2}, {0x4, 0x2, 0x10, 0x6}, {0x1, 0x1, 0xa, 0x8}, {0x3, 0x5, 0x1, 0x1}, {0x4, 0x4, 0x9, 0x5}, {0x4, 0x1, 0x4, 0xa}], 0x10, 0x4}, 0x94) r16 = openat$cgroup_subtree(r12, &(0x7f0000001000), 0x2, 0x0) write$cgroup_subtree(r16, &(0x7f0000001040)={[{0x2b, 'net_prio'}, {0x2b, 'cpuset'}, {0x2d, 'pids'}, {0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x2d, 'net_cls'}, {0x2b, 'hugetlb'}, {0x2b, 'devices'}]}, 0x49) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001440)={&(0x7f00000010c0)="52ea14e760244fa70c21a93064af1f20dbb351b3fc47fabd7b7b4913446e4430dfdedbb182c45c3c6840184cf922b4fc6f6414e0748f51b1347c4af7d8dd037f011247e10f642c9f9b393f4db80d44b09e745b7fcab749bec0f7973d94", &(0x7f0000001140)=""/201, &(0x7f0000001240)="d555e72a752b538d5b7d32977cecbf01da0d20d3b5a3ad60dbf3fabbfa0b5b49e09c86bc737483cb4f08d7a8c47dd19a616694039baca9b1abc75f07ffcbb2b7156731e34f729cfcf317421020b29e5d549edc91548b38c19dbd5bc4676642d25db61579c668eda80f3f28d8b35057db00dc542594083e9e42c491831f9bdcf8b29346d2d436ed6f7ac87480a50a1aa99c99858cfb8156fe64a8356d029711318e5de09ce062df28c5c6330f14a4422ac235cb5e5a7e60ae45cc45497d0f318f9846c9cccd4bdad91f9105276b877652aa", &(0x7f0000001340)="54208ce7f451fdba975f798512f8b822d890b1b33328f7ef155e385210364322f6d02a587b6e1afde31bb7ece27f627c2a80cb568e8f4b9138f4da0e0ba8c711431c19caed55fca8036ddb92a4e85fc102c5c791c431899c49c37f2f8c3b52299e1535b2a1976a1ea985986eb8b0e40a258c4aabdb0015c6fbbf28a3371695e7e12fb112463fcca23677a3dc833a6d6b22f0de520166762ca0badc354ebcd7431965f310115796c2098ef43ff79e7c292fc9f61e28497858de28a7c8708f39406bf8ad31f2868ba187ce", 0x2, r7}, 0x38) r17 = perf_event_open$cgroup(&(0x7f00000014c0)={0x4, 0x80, 0x4, 0x4, 0x6, 0x5, 0x0, 0x121, 0x1026, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f0000001480), 0x2}, 0x100058, 0x2, 0x3, 0x7, 0x7, 0x2, 0x200, 0x0, 0x4, 0x0, 0xd}, r11, 0xf, r10, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r17, 0x2401, 0xff) r18 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001540)={0xffffffffffffffff, 0x0, 0x8}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001640)={r18, &(0x7f0000001580)="36740ac3979aec24249573b3168ac0eed3db329ca6c03083272c00aa628c22dab56a871d6649650fe8d66115eacf986b35b72b90f823fe175fed4fd2da8407a9e1d84ae1058a96c7a4208457a1fb4e4c374d3417d3c68855b8631a3ce015d7cd23f702af215e71540dc64894c81fc3c2315b5c253cb576de56c5d1912d18bc718dc5d25131aeadd2cb014fbcc7092a42df2c03b0acdce175dfa81a09a4c58cbf040a1b8d84b393b958d026bc792a530d4ad62d0dbc1ff1de55ce5cf944a861"}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001680)={r18, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000019c0)={r5, 0x58, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b40)={0x6, 0x35, &(0x7f00000016c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r19}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @generic={0x6, 0x3, 0x4, 0x8, 0xb2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r18}}, @jmp={0x5, 0x1, 0x4, 0x3, 0x2, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r18}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9b7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000001880)='GPL\x00', 0x7fff, 0x7a, &(0x7f00000018c0)=""/122, 0x41000, 0x21, '\x00', r20, 0x25, r15, 0x8, &(0x7f0000001a00)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x4, 0x7, 0x3, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001a80)=[r2, r4], &(0x7f0000001ac0)=[{0x0, 0x1, 0x9, 0x8}, {0x5, 0x5, 0xa, 0x1}, {0x3, 0x5, 0xe, 0xb}, {0x4, 0x5, 0x7, 0xa}, {0x1, 0x2, 0xd}], 0x10, 0xfffffffb}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e00)={0x11, 0x9, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x596}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000001cc0)='syzkaller\x00', 0x100, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, r15, 0x8, &(0x7f0000001d00)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001d40)={0x0, 0x3, 0xfffffff9, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001d80)=[r4, r3, r19, r6, r3, r6, r6], &(0x7f0000001dc0)=[{0x4, 0x1, 0x3, 0x5}, {0x0, 0x1, 0x5, 0x1}], 0x10, 0x7}, 0x94) 1.217710895s ago: executing program 2 (id=3538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r0}, 0xc) 1.182773346s ago: executing program 0 (id=3539): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r0, @ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0xffffffff, [{0xe, 0x0, 0x3}, {0x0, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x46, 0x0, 0x6}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}, @int]}}, 0x0, 0x4e}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3ff, '\x00', 0x0, r3, 0x3, 0x5, 0x1}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x100007, 0x4, 0x21, 0x1, 0xffffffffffffffff, 0x400000}, 0x50) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r8, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x20, &(0x7f0000000ac0)=ANY=[@ANYBLOB="8759b634000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800008f0500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095000000000000001833000001000000000000000000000085100000fdffffff950000000000000018170000", @ANYRES32=r10, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000270500008500000006000000"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x97, &(0x7f0000000680)=""/151, 0x41000, 0x48, '\x00', r11, @cgroup_sysctl=0x12, r10, 0x8, &(0x7f0000000800)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x4, 0x6, 0x3, 0x6}, 0x10, 0x0, r9, 0x9, 0x0, &(0x7f0000000880)=[{0x0, 0x5, 0x6, 0x7}, {0x1, 0x5, 0x1, 0x1}, {0x2, 0x3, 0x5, 0x4}, {0x4, 0x3, 0xb}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x2, 0x3, 0xa}, {0x2, 0x4, 0x8, 0x1}, {0x1, 0x3, 0xc, 0x5}, {0x0, 0x4, 0x0, 0xc}], 0x10, 0x7fff}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x4, '\x00', r11, 0xffffffffffffffff, 0x3, 0x1}, 0x50) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(r5, 0x8004745a, &(0x7f0000000180)) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, r6, 0x7, '\x00', 0x0, r4, 0x1, 0x2}, 0x50) r13 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r14, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r13, 0x107, 0x12, &(0x7f00000008c0)=r15, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe51d}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='syzkaller\x00', 0x7, 0x11, &(0x7f0000000580)=""/17, 0x41000, 0x40, '\x00', 0x0, 0x0, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x3, 0x8, 0x2, 0x5baa}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000006c0)=[{0x5, 0x2, 0x2, 0x9}, {0x0, 0x4}, {0x3, 0x4, 0x1, 0x6}, {0x0, 0x5, 0xc, 0x4}, {0x2, 0x5, 0xb, 0xc}, {0x1, 0x4, 0x4, 0xa}, {0x5, 0x3, 0x6, 0x4}, {0x0, 0x2, 0x1, 0x7}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 1.079870379s ago: executing program 2 (id=3540): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000040000000e0000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000006000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000000afdec145e8ef18ec8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0xa) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$sock(r2, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x4000) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r4 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a400fe0000000071102800000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b500f3ffffff00009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 731.167539ms ago: executing program 2 (id=3541): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800430043000000a8001600a400014020000c00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 651.694802ms ago: executing program 1 (id=3542): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000014c0), 0x0, 0x0, 0x0, 0x1f000008}, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001100)={r1, 0xe0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100), &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000200)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000000f80), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000fc0)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001200)={&(0x7f0000001140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x5f, 0x30, 0x2e]}}, 0x0, 0x1d, 0x0, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="18000400060000000000000003000000ba56946e7bfe8d95000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x179, 0x0, 0x0, 0x41000, 0x48, '\x00', r2, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001280)=[{0x1, 0x2, 0x1, 0x9}], 0x10, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)}, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000480)='%-010d \x00'}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000e80)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYBLOB="b4ab2d62418b49364b53", @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r6}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x0, 0xf, 0x0, 0x0) r9 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x40000) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b108b4ab502", @ANYRES32, @ANYRES8=r9], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa0}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 580.069013ms ago: executing program 2 (id=3543): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) socket$kcm(0x2, 0x2, 0x73) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000100000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x96, 0x1, 0x0, 0x0, 0x0, 0x6, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, @perf_bp={0x0}, 0x102101, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f800000000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1}, 0x840) 509.245655ms ago: executing program 1 (id=3544): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x5, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0xe6, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e933500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair(0x23, 0x4, 0x81, &(0x7f0000000080)) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_ttl={{0x0, 0x0, 0x2, 0xfffffc14}}], 0x6}, 0x4008804) ioctl$TUNSETOFFLOAD(r4, 0x40086602, 0x8230794d6280073) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000000000000000000070000004414fb73e0000001ffff2b06e88559be2e9c2e548ad8d3446efffa6401010000000800891765e0000001ffffffffac1414aaffffffffe00000020000000000c4de"], 0x40}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r9 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r9, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x40c0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e0c0000000000000e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xff00) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954a, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) r10 = socket$kcm(0x11, 0x2, 0x0) r11 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRES8=r11], &(0x7f0000000280)='syzkaller\x00', 0x2b8, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) sendmsg$kcm(r10, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 444.659807ms ago: executing program 3 (id=3545): socketpair(0x11, 0x4, 0x9e, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x14, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xadbc}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x2, 0x7, 0x7, 0x8000, 0xfffffff9}, @call={0x85, 0x0, 0x0, 0x4a}, @alu={0x4, 0x1, 0xa, 0x9, 0x5, 0x100}, @map_fd={0x18, 0xb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x2, 0x48, &(0x7f0000000180)=""/72, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x5, 0x80, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x8001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000440)={r2, r3}, 0xc) r4 = getpid() r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='blkio.bfq.io_merged\x00', 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xf, 0x5, 0x6e, 0x4, 0x0, 0xffff, 0x20002, 0x9, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x23, 0x2, @perf_bp={&(0x7f0000000480), 0xb}, 0x2, 0xaf, 0x9, 0x5, 0xd, 0x7, 0x6, 0x0, 0x8, 0x0, 0x100}, r4, 0xf, r5, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000640)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x2d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x1, '\x00', r6, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x50) recvmsg$unix(r0, &(0x7f0000000b80)={&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000a00)=""/57, 0x39}, {&(0x7f0000000a40)=""/87, 0x57}], 0x3, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x10100) r15 = syz_clone(0x2a40000, &(0x7f0000000c40)="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", 0x1000, &(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)="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") r16 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x8e, 0xc, 0x6, 0x2, 0x0, 0x1fb, 0x10, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x400, 0x4}, 0x0, 0x3, 0x4, 0x9, 0x0, 0x0, 0xfffa, 0x0, 0x8, 0x0, 0x3960}, r15, 0xe, r5, 0x8) r17 = syz_clone(0x60084000, &(0x7f0000002d40)="5d139b118423f9588019a278bf5de8ea1eb4185bad2480e0bca954f10f23f71b31c4ccffe03fc59056432c08d7e8c6be1181063943afc89329ea67039e5a325be6c81fb358f469a5522260df5fab2e7a9055bb132dc10a6846fc3904ee15c3825a517eae5f89eb90a6563d5c0ea84e643ddac1b136e0ccfc332d1062e3752b0ffc367d8f3a1637d9e4d3e38a8b8c5e732b9ea3318c62699c5255131cd4ab643b", 0xa0, &(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)="da54e8e67fdcd0b4d3821a4969a4a2ab3d479ca2200d89397c5156b53a6063b3ddbc81aaf869d2fd18490424eec64fe7ea846289ba7306a156b8d5ffd6c5a751140d38727a00f59213d3102b2c2c6ef63cedc65efbea5632e93b727333e58e010a8f121c86200fb28ab2dbbda20cffa94396e555a028c44c060d3a72b922ae839610e3645f58dab43e4884cc2190778da7284b42bdd3e25ebc66d85078d68b82f4516ea17fb3fd4da975db80f44260032347e23b75ca7600cd3ed1a7f26e83de1affd46d45f53beeec0511fb05d8cfc4bb1ee22e9c00c95f") r18 = gettid() sendmsg$unix(r13, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002cc0)="3ea7e612b47ce16013279d29d31def0d58b77b635d731ea3a2825e9cfbf746d7e648e076a859c4c250fca0d3486fa5f1cc97fcc83746f0da9d1a273b003f97", 0x3f}], 0x1, &(0x7f0000002f80)=[@cred={{0x1c, 0x1, 0x2, {r17, r8}}}, @rights={{0x24, 0x1, 0x1, [r7, r2, r10, r11, r1]}}, @cred={{0x1c, 0x1, 0x2, {r15, r8, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r18, r8, r9}}}], 0x88, 0x10}, 0x4800) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000003080)={r14, r5}) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000004340)={&(0x7f00000030c0)="3dc7205156fc15a76adb93f6e318798d9cb99110229c39c724544d019f8fdffb280916379d9cc39c5da8bff344f6679b5a3f2da6a8227c1973381c847b9c6521f3e37bdbd441ae5ce87129acf63bfdc23d117a574ffe02501f52cb42e3b048cf745deba8d2514d360db8b97413f3b6afae30aa41e70ee74852d98b127bdee146a676393d78ada21113081a439274a1a9147bc9d76fa5696be15e1d066ae7b4", &(0x7f0000003180)=""/4096, &(0x7f0000004180)="b4bdc355b00755059149c3f1729d5a6824dd0f524e138f1a7a5c0580d6e6fe84ec1da0a496d3a6ff9bb72bcd44438fe9927e0412283ea522f5247ccaa55017ab0a042bae7cb1f1ee35e50a594e4d563f0864939c53955704928e34ce1727165ca5e16c6c7b7032821e939e5de0d320fb9992fbfd0a045843ea26b3ff55db4094b8ac1d2c84ad28b6ddd864c8499a8ec544c40edf1b7ba251005d40ebd216b8299c73eabaf3eb19d2251240a1e825dcdff78890975e3c9facc47ace692f7ffe3669fed6bd65480731cfb55aca", &(0x7f0000004280)="6d8d703065aab983d3d7642e1e4356c684bed156d0ad6ac174fe7792679b825a377ca1aa956ddcf561f50784a9dc740dc79204b1cfdd45954a4b464dbdd1cdb9c7a3388aed226ebcafa7972b09f57fea907a96ea9f319be00e7daaa62ec01815115be9eee0035565be1d23d4817a1545c7c8117385c63d123ca2ce0d27879a297f8678355633ce6fb897ddee04120b35edb2b79298a2349262b35d2aba69e836787b9f7ed7407df3a0a8c7e91c9de17c1a9c2200c79b8ba3c5eab5", 0x7fffffff, r13}, 0x38) bpf$OBJ_GET_MAP(0x7, &(0x7f00000043c0)=@o_path={&(0x7f0000004380)='\x00', 0x0, 0x18, r2}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000044c0)={0x1, &(0x7f0000004400)="f36c2b5520b825511787fa40a19a7030232b0a67e79711cbde64e1b1d257312acdd8249dfd7a3a72be6e4beafee800d7448eec32e65eda1f6b75e277579be5d9891bbe19d3315fb744962333c30cc9e224049b202945921abbaba97a9f0a15d94642a79682af6556455bb33666f877c2e8c42b4416bef0c4511c68fd91c3b36dfdf7fa46e8da60c7374f4b5184eb3134f2d1a2cca7f9f0f7525a0eaf66de3c"}, 0x20) bpf$OBJ_GET_MAP(0x7, &(0x7f0000004540)=@generic={&(0x7f0000004500)='./file0\x00', 0x0, 0xc}, 0x18) r19 = getpid() perf_event_open(&(0x7f0000004580)={0x1, 0x80, 0x0, 0x0, 0x7, 0x3, 0x0, 0x1, 0xa4000, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x2, 0x200}, 0x0, 0x0, 0x2, 0x3, 0x8, 0x3, 0x1cc1, 0x0, 0x7, 0x0, 0x3}, r19, 0xa, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000004600), 0x400001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000004640)={r12}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000046c0)={r19, r10, 0x0, 0x3, &(0x7f0000004680)='-,\x00'}, 0x30) r20 = perf_event_open$cgroup(&(0x7f0000004740)={0x2, 0x80, 0x8c, 0x6, 0x9, 0xfe, 0x0, 0x0, 0x3009a, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000004700), 0xe}, 0x1200, 0xa, 0x401, 0x6, 0x3, 0xfffffe01, 0x9, 0x0, 0x6, 0x0, 0x4}, r13, 0x4, r16, 0x4) ioctl$PERF_EVENT_IOC_DISABLE(r20, 0x2401, 0xffffffff7fffffff) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) 268.732922ms ago: executing program 2 (id=3546): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1f63, &(0x7f0000000900)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x2000d085) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0x1, 0x58, &(0x7f0000000180)}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@o_path={0x0}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x100) write$cgroup_devices(r4, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x3004c0c4) socket$kcm(0x2, 0x200000000000001, 0x106) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) 182.637355ms ago: executing program 1 (id=3547): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/87, 0x57}, {&(0x7f0000002980)=""/4101, 0x1005}, {&(0x7f0000001980)=""/4080, 0xff0}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f0000000240)=""/55, 0x37}], 0x6}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x88, 0x68, &(0x7f00000009c0)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x3c}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000940)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000a00)=[0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x0, 0xc7, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_ext={0x1c, 0x2b, &(0x7f0000000cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@generic={0xfb, 0xa, 0x3, 0xab6, 0x8f}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x48}, @call={0x85, 0x0, 0x0, 0x8c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e40)='syzkaller\x00', 0xa, 0x4f, &(0x7f0000000e80)=""/79, 0x41000, 0x1b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000f40)={0x2, 0x9, 0x5, 0xfc66}, 0x10, 0x2683, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000f80)=[{0x3, 0x4, 0x0, 0x6}, {0x5, 0x2, 0x4, 0x9}, {0x4, 0x2, 0x7, 0xc}], 0x10, 0x1}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0xba1, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001100)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001180)={0x1, 0xffffffffffffffff}, 0x4) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000011c0)={0x0, 0x5, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x17, 0x1a, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000008c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x5, 0x2, 0x1, 0x4}, 0x10, r7, r8, 0x2, &(0x7f0000001200)=[r9, r10, r11, r12, r0], &(0x7f0000001240)=[{0x0, 0x1, 0xb, 0x9}, {0x1, 0x2, 0x3, 0x4}], 0x10, 0x7}, 0x94) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 0s ago: executing program 0 (id=3548): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x2046, 0xcc05, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8, 0x5, 0x7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r1, &(0x7f0000000ac0)={&(0x7f0000000040)=@sco={0x1f, @none}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000180)=""/53, 0x35}, {&(0x7f00000007c0)=""/212, 0xd4}, {&(0x7f0000000900)=""/180, 0xb4}], 0x3, &(0x7f0000000a00)=""/131, 0x83}, 0x40012120) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x19}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2000000000008, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x4846, 0x83, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x1, 0x1c}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c80)={r0, &(0x7f0000000b00)="22135737156acceface8f19f596b389f843d8c07d1087df5f15ae4c989d9ae7eb884e02dcec5f6891c3892ef16b7c18563ded8c2ca7ce7e947c8ec1b156dd119c36af0400eebcfc5354538b4030f7c52886d36803fd4a6f4760265f0e62a24900ae49b5313500c319d942137c500c2672612ef8436d947185390b519180f660b66f7f5f6ec57d2abb984906684f76b341fe5dad3ca9e5b1c0f8c2b0e8ac895cfdff87d3031c63e9b74bf74e8c41098bc8c73a914325caadd8110f4142892eeb6559f87ead87b4d96a0a2a60bbc693d740c0fc5bd23f06a6dfe0ce6fb0795a08684a6d7ea", &(0x7f0000000c00)=""/70}, 0x20) r10 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, 0x0}, 0x4008094) recvmsg(r10, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/264, 0x108}], 0x1}, 0x40000010) kernel console output (not intermixed with test programs): ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.510576][T12363] RSP: 002b:00007fd1a024d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.519045][T12363] RAX: ffffffffffffffda RBX: 00007fd19f625fa0 RCX: 00007fd19f39de99 [ 384.527059][T12363] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 384.535070][T12363] RBP: 00007fd19f433eaf R08: 0000000000000000 R09: 0000000000000000 [ 384.543074][T12363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.551084][T12363] R13: 00007fd19f626038 R14: 00007fd19f625fa0 R15: 00007ffc2afec948 [ 384.559149][T12363] [ 384.885199][T12374] syzkaller0: entered promiscuous mode [ 384.892701][T12374] syzkaller0: entered allmulticast mode [ 385.791045][T12407] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1866'. [ 385.825823][T12409] netlink: 'syz.2.1867': attribute type 10 has an invalid length. [ 385.836704][T12409] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1867'. [ 385.945256][T12412] netlink: 'syz.2.1867': attribute type 12 has an invalid length. [ 385.967352][T12412] netlink: 'syz.2.1867': attribute type 11 has an invalid length. [ 385.987949][T12412] netlink: 188816 bytes leftover after parsing attributes in process `syz.2.1867'. [ 386.102382][T12411] netlink: 'syz.1.1868': attribute type 1 has an invalid length. [ 386.133996][T12411] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1868'. [ 386.479731][T12434] netlink: 'syz.3.1873': attribute type 7 has an invalid length. [ 386.920339][T12457] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1877'. [ 387.056230][T12460] netlink: 'syz.3.1882': attribute type 21 has an invalid length. [ 387.084046][T12460] IPv6: NLM_F_CREATE should be specified when creating new route [ 387.200124][T12459] delete_channel: no stack [ 389.611581][T12526] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1901'. [ 389.670310][T12526] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1901'. [ 389.694188][T12526] openvswitch: netlink: Flow key attribute not present in set flow. [ 389.947677][T12538] netlink: 'syz.3.1905': attribute type 21 has an invalid length. [ 389.970306][T12538] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1905'. [ 390.055119][T12538] sit0: left promiscuous mode [ 390.350943][T12547] sit0: entered promiscuous mode [ 390.542447][T12548] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 390.612637][T12548] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1903'. [ 390.833751][T12555] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1909'. [ 390.924199][T12555] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.1909'. [ 391.461985][T12574] netlink: 'syz.3.1916': attribute type 10 has an invalid length. [ 392.064622][T12593] netlink: 'syz.3.1923': attribute type 3 has an invalid length. [ 392.072544][T12593] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1923'. [ 392.097250][T12594] netlink: 'syz.0.1922': attribute type 1 has an invalid length. [ 392.126468][T12594] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1922'. [ 396.292181][T12644] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 396.303975][T12644] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1937'. [ 396.427415][T12644] netlink: 'syz.2.1937': attribute type 1 has an invalid length. [ 396.453937][T12644] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1937'. [ 396.657859][T12660] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1943'. [ 397.096762][T12672] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1947'. [ 397.137244][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 397.510927][T12682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1949'. [ 397.643649][T12682] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1949'. [ 397.789276][T12691] netlink: 'syz.0.1948': attribute type 33 has an invalid length. [ 397.829414][T12691] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1948'. [ 398.570738][T12701] netlink: 'syz.0.1954': attribute type 4 has an invalid length. [ 399.434095][T12720] syzkaller0: entered promiscuous mode [ 399.454239][T12720] syzkaller0: entered allmulticast mode [ 400.823666][T12747] netlink: 'syz.0.1967': attribute type 29 has an invalid length. [ 400.860965][T12747] netlink: 'syz.0.1967': attribute type 29 has an invalid length. [ 400.918601][T12749] netlink: 'syz.0.1967': attribute type 29 has an invalid length. [ 400.984332][T12747] netlink: 'syz.0.1967': attribute type 29 has an invalid length. [ 401.096178][T12747] netlink: 'syz.0.1967': attribute type 29 has an invalid length. [ 402.388043][T12764] netlink: 'syz.1.1972': attribute type 29 has an invalid length. [ 402.424933][T12764] netlink: 'syz.1.1972': attribute type 29 has an invalid length. [ 402.715445][T12764] netlink: 'syz.1.1972': attribute type 29 has an invalid length. [ 402.919720][T12775] netlink: 'syz.0.1974': attribute type 22 has an invalid length. [ 402.937518][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 403.084726][T12778] netlink: 'syz.0.1974': attribute type 10 has an invalid length. [ 403.092617][T12778] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1974'. [ 403.131565][T12778] team0: entered promiscuous mode [ 403.141632][T12778] team_slave_0: entered promiscuous mode [ 403.154320][T12778] team_slave_1: entered promiscuous mode [ 403.160331][T12778] team0: entered allmulticast mode [ 403.187928][T12778] team_slave_0: entered allmulticast mode [ 403.201204][T12778] team_slave_1: entered allmulticast mode [ 403.218069][T12778] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.240873][T12778] bridge0: port 3(team0) entered blocking state [ 403.258492][T12778] bridge0: port 3(team0) entered disabled state [ 405.719005][T12810] netlink: 'syz.2.1984': attribute type 21 has an invalid length. [ 405.743010][T12810] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1984'. [ 405.773411][T12810] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 406.857293][T12821] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1988'. [ 408.723999][ T14] rcu_tasks_wait_gp: rcu_tasks grace period number 25 (since boot) is 1049 jiffies old. [ 409.334468][T12843] netlink: 'syz.0.1995': attribute type 1 has an invalid length. [ 409.356752][T12843] netlink: 'syz.0.1995': attribute type 3 has an invalid length. [ 409.393882][T12843] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1995'. [ 409.422599][T12843] netlink: 'syz.0.1995': attribute type 10 has an invalid length. [ 409.494597][T12843] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1995'. [ 410.197521][T12855] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 410.528765][T12855] wg1: entered promiscuous mode [ 410.541797][T12855] wg1: entered allmulticast mode [ 410.552467][T12855] team0: Device wg1 is of different type [ 411.085941][T12862] netlink: 'syz.3.2000': attribute type 10 has an invalid length. [ 411.321623][T12865] netlink: 'syz.0.2001': attribute type 46 has an invalid length. [ 411.335795][T12865] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2001'. [ 412.197461][T12887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2006'. [ 412.326669][T12876] netlink: 'syz.1.2005': attribute type 10 has an invalid length. [ 412.785824][T12898] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2010'. [ 412.908051][T12900] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2011'. [ 412.922346][T12904] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2010'. [ 412.967913][T12904] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 414.028245][T12938] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 414.394682][T12942] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2022'. [ 414.522420][T12943] netlink: 'syz.0.2022': attribute type 2 has an invalid length. [ 414.542687][T12943] netlink: 'syz.0.2022': attribute type 1 has an invalid length. [ 414.586731][T12943] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2022'. [ 414.836787][T12940] ±ÿ: renamed from lo [ 415.276356][T12957] netlink: 'syz.1.2027': attribute type 10 has an invalid length. [ 415.966922][ T51] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 415.969653][T12968] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 416.003874][T12968] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.2030'. [ 416.180952][T12969] netlink: 'syz.0.2030': attribute type 21 has an invalid length. [ 416.188968][T12969] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.209758][T12969] IPv6: Can't replace route, no match found [ 416.247540][T12971] netlink: 'syz.0.2030': attribute type 21 has an invalid length. [ 416.296524][T12971] IPv6: Can't replace route, no match found [ 416.302639][T12963] netlink: 'syz.1.2029': attribute type 1 has an invalid length. [ 416.384598][T12963] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2029'. [ 416.975156][T12987] netlink: 'syz.0.2035': attribute type 21 has an invalid length. [ 416.996366][T12987] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2035'. [ 417.934815][T13009] netlink: 'syz.0.2041': attribute type 46 has an invalid length. [ 418.661159][T13019] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2045'. [ 418.748490][T13021] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2045'. [ 419.658881][T13036] netlink: 'syz.3.2050': attribute type 13 has an invalid length. [ 419.801213][T13041] tap0: tun_chr_ioctl cmd 35108 [ 419.806603][T13041] tap0: tun_chr_ioctl cmd 1074025676 [ 419.811948][T13041] tap0: owner set to 776 [ 421.460508][T13093] syzkaller0: left promiscuous mode [ 421.473499][T13093] syzkaller0: left allmulticast mode [ 422.262868][T13133] netlink: 'syz.1.2068': attribute type 46 has an invalid length. [ 422.601262][T13139] netlink: 'syz.2.2072': attribute type 29 has an invalid length. [ 422.635011][T13139] netlink: 'syz.2.2072': attribute type 29 has an invalid length. [ 422.666357][T13146] netlink: 'syz.2.2072': attribute type 29 has an invalid length. [ 422.698412][T13139] netlink: 'syz.2.2072': attribute type 10 has an invalid length. [ 422.730476][T13139] geneve0: entered promiscuous mode [ 423.287850][T13150] netlink: 'syz.1.2075': attribute type 29 has an invalid length. [ 423.403634][T13150] netlink: 'syz.1.2075': attribute type 29 has an invalid length. [ 424.769872][T13199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 424.777327][T13199] IPv6: NLM_F_CREATE should be set when creating new route [ 424.784928][T13199] IPv6: NLM_F_CREATE should be set when creating new route [ 424.794391][T13199] IPv6: NLM_F_CREATE should be set when creating new route [ 425.122298][T13216] syzkaller0: left promiscuous mode [ 425.133918][T13216] syzkaller0: left allmulticast mode [ 425.159701][T13213] syzkaller0: entered allmulticast mode [ 425.270020][T13221] netlink: 'syz.3.2099': attribute type 2 has an invalid length. [ 425.283183][T13221] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2099'. [ 425.392285][T13235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2101'. [ 425.414412][T13235] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2101'. [ 425.434101][T13235] netlink: 13 bytes leftover after parsing attributes in process `syz.1.2101'. [ 425.499888][T13221] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2099'. [ 425.513644][T13221] netdevsim netdevsim3 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.524998][T13221] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.534734][T13221] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.544388][T13221] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.607798][T13221] bond0: (slave geneve0): Releasing backup interface [ 425.620082][T13221] geneve0 (unregistering): left allmulticast mode [ 425.784447][T13239] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 426.195834][T13248] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2107'. [ 426.595569][T13263] netlink: 'syz.2.2113': attribute type 2 has an invalid length. [ 426.605233][T13263] netlink: 'syz.2.2113': attribute type 8 has an invalid length. [ 426.613204][T13263] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2113'. [ 426.720182][T13275] netlink: 15842 bytes leftover after parsing attributes in process `syz.2.2113'. [ 427.124590][T13304] netlink: 'syz.0.2122': attribute type 10 has an invalid length. [ 427.132471][T13304] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2122'. [ 427.170056][T13312] netlink: 60243 bytes leftover after parsing attributes in process `syz.1.2125'. [ 427.669225][T13336] netlink: 'syz.3.2133': attribute type 2 has an invalid length. [ 427.688960][T13336] netlink: 'syz.3.2133': attribute type 1 has an invalid length. [ 427.745634][T13336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.796749][T13339] netlink: 'syz.3.2133': attribute type 2 has an invalid length. [ 427.828647][T13339] netlink: 'syz.3.2133': attribute type 1 has an invalid length. [ 427.838220][T13339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.928871][T13333] netlink: 'syz.1.2132': attribute type 10 has an invalid length. [ 427.978328][T13333] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 428.358615][T13356] netlink: zone id is out of range [ 428.369306][T13356] netlink: zone id is out of range [ 428.382557][T13356] netlink: zone id is out of range [ 428.411647][T13356] netlink: zone id is out of range [ 428.424110][T13356] netlink: zone id is out of range [ 428.437698][T13356] netlink: zone id is out of range [ 428.450047][T13356] netlink: zone id is out of range [ 428.469509][T13356] netlink: zone id is out of range [ 428.539852][T13358] netlink: 'syz.3.2139': attribute type 33 has an invalid length. [ 428.874817][T13369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.924852][T13419] validate_nla: 1 callbacks suppressed [ 430.924870][T13419] netlink: 'syz.0.2156': attribute type 15 has an invalid length. [ 430.970321][T13419] netlink: 'syz.0.2156': attribute type 7 has an invalid length. [ 431.251781][T13427] __nla_validate_parse: 18 callbacks suppressed [ 431.251798][T13427] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2158'. [ 432.343696][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'. [ 434.174766][T13479] syz.1.2173 (13479) used obsolete PPPIOCDETACH ioctl [ 434.292716][T13479] netlink: 'syz.1.2173': attribute type 3 has an invalid length. [ 434.330377][T13471] netlink: 'syz.3.2172': attribute type 10 has an invalid length. [ 434.365528][T13479] netlink: 'syz.1.2173': attribute type 1 has an invalid length. [ 434.454334][T13479] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2173'. [ 435.186101][T13486] netlink: 'syz.0.2176': attribute type 4 has an invalid length. [ 435.197294][T13494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 435.226047][T13493] netlink: 'syz.3.2177': attribute type 9 has an invalid length. [ 435.263611][T13493] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2177'. [ 435.581256][T13498] syzkaller0: entered promiscuous mode [ 435.614133][T13498] syzkaller0: entered allmulticast mode [ 436.258105][T13526] IPv6: pim6reg1: Disabled Multicast RS [ 436.649680][T13536] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.2188'. [ 436.660680][T13537] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.2188'. [ 437.203225][T13548] netlink: 'syz.1.2191': attribute type 11 has an invalid length. [ 437.221466][T13548] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.2191'. [ 437.246480][T13548] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 437.266275][T13548] CPU: 0 PID: 13548 Comm: syz.1.2191 Not tainted syzkaller #0 [ 437.273778][T13548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 437.283865][T13548] Call Trace: [ 437.287179][T13548] [ 437.290141][T13548] dump_stack_lvl+0x18c/0x250 [ 437.294876][T13548] ? show_regs_print_info+0x20/0x20 [ 437.300120][T13548] ? load_image+0x420/0x420 [ 437.304681][T13548] sysfs_warn_dup+0x8e/0xa0 [ 437.309240][T13548] sysfs_do_create_link_sd+0xc0/0x110 [ 437.314656][T13548] device_add_class_symlinks+0x1cf/0x240 [ 437.320339][T13548] device_add+0x4f9/0xc40 [ 437.324713][T13548] wiphy_register+0x1d99/0x2ac0 [ 437.329616][T13548] ? cfg80211_event_work+0x40/0x40 [ 437.334755][T13548] ? minstrel_ht_alloc+0x88a/0x990 [ 437.339921][T13548] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 437.346030][T13548] ieee80211_register_hw+0x2dd8/0x3b30 [ 437.351543][T13548] ? ieee80211_register_hw+0xef1/0x3b30 [ 437.357130][T13548] ? ieee80211_tasklet_handler+0x20/0x20 [ 437.362818][T13548] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 437.368756][T13548] ? __debug_object_init+0xec/0x450 [ 437.373993][T13548] ? __asan_memset+0x22/0x40 [ 437.378632][T13548] ? __hrtimer_init+0x189/0x270 [ 437.383528][T13548] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 437.389311][T13548] ? mac80211_hwsim_free+0x220/0x220 [ 437.394633][T13548] ? rcu_is_watching+0x15/0xb0 [ 437.399438][T13548] ? kstrndup+0xbd/0x140 [ 437.403733][T13548] hwsim_new_radio_nl+0xdad/0x1a70 [ 437.408923][T13548] ? __nla_validate+0x50/0x50 [ 437.413698][T13548] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 437.420096][T13548] ? __nla_parse+0x40/0x50 [ 437.424556][T13548] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 437.430918][T13548] genl_family_rcv_msg_doit+0x21a/0x310 [ 437.436508][T13548] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 437.442451][T13548] ? bpf_lsm_capable+0x9/0x10 [ 437.447164][T13548] ? security_capable+0x89/0xb0 [ 437.452063][T13548] genl_rcv_msg+0x611/0x7a0 [ 437.456650][T13548] ? genl_bind+0x360/0x360 [ 437.461125][T13548] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 437.467497][T13548] ? ref_tracker_free+0x686/0x830 [ 437.472567][T13548] ? __kasan_kmalloc_large+0x8b/0xa0 [ 437.477909][T13548] netlink_rcv_skb+0x235/0x4c0 [ 437.482719][T13548] ? genl_bind+0x360/0x360 [ 437.487181][T13548] ? netlink_ack+0x1160/0x1160 [ 437.492001][T13548] ? __lock_acquire+0x7d80/0x7d80 [ 437.497069][T13548] ? down_read+0x1ac/0x2e0 [ 437.501519][T13548] genl_rcv+0x28/0x40 [ 437.505541][T13548] netlink_unicast+0x7b1/0x930 [ 437.510355][T13548] netlink_sendmsg+0x8d0/0xbf0 [ 437.515165][T13548] ? netlink_getsockopt+0x590/0x590 [ 437.520399][T13548] ? apparmor_socket_sendmsg+0x8e/0x330 [ 437.525977][T13548] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 437.531301][T13548] ? security_socket_sendmsg+0x80/0xa0 [ 437.536801][T13548] ? netlink_getsockopt+0x590/0x590 [ 437.542040][T13548] ____sys_sendmsg+0x61b/0x980 [ 437.546859][T13548] ? __asan_memset+0x22/0x40 [ 437.551494][T13548] ? __sys_sendmsg_sock+0x30/0x30 [ 437.556561][T13548] ? __import_iovec+0x5f2/0x850 [ 437.561471][T13548] ? import_iovec+0x73/0xa0 [ 437.566030][T13548] ___sys_sendmsg+0x2a6/0x360 [ 437.570760][T13548] ? __sys_sendmsg+0x2b0/0x2b0 [ 437.575628][T13548] __se_sys_sendmsg+0x1d0/0x2c0 [ 437.580542][T13548] ? __x64_sys_sendmsg+0x80/0x80 [ 437.585545][T13548] ? lockdep_hardirqs_on+0x98/0x150 [ 437.590790][T13548] do_syscall_64+0x55/0xb0 [ 437.595251][T13548] ? clear_bhb_loop+0x40/0x90 [ 437.599975][T13548] ? clear_bhb_loop+0x40/0x90 [ 437.604706][T13548] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 437.610650][T13548] RIP: 0033:0x7fd19f39de99 [ 437.615097][T13548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.634725][T13548] RSP: 002b:00007fd1a024d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.643152][T13548] RAX: ffffffffffffffda RBX: 00007fd19f625fa0 RCX: 00007fd19f39de99 [ 437.651134][T13548] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 437.659117][T13548] RBP: 00007fd19f433eaf R08: 0000000000000000 R09: 0000000000000000 [ 437.667095][T13548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.675078][T13548] R13: 00007fd19f626038 R14: 00007fd19f625fa0 R15: 00007ffc2afec948 [ 437.683098][T13548] [ 437.812211][T13557] netlink: 'syz.0.2195': attribute type 9 has an invalid length. [ 437.834748][T13557] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2195'. [ 437.855055][T13558] netlink: 'syz.0.2195': attribute type 9 has an invalid length. [ 437.862808][T13558] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2195'. [ 437.977298][T13560] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2196'. [ 437.990075][T13560] net_ratelimit: 334 callbacks suppressed [ 437.990143][T13560] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 438.139717][T13568] netlink: 'syz.2.2200': attribute type 12 has an invalid length. [ 438.152311][T13568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2200'. [ 439.989118][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.995544][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.837712][T13586] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 440.997179][T13592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2207'. [ 441.022599][T13592] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2207'. [ 441.067647][T13595] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2210'. [ 441.081802][T13595] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 441.148579][T13593] netlink: 'syz.2.2207': attribute type 10 has an invalid length. [ 441.230057][T13602] netlink: 'syz.0.2211': attribute type 4 has an invalid length. [ 441.335653][T13600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.669416][T13615] netlink: 'syz.3.2217': attribute type 10 has an invalid length. [ 441.680128][T13615] veth0_macvtap: left promiscuous mode [ 442.177066][T13637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.198492][T13642] netlink: 'syz.0.2224': attribute type 10 has an invalid length. [ 442.238995][T13642] bridge0: port 3(team0) entered disabled state [ 442.248903][T13642] team_slave_0: left promiscuous mode [ 442.258805][T13642] team_slave_0: left allmulticast mode [ 442.287822][T13642] team0 (unregistering): Port device team_slave_0 removed [ 442.327659][T13642] team_slave_1: left promiscuous mode [ 442.333232][T13642] team_slave_1: left allmulticast mode [ 442.353281][T13642] team0 (unregistering): Port device team_slave_1 removed [ 443.048222][T13669] netlink: 'syz.3.2232': attribute type 3 has an invalid length. [ 443.076602][T13669] __nla_validate_parse: 2 callbacks suppressed [ 443.076616][T13669] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2232'. [ 443.246725][T13682] netlink: 'syz.1.2239': attribute type 10 has an invalid length. [ 445.195288][T13705] netlink: 'syz.3.2245': attribute type 49 has an invalid length. [ 445.204970][T13705] netlink: set zone limit has 8 unknown bytes [ 445.304650][T13707] netlink: 'syz.2.2246': attribute type 21 has an invalid length. [ 445.312526][T13707] netlink: 'syz.2.2246': attribute type 4 has an invalid length. [ 445.328184][T13707] netlink: 'syz.2.2246': attribute type 23 has an invalid length. [ 445.343876][T13707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2246'. [ 445.730326][T13717] netlink: 'syz.0.2250': attribute type 10 has an invalid length. [ 445.779427][T13728] netlink: 'syz.2.2252': attribute type 10 has an invalid length. [ 445.879276][T13716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.008570][T13727] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.081271][T13718] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2249'. [ 446.355438][T13739] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2257'. [ 446.660215][T13749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 446.685521][T13749] netlink: 'syz.2.2258': attribute type 9 has an invalid length. [ 446.694521][T13750] netlink: 'syz.0.2255': attribute type 11 has an invalid length. [ 446.702623][T13749] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2258'. [ 446.889030][T13752] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2258'. [ 447.053931][T13766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.207817][T13778] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2272'. [ 447.225525][T13779] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2266'. [ 447.528166][T13781] sit0: left promiscuous mode [ 447.561542][T13782] sit0: entered promiscuous mode [ 447.744955][T13784] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2268'. [ 450.818948][T13770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.119670][T13799] validate_nla: 4 callbacks suppressed [ 451.120025][T13799] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 451.173390][T13803] netlink: 'syz.0.2276': attribute type 21 has an invalid length. [ 451.202234][T13803] netlink: 'syz.0.2276': attribute type 11 has an invalid length. [ 451.276192][T13798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.683907][T13824] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 451.829385][T13823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.038188][T13834] tap0: tun_chr_ioctl cmd 1074025675 [ 452.050467][T13834] tap0: persist enabled [ 452.062627][T13834] tap0: tun_chr_ioctl cmd 1074025675 [ 452.068564][T13834] tap0: persist enabled [ 452.266962][T13841] netlink: 'syz.1.2289': attribute type 21 has an invalid length. [ 452.303075][T13841] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2289'. [ 452.372809][T13845] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.2290'. [ 452.421326][T13847] netlink: 'syz.3.2293': attribute type 5 has an invalid length. [ 452.467501][T13847] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2293'. [ 452.517257][T13847] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 452.628983][T13858] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2296'. [ 452.670894][T13858] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2296'. [ 452.751418][T13858] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 454.244117][T13917] netlink: 'syz.1.2312': attribute type 9 has an invalid length. [ 454.264233][T13917] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2312'. [ 454.287790][T13923] netlink: 'syz.1.2312': attribute type 10 has an invalid length. [ 454.339237][T13927] netlink: 'syz.2.2314': attribute type 10 has an invalid length. [ 454.358529][T13927] bridge_slave_1: left allmulticast mode [ 454.376236][T13918] netlink: 'syz.0.2310': attribute type 1 has an invalid length. [ 454.522974][T13935] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.2316'. [ 454.550955][T13935] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2316'. [ 454.708910][T13935] bond0 (unregistering): left allmulticast mode [ 454.724957][T13935] Ù: left allmulticast mode [ 454.730720][T13935] syz_tun: left allmulticast mode [ 454.739942][T13935] bridge0: port 4(bond0) entered disabled state [ 454.797657][T13935] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 454.819729][T13935] Ù: left promiscuous mode [ 454.876878][T13935] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 454.940594][T13935] bond0 (unregistering): Released all slaves [ 455.062619][T13940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2320'. [ 455.076695][T13941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2320'. [ 455.160646][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 455.169540][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 455.178731][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 455.188329][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 455.200228][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 455.208039][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.836310][T13946] chnl_net:caif_netlink_parms(): no params data found [ 457.081443][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.091945][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.099789][T13946] bridge_slave_0: entered allmulticast mode [ 457.107528][T13946] bridge_slave_0: entered promiscuous mode [ 457.119425][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.132124][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.141263][T13946] bridge_slave_1: entered allmulticast mode [ 457.148765][T13946] bridge_slave_1: entered promiscuous mode [ 457.180461][T13946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.194115][T13946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 457.238034][T13946] team0: Port device team_slave_0 added [ 457.250738][T13946] team0: Port device team_slave_1 added [ 457.264498][ T51] Bluetooth: hci1: command tx timeout [ 457.301887][T13946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.317153][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.344033][T13946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.357117][T13946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.364178][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.418257][T13946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.747137][T13946] hsr_slave_0: entered promiscuous mode [ 457.759578][T13946] hsr_slave_1: entered promiscuous mode [ 457.775577][T13946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.783162][T13946] Cannot create hsr debugfs directory [ 458.208714][T14019] __nla_validate_parse: 1 callbacks suppressed [ 458.208750][T14019] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.2342'. [ 458.514447][T14027] validate_nla: 1 callbacks suppressed [ 458.514519][T14027] netlink: 'syz.0.2343': attribute type 1 has an invalid length. [ 458.558667][ T8260] gretap0 (unregistering): left allmulticast mode [ 458.567624][ T8260] gretap0 (unregistering): left promiscuous mode [ 458.586077][ T8260] Ÿë: port 1(gretap0) entered disabled state [ 458.601671][T14027] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.2343'. [ 458.668999][T14030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2343'. [ 459.343962][ T51] Bluetooth: hci1: command tx timeout [ 459.552470][T14055] netlink: 'syz.3.2351': attribute type 10 has an invalid length. [ 460.030673][T13946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 460.051304][T13946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 460.152463][T13946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 460.186269][T13946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 460.596593][ T8260] veth0_to_team: left allmulticast mode [ 460.610937][ T8260] veth0_to_team: left promiscuous mode [ 460.617493][ T8260] Ÿë: port 2(veth0_to_team) entered disabled state [ 460.638714][ T8260] hsr_slave_0: left promiscuous mode [ 460.653745][ T8260] hsr_slave_1: left promiscuous mode [ 460.877514][ T8260] veth0_macvtap: left promiscuous mode [ 460.927570][T14096] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2360'. [ 461.433944][ T51] Bluetooth: hci1: command tx timeout [ 463.195812][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.233616][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.294355][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.301618][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.317802][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.325012][ T8702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.463421][T13946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.507644][ T51] Bluetooth: hci1: command tx timeout [ 463.545856][T14120] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.2367'. [ 463.779894][T14121] netlink: 'syz.0.2365': attribute type 10 has an invalid length. [ 463.803402][T14121] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2365'. [ 463.885557][T14121] bridge0: port 3(ipvlan1) entered blocking state [ 463.894598][T14121] bridge0: port 3(ipvlan1) entered disabled state [ 463.952988][T14121] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 464.058903][T14126] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2368'. [ 464.120381][T13946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.224528][T14136] netlink: 'syz.2.2371': attribute type 10 has an invalid length. [ 464.246105][T14136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2371'. [ 464.271524][T14136] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 464.313983][T13946] veth0_vlan: entered promiscuous mode [ 464.331579][T13946] veth1_vlan: entered promiscuous mode [ 464.421788][T13946] veth0_macvtap: entered promiscuous mode [ 464.438570][T13946] veth1_macvtap: entered promiscuous mode [ 464.507919][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.525382][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.538539][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.550883][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.566561][T13946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 464.584838][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.616651][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.646268][T13946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.676650][T13946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.707930][T13946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.729325][T13946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.746155][T13946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.761922][T13946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.771317][T13946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.014069][ T7499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.021938][ T7499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.132560][ T8702] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.140547][ T8702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.551085][T14179] syzkaller0: left allmulticast mode [ 465.841719][T14191] syzkaller0: entered promiscuous mode [ 465.851638][T14191] syzkaller0: entered allmulticast mode [ 466.001342][T14196] netlink: 'syz.1.2388': attribute type 10 has an invalid length. [ 466.089633][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.135294][T14196] bridge_slave_1: left allmulticast mode [ 466.144247][T14196] bridge_slave_1: left promiscuous mode [ 466.151036][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.249847][T14196] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 466.351888][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 466.360796][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 466.371077][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 466.388458][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 466.396218][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 466.403531][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 466.775961][T14207] netlink: 'syz.1.2390': attribute type 3 has an invalid length. [ 466.795701][T14207] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2390'. [ 466.897440][T14208] syzkaller0: entered promiscuous mode [ 466.902967][T14208] syzkaller0: entered allmulticast mode [ 466.968280][ T8259] syzkaller0: tun_net_xmit 48 [ 468.466694][ T51] Bluetooth: hci3: command tx timeout [ 468.949268][T14227] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2397'. [ 468.960312][T14227] openvswitch: netlink: Flow key attribute not present in set flow. [ 469.187993][T14235] netlink: 'syz.2.2399': attribute type 21 has an invalid length. [ 469.197615][T14235] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2399'. [ 469.226763][T14235] netlink: 'syz.2.2399': attribute type 21 has an invalid length. [ 469.543199][T14202] chnl_net:caif_netlink_parms(): no params data found [ 470.090564][T14202] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.107597][T14202] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.122775][T14202] bridge_slave_0: entered allmulticast mode [ 470.138570][T14202] bridge_slave_0: entered promiscuous mode [ 470.207017][T14202] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.225228][T14202] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.245948][T14202] bridge_slave_1: entered allmulticast mode [ 470.263958][T14202] bridge_slave_1: entered promiscuous mode [ 470.435427][T14202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.480129][T14279] netlink: 'syz.2.2406': attribute type 10 has an invalid length. [ 470.544549][ T51] Bluetooth: hci3: command tx timeout [ 470.556387][T14202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.623205][T14277] netlink: 'syz.2.2406': attribute type 10 has an invalid length. [ 470.711641][T14202] team0: Port device team_slave_0 added [ 470.722673][T14202] team0: Port device team_slave_1 added [ 470.787410][ T8702] gretap0 (unregistering): left allmulticast mode [ 470.807121][ T8702] gretap0 (unregistering): left promiscuous mode [ 470.813631][ T8702] Ÿë: port 1(gretap0) entered disabled state [ 470.866920][T14294] veth1_to_bond: entered allmulticast mode [ 470.897034][T14202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.925128][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.975900][T14202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.043985][T14291] netlink: 'syz.0.2409': attribute type 10 has an invalid length. [ 471.116110][T14291] bridge_slave_1: left allmulticast mode [ 471.138223][T14291] bridge_slave_1: left promiscuous mode [ 471.158236][T14291] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.228265][T14202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.236539][T14202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.269822][T14202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.628721][T14202] hsr_slave_0: entered promiscuous mode [ 471.647166][T14202] hsr_slave_1: entered promiscuous mode [ 471.673143][T14202] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.697687][T14202] Cannot create hsr debugfs directory [ 472.018190][T14320] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2415'. [ 472.136859][T14328] netlink: 'syz.1.2416': attribute type 11 has an invalid length. [ 472.419699][T14340] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2418'. [ 472.615271][T14348] syzkaller0: left promiscuous mode [ 472.624197][ T51] Bluetooth: hci3: command tx timeout [ 472.629784][T14348] syzkaller0: left allmulticast mode [ 472.882833][T14361] netlink: 'syz.2.2421': attribute type 10 has an invalid length. [ 472.939192][ T8702] veth0_to_team: left allmulticast mode [ 472.948946][ T8702] veth0_to_team: left promiscuous mode [ 472.958518][ T8702] Ÿë: port 2(veth0_to_team) entered disabled state [ 472.971388][ T8702] hsr_slave_0: left promiscuous mode [ 472.997449][ T8702] hsr_slave_1: left promiscuous mode [ 473.024541][ T8702] hsr0: left allmulticast mode [ 473.031910][ T8702] bridge0: port 5(hsr0) entered disabled state [ 473.060546][ T8702] bridge_slave_1: left allmulticast mode [ 473.069429][ T8702] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.096997][ T8702] bridge_slave_0: left promiscuous mode [ 473.111033][ T8702] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.366560][T14381] delete_channel: no stack [ 473.371891][T14381] delete_channel: no stack [ 473.481161][T14385] netlink: 'syz.1.2428': attribute type 9 has an invalid length. [ 473.504759][T14385] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2428'. [ 474.708440][ T51] Bluetooth: hci3: command tx timeout [ 475.574468][T14393] netlink: 'syz.0.2430': attribute type 10 has an invalid length. [ 475.619462][T14386] netlink: 'syz.1.2428': attribute type 9 has an invalid length. [ 475.639262][T14386] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2428'. [ 475.728168][T14401] delete_channel: no stack [ 475.732725][T14401] delete_channel: no stack [ 475.939600][T14202] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 475.989996][T14202] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 476.042597][T14202] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 476.116160][T14202] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 476.264370][T14416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2437'. [ 476.397573][T14202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.430856][T14202] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.459579][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.466771][ T8259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.515831][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.522972][ T7479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.173095][T14202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.297377][T14202] veth0_vlan: entered promiscuous mode [ 477.317047][T14202] veth1_vlan: entered promiscuous mode [ 477.391863][T14202] veth0_macvtap: entered promiscuous mode [ 477.409177][T14202] veth1_macvtap: entered promiscuous mode [ 477.476240][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.489739][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.524040][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.534877][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.545348][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.556046][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.588122][T14202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.697412][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.752830][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.763815][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.787306][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.803834][T14202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.823828][T14202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.860159][T14202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.903636][T14452] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2441'. [ 477.958571][T14202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.988538][T14202] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.014748][T14202] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.042206][T14202] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.334991][ T7479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.360696][T14467] netlink: 199832 bytes leftover after parsing attributes in process `syz.0.2444'. [ 478.381645][ T7479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.453493][ T7499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.504303][ T7499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.833216][T14491] syzkaller0: entered promiscuous mode [ 478.854733][T14491] syzkaller0: entered allmulticast mode [ 479.161895][T14506] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2451'. [ 479.323344][T14509] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2453'. [ 479.874458][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.884294][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.893609][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.905584][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.913524][ T5774] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 479.921270][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 480.154569][T14524] netlink: 'syz.1.2455': attribute type 10 has an invalid length. [ 480.167829][T14524] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2455'. [ 480.279996][ T8707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.333133][T14523] : port 1(gretap0) entered blocking state [ 480.361936][T14523] : port 1(gretap0) entered disabled state [ 480.392687][T14523] gretap0: entered allmulticast mode [ 480.405240][T14523] gretap0: entered promiscuous mode [ 480.452163][ T8707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.623751][ T8707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.721422][ T8707] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.019132][T14520] chnl_net:caif_netlink_parms(): no params data found [ 481.050038][ T8707] tipc: Left network mode [ 481.306054][T14549] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.2459'. [ 481.489963][T14520] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.498434][T14520] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.506366][T14520] bridge_slave_0: entered allmulticast mode [ 481.513605][T14520] bridge_slave_0: entered promiscuous mode [ 481.535188][T14520] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.542318][T14520] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.553959][T14520] bridge_slave_1: entered allmulticast mode [ 481.565313][T14520] bridge_slave_1: entered promiscuous mode [ 481.601594][ T8707] smc: removing net device  with user defined pnetid CONFIG [ 481.676957][T14520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.756082][T14520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.846614][T14565] : renamed from veth0_to_bond (while UP) [ 481.874482][T14520] team0: Port device team_slave_0 added [ 481.927130][T14520] team0: Port device team_slave_1 added [ 481.983967][ T51] Bluetooth: hci0: command tx timeout [ 482.047104][T14520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.063258][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.124251][T14520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.201796][ T8707] gretap0 (unregistering): left allmulticast mode [ 482.221874][ T8707] gretap0 (unregistering): left promiscuous mode [ 482.234838][ T8707] Ÿë: port 1(gretap0) entered disabled state [ 482.306826][T14520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.323448][T14520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.368206][T14520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.529694][T14520] hsr_slave_0: entered promiscuous mode [ 482.560730][T14520] hsr_slave_1: entered promiscuous mode [ 482.590517][T14520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.606686][T14520] Cannot create hsr debugfs directory [ 483.266755][T14600] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.2468'. [ 483.874054][ T8707] veth0_to_team: left allmulticast mode [ 483.879906][ T8707] veth0_to_team: left promiscuous mode [ 483.898403][ T8707] Ÿë: port 2(veth0_to_team) entered disabled state [ 483.929849][ T8707] hsr_slave_0: left promiscuous mode [ 483.944047][ T8707] hsr_slave_1: left promiscuous mode [ 483.950492][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 483.979309][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.988138][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 483.996086][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.005312][ T8707] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 484.012876][ T8707] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 484.023134][ T8707] hsr0: left allmulticast mode [ 484.029041][ T8707] bridge0: port 4(hsr0) entered disabled state [ 484.037677][ T8707] bridge_slave_0: left promiscuous mode [ 484.043524][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.063941][ T51] Bluetooth: hci0: command tx timeout [ 484.115907][ T8707] veth1_macvtap: left promiscuous mode [ 484.121582][ T8707] veth0_macvtap: left promiscuous mode [ 484.127708][ T8707] veth1_vlan: left promiscuous mode [ 484.133336][ T8707] veth0_vlan: left promiscuous mode [ 486.145150][ T51] Bluetooth: hci0: command tx timeout [ 486.571613][T14624] netlink: 'syz.1.2473': attribute type 10 has an invalid length. [ 486.628262][T14626] netlink: 'syz.1.2473': attribute type 10 has an invalid length. [ 486.875415][T14640] netlink: 'syz.3.2476': attribute type 29 has an invalid length. [ 486.918362][T14520] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.949013][T14520] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.976474][T14640] netlink: 'syz.3.2476': attribute type 29 has an invalid length. [ 487.026688][T14644] netlink: 'syz.3.2476': attribute type 29 has an invalid length. [ 487.064434][T14520] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 487.103893][T14645] netlink: 'syz.3.2476': attribute type 29 has an invalid length. [ 487.112325][T14520] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.558039][T14652] netlink: 'syz.3.2477': attribute type 10 has an invalid length. [ 487.598691][T14652] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 487.636087][T14520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.721068][T14520] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.779373][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.786549][ T8260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.840704][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.847886][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.254213][ T51] Bluetooth: hci0: command tx timeout [ 488.482159][T14520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.547793][T14520] veth0_vlan: entered promiscuous mode [ 488.567649][T14520] veth1_vlan: entered promiscuous mode [ 488.666671][T14520] veth0_macvtap: entered promiscuous mode [ 488.709176][T14520] veth1_macvtap: entered promiscuous mode [ 488.853638][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 488.940536][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.002838][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.036847][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.051392][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.063216][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.088586][T14520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.170287][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.197209][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.210041][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.223742][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.238020][T14520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.248930][T14520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.267871][T14520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.308433][T14520] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.323465][T14520] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.339689][T14520] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.349524][T14520] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.472845][ T8707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.496582][ T8707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.520868][T14708] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2489'. [ 489.557508][T14708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2489'. [ 489.567507][ T7479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.579904][ T7479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.612933][T14712] netlink: 'syz.2.2490': attribute type 10 has an invalid length. [ 489.629461][T14712] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2490'. [ 489.660631][T14708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.681497][T14708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.782302][T14708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.816284][T14708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.667185][ T5774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 490.676552][ T5774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 490.684909][ T5774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 490.693432][ T5774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 490.701621][ T5774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 490.722769][ T5774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 490.799217][T14738] netlink: 'syz.0.2497': attribute type 3 has an invalid length. [ 490.812000][T14738] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2497'. [ 492.357802][ T8707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.506388][ T8707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.662332][ T8707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.756601][ T8707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.784451][ T51] Bluetooth: hci4: command tx timeout [ 492.999158][T14771] netlink: 'syz.0.2505': attribute type 9 has an invalid length. [ 493.085519][T14771] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2505'. [ 493.129095][T14734] chnl_net:caif_netlink_parms(): no params data found [ 494.074692][T14734] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.099602][T14734] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.114280][T14734] bridge_slave_0: entered allmulticast mode [ 494.131724][T14734] bridge_slave_0: entered promiscuous mode [ 494.151063][T14734] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.160591][T14734] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.172849][T14734] bridge_slave_1: entered allmulticast mode [ 494.183341][T14819] FAULT_INJECTION: forcing a failure. [ 494.183341][T14819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.187887][T14734] bridge_slave_1: entered promiscuous mode [ 494.224114][T14819] CPU: 0 PID: 14819 Comm: syz.3.2512 Not tainted syzkaller #0 [ 494.231618][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 494.241709][T14819] Call Trace: [ 494.245010][T14819] [ 494.247967][T14819] dump_stack_lvl+0x18c/0x250 [ 494.252690][T14819] ? show_regs_print_info+0x20/0x20 [ 494.257922][T14819] ? load_image+0x420/0x420 [ 494.262472][T14819] ? __might_fault+0xaa/0x120 [ 494.267188][T14819] ? __lock_acquire+0x7d80/0x7d80 [ 494.272254][T14819] should_fail_ex+0x394/0x4c0 [ 494.276991][T14819] _copy_from_user+0x2f/0xe0 [ 494.281625][T14819] kstrtouint_from_user+0xde/0x170 [ 494.286779][T14819] ? kstrtol_from_user+0x190/0x190 [ 494.291947][T14819] proc_fail_nth_write+0x8f/0x250 [ 494.297011][T14819] ? proc_fail_nth_read+0x260/0x260 [ 494.302256][T14819] ? proc_fail_nth_read+0x260/0x260 [ 494.307491][T14819] vfs_write+0x299/0x9a0 [ 494.311772][T14819] ? file_end_write+0x250/0x250 [ 494.316660][T14819] ? __fget_files+0x28/0x460 [ 494.321311][T14819] ? __fget_files+0x3fc/0x460 [ 494.326040][T14819] ? __fdget_pos+0x2a3/0x330 [ 494.330660][T14819] ? ksys_write+0x74/0x260 [ 494.335112][T14819] ksys_write+0x151/0x260 [ 494.339470][T14819] ? __ia32_sys_read+0x90/0x90 [ 494.344257][T14819] ? lockdep_hardirqs_on+0x98/0x150 [ 494.349468][T14819] do_syscall_64+0x55/0xb0 [ 494.353902][T14819] ? clear_bhb_loop+0x40/0x90 [ 494.358597][T14819] ? clear_bhb_loop+0x40/0x90 [ 494.363286][T14819] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.369194][T14819] RIP: 0033:0x7f3d4bf5e6ce [ 494.373621][T14819] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 494.393261][T14819] RSP: 002b:00007f3d4cebffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.401690][T14819] RAX: ffffffffffffffda RBX: 00007f3d4cec06c0 RCX: 00007f3d4bf5e6ce [ 494.409677][T14819] RDX: 0000000000000001 RSI: 00007f3d4cec00a0 RDI: 0000000000000007 [ 494.417654][T14819] RBP: 00007f3d4cec0090 R08: 0000000000000000 R09: 0000000000000000 [ 494.425631][T14819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.433607][T14819] R13: 00007f3d4c226128 R14: 00007f3d4c226090 R15: 00007ffe4410d4c8 [ 494.441600][T14819] [ 494.597016][T14734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.610143][T14734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.641914][T14734] team0: Port device team_slave_0 added [ 494.651424][T14823] netlink: 'syz.0.2514': attribute type 10 has an invalid length. [ 494.663284][T14823] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2514'. [ 494.691167][T14734] team0: Port device team_slave_1 added [ 494.765415][T14734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.772382][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.813128][T14734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.867309][T14734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.878313][ T51] Bluetooth: hci4: command tx timeout [ 494.892730][T14734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.926705][T14734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.998554][T14734] hsr_slave_0: entered promiscuous mode [ 495.096291][T14836] netlink: 'syz.0.2518': attribute type 9 has an invalid length. [ 495.143891][T14836] netlink: 'syz.0.2518': attribute type 23 has an invalid length. [ 495.152874][T14734] hsr_slave_1: entered promiscuous mode [ 495.188108][T14836] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.2518'. [ 495.240476][T14734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 495.255054][T14734] Cannot create hsr debugfs directory [ 495.316827][T14839] netlink: 'syz.1.2519': attribute type 9 has an invalid length. [ 495.334596][T14839] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2519'. [ 496.956935][ T51] Bluetooth: hci4: command tx timeout [ 497.392159][T14894] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2530'. [ 497.650630][T14903] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2531'. [ 497.663095][T14903] netlink: del zone limit has 8 unknown bytes [ 497.770473][T14734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 497.837608][ T8707] hsr_slave_0: left promiscuous mode [ 497.854391][ T8707] hsr_slave_1: left promiscuous mode [ 497.861544][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.877586][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.892804][ T8707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.907440][ T8707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.925774][ T8707] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 497.938929][ T8707] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 499.024064][ T51] Bluetooth: hci4: command tx timeout [ 499.985881][T14734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 499.997161][T14734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 500.012755][T14734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.022781][T14920] netlink: 'syz.0.2534': attribute type 20 has an invalid length. [ 500.197591][T14928] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2535'. [ 500.369816][T14734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.419249][T14734] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.451220][ T8259] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.458424][ T8259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.522532][ T7499] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.529761][ T7499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.973643][T14952] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 501.010927][T14952] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2540'. [ 501.043877][T14952] netlink: 'syz.0.2540': attribute type 1 has an invalid length. [ 501.429694][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.432553][T14734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.439018][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.567880][T14734] veth0_vlan: entered promiscuous mode [ 501.626078][T14734] veth1_vlan: entered promiscuous mode [ 501.706140][T14734] veth0_macvtap: entered promiscuous mode [ 501.717039][T14734] veth1_macvtap: entered promiscuous mode [ 501.742368][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.771549][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.790215][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.801793][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.814796][T14734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.864344][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.877577][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.878561][T14978] netlink: 'syz.3.2546': attribute type 29 has an invalid length. [ 501.898698][T14734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.910062][T14734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.922391][T14734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.942713][T14973] netlink: 'syz.1.2544': attribute type 10 has an invalid length. [ 501.958425][T14973] hsr_slave_0: left promiscuous mode [ 501.966484][T14973] hsr_slave_1: left promiscuous mode [ 502.022940][T14978] netlink: 'syz.3.2546': attribute type 29 has an invalid length. [ 502.046730][T14734] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.058807][T14734] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.081268][T14734] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.090525][T14734] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.112406][T14979] netlink: 'syz.3.2546': attribute type 29 has an invalid length. [ 502.192174][T14980] netlink: 'syz.3.2546': attribute type 29 has an invalid length. [ 502.220396][T14978] netlink: 'syz.3.2546': attribute type 29 has an invalid length. [ 502.352913][ T8260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.388297][ T8260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.461633][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.495298][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.989522][T14989] netlink: 'syz.1.2548': attribute type 21 has an invalid length. [ 503.008649][T14989] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2548'. [ 503.398625][T15012] syzkaller0: entered promiscuous mode [ 503.425128][T15012] syzkaller0: entered allmulticast mode [ 503.493006][T15015] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2555'. [ 503.612754][T15015] netlink: zone id is out of range [ 503.673037][T15015] netlink: zone id is out of range [ 503.680498][T15015] netlink: zone id is out of range [ 503.690307][T15015] netlink: zone id is out of range [ 503.706977][T15015] netlink: zone id is out of range [ 503.713131][T15015] netlink: zone id is out of range [ 503.731869][T15015] netlink: zone id is out of range [ 503.737878][T15015] netlink: zone id is out of range [ 503.754359][T15015] netlink: zone id is out of range [ 503.765673][T15015] netlink: zone id is out of range [ 504.534071][T15063] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2568'. [ 504.685764][T15065] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2569'. [ 506.873232][T15131] netlink: 6527 bytes leftover after parsing attributes in process `syz.2.2589'. [ 507.167181][T15140] validate_nla: 5 callbacks suppressed [ 507.167196][T15140] netlink: 'syz.2.2593': attribute type 22 has an invalid length. [ 507.194819][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2593'. [ 507.370472][T15144] syzkaller0: entered promiscuous mode [ 507.380259][T15144] syzkaller0: entered allmulticast mode [ 507.629487][T15156] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2598'. [ 507.892821][T15156] netlink: 'syz.3.2598': attribute type 10 has an invalid length. [ 508.102550][T15156] team0: Device hsr_slave_0 failed to register rx_handler [ 508.195315][T15158] netlink: 'syz.2.2599': attribute type 10 has an invalid length. [ 508.259839][T15158] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 508.295571][T15172] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2602'. [ 508.452293][T15181] delete_channel: no stack [ 508.733390][T15203] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2611'. [ 508.874429][T15201] syzkaller0: entered promiscuous mode [ 508.880300][T15201] syzkaller0: entered allmulticast mode [ 509.318476][T15213] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2615'. [ 511.452334][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2633'. [ 511.627889][T15287] ƒ: renamed from tunl0 (while UP) [ 512.190009][T15316] net_ratelimit: 442 callbacks suppressed [ 512.190041][T15316] sock: sock_set_timeout: `syz.0.2643' (pid 15316) tries to set negative timeout [ 512.343027][T15316] netlink: 'syz.0.2643': attribute type 13 has an invalid length. [ 512.363218][T15316] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2643'. [ 512.386585][T15316] syz_tun: refused to change device tx_queue_len [ 512.403595][T15316] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 512.429154][T15321] netlink: 'syz.0.2643': attribute type 10 has an invalid length. [ 512.485521][T15321] team0: Port device netdevsim0 added [ 512.662962][T15327] netlink: 194488 bytes leftover after parsing attributes in process `syz.0.2645'. [ 512.702301][T15326] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2645'. [ 512.910741][T15330] netlink: 'syz.2.2646': attribute type 64 has an invalid length. [ 512.932214][T15330] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 512.981443][T15330] team0: Port device dummy0 added [ 513.004045][T15329] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 513.368874][T15338] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2650'. [ 513.413099][T15338] netlink: 21068 bytes leftover after parsing attributes in process `syz.1.2650'. [ 513.436281][T15338] tipc: Started in network mode [ 513.441213][T15338] tipc: Node identity b, cluster identity 73 [ 513.465499][T15338] tipc: Node number set to 11 [ 514.379636][T15365] sctp: [Deprecated]: syz.1.2659 (pid 15365) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.379636][T15365] Use struct sctp_sack_info instead [ 514.581549][T15367] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2660'. [ 514.915120][T15374] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2662'. [ 515.075726][T15378] delete_channel: no stack [ 515.208265][T15374] netlink: 'syz.1.2662': attribute type 10 has an invalid length. [ 515.346198][T15374] team0: Port device hsr_slave_0 added [ 516.676152][T15440] netlink: 'syz.1.2685': attribute type 3 has an invalid length. [ 516.717765][T15440] netlink: 16795 bytes leftover after parsing attributes in process `syz.1.2685'. [ 516.805270][T15449] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2689'. [ 516.836540][T15449] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2689'. [ 516.920226][T15449] bond0: (slave bond_slave_0): Releasing backup interface [ 517.041859][T15449] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 518.328369][T15477] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2699'. [ 518.445770][T15477] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 519.046239][T15485] netlink: 'syz.2.2700': attribute type 21 has an invalid length. [ 519.055188][T15485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2700'. [ 519.349763][T15495] netlink: 'syz.0.2704': attribute type 10 has an invalid length. [ 519.446644][T15495] syz_tun: entered promiscuous mode [ 519.649445][T15495] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 519.665022][T15499] netlink: 'syz.3.2703': attribute type 10 has an invalid length. [ 519.804032][T15502] netlink: 'syz.1.2705': attribute type 10 has an invalid length. [ 520.858005][T15527] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2712'. [ 520.938407][T15527] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 522.958866][T15575] netlink: 'syz.1.2725': attribute type 29 has an invalid length. [ 523.087895][T15575] netlink: 'syz.1.2725': attribute type 29 has an invalid length. [ 523.153431][T15574] netlink: 'syz.1.2725': attribute type 29 has an invalid length. [ 523.548290][T15588] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2728'. [ 524.025357][T15591] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2730'. [ 524.053504][T15591] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 524.676181][T15599] netlink: 'syz.1.2731': attribute type 10 has an invalid length. [ 525.349713][T15599] team0 (unregistering): Port device team_slave_0 removed [ 525.452028][T15599] team0 (unregistering): Port device team_slave_1 removed [ 525.508924][T15599] team0 (unregistering): Port device hsr_slave_0 removed [ 525.673794][T15606] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.691363][T15606] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.736853][T15606] bridge0: entered allmulticast mode [ 525.942471][T15614] netlink: 'syz.3.2735': attribute type 10 has an invalid length. [ 525.964506][T15614] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2735'. [ 526.610117][T15621] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2738'. [ 527.815586][T15650] netlink: 'syz.3.2746': attribute type 1 has an invalid length. [ 527.849296][T15650] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2746'. [ 528.003359][T15655] netlink: 'syz.2.2747': attribute type 5 has an invalid length. [ 528.033970][T15655] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2747'. [ 528.903075][T15662] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2749'. [ 528.994096][T15662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2749'. [ 529.140106][ T51] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 529.295291][T15669] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.2752'. [ 530.285031][T15681] syzkaller0: entered promiscuous mode [ 530.290598][T15681] syzkaller0: entered allmulticast mode [ 531.214331][T15694] netlink: 'syz.1.2759': attribute type 4 has an invalid length. [ 531.497265][T15697] netlink: 'syz.0.2760': attribute type 1 has an invalid length. [ 531.545490][T15698] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.2761'. [ 531.745863][T15708] netlink: 'syz.3.2765': attribute type 2 has an invalid length. [ 531.762397][T15708] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2765'. [ 531.923066][T15712] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2766'. [ 532.029253][T15718] netlink: 'syz.1.2768': attribute type 3 has an invalid length. [ 532.038412][T15718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2768'. [ 532.227710][ T51] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 532.638907][T15735] netlink: 'syz.1.2773': attribute type 27 has an invalid length. [ 532.771026][T15735] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2773'. [ 532.845714][T15732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 532.890684][T15733] netlink: 'syz.3.2772': attribute type 4 has an invalid length. [ 532.951558][T15737] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.2774'. [ 533.127989][T15746] netlink: 'syz.3.2776': attribute type 10 has an invalid length. [ 533.286071][T15746] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.325413][T15746] bond0: (slave team0): Enslaving as an active interface with an up link [ 533.517914][T15757] delete_channel: no stack [ 533.522691][T15757] delete_channel: no stack [ 533.681840][T15769] netlink: 'syz.1.2783': attribute type 10 has an invalid length. [ 534.034534][T15771] netlink: 'syz.0.2785': attribute type 4 has an invalid length. [ 534.144685][T15773] netlink: 'syz.2.2786': attribute type 1 has an invalid length. [ 534.184503][T15773] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2786'. [ 534.421612][T15778] netlink: 14207 bytes leftover after parsing attributes in process `syz.1.2787'. [ 534.554079][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2792'. [ 534.569989][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2792'. [ 534.580561][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2792'. [ 534.609528][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2792'. [ 534.919390][T15805] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.2797'. [ 535.116230][T15821] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2802'. [ 535.462967][T15833] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.2806'. [ 535.479474][T15833] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 535.565281][T15834] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.2806'. [ 535.679815][T15836] batman_adv: batadv0: Adding interface: virt_wifi0 [ 535.691597][T15836] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.724035][T15836] batman_adv: batadv0: Interface activated: virt_wifi0 [ 537.235442][T15882] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 537.982591][T15901] can: request_module (can-proto-0) failed. [ 538.362726][T15909] validate_nla: 1 callbacks suppressed [ 538.362772][T15909] netlink: 'syz.1.2825': attribute type 10 has an invalid length. [ 538.382579][T15909] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.426129][T15909] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.444098][T15909] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.480779][T15909] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.829223][T15924] netlink: 'syz.1.2829': attribute type 19 has an invalid length. [ 539.079686][T15934] netlink: 'syz.2.2833': attribute type 29 has an invalid length. [ 539.097000][T15934] netlink: 'syz.2.2833': attribute type 33 has an invalid length. [ 539.437123][T15945] __nla_validate_parse: 9 callbacks suppressed [ 539.437166][T15945] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.2837'. [ 540.122937][T15961] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.2843'. [ 540.688501][T15981] netlink: 'syz.0.2851': attribute type 2 has an invalid length. [ 541.129507][T15990] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.2853'. [ 541.160515][T15990] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 541.307897][T16000] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2855'. [ 541.490229][T16004] netlink: 'syz.0.2857': attribute type 1 has an invalid length. [ 541.509693][T16004] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2857'. [ 541.613688][T16006] netlink: 'syz.2.2858': attribute type 10 has an invalid length. [ 541.631701][T16006] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.639509][T16006] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.675261][T16006] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.682451][T16006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.689990][T16006] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.697210][T16006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.728923][T16006] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 541.795291][T16017] netlink: 'syz.3.2860': attribute type 21 has an invalid length. [ 541.803428][T16017] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2860'. [ 541.816482][T16017] netlink: 'syz.3.2860': attribute type 5 has an invalid length. [ 541.824595][T16017] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2860'. [ 541.952725][T16020] netlink: 'syz.2.2861': attribute type 39 has an invalid length. [ 542.252128][T16026] C: renamed from team_slave_0 [ 542.282221][T16026] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2864'. [ 542.300359][T16026] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 542.705457][T16029] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.2865'. [ 543.083137][T16040] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2867'. [ 544.021355][T16057] validate_nla: 3 callbacks suppressed [ 544.021375][T16057] netlink: 'syz.1.2871': attribute type 29 has an invalid length. [ 545.396474][T16054] netlink: 'syz.2.2870': attribute type 10 has an invalid length. [ 545.405726][T16054] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.412904][T16054] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.428033][T16057] netlink: 'syz.1.2871': attribute type 29 has an invalid length. [ 545.717486][T16064] netlink: 'syz.1.2873': attribute type 10 has an invalid length. [ 546.876770][T16081] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2874'. [ 546.940440][T16080] netlink: 6527 bytes leftover after parsing attributes in process `syz.1.2877'. [ 547.175623][T16095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2880'. [ 547.204209][T16095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2880'. [ 547.226397][T16095] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2880'. [ 547.499846][T16107] netlink: 'syz.0.2885': attribute type 10 has an invalid length. [ 547.847900][T16118] netlink: 'syz.3.2887': attribute type 1 has an invalid length. [ 547.884343][T16118] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.2887'. [ 548.037805][T16120] netlink: 6527 bytes leftover after parsing attributes in process `syz.2.2888'. [ 548.300485][T16135] netlink: 'syz.3.2891': attribute type 6 has an invalid length. [ 548.308634][T16135] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2891'. [ 548.464671][T16146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2896'. [ 548.477257][T16146] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2896'. [ 548.871199][T16157] netlink: 'syz.3.2899': attribute type 10 has an invalid length. [ 549.158958][T16157] team0: Port device netdevsim0 added [ 549.679086][T16183] netlink: 'syz.0.2903': attribute type 46 has an invalid length. [ 550.181573][T16194] sit0: entered allmulticast mode [ 550.249711][T16194] sit0: entered promiscuous mode [ 551.135564][T16200] netlink: 'syz.2.2914': attribute type 10 has an invalid length. [ 551.646150][T16200] bond0: (slave netdevsim0): Releasing backup interface [ 551.893390][T16200] team0: Port device netdevsim0 added [ 552.142705][T16220] __nla_validate_parse: 6 callbacks suppressed [ 552.142742][T16220] netlink: 14207 bytes leftover after parsing attributes in process `syz.3.2919'. [ 552.247163][T16230] netlink: 'syz.0.2923': attribute type 13 has an invalid length. [ 552.291817][T16230] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2923'. [ 552.349175][T16230] erspan0: refused to change device tx_queue_len [ 552.481350][T16245] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2927'. [ 552.611006][T16236] syzkaller0: entered promiscuous mode [ 552.626131][T16236] syzkaller0: entered allmulticast mode [ 552.650496][T16247] netlink: 'syz.0.2929': attribute type 10 has an invalid length. [ 552.696469][T16247] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 552.772825][T16257] netlink: 'syz.3.2932': attribute type 10 has an invalid length. [ 552.802664][T16257] macvlan0: entered promiscuous mode [ 552.809503][T16257] macvlan0: entered allmulticast mode [ 552.845680][T16257] veth1_vlan: entered allmulticast mode [ 552.865319][T16257] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 552.876112][T16262] netlink: 'syz.2.2933': attribute type 21 has an invalid length. [ 552.900604][T16262] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2933'. [ 555.373592][T16267] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.2934'. [ 555.383528][T16277] netlink: 'syz.3.2938': attribute type 10 has an invalid length. [ 555.413066][T16277] team0: Port device wlan1 added [ 555.430372][T16302] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2944'. [ 555.554269][T16306] netlink: 'syz.3.2946': attribute type 1 has an invalid length. [ 555.572388][T16306] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.2946'. [ 555.773310][T16321] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2947'. [ 556.086856][T16330] netlink: 14207 bytes leftover after parsing attributes in process `syz.2.2953'. [ 558.991850][T16341] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2957'. [ 559.272166][T16348] netlink: 'syz.1.2959': attribute type 9 has an invalid length. [ 559.284583][T16348] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2959'. [ 559.576365][T16364] syzkaller0: entered promiscuous mode [ 559.582112][T16364] syzkaller0: entered allmulticast mode [ 559.631575][T16364] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 559.687595][T16366] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2965'. [ 559.890332][T16372] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.2967'. [ 559.925047][T16372] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 560.228167][T16370] syzkaller0: entered promiscuous mode [ 560.234036][T16370] syzkaller0: entered allmulticast mode [ 561.143125][T16393] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.2973'. [ 561.768422][T16393] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2973'. [ 561.778899][T16393] netlink: 4548 bytes leftover after parsing attributes in process `syz.0.2973'. [ 561.988934][T16397] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.2976'. [ 562.092767][T16400] netlink: 'syz.3.2975': attribute type 21 has an invalid length. [ 562.102393][T16400] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2975'. [ 562.869345][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.875807][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.125996][T16405] syzkaller0: entered promiscuous mode [ 565.132193][T16405] syzkaller0: entered allmulticast mode [ 565.148587][T16405] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 565.986048][T16442] syzkaller0: entered promiscuous mode [ 565.991991][T16442] syzkaller0: entered allmulticast mode [ 566.012944][T16442] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 566.261211][T16455] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2995'. [ 566.658916][T16471] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2998'. [ 566.756752][T16477] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3000'. [ 566.782767][T16473] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2999'. [ 566.798093][T16477] syz.2.3000[16477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.799100][T16477] syz.2.3000[16477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 566.816278][T16473] netlink: zone id is out of range [ 566.840314][T16473] netlink: zone id is out of range [ 566.848786][T16473] netlink: zone id is out of range [ 566.862220][T16473] netlink: zone id is out of range [ 566.878626][T16473] netlink: zone id is out of range [ 566.886005][T16473] netlink: zone id is out of range [ 566.892286][T16473] netlink: zone id is out of range [ 566.918579][T16473] netlink: zone id is out of range [ 566.928000][T16473] netlink: zone id is out of range [ 567.100432][T16488] netlink: 'syz.3.3002': attribute type 7 has an invalid length. [ 568.221187][T16518] netlink: 'syz.3.3012': attribute type 10 has an invalid length. [ 568.237086][T16518] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3012'. [ 568.671593][T16540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3017'. [ 568.683162][T16540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3017'. [ 568.704620][T16540] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3017'. [ 568.741143][T16544] netlink: 'syz.3.3018': attribute type 21 has an invalid length. [ 568.765296][T16544] netlink: 160 bytes leftover after parsing attributes in process `syz.3.3018'. [ 568.948859][T16546] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 568.984009][T16546] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 569.190699][T16547] delete_channel: no stack [ 569.342861][T16561] netlink: 'syz.1.3024': attribute type 10 has an invalid length. [ 569.352173][T16561] netlink: 209280 bytes leftover after parsing attributes in process `syz.1.3024'. [ 569.362225][T16561] openvswitch: netlink: Flow key attr not present in new flow. [ 569.509751][T16558] netlink: 'syz.2.3022': attribute type 10 has an invalid length. [ 569.567049][T16558] veth1_macvtap: left promiscuous mode [ 570.528782][T16593] syzkaller0: entered promiscuous mode [ 570.534603][T16593] syzkaller0: entered allmulticast mode [ 572.589284][T16621] netlink: 'syz.2.3040': attribute type 39 has an invalid length. [ 573.254295][T16636] __nla_validate_parse: 1 callbacks suppressed [ 573.254312][T16636] netlink: 13566 bytes leftover after parsing attributes in process `syz.1.3044'. [ 573.492382][T16643] tap0: tun_chr_ioctl cmd 2147767520 [ 573.510165][T16644] tap0: tun_chr_ioctl cmd 2147767520 [ 574.747745][T16667] netlink: 'syz.1.3052': attribute type 21 has an invalid length. [ 574.768344][T16669] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3053'. [ 575.008315][T16680] netlink: 'syz.2.3057': attribute type 21 has an invalid length. [ 575.076068][T16680] netlink: 'syz.2.3057': attribute type 10 has an invalid length. [ 575.132795][T16680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3057'. [ 575.836013][T16696] syz.0.3060: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 575.863904][T16696] CPU: 0 PID: 16696 Comm: syz.0.3060 Not tainted syzkaller #0 [ 575.871432][T16696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 575.881516][T16696] Call Trace: [ 575.884826][T16696] [ 575.887783][T16696] dump_stack_lvl+0x18c/0x250 [ 575.892515][T16696] ? show_regs_print_info+0x20/0x20 [ 575.897763][T16696] ? load_image+0x420/0x420 [ 575.902313][T16696] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 575.908780][T16696] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 575.915320][T16696] warn_alloc+0x246/0x340 [ 575.919703][T16696] ? stack_trace_save+0xaa/0x100 [ 575.924679][T16696] ? zone_watermark_ok_safe+0x230/0x230 [ 575.930275][T16696] ? kasan_set_track+0x5f/0x70 [ 575.935071][T16696] ? kasan_set_track+0x4e/0x70 [ 575.939849][T16696] ? __kasan_kmalloc+0x8f/0xa0 [ 575.944625][T16696] ? xsk_init_queue+0xad/0x100 [ 575.949484][T16696] ? xsk_setsockopt+0x4c9/0x750 [ 575.954343][T16696] ? do_sock_setsockopt+0x175/0x1a0 [ 575.959560][T16696] ? __x64_sys_setsockopt+0x182/0x200 [ 575.964954][T16696] __vmalloc_node_range+0x129/0x1320 [ 575.970279][T16696] ? free_vm_area+0x50/0x50 [ 575.974816][T16696] vmalloc_user+0x74/0x80 [ 575.979167][T16696] ? xskq_create+0xbf/0x170 [ 575.983683][T16696] xskq_create+0xbf/0x170 [ 575.988028][T16696] xsk_init_queue+0xad/0x100 [ 575.992635][T16696] xsk_setsockopt+0x4c9/0x750 [ 575.997328][T16696] ? xsk_poll+0x670/0x670 [ 576.001673][T16696] ? __fget_files+0x28/0x460 [ 576.006279][T16696] ? aa_sock_opt_perm+0x74/0x100 [ 576.011234][T16696] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 576.016798][T16696] ? security_socket_setsockopt+0x7e/0xa0 [ 576.022535][T16696] ? xsk_poll+0x670/0x670 [ 576.026882][T16696] do_sock_setsockopt+0x175/0x1a0 [ 576.031929][T16696] ? __fdget+0x180/0x210 [ 576.036187][T16696] __x64_sys_setsockopt+0x182/0x200 [ 576.041405][T16696] do_syscall_64+0x55/0xb0 [ 576.045836][T16696] ? clear_bhb_loop+0x40/0x90 [ 576.050525][T16696] ? clear_bhb_loop+0x40/0x90 [ 576.055213][T16696] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.061126][T16696] RIP: 0033:0x7efcf939de99 [ 576.065554][T16696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.085168][T16696] RSP: 002b:00007efcfa220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 576.093589][T16696] RAX: ffffffffffffffda RBX: 00007efcf9625fa0 RCX: 00007efcf939de99 [ 576.101586][T16696] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 576.109585][T16696] RBP: 00007efcf9433eaf R08: 0000000000000004 R09: 0000000000000000 [ 576.117571][T16696] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 576.125563][T16696] R13: 00007efcf9626038 R14: 00007efcf9625fa0 R15: 00007ffcddc129f8 [ 576.133558][T16696] [ 576.163357][T16696] Mem-Info: [ 576.166569][T16696] active_anon:28896 inactive_anon:0 isolated_anon:0 [ 576.166569][T16696] active_file:22668 inactive_file:40151 isolated_file:0 [ 576.166569][T16696] unevictable:768 dirty:119 writeback:0 [ 576.166569][T16696] slab_reclaimable:10859 slab_unreclaimable:95360 [ 576.166569][T16696] mapped:34267 shmem:16269 pagetables:600 [ 576.166569][T16696] sec_pagetables:0 bounce:0 [ 576.166569][T16696] kernel_misc_reclaimable:0 [ 576.166569][T16696] free:1317163 free_pcp:9673 free_cma:0 [ 576.311815][T16696] Node 0 active_anon:116584kB inactive_anon:0kB active_file:90672kB inactive_file:160400kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:137068kB dirty:476kB writeback:0kB shmem:64740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11080kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 576.400643][T16696] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 576.452872][T16696] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 576.496035][T16696] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 576.528799][T16696] Node 0 DMA32 free:1360348kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:118344kB inactive_anon:0kB active_file:90672kB inactive_file:159580kB unevictable:1536kB writepending:476kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:15336kB local_pcp:6948kB free_cma:0kB [ 576.686741][T16696] lowmem_reserve[]: 0 0 0 0 0 [ 576.691615][T16696] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 576.722508][T16717] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3066'. [ 576.733821][T16696] lowmem_reserve[]: 0 0 0 0 0 [ 576.738593][T16696] Node 1 Normal free:3889920kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24300kB local_pcp:17548kB free_cma:0kB [ 576.876310][T16696] lowmem_reserve[]: 0 0 0 0 0 [ 576.911826][T16696] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 577.010963][T16696] Node 0 DMA32: 2*4kB (UE) 380*8kB (UME) 169*16kB (UME) 349*32kB (UE) 864*64kB (UME) 892*128kB (UME) 267*256kB (UM) 92*512kB (UM) 28*1024kB (UME) 7*2048kB (UM) 247*4096kB (UM) = 1356568kB [ 577.096479][T16696] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 577.125610][T16696] Node 1 Normal: 4*4kB (UE) 44*8kB (UME) 39*16kB (UME) 49*32kB (UME) 22*64kB (UE) 11*128kB (UME) 2*256kB (UE) 2*512kB (ME) 2*1024kB (UE) 1*2048kB (U) 947*4096kB (M) = 3889920kB [ 577.207228][T16696] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.265686][T16696] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.306015][T16696] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 577.332008][T16696] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 577.358284][T16696] 80605 total pagecache pages [ 577.371337][T16696] 0 pages in swap cache [ 577.380757][T16696] Free swap = 124996kB [ 577.389218][T16696] Total swap = 124996kB [ 577.416267][T16696] 2097051 pages RAM [ 577.420115][T16696] 0 pages HighMem/MovableOnly [ 577.428578][T16696] 416953 pages reserved [ 577.432771][T16696] 0 pages cma reserved [ 577.779142][T16740] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 578.165321][T16738] delete_channel: no stack [ 578.261004][T16754] Bluetooth: hci4: unexpected subevent 0x03 length: 150 > 9 [ 578.272954][T16750] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3076'. [ 578.526020][T16763] netlink: 'syz.3.3079': attribute type 3 has an invalid length. [ 578.557743][T16763] netlink: 16795 bytes leftover after parsing attributes in process `syz.3.3079'. [ 579.944694][T16789] netlink: 'syz.2.3085': attribute type 10 has an invalid length. [ 580.067798][T16789] bridge_slave_1: left allmulticast mode [ 580.084019][T16789] bridge_slave_1: left promiscuous mode [ 580.104659][T16789] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.139373][T16789] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 580.214248][T16799] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3088'. [ 580.303993][T16754] Bluetooth: hci1: command 0x0406 tx timeout [ 580.466613][T16809] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3090'. [ 580.509822][T16801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3089'. [ 580.536342][T16807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3089'. [ 580.554942][T16807] netlink: 'syz.2.3089': attribute type 10 has an invalid length. [ 580.562851][T16807] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3089'. [ 580.668574][T16807] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 580.758713][T16807] batman_adv: batadv0: Removing interface: virt_wifi0 [ 580.820663][T16801] netlink: 'syz.2.3089': attribute type 10 has an invalid length. [ 580.874174][T16801] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3089'. [ 581.636678][T16836] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3098'. [ 582.063083][T16849] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3103'. [ 582.107866][T16849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 582.115430][T16849] IPv6: NLM_F_CREATE should be set when creating new route [ 582.123160][T16849] IPv6: NLM_F_CREATE should be set when creating new route [ 582.130860][T16849] IPv6: NLM_F_CREATE should be set when creating new route [ 585.671670][T16870] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3108'. [ 586.107501][T16899] syzkaller0: entered promiscuous mode [ 586.113044][T16899] syzkaller0: entered allmulticast mode [ 589.052694][T16923] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3120'. [ 589.164603][T16945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3126'. [ 589.181468][T16945] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3126'. [ 589.204189][T16946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3126'. [ 589.218164][T16946] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3126'. [ 589.847630][T16974] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3134'. [ 590.426100][T17000] netlink: 'syz.1.3142': attribute type 10 has an invalid length. [ 590.457213][T17002] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3143'. [ 590.521592][T17002] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3143'. [ 590.560311][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 590.616899][T17002] netlink: 'syz.0.3143': attribute type 9 has an invalid length. [ 590.650570][T17008] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3145'. [ 591.041886][T17022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 591.049304][T17022] IPv6: NLM_F_CREATE should be set when creating new route [ 591.056668][T17022] IPv6: NLM_F_CREATE should be set when creating new route [ 591.063942][T17022] IPv6: NLM_F_CREATE should be set when creating new route [ 591.576882][T17042] netlink: 'syz.1.3154': attribute type 29 has an invalid length. [ 591.759684][T17038] netlink: 'syz.0.3153': attribute type 19 has an invalid length. [ 591.778595][T17042] netlink: 'syz.1.3154': attribute type 29 has an invalid length. [ 593.480732][T17053] __nla_validate_parse: 1 callbacks suppressed [ 593.480757][T17053] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3157'. [ 594.883524][T17110] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.3174'. [ 596.206295][T17135] netlink: 'syz.3.3183': attribute type 21 has an invalid length. [ 596.216486][T17135] IPv6: NLM_F_CREATE should be specified when creating new route [ 596.224718][T17135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 596.231986][T17135] IPv6: NLM_F_CREATE should be set when creating new route [ 596.239276][T17135] IPv6: NLM_F_CREATE should be set when creating new route [ 596.246564][T17135] IPv6: NLM_F_CREATE should be set when creating new route [ 596.256259][T17131] netlink: 'syz.0.3181': attribute type 10 has an invalid length. [ 596.273927][T17131] bridge0: left allmulticast mode [ 596.283008][T17131] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.291104][T17131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.300500][T17131] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.308351][T17131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 596.361922][T17131] team0: Port device bridge0 added [ 596.393068][T17139] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3184'. [ 596.552702][T17148] netlink: 'syz.0.3188': attribute type 21 has an invalid length. [ 596.561027][T17148] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3188'. [ 597.081003][T17172] netlink: 'syz.2.3195': attribute type 39 has an invalid length. [ 597.093606][T16754] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 597.310672][T17175] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3196'. [ 597.691128][T17185] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.3198'. [ 598.000248][T17189] netlink: 'syz.1.3201': attribute type 21 has an invalid length. [ 598.218330][T17195] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3195'. [ 598.294300][T17195] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3195'. [ 598.308559][T17172] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3195'. [ 598.982539][T17221] netlink: 'syz.1.3208': attribute type 3 has an invalid length. [ 599.000941][T17221] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3208'. [ 599.104002][T16754] Bluetooth: hci4: command tx timeout [ 599.253637][T17227] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3212'. [ 599.391399][T17234] IPv6: NLM_F_CREATE should be specified when creating new route [ 599.659784][T17243] netlink: 'syz.3.3216': attribute type 3 has an invalid length. [ 599.674746][T17243] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3216'. [ 599.792325][T17243] syzkaller0: entered promiscuous mode [ 599.800257][T17243] syzkaller0: entered allmulticast mode [ 599.816319][T17245] netlink: 'syz.2.3217': attribute type 6 has an invalid length. [ 599.830163][T17245] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3217'. [ 600.158418][T16754] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 601.660521][T17277] netlink: 'syz.0.3228': attribute type 2 has an invalid length. [ 601.680585][T17277] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3228'. [ 602.224139][T16754] Bluetooth: hci0: command tx timeout [ 602.413987][T17292] @: port 1(netdevsim3) entered blocking state [ 602.453972][T17292] @: port 1(netdevsim3) entered disabled state [ 602.460379][T17292] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 602.470254][T17292] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 602.763981][T17311] netlink: 'syz.0.3236': attribute type 2 has an invalid length. [ 602.774198][T17311] netlink: 'syz.0.3236': attribute type 8 has an invalid length. [ 602.794105][T17311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3236'. [ 602.833513][T17310] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3237'. [ 602.920738][T17314] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.3238'. [ 603.078523][T17318] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3239'. [ 604.188607][T17352] netlink: 'syz.0.3249': attribute type 3 has an invalid length. [ 604.206580][T17352] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3249'. [ 604.216610][T17348] @: port 1(netdevsim3) entered blocking state [ 604.222974][T17348] @: port 1(netdevsim3) entered disabled state [ 604.329419][T17348] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 604.374222][T17348] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 605.323908][T17368] netlink: 'syz.0.3254': attribute type 10 has an invalid length. [ 605.345791][T17368] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.353227][T17368] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.447285][T17371] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.3253'. [ 605.461994][T17368] team0: Port device bridge0 removed [ 605.480154][T17368] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.487413][T17368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.495037][T17368] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.502256][T17368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.545279][T17375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3254'. [ 605.558322][T17368] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 605.638254][T17370] netlink: 'syz.3.3255': attribute type 21 has an invalid length. [ 605.751555][T17375] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3254'. [ 605.806578][T17368] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3254'. [ 605.905990][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 606.304536][T17381] syzkaller0: entered promiscuous mode [ 606.310095][T17381] syzkaller0: entered allmulticast mode [ 611.653407][T17420] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3266'. [ 614.791383][T17431] tap0: tun_chr_ioctl cmd 1074025681 [ 614.949969][T17442] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3274'. [ 615.157298][T17451] netlink: 'syz.2.3274': attribute type 39 has an invalid length. [ 615.500602][T17462] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.3279'. [ 615.649142][T17464] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3280'. [ 615.794684][T17471] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3282'. [ 615.820693][T17466] netlink: 'syz.1.3281': attribute type 2 has an invalid length. [ 616.146009][T16754] Bluetooth: hci4: command 0x0406 tx timeout [ 616.578768][T17491] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.3288'. [ 617.489600][T17547] netlink: 'syz.1.3305': attribute type 29 has an invalid length. [ 617.507197][T17547] netlink: 'syz.1.3305': attribute type 29 has an invalid length. [ 617.540688][T17551] sock: sock_timestamping_bind_phc: sock not bind to device [ 617.614901][T17547] netlink: 'syz.1.3305': attribute type 29 has an invalid length. [ 617.645918][T17554] netlink: 16195 bytes leftover after parsing attributes in process `syz.2.3307'. [ 617.670360][T17552] netlink: 'syz.1.3305': attribute type 29 has an invalid length. [ 618.074055][T17566] Dead loop on virtual device ip6_vti0, fix it urgently! [ 618.194643][T17570] netlink: 'syz.1.3312': attribute type 10 has an invalid length. [ 618.203038][T17570] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3312'. [ 618.393542][T17593] netlink: 'syz.3.3318': attribute type 9 has an invalid length. [ 618.408604][T17593] netlink: 'syz.3.3318': attribute type 23 has an invalid length. [ 618.419174][T17593] netlink: 156008 bytes leftover after parsing attributes in process `syz.3.3318'. [ 618.434025][T17593] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.3318'. [ 618.446713][T17593] netlink: 'syz.3.3318': attribute type 21 has an invalid length. [ 618.455632][T17593] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3318'. [ 618.963064][T17622] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3328'. [ 619.279724][T17641] sctp: [Deprecated]: syz.2.3332 (pid 17641) Use of int in maxseg socket option. [ 619.279724][T17641] Use struct sctp_assoc_value instead [ 620.380445][T17669] validate_nla: 5 callbacks suppressed [ 620.380480][T17669] netlink: 'syz.1.3342': attribute type 10 has an invalid length. [ 620.514865][T17674] veth0_vlan: entered allmulticast mode [ 620.789117][T17684] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3346'. [ 620.826611][T17684] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 621.044500][T17681] netlink: 'syz.2.3345': attribute type 39 has an invalid length. [ 622.394275][T17718] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 622.399498][T17711] syzkaller0: entered promiscuous mode [ 622.421811][T17711] syzkaller0: entered allmulticast mode [ 622.724081][T17730] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 622.731912][T17730] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.3360'. [ 623.194803][T17738] netlink: 'syz.0.3361': attribute type 2 has an invalid length. [ 623.223826][T17738] netlink: 'syz.0.3361': attribute type 8 has an invalid length. [ 623.231612][T17738] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3361'. [ 623.266331][T17739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 623.277680][T17739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.287253][T17739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.303973][T17739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.391267][T17741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3362'. [ 623.558482][T17743] netlink: 'syz.1.3363': attribute type 10 has an invalid length. [ 623.641552][T17745] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.3364'. [ 623.887094][T17758] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.3366'. [ 623.960530][T17761] netlink: 'syz.2.3366': attribute type 10 has an invalid length. [ 624.063128][T17761] team0: Port device geneve1 added [ 624.094349][T17767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 624.101834][T17767] IPv6: NLM_F_CREATE should be set when creating new route [ 624.109517][T17767] IPv6: NLM_F_CREATE should be set when creating new route [ 624.117057][T17767] IPv6: NLM_F_CREATE should be set when creating new route [ 624.140509][T17770] netlink: 'syz.1.3370': attribute type 9 has an invalid length. [ 624.152093][T17770] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3370'. [ 624.271251][T17772] netlink: 'syz.1.3370': attribute type 9 has an invalid length. [ 624.292839][T17772] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3370'. [ 624.316468][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.322842][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.722026][T17784] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.3376'. [ 625.122208][T17787] : port 1(ip6gretap0) entered blocking state [ 625.145600][T17787] : port 1(ip6gretap0) entered disabled state [ 625.152010][T17787] ip6gretap0: entered allmulticast mode [ 625.186313][T17787] ip6gretap0: entered promiscuous mode [ 625.232847][T17790] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3377'. [ 625.448576][T17805] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 625.456113][T17805] IPv6: NLM_F_CREATE should be set when creating new route [ 625.463913][T17805] IPv6: NLM_F_CREATE should be set when creating new route [ 625.471526][T17805] IPv6: NLM_F_CREATE should be set when creating new route [ 625.530052][T17805] netlink: 'syz.0.3384': attribute type 9 has an invalid length. [ 625.538600][T17805] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3384'. [ 625.807839][T17812] netlink: 'syz.0.3384': attribute type 9 has an invalid length. [ 627.233638][T17862] netlink: 'syz.1.3402': attribute type 1 has an invalid length. [ 627.400924][T17865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 627.408393][T17865] IPv6: NLM_F_CREATE should be set when creating new route [ 627.484859][T17865] netlink: 'syz.2.3401': attribute type 9 has an invalid length. [ 627.651446][T17866] netlink: 'syz.2.3401': attribute type 9 has an invalid length. [ 627.777295][T17875] netlink: 'syz.3.3406': attribute type 1 has an invalid length. [ 627.797991][T17875] __nla_validate_parse: 8 callbacks suppressed [ 627.798006][T17875] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3406'. [ 627.798018][T17873] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3405'. [ 628.278570][T17891] netlink: 'syz.3.3412': attribute type 9 has an invalid length. [ 628.303854][T17891] netlink: 399 bytes leftover after parsing attributes in process `syz.3.3412'. [ 628.502065][T17900] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3415'. [ 628.540822][T17903] netlink: 'syz.0.3414': attribute type 1 has an invalid length. [ 628.561009][T17903] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.3414'. [ 628.741045][T17916] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3419'. [ 628.789253][T17918] netlink: 'syz.3.3420': attribute type 29 has an invalid length. [ 628.798127][T17918] netlink: 'syz.3.3420': attribute type 29 has an invalid length. [ 628.981114][T17931] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3421'. [ 629.042476][T17925] netlink: 16390 bytes leftover after parsing attributes in process `syz.2.3421'. [ 629.365040][T17936] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3424'. [ 629.860128][T17968] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.3434'. [ 631.951605][T17996] validate_nla: 9 callbacks suppressed [ 631.951622][T17996] netlink: 'syz.3.3440': attribute type 46 has an invalid length. [ 631.968921][T17996] netlink: 'syz.3.3440': attribute type 46 has an invalid length. [ 632.286954][T18003] netlink: 'syz.2.3441': attribute type 10 has an invalid length. [ 632.306712][T18003] openvswitch: netlink: Flow key attr not present in new flow. [ 632.494154][T17998] netlink: 'syz.2.3441': attribute type 7 has an invalid length. [ 632.816602][T18006] __nla_validate_parse: 3 callbacks suppressed [ 632.816632][T18006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3443'. [ 633.042145][T18014] netlink: 'syz.1.3446': attribute type 12 has an invalid length. [ 633.072592][T18014] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3446'. [ 633.098250][T18019] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.3446'. [ 634.065703][T18036] netlink: 'syz.3.3454': attribute type 2 has an invalid length. [ 634.079539][T18036] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3454'. [ 634.149675][T18041] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3463'. [ 634.161831][T18042] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3456'. [ 634.376549][T18053] netlink: 'syz.2.3458': attribute type 9 has an invalid length. [ 634.393771][T18053] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.3458'. [ 635.023951][T18063] netlink: 'syz.3.3462': attribute type 21 has an invalid length. [ 635.337216][T18070] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.3466'. [ 636.943810][T18087] netlink: 'syz.2.3471': attribute type 1 has an invalid length. [ 636.954161][T18087] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.3471'. [ 637.361475][T18105] netlink: 'syz.0.3477': attribute type 4 has an invalid length. [ 637.371470][T18102] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.3476'. [ 637.564734][T18108] netlink: 'syz.2.3478': attribute type 9 has an invalid length. [ 637.900899][T18125] __nla_validate_parse: 3 callbacks suppressed [ 637.900941][T18125] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3483'. [ 638.471951][T18138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3487'. [ 639.740252][T16893] tipc: Subscription rejected, illegal request [ 639.893828][T18184] netlink: 'syz.2.3501': attribute type 29 has an invalid length. [ 640.166196][T18190] veth1_to_bond: entered allmulticast mode [ 640.312873][T18197] netlink: 'syz.1.3506': attribute type 21 has an invalid length. [ 640.362061][T18197] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3506'. [ 641.157568][T18233] netlink: 'syz.1.3515': attribute type 3 has an invalid length. [ 641.237260][T18233] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3515'. [ 641.379575][T18239] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3518'. [ 641.399650][T18239] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 641.483309][T18242] netlink: 'syz.1.3519': attribute type 29 has an invalid length. [ 641.503369][T18242] netlink: 'syz.1.3519': attribute type 29 has an invalid length. [ 641.529884][T18242] netlink: 'syz.1.3519': attribute type 29 has an invalid length. [ 641.541916][T18244] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.3520'. [ 641.555568][T18242] netlink: 'syz.1.3519': attribute type 29 has an invalid length. [ 641.581460][T18244] netlink: 59623 bytes leftover after parsing attributes in process `syz.3.3520'. [ 642.025856][T18265] netlink: 'syz.0.3526': attribute type 25 has an invalid length. [ 642.332221][T18270] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3527'. [ 642.551340][T18269] validate_nla: 2 callbacks suppressed [ 642.551352][T18269] netlink: 'syz.3.3527': attribute type 9 has an invalid length. [ 642.601375][T18269] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.3527'. [ 642.755850][T18279] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.3529'. [ 642.942454][T18283] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 643.013012][T18283] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 643.088475][T18282] syzkaller0: entered promiscuous mode [ 643.111524][T18282] syzkaller0: entered allmulticast mode [ 643.183295][T18282] pim6reg1: entered promiscuous mode [ 643.201129][T18282] pim6reg1: entered allmulticast mode [ 645.292502][T18296] sit0: entered allmulticast mode [ 645.340737][T18296] sit0: entered promiscuous mode [ 646.098413][T18321] __nla_validate_parse: 1 callbacks suppressed [ 646.098428][T18321] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3541'. [ 646.116388][T18321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.217765][T18325] netlink: 6527 bytes leftover after parsing attributes in process `syz.1.3542'. [ 646.309728][T18327] netlink: 'syz.2.3543': attribute type 13 has an invalid length. [ 646.323883][T18327] netlink: 'syz.2.3543': attribute type 58 has an invalid length. [ 646.353780][T18327] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3543'. [ 646.497497][T18334] netlink: 'syz.1.3544': attribute type 10 has an invalid length. [ 646.651946][T18341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3547'. [ 646.679844][T18341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3547'. [ 646.721834][T18341] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3547'. [ 646.834740][T18343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3547'. [ 646.899565][ C0] [ 646.899572][ C0] ================================ [ 646.899577][ C0] WARNING: inconsistent lock state [ 646.899595][ C0] syzkaller #0 Not tainted [ 646.899602][ C0] -------------------------------- [ 646.899607][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 646.899614][ C0] syz.0.3548/18347 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 646.899632][ C0] ffff88807ae50a38 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x95/0x680 [ 646.899684][ C0] {INITIAL USE} state was registered at: [ 646.899690][ C0] lock_acquire+0x19e/0x420 [ 646.899707][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 646.899729][ C0] trie_update_elem+0xcd/0xdf0 [ 646.899749][ C0] bpf_map_update_value+0x64b/0x710 [ 646.899763][ C0] generic_map_update_batch+0x5de/0x800 [ 646.899777][ C0] bpf_map_do_batch+0x3f2/0x600 [ 646.899793][ C0] __sys_bpf+0x381/0x890 [ 646.899807][ C0] __x64_sys_bpf+0x7c/0x90 [ 646.899821][ C0] do_syscall_64+0x55/0xb0 [ 646.899843][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.899872][ C0] irq event stamp: 1786 [ 646.899877][ C0] hardirqs last enabled at (1785): [] syscall_enter_from_user_mode+0x25/0x80 [ 646.899903][ C0] hardirqs last disabled at (1786): [] exc_debug+0x73/0x140 [ 646.899921][ C0] softirqs last enabled at (1746): [] bpf_prog_load+0x1204/0x1610 [ 646.899943][ C0] softirqs last disabled at (1744): [] bpf_ksym_add+0x2c/0x330 [ 646.899964][ C0] [ 646.899964][ C0] other info that might help us debug this: [ 646.899969][ C0] Possible unsafe locking scenario: [ 646.899969][ C0] [ 646.899973][ C0] CPU0 [ 646.899975][ C0] ---- [ 646.899978][ C0] lock(&trie->lock); [ 646.900006][ C0] [ 646.900009][ C0] lock(&trie->lock); [ 646.900019][ C0] [ 646.900019][ C0] *** DEADLOCK *** [ 646.900019][ C0] [ 646.900023][ C0] no locks held by syz.0.3548/18347. [ 646.900030][ C0] [ 646.900030][ C0] stack backtrace: [ 646.900035][ C0] CPU: 0 PID: 18347 Comm: syz.0.3548 Not tainted syzkaller #0 [ 646.900052][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 646.900062][ C0] Call Trace: [ 646.900069][ C0] <#DB> [ 646.900141][ C0] dump_stack_lvl+0x18c/0x250 [ 646.900176][ C0] ? show_regs_print_info+0x20/0x20 [ 646.900215][ C0] ? print_usage_bug+0x43d/0x6a0 [ 646.900238][ C0] ? verify_lock_unused+0x15/0x140 [ 646.900265][ C0] lock_acquire+0x2c2/0x420 [ 646.900299][ C0] ? trie_delete_elem+0x95/0x680 [ 646.900346][ C0] ? read_lock_is_recursive+0x20/0x20 [ 646.900371][ C0] ? get_user_pages_fast_only+0xa0/0xa0 [ 646.900403][ C0] ? look_up_lock_class+0x75/0x140 [ 646.900434][ C0] _raw_spin_lock_irqsave+0xb4/0x100 [ 646.900459][ C0] ? trie_delete_elem+0x95/0x680 [ 646.900486][ C0] ? _raw_spin_lock+0x40/0x40 [ 646.900513][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 646.900546][ C0] trie_delete_elem+0x95/0x680 [ 646.900573][ C0] ? perf_callchain+0x220/0x220 [ 646.900607][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 646.900631][ C0] bpf_overflow_handler+0x1fc/0x510 [ 646.900666][ C0] ? bpf_overflow_handler+0xde/0x510 [ 646.900694][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 646.900735][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 646.900765][ C0] __perf_event_overflow+0x461/0x660 [ 646.900800][ C0] perf_swevent_event+0x319/0x570 [ 646.900827][ C0] ? perf_tp_event+0x1550/0x1550 [ 646.900851][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 646.900894][ C0] perf_bp_event+0x319/0x430 [ 646.900927][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 646.901002][ C0] ? lock_acquire+0x2c2/0x420 [ 646.901039][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 646.901088][ C0] notifier_call_chain+0x18f/0x380 [ 646.901120][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 646.901148][ C0] atomic_notifier_call_chain+0xda/0x180 [ 646.901178][ C0] notify_die+0x145/0x1a0 [ 646.901208][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 646.901247][ C0] ? rcu_is_watching+0x15/0xb0 [ 646.901286][ C0] notify_debug+0x2e/0x50 [ 646.901318][ C0] exc_debug+0xde/0x140 [ 646.901355][ C0] asm_exc_debug+0x1e/0x40 [ 646.901380][ C0] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 646.901400][ C0] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 646.901416][ C0] RSP: 0018:ffffc9000c867d50 EFLAGS: 00040202 [ 646.901431][ C0] RAX: 00000001ffffffff RBX: 000000000000000c RCX: 000000000000000c [ 646.901442][ C0] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9000c867dc0 [ 646.901454][ C0] RBP: ffffc9000c867ee8 R08: ffffc9000c867dcb R09: 1ffff9200190cfb9 [ 646.901467][ C0] R10: dffffc0000000000 R11: fffff5200190cfba R12: 000020000000030c [ 646.901481][ C0] R13: 000000000000000c R14: ffffc9000c867dc0 R15: 0000200000000300 [ 646.901518][ C0] [ 646.901523][ C0] [ 646.901528][ C0] _copy_from_user+0x8b/0xe0 [ 646.901552][ C0] __sys_bpf+0x23e/0x890 [ 646.901576][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 646.901620][ C0] ? lock_chain_count+0x20/0x20 [ 646.901656][ C0] __x64_sys_bpf+0x7c/0x90 [ 646.901677][ C0] do_syscall_64+0x55/0xb0 [ 646.901702][ C0] ? clear_bhb_loop+0x40/0x90 [ 646.901718][ C0] ? clear_bhb_loop+0x40/0x90 [ 646.901737][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 646.901763][ C0] RIP: 0033:0x7efcf939de99 [ 646.901790][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.901803][ C0] RSP: 002b:00007efcfa220028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.901819][ C0] RAX: ffffffffffffffda RBX: 00007efcf9625fa0 RCX: 00007efcf939de99 [ 646.901832][ C0] RDX: 000000000000000c RSI: 0000200000000300 RDI: 000000000000000e [ 646.901842][ C0] RBP: 00007efcf9433eaf R08: 0000000000000000 R09: 0000000000000000 [ 646.901852][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.901862][ C0] R13: 00007efcf9626038 R14: 00007efcf9625fa0 R15: 00007ffcddc129f8 [ 646.901896][ C0]