last executing test programs: 1m38.43369453s ago: executing program 1 (id=3153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000064006bcd9e3fe3dc4e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) (async) socketpair(0x23, 0xa, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r3, &(0x7f0000000300)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x1, 0x0, {0xa, 0x4e22, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000000c0)="a84dd721b43cc587b3e8330d93513e3b01e8c947adff9ec33a803497743f6a3196a3168a90b14ebea09cf45146f137aff45c2cf9", 0x34}, {&(0x7f0000000200)="60c6c798e9666f559d529d21c8978ba246e616cde381688d6c5cbc29a0d508b8283af2cd167c91c4c52567f973ecda5ca61153643ac66934e5c7bbd0fbe214a0fdd52b8c6ba0d81ffb55b078d5e3408400bf46b56272f76fee755404b10cca7650b49d2d0ca1f0c2c1ba1a58681aa4de7160658338978eef918bc1744e71443f5e", 0x81}], 0x2}, 0x20000001) 1m38.246029779s ago: executing program 1 (id=3157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0xf}, 0x2018, 0x0, 0x0, 0x8, 0x1002, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180040010000400", 0x33fe0}], 0x1}, 0x0) (async) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @random="0dade14669c5"}) 1m38.006305991s ago: executing program 1 (id=3159): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 1m37.885312856s ago: executing program 1 (id=3161): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x1e, 0x0, 0x1}, 0x28) socketpair(0x18, 0x0, 0x1, &(0x7f0000001780)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000a80)='\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00)={r2}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r0, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580), &(0x7f00000007c0)=[0x0], 0x0, 0xe8, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xdb, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a40)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x14, &(0x7f0000000000)=r7, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x3, 0x0, 0x5, 0xac04, 0x1, 0x5, '\x00', r4, r5, 0x3, 0x4, 0x5, 0x0, @value=r7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002b40)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x8, 0x6, 0x2, 0x0, 0x1}, @ldst={0x0, 0x2, 0x3, 0x1, 0x2, 0x2, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3c2f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001980)=""/4096, 0x0, 0x4f, '\x00', 0x0, 0x17, r1, 0x8, &(0x7f0000002a40)={0xf0000000, 0x4}, 0x8, 0x10, &(0x7f0000002a80)={0x0, 0x5, 0x43cc, 0xb}, 0x10, 0x247ce, r0, 0x1, &(0x7f0000002ac0)=[r0, r10], &(0x7f0000002b00)=[{0x2, 0x3, 0x4, 0xb}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="cb000000150081054e81f782db44b904021f08010a000000040000a118000200ac141414ffff0d1208000f0100810401880016ea1f0006ea7f400303000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fa0e408f456211bef32d4760000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x44804) 1m36.853580865s ago: executing program 1 (id=3172): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000700)="49723b3ab53a13274c", 0x0}, 0x50) socket$kcm(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000003"], 0x50) close(r4) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@nfc={0x27, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="6dd0b8df5275e5fb6e44e08e829481b3000cd7a705227ff7af0cf1b9b2ca1e234a825e52df33a0358a39932d1ba11c", 0x2f}, {&(0x7f0000000840)="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", 0x153}, {&(0x7f0000000180)="fdbdb7c58e9d32aff843622a3317c8e357e094022b2572c8e447c10d3651d0059a1738f8409243c909fc12b366743b0459a8f3ef2cf39cb2ed4685c21eaff47981718847b5cd64c247d03a042990449a", 0x50}, {&(0x7f0000000300)="a5bf42d5718895fa78158f6c97655ee3b32c188c541e35730905f086717675245d28e48f3e8a4f617a95c4407e2366c1aae56252f39e59726023d56096b8bc4fc7970b58e4aca062231ccd927daaecb17b933f16b8edd85fed6a1fdd8ff9bcdb5177d648ee7fc7d18c146a1456f988e3a55f15f1b5528b092e593853bdf52eb045f55d55b72855171787b4e4ecf7f15dbbf074d5625d1cd21154ac39eb19e8d621ed036b8c3abcbea15a123dcd75db568e9cfd17f3ebbbb4d1bb446f7846505db7d4aea1ce6136dbd650dd4283", 0xcd}], 0x4}, 0x0) 1m36.434693534s ago: executing program 1 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x6c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x1000, &(0x7f0000000200)=""/4096, 0x40f00, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x4, 0x5, 0x9, 0xfffffff8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001240)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001280)=[{0x2, 0x4, 0x10, 0x8}, {0x2, 0x2, 0x9}, {0x1, 0x4, 0x6, 0x4}, {0x1, 0x5, 0xd, 0xc}, {0x0, 0x3, 0xc, 0x4}, {0x2, 0x4, 0x1, 0xb}], 0x10, 0xa6}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r2, 0x0, 0xb4, 0x0, &(0x7f00000013c0)="e6a1a306379cab5eec9b731ef63a98feb38a2840d3a9ac24ca23a6d96ec1a96b1b7595c3f84b42abad46f88ddd72136f0319692f49560e3b21367073c1e85b6624336f44078c500f3d88182c6599162c909209273ff7dd62c1777aaeb2c6e2edb7c89859173fbb21158f12f68b337ff8e93cd58e8641d12d6e93e54f3a6cc72417db1afd8af7476610cad4def2c43cc7b25e31db59f8af60f6371f0b0fa249808294c6871c5dddaa67bb258558794c3eb7f4997d", &(0x7f0000001480), 0x1, 0x0, 0xc3, 0x41, &(0x7f00000014c0)="b9b9670ccb21ac5853254fd4de10f979337f03315e8617e57bc2c3f868d8bf702ec72861cf497c99b805d30c54cd9ec2886dd614e29c9cde71b96f600926d03d67f4607dcd5892a645bd1da6bd01b25d9d785ee0d111cdbe39593afaf2fad51f997268b5e754dd6af1b3c2420282d59d9be0f88a990217b09dda1e63196b74452e4a364d772c6ab92480898dbb3dc1263cec2f11fdfb34b51c7d22b33b8a9e5c5c724855d2adf75b92120f17fc80c969deeaf265075e905c2b57a700c0c1532adadf87", &(0x7f00000015c0)="e5b10c03b8aa67e44e8d5063441a5ed8233fbdfb51be6737f76bf0db5fa01feb98e34aaf3faca6e8389d1c611f757237e82b880b1df028c713303da8723d8e836e", 0x0, 0x0, 0x3}, 0x50) (async) r3 = perf_event_open(&(0x7f0000001700)={0x3, 0x80, 0x5, 0x7f, 0xff, 0x8, 0x0, 0x5, 0x804, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, @perf_bp={&(0x7f00000016c0)}, 0x910, 0x401, 0x4, 0x4, 0x0, 0x6, 0x8, 0x0, 0x9dc}, 0x0, 0xf, 0xffffffffffffffff, 0x6) (async) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001780), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000017c0)={[{0x2b, 'freezer'}, {0x2d, 'cpuacct'}]}, 0x12) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001800), 0x2, 0x0) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x10d001, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001880)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000018c0)={'ip6erspan0\x00'}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x0, 0x9, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbae}, [@generic={0x7, 0x4, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0xa, 0x4, 0x6, 0xfffffffffffffff4}, @exit]}, &(0x7f0000001980)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000019c0)=""/4096, 0x41100, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000029c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002a00)={0x2, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002a40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000002a80)=[{0x5, 0x3, 0x5, 0xb}, {0x2, 0x5, 0x1, 0x2}, {0x5, 0x3, 0x10}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002b80), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000002bc0), 0x9) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c80)={{}, &(0x7f0000002c00), &(0x7f0000002c40)=r6}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002e00)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002dc0)={@cgroup=r8, 0x34, 0x1, 0xfffffff8, &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d40)=[0x0, 0x0], &(0x7f0000002d80)}, 0x40) (async, rerun: 64) r10 = syz_clone(0x40000000, &(0x7f0000002e40)="c787a4fbcca65bd6303862e6e7095f03d97dc98d72884415acaeb4917198059477cb95ecc0884ef658c3eb689ee0c8839a67cb43e2fde5e4ac907ef71786c2546a7e7c63a4f8c07cfbab494e08ff299f5ec03920afa23c6e5878b51b80743e0ec3a6a75d54df04c160b80c9778a4e3b4995ed6869e8525bc0f57ae368874f57488bd8b8c", 0x84, &(0x7f0000002f00), &(0x7f0000002f40), &(0x7f0000002f80)="45632f86da85bd17ab7c8c16982744186a4a036116dff7b7bb7c73f844d89959ea640a5e8ea2e208de15b7509d2dde8a5548e0dfbd03dfdd1927bc715a05eaf4e951f0b292c4283200f1d5c155b852c98bb2a6169f91144d675357ad52c226c55ffc8e2bc6c97746f5b6142f7e60e1bd87d44bce057aeb") (async, rerun: 64) r11 = openat$cgroup_procs(r8, &(0x7f0000003000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000003040)=r10, 0x12) (async) r12 = openat$cgroup_devices(r9, &(0x7f0000003080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f00000030c0)={'a', ' *:* ', 'm\x00'}, 0x8) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000003140)={0x8, &(0x7f0000003100)=[{0x5, 0x9, 0x49, 0x5}, {0x800, 0x5, 0x9, 0x6d18a0d6}, {0x636, 0xb6, 0x1, 0x3}, {0x6, 0x3, 0xa, 0x8ca}, {0x53, 0xd, 0x8, 0x1}, {0x200, 0xc, 0x1, 0x5b0e}, {0x100, 0x2, 0x2, 0x80}, {0x200, 0x6, 0x0, 0x3}]}) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r13, &(0x7f00000031c0), 0x2, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000003240)={0x0, 0x80, 0x29, 0xf, 0xa, 0x9, 0x0, 0x3, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, @perf_bp={&(0x7f0000003200), 0x8}, 0x101000, 0x8000, 0x4, 0x6, 0x8, 0x1f, 0x6, 0x0, 0x6, 0x0, 0x9}, r9, 0xffffffffffffffff, r3, 0xa) (rerun: 32) 1m21.269949156s ago: executing program 32 (id=3174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) (async, rerun: 32) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x6c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0xffffffff, 0x1000, &(0x7f0000000200)=""/4096, 0x40f00, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001200)={0x4, 0x5, 0x9, 0xfffffff8}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001240)=[0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001280)=[{0x2, 0x4, 0x10, 0x8}, {0x2, 0x2, 0x9}, {0x1, 0x4, 0x6, 0x4}, {0x1, 0x5, 0xd, 0xc}, {0x0, 0x3, 0xc, 0x4}, {0x2, 0x4, 0x1, 0xb}], 0x10, 0xa6}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001640)={r2, 0x0, 0xb4, 0x0, &(0x7f00000013c0)="e6a1a306379cab5eec9b731ef63a98feb38a2840d3a9ac24ca23a6d96ec1a96b1b7595c3f84b42abad46f88ddd72136f0319692f49560e3b21367073c1e85b6624336f44078c500f3d88182c6599162c909209273ff7dd62c1777aaeb2c6e2edb7c89859173fbb21158f12f68b337ff8e93cd58e8641d12d6e93e54f3a6cc72417db1afd8af7476610cad4def2c43cc7b25e31db59f8af60f6371f0b0fa249808294c6871c5dddaa67bb258558794c3eb7f4997d", &(0x7f0000001480), 0x1, 0x0, 0xc3, 0x41, &(0x7f00000014c0)="b9b9670ccb21ac5853254fd4de10f979337f03315e8617e57bc2c3f868d8bf702ec72861cf497c99b805d30c54cd9ec2886dd614e29c9cde71b96f600926d03d67f4607dcd5892a645bd1da6bd01b25d9d785ee0d111cdbe39593afaf2fad51f997268b5e754dd6af1b3c2420282d59d9be0f88a990217b09dda1e63196b74452e4a364d772c6ab92480898dbb3dc1263cec2f11fdfb34b51c7d22b33b8a9e5c5c724855d2adf75b92120f17fc80c969deeaf265075e905c2b57a700c0c1532adadf87", &(0x7f00000015c0)="e5b10c03b8aa67e44e8d5063441a5ed8233fbdfb51be6737f76bf0db5fa01feb98e34aaf3faca6e8389d1c611f757237e82b880b1df028c713303da8723d8e836e", 0x0, 0x0, 0x3}, 0x50) (async) r3 = perf_event_open(&(0x7f0000001700)={0x3, 0x80, 0x5, 0x7f, 0xff, 0x8, 0x0, 0x5, 0x804, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, @perf_bp={&(0x7f00000016c0)}, 0x910, 0x401, 0x4, 0x4, 0x0, 0x6, 0x8, 0x0, 0x9dc}, 0x0, 0xf, 0xffffffffffffffff, 0x6) (async) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001780), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000017c0)={[{0x2b, 'freezer'}, {0x2d, 'cpuacct'}]}, 0x12) (async, rerun: 64) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000001800), 0x2, 0x0) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001840), 0x10d001, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000001880)) (async) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000018c0)={'ip6erspan0\x00'}) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x0, 0x9, &(0x7f0000001900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xbae}, [@generic={0x7, 0x4, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0xa, 0x4, 0x6, 0xfffffffffffffff4}, @exit]}, &(0x7f0000001980)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000019c0)=""/4096, 0x41100, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000029c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000002a00)={0x2, 0x4, 0x7, 0x3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000002a40)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r2], &(0x7f0000002a80)=[{0x5, 0x3, 0x5, 0xb}, {0x2, 0x5, 0x1, 0x2}, {0x5, 0x3, 0x10}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) r7 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000002b80), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000002bc0), 0x9) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c80)={{}, &(0x7f0000002c00), &(0x7f0000002c40)=r6}, 0x20) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002e00)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002dc0)={@cgroup=r8, 0x34, 0x1, 0xfffffff8, &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d40)=[0x0, 0x0], &(0x7f0000002d80)}, 0x40) (async, rerun: 64) r10 = syz_clone(0x40000000, &(0x7f0000002e40)="c787a4fbcca65bd6303862e6e7095f03d97dc98d72884415acaeb4917198059477cb95ecc0884ef658c3eb689ee0c8839a67cb43e2fde5e4ac907ef71786c2546a7e7c63a4f8c07cfbab494e08ff299f5ec03920afa23c6e5878b51b80743e0ec3a6a75d54df04c160b80c9778a4e3b4995ed6869e8525bc0f57ae368874f57488bd8b8c", 0x84, &(0x7f0000002f00), &(0x7f0000002f40), &(0x7f0000002f80)="45632f86da85bd17ab7c8c16982744186a4a036116dff7b7bb7c73f844d89959ea640a5e8ea2e208de15b7509d2dde8a5548e0dfbd03dfdd1927bc715a05eaf4e951f0b292c4283200f1d5c155b852c98bb2a6169f91144d675357ad52c226c55ffc8e2bc6c97746f5b6142f7e60e1bd87d44bce057aeb") (async, rerun: 64) r11 = openat$cgroup_procs(r8, &(0x7f0000003000)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000003040)=r10, 0x12) (async) r12 = openat$cgroup_devices(r9, &(0x7f0000003080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f00000030c0)={'a', ' *:* ', 'm\x00'}, 0x8) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000003140)={0x8, &(0x7f0000003100)=[{0x5, 0x9, 0x49, 0x5}, {0x800, 0x5, 0x9, 0x6d18a0d6}, {0x636, 0xb6, 0x1, 0x3}, {0x6, 0x3, 0xa, 0x8ca}, {0x53, 0xd, 0x8, 0x1}, {0x200, 0xc, 0x1, 0x5b0e}, {0x100, 0x2, 0x2, 0x80}, {0x200, 0x6, 0x0, 0x3}]}) (async) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003180)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r13, &(0x7f00000031c0), 0x2, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f0000003240)={0x0, 0x80, 0x29, 0xf, 0xa, 0x9, 0x0, 0x3, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, @perf_bp={&(0x7f0000003200), 0x8}, 0x101000, 0x8000, 0x4, 0x6, 0x8, 0x1f, 0x6, 0x0, 0x6, 0x0, 0x9}, r9, 0xffffffffffffffff, r3, 0xa) (rerun: 32) 1.823568835s ago: executing program 0 (id=3821): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r0, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, @perf_config_ext={0x100000000, 0x6}, 0xe01, 0x10000, 0x9e4, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x80002, 0xffffffffffffffff, 0xa) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x6, 0x0, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x102}}], 0x18}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)=r4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r7, &(0x7f0000000000), &(0x7f0000000500)=""/216}, 0x20) r8 = socket$kcm(0x29, 0x2, 0x0) close(r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) close(r8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="dc010000200000001800000000000000000000000000000095", @ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) 1.804152986s ago: executing program 2 (id=3822): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e00000000000000070000000400000080000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000038c2fae977fc5937352078d5364f9bcfe94015b59f3b3422571225c68fe1d96f40fc66e155e7d29b9abd88598eb54e835328a35e32f0660220402694e26e2ed035b4d248651000000000000000f986ea5923f76a1a542ba2629d21711f18c8bfd0440146e42daea3f176383a766acd4d8f3b622baeab39b7ad041c41265b13621364e8f7d86697aed449e56f3cd84be27e6c00"/178, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000400"/28], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, &(0x7f0000000300)="c4fc084f2007db", &(0x7f0000000380)=""/233}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2d364e250c817974, 0x805, 0xffffffff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x3, 0x1, 0x1}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)="d2d304fbc3afa0aaa0d462e51f1f998288453b375c31a856191645fcab92cbe8b4512fe97e7670b6d436af5055600bcfa0f171f107", 0x35}, {0x0}], 0x2, &(0x7f00000004c0)=ANY=[], 0x18}, 0x20004080) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611598000000000061134c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000005000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r6) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$inet(r6, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x20000001) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r8], 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000015c0)={r8}, 0x4) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) 1.749656959s ago: executing program 4 (id=3823): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x139e6080, 0x0, 0x37, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x5}, 0x10}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4, 0x4}}, 0x80, 0x0}, 0x20008044) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000001400000014000000040000000100000001000006040000000000000000000000005f2e00d91901f1d86674de9b4c8e7582e17dda5f29f66db751efa736b725a2efbd91c841a2697310eb425f2e4a63afbaf607bafba821f7d67002d5a6868eb45b05bd083c68acd516139cb20c0000000000000002ef38e9dfe01d897eb85fa82c841a13f12bc6bdf68af91810e0043181af5d098d2872223da2f779cfe32952052716253bd7cdce0199ec48d32a1e9e7213d9935cbaa3d4af9aa827b6128eede79dd13d1f6eb7d35cc163e87a67ce7ef0"], 0x0, 0x30, 0x0, 0x1}, 0x28) close(r7) socket$kcm(0x29, 0x5, 0x0) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) r12 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7f, 0x4, 0x4, 0x10, 0x0, 0x40, 0x10220, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1b, 0x5, @perf_bp={&(0x7f0000000280), 0x4}, 0x0, 0x8, 0xcf, 0x0, 0x2e9, 0x0, 0x3b50, 0x0, 0xad8f, 0x0, 0x800}, 0x0, 0x4, r6, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000340)='GPL\x00') 1.610362185s ago: executing program 0 (id=3825): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xf0, 0x9}, 0x7702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x3, 0x0, 0x0, 0x6, 0x40080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x215, 0x3fd, 0xfffffffa, 0x1, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 1.556678207s ago: executing program 2 (id=3826): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r1) (async) socket$kcm(0x23, 0x5, 0x0) (async, rerun: 64) write$cgroup_subtree(r1, &(0x7f00000009c0)=ANY=[], 0xfdef) (rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88841, 0x0) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0xf}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r4 = socket$kcm(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000140)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180040010000400", 0x33fe0}], 0x1}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x4020940d, &(0x7f00000005c0)=0x81000400000004) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 1.357527097s ago: executing program 3 (id=3828): openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x3}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188002ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f00000017c0)={&(0x7f0000001780)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3c}}, 0xffffffffffffffe0, 0x0}, 0x300060d1) setsockopt$sock_attach_bpf(r3, 0x6, 0x3, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x0, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x8, 0x4, 0x0, 0x6, 0x0, 0x3, 0x80053, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7fffffffefff, 0x2}, 0x100040, 0xffffffff, 0xfffffffa, 0x6, 0xda0, 0xfffffffc, 0x81, 0x0, 0x400, 0x0, 0x8000000000000001}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000018c0)={&(0x7f0000000080)="00ddf453305c7fd338cc7962159b5722ce4217fcef662ccab3b3d8ecfc7adc89cf7ba8faae37f649aa1a3be2f45c3e74aa733f3c34f61ade99a02f818a2522dbaa670b7cf8a83b51d20e303b5c2eeb723148d9af1aabca7784c1ae4cfb5eb251897294f471ca1ce1e4b7e354469050c8ea5b983591b97a1135b6d17dc9d67afdaf90a5ec806dca3243f8bcdfc70cd25be72f8496", &(0x7f0000000280)=""/18, 0x0, &(0x7f0000001780), 0x0, 0xffffffffffffffff, 0x4}, 0x38) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000b00)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x34044840) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x894b, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001100)={r6, 0x43, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000003a1ac3e302ac5ed200000039967e3c3992c95dfbcc4e562ea40dff1fed081340c62d144540349f148ea5263c70645719ad43f3b3a2ddaf12e0dff789540e0d7c9f3b7978af2aa6c25144e057282029fce21bd5d518c1a7a16aed504b78c2806defc8d687c6f6831c399b9e5de1fb536ef8771ef8040d73ab19bda98bcf2c3e17cd9608811b5ff3b4eb5c935bb8c3732026fabec80c5ab9c9d6253c835c3569503b16862bd09d0cb4badffd9272c3783f86971b0a120353d4b67f52"], 0x50) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2e00000011008188040f80ec59acbc0413a1", 0x12}, {&(0x7f0000000040)="ba6d53e0ca90a3aba0e6dd11c8249b93bb3582cfc2bd265f75d0d468216e4146b41a9f837250ada439c7cebac38416de07d6", 0x32}, {0x0}, {&(0x7f0000000340)}, {0x0}], 0x5}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {0x0}], 0x2, &(0x7f0000001040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010102, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}], 0x40}, 0x0) 1.357073737s ago: executing program 4 (id=3829): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x1, 0x84) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) 1.350705677s ago: executing program 0 (id=3830): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xaa99}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x9, 0x1, 0x2, 0x1, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000003009500000000000000bfa000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, &(0x7f0000000000)=r3, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x20000000004, 0x6) 1.306187809s ago: executing program 4 (id=3831): perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80000000, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="1800020009000000000000000300000085000000130000009500000000000000c8cb09f27f01387dca6dc3edbb1e34cef967d1ce250700e8ca5ed2c599a18f820e643026d0014a8a073939bab6b43ad8c7429e2a6a58780b6c0586eece976eecab137d37a9765ad0022cfca8748983a079ddb1"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @perf_bp={&(0x7f0000001100)}, 0x10000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x37, 0x0, 0x0, 0x0, 0x0, 0x7683, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87dc, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x40}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e", 0x5}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000002900000004", @ANYRESHEX=0x0], 0x18}, 0x8080) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) socketpair(0x1, 0x801, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000001040), 0x8}, 0x104090, 0x0, 0x4000003, 0x0, 0x0, 0x7, 0x200, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x10, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x891c, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100028, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x2}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d80000001c0081044e81f782db44b904021d08020100000040f0ffa1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20000000) 1.265691392s ago: executing program 0 (id=3832): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) r1 = gettid() (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x9, 0x2, 0x3, 0x5, 0x0, 0x9, 0x121, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xa5, 0x4, @perf_bp={&(0x7f0000000000), 0x4}, 0x1000, 0xb, 0x7ff, 0x1, 0xff, 0x4, 0x6, 0x0, 0x3, 0x0, 0x7}, r1, 0x10, r2, 0x3) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x20, 0x5, 0x0, 0xfffff030}, {0x6, 0x4, 0x40}]}) 937.929216ms ago: executing program 0 (id=3833): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES8], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280), 0x40) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1e) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x50100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xe}, 0x828, 0x0, 0x10000, 0x2, 0x5, 0x800000, 0x4, 0x0, 0xffffffff, 0x0, 0x43}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) (async) socket$kcm(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x3}, 0x50) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000, 0xff00}, 0x48) 766.135495ms ago: executing program 4 (id=3834): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x8, 0x1, 0x7, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x60021000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000, 0x4}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000}, 0x80, 0x0, 0xb491561afc3436bf}, 0x2000d830) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x1c) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x44, 0xc, "09f00008ea6e19000000"}]}}}], 0x40}, 0x20002880) setsockopt$sock_attach_bpf(r1, 0x1, 0x45, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="f76b9fe50380a76c1aeca8eb35409c64225c3228772743610d2408b4363e0c97b7a3c4f7c3b735a8c740a7e25ad6f74057b724528492bb46800ad4307bcbfac4a643ac732017df712a63a4ffb588ff851d1454ecf61038420ecada09776d96f76b4972990fcccb2172ef3fe1723224c4581efd154d5b8af12d03bef1e3e55742262c14b0b808b5799259e0bee6a5f900b455a9ebd61d3139e78ccbe989816c628c2d79f63188deae1c703de07d5b70f6c4ed6f2c28cc5ddef63bcbb664beadf7b3447d8305bd70a88ebbea", 0xcb}, {&(0x7f0000000300)="bbedcf28721ebe4be52d2021e9662a966f132a21fb7dfcbb1e43fc7d0b151a04113d8da62cbcf3138b758e4c3740b898692954e5f8ae3d88d1fa8aae22f4c7b8ebe66b1007fbc5530d25eb876128e49e738fc37bf3790b741670467012d975ab0e7f0f71be05e7db8931b67d1c37215a08f03f883ef0ae0c267c054cc6f07a3eaa451f02c9b2367224a452524415740e484f3296ce9a9717e97629f2e62da6fbaddaffe1b9599c", 0xa7}], 0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x6ed, "e0a57663112b866b696add9607bf"}, {0x50, 0x84, 0x3, "1486d1687865f85f721d3e39bd1a51556ea1041347d1a437d97b84b4307d83e88e9d9ea11b2aba9d71ae47c0cbfbfb3fcb31250ec95b5ee0aaa9"}], 0x70}, 0x4000080) 650.07368ms ago: executing program 3 (id=3835): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xc9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), 0x8, 0xfffffb80, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x31d}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x100, 0xbf, &(0x7f0000000480)=""/191, 0x41000, 0x60, '\x00', r2, @fallback=0x20, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5, 0x0, &(0x7f0000000900), 0x0, 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f00000005c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x2, 0x3, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x1, 0x7, 0x2, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0xcc, '\x00', r2, 0x25, r1, 0x8, &(0x7f0000000440)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0x10, 0x6, 0xaf93}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[r0, r0, r0, r6, r0, r0], &(0x7f0000000680)=[{0x1, 0x3, 0x5, 0x3}, {0x2, 0x4, 0x0, 0x7}, {0x2, 0x5, 0x1, 0x4}, {0x2, 0x1, 0x10, 0x4}, {0x5, 0x2, 0x9, 0xa}], 0x10, 0x7fffffff}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'}) openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.time\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000093000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8}, 0x94) 517.761376ms ago: executing program 3 (id=3836): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1f, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00"], 0xfe33) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="95"], 0x0, 0x181, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a0003", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) 512.124596ms ago: executing program 4 (id=3837): socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x800, 0x10514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x10001, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff2}, 0x48) r1 = socket$kcm(0x2, 0x7, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000740), 0xc}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x20, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r1, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000000100000000000000bfa200000000000007020000f8ffff000003000008000000b7040000000000058500000082000000bf91002000000000b7020000000000008500000084000000b7000000000000009563bbb0e79e1d27e03805eb53754ec445259277b84d1a74cf69f3a9c4a9d8504767c36020dbc679f0cd358f943806c01b583bec19a8087d6f0ef3ac374539a2dfa22cde088693c3c2b6003a3d5f83b0f7a72e5b11f3e08f18"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x8, 0x8, &(0x7f00000002c0)="b81500050cec9d28", &(0x7f0000000300)=""/8, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="0000000000009d3e7046637dc828512a0000b703000000000000850000000d0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0400000004000000040000004017000000000000e54c506b7c4a0adc88914dc2cf51bfc03f29021bb27c17b99b0bc3d34fe151a39ea0f8c5103283d2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xa, &(0x7f0000000940)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x3, 0xfffffff7}, @generic={0xb7, 0x5}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x2, 0x1, 0x0, r9}, @generic={0x7, 0x1, 0xc, 0x7fff, 0x2}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10, r9}, 0xc) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r11, 0x1, 0x3}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000004000000080000000000000001"], 0x40) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r12, &(0x7f00000007c0)="4d0171c21d73821c807b18f2684a9af80ea4e609877c14fcd1cd2b10c5a988692e5dde391758e61e62f44b8e87433d43825194d466fe64555d0994d439e5007080cc785df63d1549bf34adc546cbf6e5eead0333385d3b95c87e76e96694ed7b92e622a9cdb3c948265191bf396f7f4e807cd92e2a593868d9b6a3878313a033259fd4ce531050"}, 0x20) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x7}, 0x140, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000880)=@generic={&(0x7f0000000780)='./file0\x00', r12}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xaf, 0xc001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4be3f9cbb2623032, @perf_config_ext={0x8}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 490.481497ms ago: executing program 2 (id=3838): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0xf0, 0x9}, 0x7702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x3, 0x0, 0x0, 0x6, 0x40080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x215, 0x3fd, 0xfffffffa, 0x1, 0x0, 0x1, 0x2, 0x0, 0xff}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x3}, 0x10}, 0x94) r1 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x13}, @loopback}}}], 0x20}, 0x0) 385.669213ms ago: executing program 3 (id=3839): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0x2, 0x1, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x83, &(0x7f0000000000), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r3, &(0x7f0000000100)=0x1, 0x12) 313.888016ms ago: executing program 2 (id=3840): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xaa99}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x9, 0x1, 0x2, 0x1, 0x1}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000003009500000000000000bfa000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, &(0x7f0000000000)=r3, 0x8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0x20000000004, 0x6) 280.788257ms ago: executing program 3 (id=3841): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000300)={r0}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8, r0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)='5', 0x1}], 0x1}, 0x8041) recvmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10043) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_ext={0x1c, 0x16, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcad, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6d}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x4d, &(0x7f0000000280)=""/77, 0x40f00, 0x20, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x9, 0x8, 0x401}, 0x10, 0x235ec, r0, 0x3, &(0x7f00000003c0)=[r0, r0, r0], &(0x7f0000000440)=[{0x4, 0x3, 0x9, 0x17}, {0x3, 0x3, 0xb, 0x2}, {0x0, 0x2, 0x4, 0x6}], 0x10, 0x400}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0x36, 0x0, &(0x7f00000015c0)="63eced0000dc3f08df33c9f786dd958a31678a4ea8707a060278b42bac2f2f131ad80cfc1d6406d60c43c223046c09bf19c6813202eb", 0x0, 0xe69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r0, r2, 0x0, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(0xffffffffffffffff) 129.541674ms ago: executing program 4 (id=3842): socket$kcm(0x10, 0x400000002, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0xa4, 0x1, 0x49, 0x0, 0x3, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, @perf_config_ext={0x7, 0x4}, 0x283ab9bb45922541, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000f00)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190", 0x9c}, {&(0x7f0000001cc0)="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", 0x192}, {0x0}], 0x3}, 0x8080) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x5a0}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22160, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x91, 0x7, 0x0, 0x3, 0x10000000}, 0x0, 0x1, r2, 0xb) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x7, {0x0, @dev, @loopback}}}], 0x20}, 0x48110) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x1}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x1f, &(0x7f00000000c0), 0xd8) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x541b, &(0x7f0000000140)) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r7, r5, 0x4, r5}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 129.235894ms ago: executing program 2 (id=3843): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001, 0x0, 0x0, 0xd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xa00b1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x10000, 0x7, 0x9, 0x6, 0x2, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r0, 0x110, 0x4, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f0000000500), 0x0}, 0x20) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x24023, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x100, 0x0, 0xa482, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) write$cgroup_type(0xffffffffffffffff, 0x0, 0xfffffffffffffc99) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000000c0)=0xd, 0x12) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair(0x22, 0x0, 0x0, &(0x7f0000000540)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 127.791955ms ago: executing program 3 (id=3844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000040000000e"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000030000000000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000000980), &(0x7f0000000a80), 0x7f, r3, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x103, [{0x0, 0x2, 0x80000005}]}, @enum]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0x1}, 0x0, 0x35, 0x1e7e7df9, 0x7, 0x9, 0x6, 0xa, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x19) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904", 0x10}], 0x1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0x7}, @union, @volatile={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x9, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000100"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2c00a800}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x12, 0x3, &(0x7f0000000700)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 66.365807ms ago: executing program 0 (id=3845): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0xb, 0x7, 0x0, 0xffff, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r7}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 0s ago: executing program 2 (id=3846): r0 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x70385, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x4, 0x2, 0x0, 0x201}, 0x48) (async, rerun: 32) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r4, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) kernel console output (not intermixed with test programs): 25][T13525] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2228'. [ 462.058906][T13552] netlink: 'syz.0.2236': attribute type 10 has an invalid length. [ 462.086056][T13552] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2236'. [ 462.176306][T13552] caif0: entered promiscuous mode [ 462.188942][T13552] caif0: entered allmulticast mode [ 462.195795][T13552] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.411472][T13563] netlink: 'syz.0.2239': attribute type 1 has an invalid length. [ 462.465460][T13563] netlink: 'syz.0.2239': attribute type 4 has an invalid length. [ 462.524882][T13563] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2239'. [ 462.573713][T13564] netlink: 'syz.0.2239': attribute type 1 has an invalid length. [ 462.595692][T13564] netlink: 'syz.0.2239': attribute type 4 has an invalid length. [ 462.603473][T13564] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2239'. [ 463.224572][T13576] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2244'. [ 463.290329][T13583] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2245'. [ 463.378725][T13586] netlink: 'syz.3.2247': attribute type 4 has an invalid length. [ 463.447773][T13586] netlink: 'syz.3.2247': attribute type 4 has an invalid length. [ 463.485440][T13586] netlink: 203268 bytes leftover after parsing attributes in process `syz.3.2247'. [ 463.969351][T13588] netlink: 'syz.3.2247': attribute type 1 has an invalid length. [ 464.007910][T13588] netlink: 125156 bytes leftover after parsing attributes in process `syz.3.2247'. [ 466.668662][T13600] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2249'. [ 468.077056][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2260'. [ 468.190063][T13635] validate_nla: 14 callbacks suppressed [ 468.190080][T13635] netlink: 'syz.2.2259': attribute type 4 has an invalid length. [ 468.311637][T13635] netlink: 'syz.2.2259': attribute type 4 has an invalid length. [ 468.323002][ T5777] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 468.385129][T13635] netlink: 203268 bytes leftover after parsing attributes in process `syz.2.2259'. [ 468.596727][T13635] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 468.666118][T13635] netlink: 'syz.2.2259': attribute type 2 has an invalid length. [ 468.734838][T13635] netlink: 'syz.2.2259': attribute type 2 has an invalid length. [ 468.855196][T13635] netlink: 'syz.2.2259': attribute type 3 has an invalid length. [ 468.877668][T13635] netlink: 'syz.2.2259': attribute type 4 has an invalid length. [ 468.916420][T13635] netlink: 'syz.2.2259': attribute type 5 has an invalid length. [ 468.965362][T13635] netlink: 'syz.2.2259': attribute type 6 has an invalid length. [ 469.027415][T13635] netlink: 'syz.2.2259': attribute type 7 has an invalid length. [ 469.086318][T13635] netlink: 125156 bytes leftover after parsing attributes in process `syz.2.2259'. [ 471.468449][T13665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2267'. [ 471.524245][T13665] caif0: entered promiscuous mode [ 471.541480][T13665] caif0: entered allmulticast mode [ 471.570650][T13665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.045600][ T5777] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 472.852390][T13698] netlink: 203268 bytes leftover after parsing attributes in process `syz.0.2277'. [ 473.013064][T13702] netlink: 125156 bytes leftover after parsing attributes in process `syz.0.2277'. [ 474.513203][T13713] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2283'. [ 474.609065][T13713] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 478.128562][T13756] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2295'. [ 478.148616][T13751] validate_nla: 29 callbacks suppressed [ 478.148632][T13751] netlink: 'syz.3.2293': attribute type 10 has an invalid length. [ 478.176833][T13751] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2293'. [ 478.198446][T13751] team0: entered promiscuous mode [ 478.216256][T13751] C: entered promiscuous mode [ 478.225552][T13751] team_slave_1: entered promiscuous mode [ 478.237805][T13751] geneve1: entered promiscuous mode [ 478.256863][T13751] team0: entered allmulticast mode [ 478.281103][T13751] C: entered allmulticast mode [ 478.301840][T13751] team_slave_1: entered allmulticast mode [ 478.321938][T13751] geneve1: entered allmulticast mode [ 478.351479][T13751] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.381961][T13751] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 479.355448][T13775] netlink: 798 bytes leftover after parsing attributes in process `syz.1.2299'. [ 479.531034][T13778] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.2300'. [ 479.740578][T13784] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.2302'. [ 480.100709][T13792] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2304'. [ 480.132583][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 480.142837][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 480.155620][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 480.164203][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 480.172513][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 480.180683][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 481.020952][T13793] chnl_net:caif_netlink_parms(): no params data found [ 481.094248][T13816] netlink: 'syz.2.2309': attribute type 10 has an invalid length. [ 481.115361][T13816] veth0_vlan: entered allmulticast mode [ 481.461920][T10328] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.716151][T13831] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2312'. [ 481.783136][T10328] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.965920][T10328] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.042768][T13793] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.066157][T13793] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.094097][T13793] bridge_slave_0: entered allmulticast mode [ 482.110588][T13793] bridge_slave_0: entered promiscuous mode [ 482.125807][T13835] netlink: 'syz.1.2314': attribute type 9 has an invalid length. [ 482.146123][T13835] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2314'. [ 482.224749][T13793] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.238202][T13793] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.245472][ T51] Bluetooth: hci4: command tx timeout [ 482.268537][T13793] bridge_slave_1: entered allmulticast mode [ 482.290399][T13793] bridge_slave_1: entered promiscuous mode [ 482.372037][T13793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.386872][T13793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.445740][T13793] team0: Port device team_slave_0 added [ 482.452116][T13845] netlink: 'syz.2.2316': attribute type 46 has an invalid length. [ 482.497049][T13793] team0: Port device team_slave_1 added [ 482.561767][T13793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.576838][T13793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.623567][T13793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.646525][T13852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2318'. [ 482.664485][T13793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.676406][T13793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.736940][T13793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.800747][T13852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2318'. [ 483.063497][T13793] hsr_slave_0: entered promiscuous mode [ 483.127246][T13793] hsr_slave_1: entered promiscuous mode [ 483.144150][T13793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.176500][T13793] Cannot create hsr debugfs directory [ 483.186158][T10328] tipc: Left network mode [ 483.715071][T13878] __nla_validate_parse: 1 callbacks suppressed [ 483.715089][T13878] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.2321'. [ 484.326041][ T51] Bluetooth: hci4: command tx timeout [ 485.447913][ T9242] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 486.411209][ T51] Bluetooth: hci4: command tx timeout [ 486.534503][T13793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.589375][T13793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.677848][T13793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.777558][T13793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.221456][T13951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2333'. [ 487.258650][T13951] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2333'. [ 487.319866][T13952] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2333'. [ 487.583923][T13793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.782789][T13793] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.829089][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.836404][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.910328][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.917549][T10332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.120271][T13970] sock: sock_set_timeout: `syz.1.2336' (pid 13970) tries to set negative timeout [ 488.282709][T13976] netlink: 'syz.3.2337': attribute type 2 has an invalid length. [ 488.318449][T13976] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.2337'. [ 488.495319][ T51] Bluetooth: hci4: command tx timeout [ 488.903725][T13793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.969428][T13999] netlink: 197536 bytes leftover after parsing attributes in process `syz.2.2342'. [ 489.106214][T14010] netlink: 'syz.1.2343': attribute type 21 has an invalid length. [ 489.132620][T14010] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2343'. [ 489.249055][T10328] hsr_slave_0: left promiscuous mode [ 489.267200][T10328] hsr_slave_1: left promiscuous mode [ 489.278169][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.287497][T10328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.296448][T10328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.304157][T10328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.321490][T10328] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 489.329923][T10328] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 489.396931][T10328] veth0_vlan: left promiscuous mode [ 491.941307][T13793] veth0_vlan: entered promiscuous mode [ 492.012483][T13793] veth1_vlan: entered promiscuous mode [ 492.138045][T13793] veth0_macvtap: entered promiscuous mode [ 492.179327][T13793] veth1_macvtap: entered promiscuous mode [ 492.314517][T13793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.376909][T13793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.409120][T13793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.464602][T13793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.482490][T13793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.495982][T13793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.728271][T10332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.755123][T10332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.790151][T10328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.815122][T10328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.968492][T14063] netlink: 'syz.0.2301': attribute type 1 has an invalid length. [ 492.996652][T14063] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2301'. [ 493.291662][T14077] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2355'. [ 493.390082][T14077] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2355'. [ 493.405179][T14082] netlink: 'syz.2.2358': attribute type 21 has an invalid length. [ 493.413043][T14082] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2358'. [ 494.379464][T14112] netlink: 'syz.0.2363': attribute type 21 has an invalid length. [ 494.395241][T14112] netlink: 'syz.0.2363': attribute type 4 has an invalid length. [ 494.406026][T14112] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2363'. [ 494.449343][T14116] netlink: 'syz.0.2363': attribute type 21 has an invalid length. [ 494.462951][T14124] netlink: 'syz.3.2365': attribute type 16 has an invalid length. [ 494.471507][T14116] netlink: 'syz.0.2363': attribute type 4 has an invalid length. [ 494.479635][T14124] netlink: 'syz.3.2365': attribute type 3 has an invalid length. [ 494.487906][T14116] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2363'. [ 494.497911][T14124] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2365'. [ 494.577264][T14129] netlink: 'syz.2.2366': attribute type 29 has an invalid length. [ 494.625471][T14129] netlink: 'syz.2.2366': attribute type 29 has an invalid length. [ 494.663690][T14126] netlink: 'syz.2.2366': attribute type 29 has an invalid length. [ 494.977495][T14156] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2372'. [ 495.047992][T14156] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2372'. [ 495.747223][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2378'. [ 496.324199][T14176] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.2376'. [ 496.347847][T14175] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.2376'. [ 496.358711][T14177] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.2376'. [ 496.750192][T14202] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2385'. [ 498.643637][T14294] validate_nla: 41 callbacks suppressed [ 498.643673][T14294] netlink: 'syz.0.2398': attribute type 21 has an invalid length. [ 498.699802][T14296] netlink: 'syz.2.2399': attribute type 40 has an invalid length. [ 499.545471][T14321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 499.555578][T14321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 499.571682][T14321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 499.582041][T14321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.591108][T14321] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 499.599701][T14321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 499.611475][ T5769] bond0: (slave syz_tun): Releasing backup interface [ 499.629766][T14319] netlink: 'syz.0.2408': attribute type 11 has an invalid length. [ 499.702106][T14329] __nla_validate_parse: 4 callbacks suppressed [ 499.702125][T14329] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2410'. [ 499.730786][T14329] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 499.880734][T10335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.112555][T10335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.244431][T10335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.514808][T14318] chnl_net:caif_netlink_parms(): no params data found [ 500.611967][T14347] netlink: 'syz.0.2414': attribute type 22 has an invalid length. [ 500.626683][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 500.743192][T14318] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.751935][T14318] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.761827][T14318] bridge_slave_0: entered allmulticast mode [ 500.769795][T14318] bridge_slave_0: entered promiscuous mode [ 500.779308][T14318] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.787042][T14318] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.794423][T14318] bridge_slave_1: entered allmulticast mode [ 500.802499][T14318] bridge_slave_1: entered promiscuous mode [ 500.849776][T14318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.873721][T14347] netlink: 'syz.0.2414': attribute type 22 has an invalid length. [ 500.885028][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 500.907495][T14347] netlink: 'syz.0.2414': attribute type 22 has an invalid length. [ 500.926055][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 500.945960][T14347] netlink: 'syz.0.2414': attribute type 22 has an invalid length. [ 500.954068][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 501.257042][T14318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.339135][T14347] netlink: 'syz.0.2414': attribute type 22 has an invalid length. [ 501.347902][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 501.425582][T14347] netlink: 'syz.0.2414': attribute type 22 has an invalid length. [ 501.450014][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2414'. [ 501.478539][T14318] team0: Port device team_slave_0 added [ 501.505059][T14318] team0: Port device team_slave_1 added [ 501.593903][T14318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.616226][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.622935][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.668307][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.694397][ T51] Bluetooth: hci0: command tx timeout [ 501.835640][T14318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.913175][T14318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.935119][T14318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.993608][T14318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.235667][T14383] netlink: 'syz.0.2418': attribute type 10 has an invalid length. [ 502.275480][T14388] sit0: left promiscuous mode [ 502.750197][T14396] sit0: entered promiscuous mode [ 503.403557][T14318] hsr_slave_0: entered promiscuous mode [ 503.478640][T14318] hsr_slave_1: entered promiscuous mode [ 503.591861][T14318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.608759][T14318] Cannot create hsr debugfs directory [ 503.765583][ T51] Bluetooth: hci0: command tx timeout [ 504.999199][T14436] validate_nla: 1 callbacks suppressed [ 504.999219][T14436] netlink: 'syz.0.2425': attribute type 29 has an invalid length. [ 505.122303][T14436] netlink: 'syz.0.2425': attribute type 29 has an invalid length. [ 505.507937][T14438] netlink: 'syz.0.2425': attribute type 29 has an invalid length. [ 505.842435][T14442] netlink: 'syz.0.2425': attribute type 29 has an invalid length. [ 505.855228][ T51] Bluetooth: hci0: command tx timeout [ 505.896394][T14444] netlink: 'syz.0.2425': attribute type 29 has an invalid length. [ 506.302263][T14464] netlink: 'syz.0.2429': attribute type 13 has an invalid length. [ 506.712733][T14474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2430'. [ 506.831192][T14474] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2430'. [ 506.965504][T14472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2430'. [ 507.007115][T10335] hsr_slave_0: left promiscuous mode [ 507.037517][T10335] bridge0: port 3(dummy0) entered disabled state [ 507.102614][T10335] bridge_slave_0: left allmulticast mode [ 507.108478][T10335] bridge_slave_0: left promiscuous mode [ 507.124465][T10335] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.180266][T10335] veth1_vlan: left promiscuous mode [ 507.186685][T10335] veth0_vlan: left promiscuous mode [ 507.440787][T14498] netlink: 'syz.3.2436': attribute type 29 has an invalid length. [ 507.925084][ T51] Bluetooth: hci0: command tx timeout [ 508.003581][T10335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.048360][T10335] bond0 (unregistering): (slave 17ÿ): Releasing backup interface [ 508.092466][T10335] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 508.298515][T10335] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 508.310099][T10335] bond0 (unregistering): Released all slaves [ 508.435143][T14497] netlink: 180 bytes leftover after parsing attributes in process `syz.0.2435'. [ 508.448594][T14498] netlink: 'syz.3.2436': attribute type 29 has an invalid length. [ 508.747323][T14318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 508.768124][T14511] netlink: 'syz.3.2439': attribute type 29 has an invalid length. [ 508.791298][T14318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 508.830706][T14511] netlink: 'syz.3.2439': attribute type 29 has an invalid length. [ 508.877255][T14514] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.2440'. [ 508.915228][T14318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 508.932988][T14318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.065293][T14515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2438'. [ 509.098991][T14515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2438'. [ 509.119624][T14509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2438'. [ 509.229718][T14318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.324791][T14522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2442'. [ 509.347577][T14522] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 509.421135][T14318] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.461846][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.469064][T14261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.532809][T14261] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.540047][T14261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.031584][T14564] validate_nla: 6 callbacks suppressed [ 510.031601][T14564] netlink: 'syz.3.2448': attribute type 21 has an invalid length. [ 510.061225][T14564] netlink: 'syz.3.2448': attribute type 12 has an invalid length. [ 510.073729][T14564] netlink: 'syz.3.2448': attribute type 13 has an invalid length. [ 510.097203][T14564] netlink: 'syz.3.2448': attribute type 14 has an invalid length. [ 510.105973][T14564] netlink: 'syz.3.2448': attribute type 15 has an invalid length. [ 510.113831][T14564] netlink: 'syz.3.2448': attribute type 16 has an invalid length. [ 510.125264][T14564] netlink: 'syz.3.2448': attribute type 19 has an invalid length. [ 510.133268][T14564] netlink: 'syz.3.2448': attribute type 21 has an invalid length. [ 510.143478][T14564] netlink: 'syz.3.2448': attribute type 22 has an invalid length. [ 510.151826][T14564] netlink: 12226 bytes leftover after parsing attributes in process `syz.3.2448'. [ 510.230891][T14318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.502870][T14318] veth0_vlan: entered promiscuous mode [ 510.686311][T14318] veth1_vlan: entered promiscuous mode [ 510.793995][T14318] veth0_macvtap: entered promiscuous mode [ 510.811740][T14318] veth1_macvtap: entered promiscuous mode [ 510.874526][T14318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.902910][T14318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.926736][T14318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.942725][T14318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.971099][T14318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.987401][T14318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.020590][T14318] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.039028][T14318] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.049336][T14318] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.058527][T14318] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.190481][T10331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.218147][T10331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.315214][T10331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.336810][T10331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.965312][T14321] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.986062][T14321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.997575][T14321] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.012965][T14321] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.023793][T14321] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 513.032773][T14321] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 513.124169][T14261] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.282010][T14261] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.377044][T14261] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.527861][T14261] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.181695][T14627] chnl_net:caif_netlink_parms(): no params data found [ 514.253391][T14261] tipc: Left network mode [ 514.299664][T14669] netlink: 'syz.0.2468': attribute type 27 has an invalid length. [ 514.896798][T14683] __nla_validate_parse: 1 callbacks suppressed [ 514.896814][T14683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2474'. [ 515.044149][T14261] ip6gretap0 (unregistering): left allmulticast mode [ 515.095308][T14261] ip6gretap0 (unregistering): left promiscuous mode [ 515.115155][T14261] : port 1(ip6gretap0) entered disabled state [ 515.126048][ T51] Bluetooth: hci2: command tx timeout [ 515.575091][T14683] validate_nla: 1 callbacks suppressed [ 515.575110][T14683] netlink: 'syz.1.2474': attribute type 10 has an invalid length. [ 515.615683][T14683] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2474'. [ 515.889965][T14702] netlink: 63579 bytes leftover after parsing attributes in process `syz.1.2477'. [ 515.921421][T14627] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.934181][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.943293][T14627] bridge_slave_0: entered allmulticast mode [ 515.951219][T14627] bridge_slave_0: entered promiscuous mode [ 517.205273][ T51] Bluetooth: hci2: command tx timeout [ 519.074637][T14704] netlink: 'syz.1.2477': attribute type 10 has an invalid length. [ 519.087872][T14704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2477'. [ 519.096925][T14704] vcan0: entered promiscuous mode [ 519.102801][T14704] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 519.125216][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.156288][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.163558][T14627] bridge_slave_1: entered allmulticast mode [ 519.225929][T14627] bridge_slave_1: entered promiscuous mode [ 519.286113][ T51] Bluetooth: hci2: command tx timeout [ 519.393098][T14718] netlink: 'syz.1.2482': attribute type 28 has an invalid length. [ 519.430116][T14718] netlink: 'syz.1.2482': attribute type 4 has an invalid length. [ 519.444539][T14627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.486041][T14718] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2482'. [ 519.596309][T14627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.940779][T14627] team0: Port device team_slave_0 added [ 519.993987][T14627] team0: Port device team_slave_1 added [ 520.149742][T14627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.187858][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.272026][T14627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.348911][T14627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.395191][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 520.442112][T14627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.087273][T14752] netlink: 'syz.2.2485': attribute type 10 has an invalid length. [ 521.115038][T14752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2485'. [ 521.365381][ T51] Bluetooth: hci2: command tx timeout [ 523.244363][T14752] netlink: 'syz.2.2485': attribute type 10 has an invalid length. [ 523.252596][T14752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2485'. [ 523.462713][T14627] hsr_slave_0: entered promiscuous mode [ 523.473087][T14627] hsr_slave_1: entered promiscuous mode [ 524.220571][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 524.231780][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 524.483366][T14261] hsr_slave_0: left promiscuous mode [ 524.491989][T14261] hsr_slave_1: left promiscuous mode [ 524.504869][T14261] veth0_macvtap: left promiscuous mode [ 524.511735][T14261] veth1_vlan: left promiscuous mode [ 524.673431][T14261] geneve1 (unregistering): left promiscuous mode [ 524.680344][T14261] geneve1 (unregistering): left allmulticast mode [ 524.690043][T14261] team0 (unregistering): Port device geneve1 removed [ 525.100258][T14261] team_slave_1 (unregistering): left promiscuous mode [ 525.107164][T14261] team_slave_1 (unregistering): left allmulticast mode [ 525.114885][T14261] team0 (unregistering): Port device team_slave_1 removed [ 525.161292][T14261] C (unregistering): left promiscuous mode [ 525.167201][T14261] C (unregistering): left allmulticast mode [ 525.179715][T14261] team0 (unregistering): Port device C removed [ 525.855182][T14627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 525.885625][T14627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 525.919094][T14627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 525.952607][T14627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 526.353774][T14627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 526.488922][T14627] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.534781][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.542066][ T8930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.604317][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.611614][ T8930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.364362][T14627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 527.508984][T14627] veth0_vlan: entered promiscuous mode [ 527.547080][T14627] veth1_vlan: entered promiscuous mode [ 527.641766][T14627] veth0_macvtap: entered promiscuous mode [ 527.675493][T14627] veth1_macvtap: entered promiscuous mode [ 527.725224][T14627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.754998][T14627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.765827][T14627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 527.795392][T14627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.833722][T14627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.896149][T14627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.908326][T14627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.920883][T14627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.932140][T14627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.946007][T14627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.968199][T14627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.980384][T14627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.003759][T14627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.034996][T14627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 528.296586][T14854] delete_channel: no stack [ 528.303086][ T8930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.318817][T14854] delete_channel: no stack [ 528.331919][ T8930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.477647][T10335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.510597][T10335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.701307][T14891] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 529.745193][T14891] netlink: 63743 bytes leftover after parsing attributes in process `syz.3.2509'. [ 529.884746][T14895] netlink: 'syz.1.2510': attribute type 10 has an invalid length. [ 530.015154][T14895] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 530.607634][T14321] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 530.617825][T14321] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 530.630223][T14321] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 530.639285][T14321] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 530.652612][T14321] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 530.660468][T14321] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 532.725311][T14321] Bluetooth: hci3: command tx timeout [ 533.473522][T14912] syzkaller0: entered promiscuous mode [ 533.505058][T14912] syzkaller0: entered allmulticast mode [ 533.793542][ T8930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.811502][T14321] Bluetooth: hci3: command tx timeout [ 536.002219][T14936] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2517'. [ 536.072493][ T8930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.180582][ T8930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.220119][T14905] chnl_net:caif_netlink_parms(): no params data found [ 536.267952][T14957] delete_channel: no stack [ 536.272890][T14957] delete_channel: no stack [ 536.319488][ T8930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.438323][T14905] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.465182][T14905] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.493570][T14905] bridge_slave_0: entered allmulticast mode [ 536.501150][T14905] bridge_slave_0: entered promiscuous mode [ 536.510105][T14905] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.517596][T14905] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.524851][T14905] bridge_slave_1: entered allmulticast mode [ 536.532586][T14905] bridge_slave_1: entered promiscuous mode [ 536.637843][T14905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.667182][T14905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.737524][T14969] netlink: 'syz.3.2522': attribute type 2 has an invalid length. [ 536.768412][T14969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2522'. [ 536.815199][T14905] team0: Port device team_slave_0 added [ 536.836800][T14905] team0: Port device team_slave_1 added [ 536.885604][T14321] Bluetooth: hci3: command tx timeout [ 536.986887][T14905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.993981][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.065312][T14905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.097104][T14905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.104093][T14905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 537.174991][T14905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.193239][ T8930] tipc: Left network mode [ 537.793461][T14905] hsr_slave_0: entered promiscuous mode [ 537.866620][T14905] hsr_slave_1: entered promiscuous mode [ 537.882021][T14905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.949414][T14905] Cannot create hsr debugfs directory [ 538.298146][T14998] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2527'. [ 538.965027][T14321] Bluetooth: hci3: command tx timeout [ 539.115730][T15024] netlink: 'syz.0.2532': attribute type 10 has an invalid length. [ 539.132753][T15024] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2532'. [ 540.119136][T15048] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2534'. [ 540.196088][T15048] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2534'. [ 540.297054][T15048] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2534'. [ 540.530862][T15065] netlink: 'syz.1.2538': attribute type 3 has an invalid length. [ 540.607388][T15065] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2538'. [ 541.256104][T15063] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.2538'. [ 541.311842][T15048] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2534'. [ 541.602174][T14905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 541.653019][T14905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 541.684040][T14905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 541.766678][T14905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 542.132472][T15078] syzkaller0: entered promiscuous mode [ 542.174390][T15078] syzkaller0: entered allmulticast mode [ 542.540860][T15102] netlink: set zone limit has 8 unknown bytes [ 545.404653][T15098] netlink: 'syz.3.2545': attribute type 10 has an invalid length. [ 545.412694][T15098] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2545'. [ 545.424055][T15098] batman_adv: batadv0: Adding interface: virt_wifi0 [ 545.430743][T15098] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.457833][T15098] batman_adv: batadv0: Interface activated: virt_wifi0 [ 545.526945][ T8930] hsr_slave_0: left promiscuous mode [ 545.549596][ T8930] hsr_slave_1: left promiscuous mode [ 545.608426][ T8930] veth0_macvtap: left promiscuous mode [ 545.619857][T15126] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2547'. [ 545.625380][ T8930] veth1_vlan: left promiscuous mode [ 545.645469][T15126] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 547.338972][T14905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.408537][T14905] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.461068][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.468257][T14261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.503195][T14261] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.510418][T14261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.713783][T14905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 547.788095][T15159] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2553'. [ 548.295890][T14905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.460349][T14905] veth0_vlan: entered promiscuous mode [ 548.484746][T14905] veth1_vlan: entered promiscuous mode [ 548.545842][T14905] veth0_macvtap: entered promiscuous mode [ 548.572887][T14905] veth1_macvtap: entered promiscuous mode [ 548.637932][T14905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.656329][T14905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.670499][T14905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.683181][T14905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.700715][T14905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.713233][T14905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.741907][T14905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.772639][T14905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.794832][T14905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.812777][T14905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.823780][T14905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.845292][T14905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.858331][T14905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.896072][T14905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.928568][T14905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.955015][T14905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.963857][T14905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.981001][T14905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.498316][T15204] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2563'. [ 549.569402][ T8930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.602112][ T8930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.702422][T10331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.719475][T10331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.452123][T15220] Ÿë: port 1(ip6gretap0) entered blocking state [ 550.476075][T15220] Ÿë: port 1(ip6gretap0) entered disabled state [ 550.499550][T15220] ip6gretap0: entered allmulticast mode [ 550.521167][T15220] ip6gretap0: entered promiscuous mode [ 551.077741][T15240] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.2573'. [ 551.112986][T15240] openvswitch: netlink: Key type 8208 is out of range max 32 [ 551.580502][T15251] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2575'. [ 551.791830][T15259] netlink: zone id is out of range [ 551.794956][T15260] netlink: zone id is out of range [ 551.825094][T15259] netlink: set zone limit has 8 unknown bytes [ 551.835875][T15260] netlink: set zone limit has 8 unknown bytes [ 552.578426][T15282] netlink: 'syz.3.2583': attribute type 10 has an invalid length. [ 552.594499][T15282] hsr0: entered promiscuous mode [ 552.607798][T15282] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 552.732896][T15285] netlink: 'syz.2.2584': attribute type 2 has an invalid length. [ 552.774498][T15285] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2584'. [ 553.102460][T15299] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2588'. [ 553.149206][T15299] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2588'. [ 554.555908][T15334] Ÿë: port 1(ip6gretap0) entered blocking state [ 554.576696][T15334] Ÿë: port 1(ip6gretap0) entered disabled state [ 554.583834][T15334] ip6gretap0: entered allmulticast mode [ 554.628454][T15334] ip6gretap0: entered promiscuous mode [ 554.963728][T15353] netlink: 'syz.0.2602': attribute type 10 has an invalid length. [ 555.025845][T15353] veth1_vlan: entered allmulticast mode [ 555.083283][T15353] team0: Device veth1_vlan failed to register rx_handler [ 555.424785][T15362] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 555.453950][T15362] netlink: 'syz.1.2604': attribute type 4 has an invalid length. [ 555.490016][T15362] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2604'. [ 555.627839][T15371] netlink: 'syz.0.2608': attribute type 10 has an invalid length. [ 555.655232][T15371] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2608'. [ 555.675682][T15368] netlink: 'syz.1.2604': attribute type 1 has an invalid length. [ 555.737599][T15368] netlink: 'syz.1.2604': attribute type 4 has an invalid length. [ 555.789093][T15368] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2604'. [ 556.897678][T15390] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2613'. [ 556.935751][T15388] Ÿë: port 1(ip6gretap0) entered blocking state [ 556.942774][T15388] Ÿë: port 1(ip6gretap0) entered disabled state [ 556.962325][T15388] ip6gretap0: entered allmulticast mode [ 556.978224][T15388] ip6gretap0: entered promiscuous mode [ 557.059450][T15393] netlink: 'syz.3.2613': attribute type 10 has an invalid length. [ 557.137678][T15393] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2613'. [ 557.185320][T15393] netlink: 'syz.3.2613': attribute type 10 has an invalid length. [ 557.239734][T15393] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2613'. [ 557.296744][T15390] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2613'. [ 557.475497][T15393] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2613'. [ 558.962785][T15423] syzkaller0: entered promiscuous mode [ 559.012705][T15423] syzkaller0: entered allmulticast mode [ 559.055186][T15426] validate_nla: 2 callbacks suppressed [ 559.055204][T15426] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 559.153950][T15426] netlink: 'syz.2.2620': attribute type 4 has an invalid length. [ 559.188306][T15426] __nla_validate_parse: 1 callbacks suppressed [ 559.188322][T15426] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2620'. [ 559.263071][T15427] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 559.343042][T15427] netlink: 'syz.2.2620': attribute type 4 has an invalid length. [ 559.499980][T15427] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2620'. [ 559.746954][T15438] netlink: 'syz.1.2623': attribute type 3 has an invalid length. [ 559.771665][T15438] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2623'. [ 563.039964][T15464] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2632'. [ 563.079986][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.086549][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.394091][T15474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2635'. [ 563.464067][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.588449][T15474] bridge_slave_0 (unregistering): left allmulticast mode [ 563.605084][T15474] bridge_slave_0 (unregistering): left promiscuous mode [ 563.615054][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.958194][T15490] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2639'. [ 564.189213][T15503] netlink: 40227 bytes leftover after parsing attributes in process `syz.0.2643'. [ 564.957401][T15525] netlink: 'syz.3.2648': attribute type 21 has an invalid length. [ 566.625646][T15544] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 566.739566][T15544] team0: Port device netdevsim0 added [ 566.768978][T15545] netlink: 'syz.2.2654': attribute type 10 has an invalid length. [ 566.862328][T15545] team0: Port device netdevsim0 removed [ 566.973675][T15545] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 569.178541][T15618] syzkaller0: entered promiscuous mode [ 569.184374][T15618] syzkaller0: entered allmulticast mode [ 570.051967][T15643] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.2671'. [ 570.109910][T15645] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2673'. [ 570.126761][T15643] netlink: zone id is out of range [ 570.195173][T15643] netlink: zone id is out of range [ 570.234961][T15643] netlink: zone id is out of range [ 570.272472][T15643] netlink: zone id is out of range [ 570.324575][T15643] netlink: zone id is out of range [ 570.369888][T15643] netlink: zone id is out of range [ 570.421802][T15643] netlink: zone id is out of range [ 570.474688][T15643] netlink: zone id is out of range [ 570.527713][T15643] netlink: zone id is out of range [ 570.554747][T15643] netlink: zone id is out of range [ 573.821465][T15645] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 573.831525][T15645] CPU: 0 PID: 15645 Comm: syz.1.2673 Not tainted syzkaller #0 [ 573.839129][T15645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 573.849299][T15645] Call Trace: [ 573.852571][T15645] [ 573.855507][T15645] dump_stack_lvl+0x18c/0x250 [ 573.860238][T15645] ? show_regs_print_info+0x20/0x20 [ 573.865456][T15645] ? load_image+0x420/0x420 [ 573.870081][T15645] sysfs_warn_dup+0x8e/0xa0 [ 573.874621][T15645] sysfs_do_create_link_sd+0xc0/0x110 [ 573.879997][T15645] device_add_class_symlinks+0x1cf/0x240 [ 573.885670][T15645] device_add+0x4f9/0xc40 [ 573.890018][T15645] wiphy_register+0x1d99/0x2ac0 [ 573.894981][T15645] ? cfg80211_event_work+0x40/0x40 [ 573.900108][T15645] ? minstrel_ht_alloc+0x88a/0x990 [ 573.905312][T15645] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 573.911439][T15645] ieee80211_register_hw+0x2dd8/0x3b30 [ 573.916984][T15645] ? ieee80211_register_hw+0xfb1/0x3b30 [ 573.922556][T15645] ? ieee80211_tasklet_handler+0x20/0x20 [ 573.928186][T15645] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 573.934172][T15645] ? __debug_object_init+0xec/0x450 [ 573.939380][T15645] ? __asan_memset+0x22/0x40 [ 573.944008][T15645] ? __hrtimer_init+0x189/0x270 [ 573.948865][T15645] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 573.954629][T15645] ? mac80211_hwsim_free+0x220/0x220 [ 573.959912][T15645] ? rcu_is_watching+0x15/0xb0 [ 573.964684][T15645] ? kstrndup+0xbd/0x140 [ 573.968938][T15645] hwsim_new_radio_nl+0xdad/0x1a70 [ 573.974054][T15645] ? __nla_validate+0x50/0x50 [ 573.978745][T15645] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 573.985080][T15645] ? __nla_parse+0x40/0x50 [ 573.989500][T15645] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 573.995925][T15645] genl_family_rcv_msg_doit+0x21a/0x310 [ 574.001479][T15645] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 574.007389][T15645] ? bpf_lsm_capable+0x9/0x10 [ 574.012062][T15645] ? security_capable+0x89/0xb0 [ 574.016922][T15645] genl_rcv_msg+0x611/0x7a0 [ 574.021435][T15645] ? genl_bind+0x360/0x360 [ 574.025852][T15645] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 574.032178][T15645] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 574.038770][T15645] netlink_rcv_skb+0x235/0x4c0 [ 574.043533][T15645] ? genl_bind+0x360/0x360 [ 574.047953][T15645] ? netlink_ack+0x1160/0x1160 [ 574.052722][T15645] ? __lock_acquire+0x7d80/0x7d80 [ 574.057752][T15645] ? down_read+0x1ac/0x2e0 [ 574.062172][T15645] genl_rcv+0x28/0x40 [ 574.066153][T15645] netlink_unicast+0x7b1/0x930 [ 574.070921][T15645] netlink_sendmsg+0x8d0/0xbf0 [ 574.075690][T15645] ? netlink_getsockopt+0x590/0x590 [ 574.080887][T15645] ? apparmor_socket_sendmsg+0x8e/0x330 [ 574.086438][T15645] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 574.091726][T15645] ? security_socket_sendmsg+0x80/0xa0 [ 574.097181][T15645] ? netlink_getsockopt+0x590/0x590 [ 574.102383][T15645] ____sys_sendmsg+0x61b/0x980 [ 574.107153][T15645] ? __asan_memset+0x22/0x40 [ 574.111743][T15645] ? __sys_sendmsg_sock+0x30/0x30 [ 574.116763][T15645] ? __import_iovec+0x5f2/0x850 [ 574.121626][T15645] ? import_iovec+0x73/0xa0 [ 574.126155][T15645] ___sys_sendmsg+0x2a6/0x360 [ 574.130838][T15645] ? __sys_sendmsg+0x2b0/0x2b0 [ 574.135619][T15645] ? __lock_acquire+0x7d80/0x7d80 [ 574.141273][T15645] __se_sys_sendmsg+0x1d0/0x2c0 [ 574.146125][T15645] ? __x64_sys_sendmsg+0x80/0x80 [ 574.151073][T15645] ? lockdep_hardirqs_on+0x98/0x150 [ 574.156271][T15645] do_syscall_64+0x55/0xb0 [ 574.160689][T15645] ? clear_bhb_loop+0x40/0x90 [ 574.165368][T15645] ? clear_bhb_loop+0x40/0x90 [ 574.170046][T15645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.175939][T15645] RIP: 0033:0x7fe62cb9e159 [ 574.180349][T15645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.199955][T15645] RSP: 002b:00007fe62d9c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.208476][T15645] RAX: ffffffffffffffda RBX: 00007fe62ce25fa0 RCX: 00007fe62cb9e159 [ 574.216458][T15645] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 574.224432][T15645] RBP: 00007fe62cc3506b R08: 0000000000000000 R09: 0000000000000000 [ 574.232411][T15645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.240381][T15645] R13: 00007fe62ce26038 R14: 00007fe62ce25fa0 R15: 00007fff028ef7e8 [ 574.248369][T15645] [ 574.713608][T15660] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 574.721118][T15660] IPv6: NLM_F_CREATE should be set when creating new route [ 574.728535][T15660] IPv6: NLM_F_CREATE should be set when creating new route [ 574.736230][T15660] IPv6: NLM_F_CREATE should be set when creating new route [ 574.837594][T15660] netlink: 'syz.2.2679': attribute type 9 has an invalid length. [ 574.862878][T15660] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2679'. [ 574.889322][T15663] netlink: 'syz.2.2679': attribute type 39 has an invalid length. [ 577.642449][T15678] netlink: 'syz.0.2682': attribute type 21 has an invalid length. [ 577.643943][T15661] netlink: 'syz.2.2679': attribute type 9 has an invalid length. [ 577.669781][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.687597][T15679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.715390][T15661] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2679'. [ 577.729121][T15679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.758178][T15679] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.967918][T15682] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2682'. [ 578.615359][T15691] netlink: 'syz.1.2686': attribute type 10 has an invalid length. [ 578.851373][T15691] team0: Device vxcan1 is of different type [ 578.957488][T15705] netlink: 'syz.3.2691': attribute type 4 has an invalid length. [ 579.005672][T15705] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2691'. [ 581.824004][T15705] net_ratelimit: 238 callbacks suppressed [ 581.824040][T15705] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 582.367119][T15728] netlink: 'syz.2.2696': attribute type 21 has an invalid length. [ 582.489318][T15732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 582.521419][T15732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.738282][T15732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.764082][T15732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.924594][T15733] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2696'. [ 583.231033][T15741] netlink: 'syz.3.2700': attribute type 21 has an invalid length. [ 583.249316][T15741] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2700'. [ 583.443348][T15749] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2703'. [ 583.589267][T15759] netlink: 'syz.3.2706': attribute type 1 has an invalid length. [ 583.613166][T15759] netlink: 'syz.3.2706': attribute type 2 has an invalid length. [ 583.621961][T15759] netlink: 'syz.3.2706': attribute type 2 has an invalid length. [ 583.634454][T15759] netlink: 'syz.3.2706': attribute type 3 has an invalid length. [ 583.645005][T15759] netlink: 'syz.3.2706': attribute type 4 has an invalid length. [ 583.678018][T15759] netlink: 'syz.3.2706': attribute type 5 has an invalid length. [ 583.697302][T15759] netlink: 'syz.3.2706': attribute type 6 has an invalid length. [ 583.706587][T15759] netlink: 'syz.3.2706': attribute type 7 has an invalid length. [ 583.714435][T15759] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.2706'. [ 583.964379][T15771] syzkaller0: entered promiscuous mode [ 583.994140][T15771] syzkaller0: entered allmulticast mode [ 587.623311][T15779] validate_nla: 4 callbacks suppressed [ 587.623327][T15779] netlink: 'syz.1.2711': attribute type 21 has an invalid length. [ 587.646021][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.653489][T15782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.678291][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.705200][T15782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.798975][T15784] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2711'. [ 587.950300][T15788] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2715'. [ 589.313004][T15826] netlink: 'syz.3.2726': attribute type 21 has an invalid length. [ 589.392913][T15827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.438766][T15827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.513226][T15827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.555149][T15827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.621564][T15827] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 589.665108][T15827] batman_adv: batadv0: Removing interface: virt_wifi0 [ 589.824153][T15841] netlink: 'syz.1.2725': attribute type 2 has an invalid length. [ 589.849469][T15841] netlink: 212392 bytes leftover after parsing attributes in process `syz.1.2725'. [ 589.859626][T15834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2726'. [ 589.887076][T15838] netlink: 'syz.0.2729': attribute type 1 has an invalid length. [ 589.917588][T15824] netlink: 'syz.1.2725': attribute type 6 has an invalid length. [ 589.956336][T15824] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2725'. [ 590.222873][T15842] netlink: 'syz.0.2729': attribute type 27 has an invalid length. [ 590.370370][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2731'. [ 590.445281][T15849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2731'. [ 590.465041][T15848] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2731'. [ 591.815824][T15892] netlink: 'syz.0.2742': attribute type 10 has an invalid length. [ 591.827820][T15892] team0: Device veth1_vlan failed to register rx_handler [ 592.119906][T15908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2745'. [ 592.188344][T15908] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2745'. [ 592.214811][T15907] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2745'. [ 592.679628][T15920] netlink: 'syz.0.2750': attribute type 10 has an invalid length. [ 592.929399][T15920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.991698][T15920] team0: Port device bond0 added [ 593.353312][T15938] __nla_validate_parse: 1 callbacks suppressed [ 593.353345][T15938] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2753'. [ 593.485143][T15938] hsr_slave_0: left promiscuous mode [ 593.529225][T15938] hsr_slave_1: left promiscuous mode [ 593.546799][T15952] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2757'. [ 593.550013][T15951] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2757'. [ 593.862203][T15949] netlink: 'syz.0.2757': attribute type 10 has an invalid length. [ 593.876065][T15950] netlink: 'syz.0.2757': attribute type 10 has an invalid length. [ 593.893418][T15955] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 594.201907][T15964] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2760'. [ 594.234707][T15964] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.2760'. [ 594.254431][T15964] tc_dump_action: action bad kind [ 594.956677][T15985] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2765'. [ 595.125950][T15989] Ÿë: mtu less than device minimum [ 595.430999][T15993] netlink: 'syz.3.2767': attribute type 3 has an invalid length. [ 595.479455][T14321] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 595.532874][T15993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2767'. [ 596.011516][ T8930] wlan1: Trigger new scan to find an IBSS to join [ 596.068021][T16010] netlink: 'syz.3.2773': attribute type 46 has an invalid length. [ 596.231629][T16010] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2773'. [ 596.330068][T16019] netlink: 'syz.1.2775': attribute type 21 has an invalid length. [ 596.386236][T16019] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2775'. [ 596.914481][T16010] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2773'. [ 597.383041][T16046] team0: Port device bond0 removed [ 597.423703][T16046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.546736][T16046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.635459][T16046] bond0 (unregistering): Released all slaves [ 598.106475][T16058] netlink: 'syz.1.2782': attribute type 2 has an invalid length. [ 599.272782][T16080] netlink: 'syz.2.2788': attribute type 1 has an invalid length. [ 599.346223][T16080] __nla_validate_parse: 1 callbacks suppressed [ 599.346237][T16080] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2788'. [ 599.551880][T16085] netlink: 'syz.1.2789': attribute type 2 has an invalid length. [ 600.065141][T16097] netlink: 'syz.2.2791': attribute type 29 has an invalid length. [ 600.085532][T16097] netlink: 'syz.2.2791': attribute type 29 has an invalid length. [ 600.682150][T16099] netlink: 'syz.0.2794': attribute type 10 has an invalid length. [ 600.695808][T16099] veth0_vlan: entered allmulticast mode [ 600.835858][T16099] veth0_vlan: left promiscuous mode [ 600.856662][T16099] veth0_vlan: entered promiscuous mode [ 600.878467][T16099] team0: Device veth0_vlan failed to register rx_handler [ 600.960440][T16104] netlink: 'syz.1.2795': attribute type 10 has an invalid length. [ 600.969220][T10331] wlan1: Trigger new scan to find an IBSS to join [ 600.975941][T16104] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2795'. [ 601.262100][T16110] netlink: 'syz.2.2796': attribute type 3 has an invalid length. [ 601.315060][T16110] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.2796'. [ 601.541621][T16117] netlink: 'syz.1.2799': attribute type 10 has an invalid length. [ 601.560971][T16117] veth0_vlan: entered allmulticast mode [ 601.648294][T16117] veth0_vlan: left promiscuous mode [ 601.689357][T16117] veth0_vlan: entered promiscuous mode [ 601.709839][T16117] team0: Device veth0_vlan failed to register rx_handler [ 602.065329][ T42] wlan1: Creating new IBSS network, BSSID 46:37:5b:3e:d3:ed [ 603.802739][T16143] netlink: 'syz.0.2806': attribute type 10 has an invalid length. [ 603.812097][T16143] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2806'. [ 604.096262][T16159] netlink: 'syz.1.2813': attribute type 21 has an invalid length. [ 604.874558][T16177] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2819'. [ 604.897361][T16177] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.2819'. [ 604.925159][T16177] tipc: Started in network mode [ 604.930125][T16177] tipc: Node identity b, cluster identity 73 [ 605.025021][T16177] tipc: Node number set to 11 [ 605.327441][T16184] netlink: 'syz.3.2821': attribute type 21 has an invalid length. [ 605.566060][T16202] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2828'. [ 605.568447][T16196] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2825'. [ 605.780370][T16208] netlink: 'syz.2.2830': attribute type 46 has an invalid length. [ 605.789817][T16208] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2830'. [ 606.104754][T14321] Bluetooth: hci4: command 0x0406 tx timeout [ 606.169406][T16214] syzkaller0: entered promiscuous mode [ 606.175020][T16214] syzkaller0: entered allmulticast mode [ 606.446302][T16220] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2830'. [ 608.009137][T10331] wlan1: Trigger new scan to find an IBSS to join [ 609.742393][T16252] netlink: 'syz.1.2839': attribute type 2 has an invalid length. [ 609.818585][T16251] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2841'. [ 609.853492][T16246] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2839'. [ 610.801279][T16287] mac80211_hwsim hwsim41 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 610.937854][T16289] netlink: 'syz.1.2853': attribute type 46 has an invalid length. [ 610.973422][T16289] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2853'. [ 611.049047][ T42] wlan1: Trigger new scan to find an IBSS to join [ 611.153742][T16290] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2853'. [ 611.727273][T16303] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2857'. [ 612.007171][T12722] wlan1: Creating new IBSS network, BSSID 96:32:8f:29:53:29 [ 612.264677][T16334] netlink: 'syz.2.2862': attribute type 3 has an invalid length. [ 612.286019][T16334] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2862'. [ 612.477457][T16346] netlink: 'syz.2.2868': attribute type 22 has an invalid length. [ 612.489885][T16346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 612.505547][T16347] netlink: 'syz.2.2868': attribute type 22 has an invalid length. [ 612.510753][T16345] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2867'. [ 612.514571][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'. [ 612.584356][T16349] netlink: 194264 bytes leftover after parsing attributes in process `syz.3.2869'. [ 612.664054][T16355] netlink: 'syz.3.2870': attribute type 3 has an invalid length. [ 612.674528][T16355] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2870'. [ 612.699229][T16357] netlink: 'syz.0.2871': attribute type 3 has an invalid length. [ 612.707373][T16357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2871'. [ 613.001870][T16373] netlink: 'syz.3.2876': attribute type 25 has an invalid length. [ 613.013065][T16373] netlink: 'syz.3.2876': attribute type 25 has an invalid length. [ 613.046409][T12722] wlan1: Trigger new scan to find an IBSS to join [ 613.057478][T16373] netlink: 'syz.3.2876': attribute type 9 has an invalid length. [ 613.145008][T16374] bridge0: port 3(team0) entered blocking state [ 613.166249][T16374] bridge0: port 3(team0) entered disabled state [ 613.178154][T16374] team0: entered allmulticast mode [ 613.208164][T16374] team_slave_0: entered allmulticast mode [ 613.230224][T16374] team_slave_1: entered allmulticast mode [ 613.291444][T16374] team0: entered promiscuous mode [ 613.317559][T16374] team_slave_0: entered promiscuous mode [ 613.324255][T16374] team_slave_1: entered promiscuous mode [ 613.343747][T16374] bridge0: port 3(team0) entered blocking state [ 613.350780][T16374] bridge0: port 3(team0) entered forwarding state [ 614.745206][T14321] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 615.336004][T16438] validate_nla: 1 callbacks suppressed [ 615.336031][T16438] netlink: 'syz.2.2887': attribute type 6 has an invalid length. [ 615.583324][T16404] netlink: 'syz.2.2887': attribute type 2 has an invalid length. [ 615.989986][T16458] netlink: 'syz.0.2902': attribute type 11 has an invalid length. [ 615.998121][T16458] __nla_validate_parse: 5 callbacks suppressed [ 615.998134][T16458] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.2902'. [ 616.015038][T14261] wlan1: Trigger new scan to find an IBSS to join [ 616.379971][T16466] bridge0: port 3(team0) entered disabled state [ 616.387425][T16466] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.397061][T16466] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.418640][T16466] bridge0: entered allmulticast mode [ 618.011711][T14261] wlan1: Trigger new scan to find an IBSS to join [ 618.913401][T10332] wlan1: Creating new IBSS network, BSSID 36:9e:d2:19:9d:92 [ 619.678355][T16478] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2908'. [ 619.695712][T16478] bridge_slave_1: default FDB implementation only supports local addresses [ 619.789586][T16477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 620.241578][T16506] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 620.251686][T16506] mac80211_hwsim hwsim39 wlan1: entered allmulticast mode [ 620.777640][T16515] netlink: 'syz.1.2917': attribute type 10 has an invalid length. [ 620.787141][T16515] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2917'. [ 620.799411][T16515] bridge0: port 1(team0) entered blocking state [ 620.807657][T16515] bridge0: port 1(team0) entered disabled state [ 620.818418][T16515] team0: entered allmulticast mode [ 620.823765][T16515] team_slave_0: entered allmulticast mode [ 620.831646][T16515] team_slave_1: entered allmulticast mode [ 620.878289][T16515] team0: entered promiscuous mode [ 620.893915][T16515] team_slave_0: entered promiscuous mode [ 620.915195][T16515] team_slave_1: entered promiscuous mode [ 620.930548][T16515] bridge0: port 1(team0) entered blocking state [ 620.937538][T16515] bridge0: port 1(team0) entered forwarding state [ 621.045734][T14261] wlan1: Trigger new scan to find an IBSS to join [ 621.931503][T16559] netlink: 'syz.1.2932': attribute type 13 has an invalid length. [ 621.966442][T16559] netlink: 'syz.1.2932': attribute type 58 has an invalid length. [ 622.000400][T16559] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2932'. [ 622.016871][T10331] wlan1: Creating new IBSS network, BSSID 4e:c9:0e:fd:79:0c [ 622.079055][T16556] netlink: 'syz.3.2933': attribute type 10 has an invalid length. [ 622.096206][T16556] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2933'. [ 622.123378][T16556] bridge0: port 3(team0) entered blocking state [ 622.139021][T16556] bridge0: port 3(team0) entered disabled state [ 622.163700][T16556] team0: entered allmulticast mode [ 622.188430][T16556] team_slave_0: entered allmulticast mode [ 622.199957][T16556] team_slave_1: entered allmulticast mode [ 622.239795][T16556] team0: entered promiscuous mode [ 622.245633][T16556] team_slave_0: entered promiscuous mode [ 622.258112][T16556] team_slave_1: entered promiscuous mode [ 622.284579][T16556] bridge0: port 3(team0) entered blocking state [ 622.291498][T16556] bridge0: port 3(team0) entered forwarding state [ 622.661891][T16577] netlink: 'syz.1.2936': attribute type 29 has an invalid length. [ 622.690816][T16558] netlink: 'syz.0.2941': attribute type 6 has an invalid length. [ 622.700561][T16558] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2941'. [ 622.713128][T16577] netlink: 'syz.1.2936': attribute type 29 has an invalid length. [ 622.749970][T16580] netlink: 'syz.1.2936': attribute type 29 has an invalid length. [ 622.801528][T16574] netlink: 'syz.1.2936': attribute type 29 has an invalid length. [ 622.876793][T16577] netlink: 'syz.1.2936': attribute type 29 has an invalid length. [ 622.906816][T16582] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2938'. [ 623.180723][T16584] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2939'. [ 624.233703][T16603] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2946'. [ 624.414413][T16611] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2949'. [ 624.445946][T16611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.492114][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.498571][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.584106][T16609] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2948'. [ 624.603905][T16609] bridge0: port 3(team0) entered blocking state [ 624.623110][T16609] bridge0: port 3(team0) entered disabled state [ 624.635948][T16609] team0: entered allmulticast mode [ 624.642977][T16609] team_slave_0: entered allmulticast mode [ 624.656824][T16609] team_slave_1: entered allmulticast mode [ 624.672697][T16609] team0: entered promiscuous mode [ 624.685638][T16609] team_slave_0: entered promiscuous mode [ 624.696515][T16609] team_slave_1: entered promiscuous mode [ 624.717698][T16609] bridge0: port 3(team0) entered blocking state [ 624.724594][T16609] bridge0: port 3(team0) entered forwarding state [ 624.806703][T16628] netlink: 184 bytes leftover after parsing attributes in process `syz.1.2953'. [ 624.927463][T16624] gre0: entered promiscuous mode [ 624.932752][T16624] gre0: entered allmulticast mode [ 624.938861][T16624] team0: Device gre0 is of different type [ 625.166708][T16631] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2954'. [ 625.978003][T16646] €Â0: renamed from pim6reg1 [ 626.123894][T16654] delete_channel: no stack [ 626.570679][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 627.895494][T16667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.638188][T16702] validate_nla: 8 callbacks suppressed [ 628.638228][T16702] netlink: 'syz.1.2975': attribute type 27 has an invalid length. [ 628.665630][T16702] __nla_validate_parse: 5 callbacks suppressed [ 628.665664][T16702] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2975'. [ 629.767523][T16721] netlink: 'syz.2.2976': attribute type 10 has an invalid length. [ 630.031266][T16736] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 630.038462][T16736] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 630.075411][T16735] netlink: 'syz.3.2983': attribute type 2 has an invalid length. [ 630.095157][T16735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2983'. [ 630.403660][T16742] netlink: 'syz.3.2985': attribute type 12 has an invalid length. [ 630.477910][T16742] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2985'. [ 630.618701][T16743] netlink: 'syz.3.2985': attribute type 12 has an invalid length. [ 630.659131][T16743] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.2985'. [ 630.745069][T16749] netlink: 'syz.0.2986': attribute type 11 has an invalid length. [ 631.321880][T16757] netlink: 'syz.3.2988': attribute type 4 has an invalid length. [ 631.591649][T16757] netlink: 'syz.3.2988': attribute type 10 has an invalid length. [ 631.644992][T16757] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2988'. [ 633.487392][T16791] netlink: 'syz.0.2999': attribute type 39 has an invalid length. [ 634.077954][T16796] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3001'. [ 635.990537][T16830] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3010'. [ 636.102012][T16830] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3010'. [ 636.137220][T16833] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3010'. [ 636.815131][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 637.610187][T16861] netlink: set zone limit has 8 unknown bytes [ 637.772093][T16861] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3019'. [ 637.837591][T16862] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3019'. [ 640.396712][T16879] netlink: 'syz.0.3031': attribute type 4 has an invalid length. [ 640.404700][T16879] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.3031'. [ 640.933888][T16888] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3026'. [ 642.805193][T16925] netlink: 'syz.0.3035': attribute type 21 has an invalid length. [ 642.813121][T16925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3035'. [ 643.057001][T16932] bridge0: port 3(team0) entered disabled state [ 643.063492][T16932] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.071136][T16932] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.277936][T16932] bridge0: entered allmulticast mode [ 643.477651][T16952] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3040'. [ 643.588101][T16952] hsr_slave_0: left promiscuous mode [ 643.689929][T16952] hsr_slave_1: left promiscuous mode [ 643.938944][T16959] netlink: 'syz.0.3041': attribute type 4 has an invalid length. [ 644.385850][T16967] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3044'. [ 644.582260][T16968] wg2: entered promiscuous mode [ 644.616206][T16968] wg2: entered allmulticast mode [ 644.650192][T16960] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3039'. [ 644.687238][T16960] bridge_slave_1: default FDB implementation only supports local addresses [ 645.031281][T16977] netlink: 'syz.3.3045': attribute type 4 has an invalid length. [ 645.056522][T16977] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.3045'. [ 645.446129][T16956] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 645.462058][T16985] IPv6: Can't replace route, no match found [ 645.537182][T16983] netlink: 'syz.0.3047': attribute type 2 has an invalid length. [ 645.878565][T16985] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 645.895555][T16988] IPv6: Can't replace route, no match found [ 646.095128][T16995] netlink: 'syz.1.3050': attribute type 21 has an invalid length. [ 646.134578][T16995] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3050'. [ 646.157186][T16995] netlink: 'syz.1.3050': attribute type 4 has an invalid length. [ 646.185255][T16995] netlink: 'syz.1.3050': attribute type 5 has an invalid length. [ 646.214734][T16995] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3050'. [ 646.228065][T17002] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3051'. [ 646.297919][T17006] netlink: 'syz.3.3052': attribute type 10 has an invalid length. [ 646.364670][T17006] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 646.412902][T17006] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 646.448736][T17006] team0: Port device wlan1 added [ 646.504415][T17015] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.3056'. [ 646.731927][T17022] netlink: 'syz.3.3058': attribute type 29 has an invalid length. [ 646.745836][T17022] netlink: 'syz.3.3058': attribute type 29 has an invalid length. [ 646.991262][T17033] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3060'. [ 648.089115][T17050] netlink: 'syz.3.3063': attribute type 1 has an invalid length. [ 648.100119][T17050] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.3063'. [ 648.731104][T17068] syzkaller0: entered promiscuous mode [ 648.745017][T17068] syzkaller0: entered allmulticast mode [ 648.842603][T17074] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3069'. [ 648.875146][T17072] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3069'. [ 649.060420][T14261] wlan1: Trigger new scan to find an IBSS to join [ 651.803343][T16680] syz.2.2969 (16680) used greatest stack depth: 17000 bytes left [ 652.005698][T12722] wlan1: Trigger new scan to find an IBSS to join [ 652.046985][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 653.819040][T17112] netlink: 10678 bytes leftover after parsing attributes in process `syz.3.3078'. [ 654.959731][T17131] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3084'. [ 654.969107][T12722] wlan1: Trigger new scan to find an IBSS to join [ 654.977286][T17123] IPv6: Can't replace route, no match found [ 655.053259][T17133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'. [ 656.056075][T14261] wlan1: Creating new IBSS network, BSSID 06:bc:68:ef:51:d2 [ 656.721497][T17169] netlink: 'syz.1.3096': attribute type 12 has an invalid length. [ 656.744978][T17169] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.3096'. [ 656.769680][T17169] netlink: 'syz.1.3096': attribute type 4 has an invalid length. [ 656.821221][T17171] netlink: 'syz.3.3099': attribute type 1 has an invalid length. [ 656.841435][T17173] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 656.852527][T17173] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3098'. [ 657.093984][T17178] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.3100'. [ 657.131092][T17176] IPv6: Can't replace route, no match found [ 657.287383][T14321] Bluetooth: hci3: command 0x0406 tx timeout [ 657.646950][ T51] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 657.737431][T17206] netlink: 'syz.3.3110': attribute type 21 has an invalid length. [ 658.630910][T17226] IPv6: Can't replace route, no match found [ 658.744503][T17233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.872681][T17242] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.3123'. [ 659.047518][T17247] tap0: tun_chr_ioctl cmd 2147767511 [ 659.300510][T17259] netlink: 46775 bytes leftover after parsing attributes in process `syz.0.3127'. [ 659.359913][T17262] netlink: 'syz.3.3128': attribute type 10 has an invalid length. [ 659.427643][T17268] netlink: 'syz.1.3130': attribute type 3 has an invalid length. [ 659.493262][T17268] netlink: 'syz.1.3130': attribute type 4 has an invalid length. [ 659.565612][T17268] netlink: 15210 bytes leftover after parsing attributes in process `syz.1.3130'. [ 663.122556][T17313] can: request_module (can-proto-4) failed. [ 663.304435][T17320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.359293][T17321] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 663.429445][T17323] macsec0: entered allmulticast mode [ 663.442801][T17323] veth1_macvtap: entered allmulticast mode [ 663.589522][T17323] veth1_macvtap: left allmulticast mode [ 663.597362][T17323] veth1_macvtap: left promiscuous mode [ 663.609040][T17323] macsec0: left allmulticast mode [ 663.652249][T17326] netlink: 'syz.2.3142': attribute type 29 has an invalid length. [ 663.845112][T17326] netlink: 'syz.2.3142': attribute type 29 has an invalid length. [ 663.878278][T17328] netlink: 'syz.2.3142': attribute type 29 has an invalid length. [ 663.953171][T17329] netlink: 'syz.2.3142': attribute type 29 has an invalid length. [ 663.972110][T17332] netlink: 'syz.0.3144': attribute type 6 has an invalid length. [ 663.985862][T17332] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3144'. [ 664.002881][T17330] netlink: 'syz.2.3142': attribute type 29 has an invalid length. [ 664.495662][T17328] netlink: 'syz.2.3142': attribute type 29 has an invalid length. [ 664.535002][T17346] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.3146'. [ 664.584365][T17339] syzkaller0: entered promiscuous mode [ 664.626677][T17339] syzkaller0: entered allmulticast mode [ 665.404535][T17388] pim6reg1: entered promiscuous mode [ 665.413212][T17387] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3157'. [ 665.428003][T17387] openvswitch: netlink: Duplicate key (type 0). [ 665.731028][T17407] netlink: 'syz.1.3161': attribute type 2 has an invalid length. [ 665.738910][T17407] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3161'. [ 666.653232][T17440] netlink: 'syz.1.3172': attribute type 21 has an invalid length. [ 666.663879][T17440] netlink: 'syz.1.3172': attribute type 1 has an invalid length. [ 666.674304][T17440] netlink: 15998 bytes leftover after parsing attributes in process `syz.1.3172'. [ 666.724031][T17442] macsec0: entered allmulticast mode [ 666.729919][T17442] veth1_macvtap: entered allmulticast mode [ 667.002926][T17446] veth1_macvtap: left allmulticast mode [ 667.010465][T17446] veth1_macvtap: left promiscuous mode [ 667.016600][T17446] macsec0: left allmulticast mode [ 667.953838][T17482] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3180'. [ 667.970754][T17482] netlink: get zone limit has 4 unknown bytes [ 668.051383][T17484] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3182'. [ 668.807362][T17513] validate_nla: 2 callbacks suppressed [ 668.807378][T17513] netlink: 'syz.0.3191': attribute type 10 has an invalid length. [ 668.821617][T17513] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3191'. [ 669.709737][T17546] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3206'. [ 669.719921][T17546] team_slave_0: left promiscuous mode [ 669.731288][T17546] team_slave_0: left allmulticast mode [ 669.739291][T17546] team0: Port device team_slave_0 removed [ 669.746014][T17546] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 670.082414][T17563] netlink: 'syz.0.3210': attribute type 1 has an invalid length. [ 670.091345][T17563] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.3210'. [ 670.747294][T17579] netlink: 'syz.0.3215': attribute type 10 has an invalid length. [ 670.875561][T17579] bridge_slave_1: left allmulticast mode [ 670.922211][T17579] bridge_slave_1: left promiscuous mode [ 670.949709][T17579] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.789819][T17602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3223'. [ 672.398297][T17616] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3227'. [ 673.075297][T17623] netlink: zone id is out of range [ 673.080496][T17623] netlink: set zone limit has 8 unknown bytes [ 673.533891][T17636] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3235'. [ 673.730745][T17644] netlink: 'syz.2.3237': attribute type 4 has an invalid length. [ 673.746258][T17642] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3236'. [ 674.131469][T17655] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 674.165332][T17655] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 674.190536][T17654] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 674.227944][T17654] netlink: 'syz.3.3240': attribute type 29 has an invalid length. [ 674.810277][T17668] syzkaller0: entered promiscuous mode [ 674.825184][T17668] syzkaller0: entered allmulticast mode [ 675.034590][ T51] Bluetooth: hci4: ISO packet for unknown connection handle 13 [ 676.651884][T17702] delete_channel: no stack [ 676.708156][T17703] netlink: 'syz.2.3258': attribute type 29 has an invalid length. [ 676.779602][T17703] netlink: 'syz.2.3258': attribute type 29 has an invalid length. [ 676.824622][T17707] netlink: 'syz.2.3258': attribute type 29 has an invalid length. [ 677.102384][T17707] netlink: 'syz.2.3258': attribute type 29 has an invalid length. [ 677.271631][T17710] netlink: 'syz.3.3259': attribute type 21 has an invalid length. [ 677.314753][T17710] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3259'. [ 677.391084][T17715] netlink: 'syz.0.3260': attribute type 30 has an invalid length. [ 677.998922][T17724] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3264'. [ 678.632685][T17739] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.3268'. [ 679.393327][T17746] netlink: 'syz.2.3270': attribute type 2 has an invalid length. [ 679.481569][T17746] netlink: 'syz.2.3270': attribute type 8 has an invalid length. [ 679.547976][T17746] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3270'. [ 679.845642][T17760] netlink: 'syz.0.3273': attribute type 10 has an invalid length. [ 679.868955][T17760] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.3273'. [ 680.515814][T17773] netlink: 'syz.0.3279': attribute type 3 has an invalid length. [ 680.523736][T17773] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.3279'. [ 682.638748][T17794] netlink: 'syz.0.3287': attribute type 21 has an invalid length. [ 683.074142][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 683.077332][T10320] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 683.107163][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 683.120438][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 683.148619][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 683.170455][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 683.181763][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 683.850274][T17800] chnl_net:caif_netlink_parms(): no params data found [ 683.970413][T17800] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.977812][T17800] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.985488][T17800] bridge_slave_0: entered allmulticast mode [ 683.992908][T17800] bridge_slave_0: entered promiscuous mode [ 684.004228][T17800] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.012226][T17800] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.022919][T17800] bridge_slave_1: entered allmulticast mode [ 684.030735][T17800] bridge_slave_1: entered promiscuous mode [ 684.071382][T17800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.085910][T17800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.133373][T17800] team0: Port device team_slave_0 added [ 684.143629][T17800] team0: Port device team_slave_1 added [ 684.179099][T17800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.186280][T17800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.216859][T17800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.231376][T17800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.238607][T17800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.264918][T17800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.318638][T17800] hsr_slave_0: entered promiscuous mode [ 684.328225][T17800] hsr_slave_1: entered promiscuous mode [ 684.503259][T17800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 684.518263][T17800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 684.528996][T17800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 684.539816][T17800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 684.570188][T17800] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.577426][T17800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.584962][T17800] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.592134][T17800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 684.661273][T17800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.680994][T17800] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.699904][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.730592][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.737868][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.948191][T17800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.138494][T17800] veth0_vlan: entered promiscuous mode [ 685.153857][T17800] veth1_vlan: entered promiscuous mode [ 685.197284][T17800] veth0_macvtap: entered promiscuous mode [ 685.206684][T17800] veth1_macvtap: entered promiscuous mode [ 685.222158][T17800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.237405][T17800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.251135][T17800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.260166][T17800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.269438][T17800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.278335][T17800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.296583][T17186] Bluetooth: hci1: command tx timeout [ 685.352520][T14261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.363970][T14261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.392653][T10320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.400920][T10320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.567111][T17842] netlink: 'syz.3.3301': attribute type 10 has an invalid length. [ 685.577316][T17842] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.3301'. [ 685.935926][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.942795][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.872712][T17869] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3298'. [ 687.053869][T17873] netlink: 'syz.4.3304': attribute type 21 has an invalid length. [ 687.068623][T17873] netlink: 'syz.4.3304': attribute type 6 has an invalid length. [ 687.081217][T17873] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3304'. [ 687.147729][T17876] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3305'. [ 687.375174][T17186] Bluetooth: hci1: command tx timeout [ 688.093287][T17924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3319'. [ 688.118101][T17925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3319'. [ 688.134361][T17924] netlink: 'syz.2.3319': attribute type 21 has an invalid length. [ 688.143048][T17924] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3319'. [ 688.311404][T17931] netlink: 'syz.3.3321': attribute type 10 has an invalid length. [ 688.511946][T17940] netlink: 'syz.4.3324': attribute type 1 has an invalid length. [ 688.524039][T17940] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3324'. [ 688.684405][T17939] syzkaller0: entered promiscuous mode [ 688.692091][T17939] syzkaller0: entered allmulticast mode [ 689.445547][T17186] Bluetooth: hci1: command tx timeout [ 691.535764][T17186] Bluetooth: hci1: command tx timeout [ 692.850664][T17997] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3339'. [ 692.875167][T17997] openvswitch: netlink: Flow actions attr not present in new flow. [ 692.902582][T18008] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3340'. [ 697.361504][T18082] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3363'. [ 697.515835][T18089] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3366'. [ 697.583788][T18086] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3364'. [ 697.606078][T18096] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3367'. [ 697.643862][T18096] netlink: 'syz.4.3367': attribute type 9 has an invalid length. [ 697.654252][T18096] netlink: 155304 bytes leftover after parsing attributes in process `syz.4.3367'. [ 697.697152][T18097] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3367'. [ 697.732312][T18091] netlink: 'syz.2.3366': attribute type 9 has an invalid length. [ 697.758183][T18089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 697.795179][T18091] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3366'. [ 698.097869][T18115] netlink: 'syz.2.3371': attribute type 16 has an invalid length. [ 698.119373][T18115] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3371'. [ 698.132162][T18115] veth1_macvtap: entered allmulticast mode [ 698.286174][T18121] netlink: 'syz.4.3372': attribute type 10 has an invalid length. [ 698.337163][T18121] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.353278][T18121] bridge_slave_1: left allmulticast mode [ 698.365138][T18121] bridge_slave_1: left promiscuous mode [ 698.372387][T18121] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.500035][T18121] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 699.765910][T18145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3380'. [ 701.612905][T18193] netlink: 'syz.3.3395': attribute type 1 has an invalid length. [ 701.657049][T18193] netlink: 'syz.3.3395': attribute type 3 has an invalid length. [ 701.680136][T18193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3395'. [ 702.032772][T18213] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3401'. [ 703.187504][T18249] netlink: 'syz.3.3412': attribute type 2 has an invalid length. [ 703.236153][T18249] netlink: 119 bytes leftover after parsing attributes in process `syz.3.3412'. [ 705.117704][T18281] syz.0.3420[18281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 705.117887][T18281] syz.0.3420[18281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 705.454358][T18282] netlink: 'syz.2.3419': attribute type 41 has an invalid length. [ 705.748713][T18282] netlink: 'syz.2.3419': attribute type 41 has an invalid length. [ 706.647806][T18311] netlink: 'syz.3.3426': attribute type 27 has an invalid length. [ 706.669189][T18311] netlink: 'syz.3.3426': attribute type 25 has an invalid length. [ 711.275633][T18385] delete_channel: no stack [ 711.280205][T18385] delete_channel: no stack [ 711.459144][T18395] syzkaller0: entered promiscuous mode [ 711.467260][T18395] syzkaller0: entered allmulticast mode [ 711.807392][T18396] syzkaller0: entered promiscuous mode [ 711.819697][T18396] syzkaller0: entered allmulticast mode [ 712.537071][T18413] netlink: 'syz.3.3458': attribute type 2 has an invalid length. [ 712.557074][T18413] netlink: 'syz.3.3458': attribute type 1 has an invalid length. [ 712.579732][T18413] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3458'. [ 714.102616][T10331] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 714.932250][T18417] netlink: 'syz.3.3459': attribute type 17 has an invalid length. [ 714.940184][T18417] netlink: 'syz.3.3459': attribute type 16 has an invalid length. [ 714.948268][T18417] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3459'. [ 714.970154][T18428] netlink: 'syz.2.3464': attribute type 2 has an invalid length. [ 715.008504][T18431] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3465'. [ 715.592294][T18436] netlink: 'syz.4.3467': attribute type 41 has an invalid length. [ 715.605379][T18436] netlink: 'syz.4.3467': attribute type 41 has an invalid length. [ 715.738461][T18449] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3472'. [ 715.780485][T18451] FAULT_INJECTION: forcing a failure. [ 715.780485][T18451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.794191][T18451] CPU: 0 PID: 18451 Comm: syz.4.3473 Not tainted syzkaller #0 [ 715.801677][T18451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 715.811726][T18451] Call Trace: [ 715.815007][T18451] [ 715.817937][T18451] dump_stack_lvl+0x18c/0x250 [ 715.822612][T18451] ? show_regs_print_info+0x20/0x20 [ 715.827804][T18451] ? load_image+0x420/0x420 [ 715.832317][T18451] ? __might_fault+0xaa/0x120 [ 715.837002][T18451] ? __lock_acquire+0x7d80/0x7d80 [ 715.842039][T18451] should_fail_ex+0x394/0x4c0 [ 715.846740][T18451] _copy_from_user+0x2f/0xe0 [ 715.851335][T18451] __sys_bpf+0x23e/0x890 [ 715.855584][T18451] ? bpf_link_show_fdinfo+0x560/0x560 [ 715.860955][T18451] ? lock_chain_count+0x20/0x20 [ 715.865803][T18451] __x64_sys_bpf+0x7c/0x90 [ 715.870211][T18451] do_syscall_64+0x55/0xb0 [ 715.874615][T18451] ? clear_bhb_loop+0x40/0x90 [ 715.879281][T18451] ? clear_bhb_loop+0x40/0x90 [ 715.883944][T18451] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.889823][T18451] RIP: 0033:0x7f147f79e159 [ 715.894221][T18451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.913841][T18451] RSP: 002b:00007f14805e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 715.922267][T18451] RAX: ffffffffffffffda RBX: 00007f147fa25fa0 RCX: 00007f147f79e159 [ 715.930233][T18451] RDX: 0000000000000020 RSI: 0000200000000d40 RDI: 0000000000000001 [ 715.938202][T18451] RBP: 00007f14805e9090 R08: 0000000000000000 R09: 0000000000000000 [ 715.946176][T18451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.954186][T18451] R13: 00007f147fa26038 R14: 00007f147fa25fa0 R15: 00007ffcf56d1a48 [ 715.962183][T18451] [ 716.090444][T18456] netlink: 'syz.3.3475': attribute type 29 has an invalid length. [ 716.160682][T18456] netlink: 'syz.3.3475': attribute type 29 has an invalid length. [ 717.131229][T18482] FAULT_INJECTION: forcing a failure. [ 717.131229][T18482] name failslab, interval 1, probability 0, space 0, times 0 [ 717.145193][T18482] CPU: 1 PID: 18482 Comm: syz.3.3483 Not tainted syzkaller #0 [ 717.152775][T18482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.162845][T18482] Call Trace: [ 717.166130][T18482] [ 717.169066][T18482] dump_stack_lvl+0x18c/0x250 [ 717.173761][T18482] ? show_regs_print_info+0x20/0x20 [ 717.179015][T18482] ? load_image+0x420/0x420 [ 717.183520][T18482] ? __might_sleep+0xe0/0xe0 [ 717.188112][T18482] ? __lock_acquire+0x7d80/0x7d80 [ 717.193139][T18482] should_fail_ex+0x394/0x4c0 [ 717.197828][T18482] should_failslab+0x9/0x20 [ 717.202344][T18482] slab_pre_alloc_hook+0x59/0x300 [ 717.207376][T18482] ? vmemdup_user+0x49/0x1e0 [ 717.211967][T18482] ? vmemdup_user+0x49/0x1e0 [ 717.216559][T18482] __kmem_cache_alloc_node+0x53/0x250 [ 717.221934][T18482] ? vmemdup_user+0x49/0x1e0 [ 717.226521][T18482] __kmalloc_node+0xa6/0x240 [ 717.231377][T18482] vmemdup_user+0x49/0x1e0 [ 717.235792][T18482] map_lookup_elem+0x28a/0x7f0 [ 717.240550][T18482] ? __might_fault+0xaa/0x120 [ 717.245226][T18482] ? bpf_lsm_bpf+0x9/0x10 [ 717.249559][T18482] __sys_bpf+0x438/0x890 [ 717.253802][T18482] ? bpf_link_show_fdinfo+0x560/0x560 [ 717.259186][T18482] ? lock_chain_count+0x20/0x20 [ 717.264043][T18482] __x64_sys_bpf+0x7c/0x90 [ 717.268462][T18482] do_syscall_64+0x55/0xb0 [ 717.272872][T18482] ? clear_bhb_loop+0x40/0x90 [ 717.277549][T18482] ? clear_bhb_loop+0x40/0x90 [ 717.282228][T18482] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 717.288127][T18482] RIP: 0033:0x7feb4c99e159 [ 717.292544][T18482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.312151][T18482] RSP: 002b:00007feb4d79b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 717.320563][T18482] RAX: ffffffffffffffda RBX: 00007feb4cc25fa0 RCX: 00007feb4c99e159 [ 717.328531][T18482] RDX: 0000000000000020 RSI: 0000200000000d40 RDI: 0000000000000001 [ 717.336512][T18482] RBP: 00007feb4d79b090 R08: 0000000000000000 R09: 0000000000000000 [ 717.344481][T18482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.352447][T18482] R13: 00007feb4cc26038 R14: 00007feb4cc25fa0 R15: 00007ffe41cc5898 [ 717.360448][T18482] [ 717.834521][T18504] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3486'. [ 719.187254][T18520] netlink: 'syz.3.3494': attribute type 17 has an invalid length. [ 719.215886][T18520] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3494'. [ 719.264508][T18521] netlink: 'syz.3.3494': attribute type 17 has an invalid length. [ 719.278797][T18521] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3494'. [ 719.309061][T18525] FAULT_INJECTION: forcing a failure. [ 719.309061][T18525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.326474][T18525] CPU: 0 PID: 18525 Comm: syz.0.3495 Not tainted syzkaller #0 [ 719.333989][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 719.344066][T18525] Call Trace: [ 719.347365][T18525] [ 719.350317][T18525] dump_stack_lvl+0x18c/0x250 [ 719.355026][T18525] ? show_regs_print_info+0x20/0x20 [ 719.360256][T18525] ? load_image+0x420/0x420 [ 719.364790][T18525] ? __might_fault+0xaa/0x120 [ 719.369491][T18525] ? __lock_acquire+0x7d80/0x7d80 [ 719.374550][T18525] ? __virt_addr_valid+0x10c/0x380 [ 719.379694][T18525] should_fail_ex+0x394/0x4c0 [ 719.384418][T18525] _copy_from_user+0x2f/0xe0 [ 719.389035][T18525] vmemdup_user+0xac/0x1e0 [ 719.393472][T18525] map_lookup_elem+0x28a/0x7f0 [ 719.398253][T18525] ? __might_fault+0xaa/0x120 [ 719.402949][T18525] ? bpf_lsm_bpf+0x9/0x10 [ 719.407315][T18525] __sys_bpf+0x438/0x890 [ 719.411583][T18525] ? bpf_link_show_fdinfo+0x560/0x560 [ 719.416997][T18525] ? lock_chain_count+0x20/0x20 [ 719.421875][T18525] __x64_sys_bpf+0x7c/0x90 [ 719.426310][T18525] do_syscall_64+0x55/0xb0 [ 719.430744][T18525] ? clear_bhb_loop+0x40/0x90 [ 719.435445][T18525] ? clear_bhb_loop+0x40/0x90 [ 719.440150][T18525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.446070][T18525] RIP: 0033:0x7fae77d9e159 [ 719.450502][T18525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.470133][T18525] RSP: 002b:00007fae78c99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 719.478568][T18525] RAX: ffffffffffffffda RBX: 00007fae78025fa0 RCX: 00007fae77d9e159 [ 719.486566][T18525] RDX: 0000000000000020 RSI: 0000200000000d40 RDI: 0000000000000001 [ 719.494563][T18525] RBP: 00007fae78c99090 R08: 0000000000000000 R09: 0000000000000000 [ 719.502556][T18525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.510551][T18525] R13: 00007fae78026038 R14: 00007fae78025fa0 R15: 00007ffe35996a28 [ 719.518558][T18525] [ 719.827627][T18541] netlink: 'syz.4.3502': attribute type 27 has an invalid length. [ 719.845951][T18541] netlink: 'syz.4.3502': attribute type 3 has an invalid length. [ 719.863813][T18541] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3502'. [ 719.986384][T18551] netlink: 'syz.0.3505': attribute type 21 has an invalid length. [ 720.104228][T18551] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3505'. [ 720.651665][T18580] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3514'. [ 720.912355][T18589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3515'. [ 720.922945][T18589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3515'. [ 720.934753][T18586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3515'. [ 721.043583][T18588] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3515'. [ 721.966454][T18604] FAULT_INJECTION: forcing a failure. [ 721.966454][T18604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.999949][T18604] CPU: 1 PID: 18604 Comm: syz.2.3521 Not tainted syzkaller #0 [ 722.007487][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.017567][T18604] Call Trace: [ 722.020866][T18604] [ 722.023808][T18604] dump_stack_lvl+0x18c/0x250 [ 722.028519][T18604] ? show_regs_print_info+0x20/0x20 [ 722.033743][T18604] ? load_image+0x420/0x420 [ 722.038272][T18604] ? __lock_acquire+0x7d80/0x7d80 [ 722.043332][T18604] should_fail_ex+0x394/0x4c0 [ 722.048048][T18604] _copy_to_user+0x2f/0xa0 [ 722.052496][T18604] map_lookup_elem+0x5ed/0x7f0 [ 722.057295][T18604] __sys_bpf+0x438/0x890 [ 722.061559][T18604] ? bpf_link_show_fdinfo+0x560/0x560 [ 722.067005][T18604] ? lock_chain_count+0x20/0x20 [ 722.071876][T18604] __x64_sys_bpf+0x7c/0x90 [ 722.076331][T18604] do_syscall_64+0x55/0xb0 [ 722.080752][T18604] ? clear_bhb_loop+0x40/0x90 [ 722.085428][T18604] ? clear_bhb_loop+0x40/0x90 [ 722.090112][T18604] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 722.096006][T18604] RIP: 0033:0x7f26b219e159 [ 722.100417][T18604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 722.120111][T18604] RSP: 002b:00007f26b307b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 722.128527][T18604] RAX: ffffffffffffffda RBX: 00007f26b2425fa0 RCX: 00007f26b219e159 [ 722.136499][T18604] RDX: 0000000000000020 RSI: 0000200000000d40 RDI: 0000000000000001 [ 722.144500][T18604] RBP: 00007f26b307b090 R08: 0000000000000000 R09: 0000000000000000 [ 722.152463][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 722.160451][T18604] R13: 00007f26b2426038 R14: 00007f26b2425fa0 R15: 00007fffce1526d8 [ 722.168447][T18604] [ 722.361035][T18611] netlink: 'syz.3.3524': attribute type 2 has an invalid length. [ 722.510086][T18609] netlink: 'syz.2.3523': attribute type 3 has an invalid length. [ 722.566435][T18609] netlink: 'syz.2.3523': attribute type 1 has an invalid length. [ 722.855724][T18627] FAULT_INJECTION: forcing a failure. [ 722.855724][T18627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 722.894929][T18627] CPU: 0 PID: 18627 Comm: syz.0.3531 Not tainted syzkaller #0 [ 722.902459][T18627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 722.912540][T18627] Call Trace: [ 722.915838][T18627] [ 722.918784][T18627] dump_stack_lvl+0x18c/0x250 [ 722.923490][T18627] ? show_regs_print_info+0x20/0x20 [ 722.928714][T18627] ? load_image+0x420/0x420 [ 722.933247][T18627] ? __lock_acquire+0x7d80/0x7d80 [ 722.938308][T18627] ? snprintf+0xe9/0x140 [ 722.942583][T18627] should_fail_ex+0x394/0x4c0 [ 722.947300][T18627] _copy_to_user+0x2f/0xa0 [ 722.951754][T18627] simple_read_from_buffer+0xe7/0x150 [ 722.957159][T18627] proc_fail_nth_read+0x1e8/0x260 [ 722.962230][T18627] ? proc_fault_inject_write+0x360/0x360 [ 722.967904][T18627] ? fsnotify_perm+0x271/0x5e0 [ 722.972705][T18627] ? proc_fault_inject_write+0x360/0x360 [ 722.978375][T18627] vfs_read+0x298/0x990 [ 722.982566][T18627] ? kernel_read+0x1e0/0x1e0 [ 722.987193][T18627] ? __fget_files+0x28/0x460 [ 722.991789][T18627] ? __fget_files+0x3fc/0x460 [ 722.996473][T18627] ? __fdget_pos+0x2a3/0x330 [ 723.001060][T18627] ? ksys_read+0x74/0x260 [ 723.005393][T18627] ksys_read+0x151/0x260 [ 723.009645][T18627] ? vfs_write+0x9a0/0x9a0 [ 723.014072][T18627] ? lockdep_hardirqs_on+0x98/0x150 [ 723.019269][T18627] do_syscall_64+0x55/0xb0 [ 723.023683][T18627] ? clear_bhb_loop+0x40/0x90 [ 723.028359][T18627] ? clear_bhb_loop+0x40/0x90 [ 723.033036][T18627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 723.038954][T18627] RIP: 0033:0x7fae77d5e98e [ 723.043363][T18627] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 723.062967][T18627] RSP: 002b:00007fae78c98fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 723.071388][T18627] RAX: ffffffffffffffda RBX: 00007fae78c996c0 RCX: 00007fae77d5e98e [ 723.079355][T18627] RDX: 000000000000000f RSI: 00007fae78c990a0 RDI: 0000000000000005 [ 723.087323][T18627] RBP: 00007fae78c99090 R08: 0000000000000000 R09: 0000000000000000 [ 723.095314][T18627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.103309][T18627] R13: 00007fae78026038 R14: 00007fae78025fa0 R15: 00007ffe35996a28 [ 723.111300][T18627] [ 723.424501][T18637] can: request_module (can-proto-0) failed. [ 724.725992][T18670] netlink: 'syz.2.3541': attribute type 5 has an invalid length. [ 724.836145][T18666] __nla_validate_parse: 1 callbacks suppressed [ 724.836239][T18666] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3542'. [ 724.979424][T18670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3541'. [ 725.132382][T18673] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.3543'. [ 725.161904][T18670] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3541'. [ 725.212610][T18667] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3541'. [ 725.271020][T18666] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 725.437422][T18668] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3541'. [ 726.095497][T18701] netlink: 'syz.4.3549': attribute type 21 has an invalid length. [ 726.127362][T18701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3549'. [ 726.370391][T18708] netlink: 'syz.2.3550': attribute type 10 has an invalid length. [ 726.460218][T18708] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.3550'. [ 727.192176][T17186] Bluetooth: hci4: ISO packet for unknown connection handle 62 [ 727.230758][T18724] netlink: 'syz.0.3557': attribute type 21 has an invalid length. [ 727.238879][T18724] netlink: 'syz.0.3557': attribute type 4 has an invalid length. [ 727.247281][T18724] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3557'. [ 727.458829][T18739] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3564'. [ 727.695522][T18740] netlink: 'syz.4.3563': attribute type 9 has an invalid length. [ 730.060496][T18819] __nla_validate_parse: 4 callbacks suppressed [ 730.060526][T18819] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3594'. [ 730.653750][T18841] netlink: 56095 bytes leftover after parsing attributes in process `syz.3.3600'. [ 731.183095][T18861] netlink: 'syz.0.3605': attribute type 21 has an invalid length. [ 731.192544][T18861] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3605'. [ 732.335249][T18897] syzkaller0: entered promiscuous mode [ 732.343138][T18897] syzkaller0: entered allmulticast mode [ 733.417470][T18928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.866328][T18953] netlink: 'syz.2.3632': attribute type 58 has an invalid length. [ 733.875480][T18953] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3632'. [ 734.701549][T18989] netlink: 668 bytes leftover after parsing attributes in process `syz.0.3643'. [ 734.720795][T18989] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 734.758293][T18989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 734.984442][T18994] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.3645'. [ 735.326400][T19010] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3650'. [ 735.395297][T18997] syzkaller0: entered promiscuous mode [ 735.401342][T18997] syzkaller0: entered allmulticast mode [ 739.189518][T19020] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.3654'. [ 739.200339][T19023] vcan0: entered allmulticast mode [ 739.207899][T19025] netlink: 'syz.3.3654': attribute type 21 has an invalid length. [ 739.219404][T19025] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3654'. [ 739.229826][T19025] netlink: 'syz.3.3654': attribute type 4 has an invalid length. [ 739.238225][T19025] netlink: 'syz.3.3654': attribute type 5 has an invalid length. [ 739.249170][T19025] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3654'. [ 739.260080][T19028] netlink: 'syz.4.3653': attribute type 10 has an invalid length. [ 739.293791][T19028] veth0_macvtap: left promiscuous mode [ 739.533504][T19052] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3661'. [ 739.720624][T19059] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3664'. [ 739.772718][T19061] netlink: 'syz.3.3665': attribute type 3 has an invalid length. [ 739.783066][T19061] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3665'. [ 739.937638][T19059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 739.945391][T19059] IPv6: NLM_F_CREATE should be set when creating new route [ 739.953597][T19059] IPv6: NLM_F_CREATE should be set when creating new route [ 739.961421][T19059] IPv6: NLM_F_CREATE should be set when creating new route [ 740.007468][T19059] netlink: 'syz.0.3664': attribute type 9 has an invalid length. [ 740.026310][T19059] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3664'. [ 740.335669][T19066] netlink: 'syz.0.3664': attribute type 9 has an invalid length. [ 740.365118][T19066] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3664'. [ 740.933378][T19087] netlink: 190396 bytes leftover after parsing attributes in process `syz.2.3673'. [ 740.955828][T19087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3673'. [ 741.598865][T19107] delete_channel: no stack [ 742.057153][T19128] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3688'. [ 742.099777][T19128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 742.167398][T19135] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3690'. [ 745.029897][ T8932] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.890458][T17186] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 745.919762][T19162] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3700'. [ 747.177405][T19207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3712'. [ 747.205406][T19206] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3712'. [ 747.381664][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.388078][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.616734][T19223] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3719'. [ 747.662786][T19223] netlink: 'syz.4.3719': attribute type 46 has an invalid length. [ 747.698533][T19223] netlink: 'syz.4.3719': attribute type 46 has an invalid length. [ 748.425986][T17186] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 748.457195][T10329] tipc: Subscription rejected, illegal request [ 748.828492][T17186] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 749.401286][T19268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 749.465292][T19268] netlink: 'syz.2.3732': attribute type 9 has an invalid length. [ 749.495069][T19268] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3732'. [ 749.803653][T19275] netlink: 'syz.2.3732': attribute type 9 has an invalid length. [ 749.814749][T19275] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3732'. [ 752.012325][T17186] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 755.216979][T19358] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3760'. [ 755.532450][T19366] netlink: 'syz.0.3764': attribute type 3 has an invalid length. [ 755.534460][T19364] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3762'. [ 755.570864][T19366] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3764'. [ 756.847358][T19416] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3773'. [ 758.950628][T17186] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 758.962470][T19474] netlink: 'syz.4.3789': attribute type 1 has an invalid length. [ 758.970635][T19471] netlink: 'syz.2.3787': attribute type 39 has an invalid length. [ 758.981918][T19474] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3789'. [ 759.342221][T19471] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3787'. [ 760.074057][T19500] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3798'. [ 760.201892][T19503] netlink: 'syz.3.3799': attribute type 3 has an invalid length. [ 760.213165][T19503] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.3799'. [ 760.281993][T19501] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3798'. [ 760.433293][T19508] netlink: 'syz.2.3801': attribute type 13 has an invalid length. [ 760.445928][T19508] netlink: 'syz.2.3801': attribute type 58 has an invalid length. [ 760.467724][T19508] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3801'. [ 760.899241][T19522] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3805'. [ 760.926625][T19525] netlink: 'syz.3.3807': attribute type 21 has an invalid length. [ 760.939014][T19525] netlink: 'syz.3.3807': attribute type 6 has an invalid length. [ 760.977089][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3807'. [ 761.005287][T19525] netlink: 'syz.3.3807': attribute type 21 has an invalid length. [ 761.055147][T19525] netlink: 'syz.3.3807': attribute type 6 has an invalid length. [ 761.066276][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3807'. [ 761.088596][T19525] netlink: 'syz.3.3807': attribute type 21 has an invalid length. [ 761.097916][T19525] netlink: 'syz.3.3807': attribute type 6 has an invalid length. [ 761.126799][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3807'. [ 761.133493][T19544] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3813'. [ 761.138470][T19525] netlink: 'syz.3.3807': attribute type 21 has an invalid length. [ 761.169255][T19525] netlink: 'syz.3.3807': attribute type 6 has an invalid length. [ 761.189309][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3807'. [ 761.244729][T19525] netlink: 'syz.3.3807': attribute type 21 has an invalid length. [ 761.261777][T19525] netlink: 'syz.3.3807': attribute type 6 has an invalid length. [ 761.271206][T19525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3807'. [ 761.311309][T19550] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3813'. [ 762.051747][T19585] openvswitch: netlink: Duplicate key (type 0). [ 762.084092][T19579] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 763.533105][T19640] ================================================================== [ 763.541295][T19640] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c7/0x900 [ 763.549139][T19640] Write of size 72 at addr ffff88805ca90890 by task syz.0.3845/19640 [ 763.557216][T19640] [ 763.559553][T19640] CPU: 1 PID: 19640 Comm: syz.0.3845 Not tainted syzkaller #0 [ 763.567020][T19640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 763.577098][T19640] Call Trace: [ 763.580387][T19640] [ 763.583358][T19640] dump_stack_lvl+0x18c/0x250 [ 763.588069][T19640] ? read_lock_is_recursive+0x20/0x20 [ 763.593472][T19640] ? show_regs_print_info+0x20/0x20 [ 763.598702][T19640] ? load_image+0x420/0x420 [ 763.603226][T19640] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 763.608709][T19640] ? __virt_addr_valid+0x10c/0x380 [ 763.613946][T19640] ? __virt_addr_valid+0x10c/0x380 [ 763.619089][T19640] ? __virt_addr_valid+0x10c/0x380 [ 763.624231][T19640] print_report+0xa8/0x210 [ 763.628719][T19640] ? __bpf_get_stackid+0x6c7/0x900 [ 763.633851][T19640] kasan_report+0x117/0x150 [ 763.638387][T19640] ? __bpf_get_stackid+0x6c7/0x900 [ 763.643605][T19640] kasan_check_range+0x241/0x290 [ 763.648630][T19640] ? __bpf_get_stackid+0x6c7/0x900 [ 763.653742][T19640] __asan_memcpy+0x40/0x70 [ 763.658158][T19640] __bpf_get_stackid+0x6c7/0x900 [ 763.663097][T19640] bpf_get_stackid_pe+0x343/0x410 [ 763.668122][T19640] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 763.673575][T19640] bpf_overflow_handler+0x1fc/0x510 [ 763.678772][T19640] ? perf_prepare_header+0x1e0/0x1e0 [ 763.684055][T19640] ? bpf_overflow_handler+0xde/0x510 [ 763.689339][T19640] ? tp_perf_event_destroy+0x20/0x20 [ 763.694622][T19640] ? perf_trace_preemptirq_template+0xac/0x330 [ 763.700867][T19640] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 763.708067][T19640] ? __perf_event_account_interrupt+0x187/0x280 [ 763.714302][T19640] __perf_event_overflow+0x461/0x660 [ 763.719594][T19640] perf_swevent_event+0x319/0x570 [ 763.724616][T19640] ? perf_tp_event+0x1550/0x1550 [ 763.729561][T19640] ___perf_sw_event+0x4ab/0x730 [ 763.734410][T19640] ? ___perf_sw_event+0x19e/0x730 [ 763.739429][T19640] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 763.745839][T19640] ? __lock_acquire+0x1336/0x7d80 [ 763.750859][T19640] ? rep_movs_alternative+0x4a/0x90 [ 763.756063][T19640] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 763.762036][T19640] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 763.769230][T19640] ? lock_chain_count+0x20/0x20 [ 763.774182][T19640] __perf_sw_event+0x139/0x270 [ 763.779140][T19640] do_user_addr_fault+0x1242/0x12d0 [ 763.784351][T19640] ? rcu_is_watching+0x15/0xb0 [ 763.789124][T19640] exc_page_fault+0x64/0x100 [ 763.793720][T19640] asm_exc_page_fault+0x26/0x30 [ 763.798577][T19640] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 763.804385][T19640] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 763.824770][T19640] RSP: 0018:ffffc90003867bd0 EFLAGS: 00050206 [ 763.830846][T19640] RAX: ffffffff84342b01 RBX: 000000000000056d RCX: 00000000000004ed [ 763.838814][T19640] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff8880764b2080 [ 763.846782][T19640] RBP: ffffc90003867d20 R08: 0000000000000004 R09: 0000000000000005 [ 763.854747][T19640] R10: dffffc0000000000 R11: ffffed100ec964ad R12: 00002000000024ed [ 763.862716][T19640] R13: 1ffff9200070cfbd R14: ffff8880764b2000 R15: 0000200000001f80 [ 763.870686][T19640] ? rcuref_put_slowpath+0x101/0x150 [ 763.876000][T19640] _copy_from_user+0x8b/0xe0 [ 763.880598][T19640] generic_map_update_batch+0x58c/0x800 [ 763.886148][T19640] ? rcu_read_unlock+0xa0/0xa0 [ 763.890905][T19640] ? __fdget+0x180/0x210 [ 763.895148][T19640] ? rcu_read_unlock+0xa0/0xa0 [ 763.899901][T19640] bpf_map_do_batch+0x3f2/0x600 [ 763.904747][T19640] ? bpf_lsm_key_free+0x10/0x10 [ 763.909594][T19640] __sys_bpf+0x381/0x890 [ 763.913828][T19640] ? bpf_link_show_fdinfo+0x560/0x560 [ 763.919195][T19640] ? lock_chain_count+0x20/0x20 [ 763.924049][T19640] __x64_sys_bpf+0x7c/0x90 [ 763.928468][T19640] do_syscall_64+0x55/0xb0 [ 763.932882][T19640] ? clear_bhb_loop+0x40/0x90 [ 763.937558][T19640] ? clear_bhb_loop+0x40/0x90 [ 763.942235][T19640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 763.948122][T19640] RIP: 0033:0x7fae77d9e159 [ 763.952526][T19640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.972130][T19640] RSP: 002b:00007fae78c99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 763.980536][T19640] RAX: ffffffffffffffda RBX: 00007fae78025fa0 RCX: 00007fae77d9e159 [ 763.988497][T19640] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 763.996460][T19640] RBP: 00007fae77e3506b R08: 0000000000000000 R09: 0000000000000000 [ 764.004418][T19640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.012379][T19640] R13: 00007fae78026038 R14: 00007fae78025fa0 R15: 00007ffe35996a28 [ 764.020348][T19640] [ 764.023354][T19640] [ 764.025667][T19640] Allocated by task 19640: [ 764.030063][T19640] kasan_set_track+0x4e/0x70 [ 764.034644][T19640] __kasan_kmalloc+0x8f/0xa0 [ 764.039231][T19640] __kmalloc_node+0xb6/0x240 [ 764.043821][T19640] bpf_map_area_alloc+0x5e/0x110 [ 764.048753][T19640] prealloc_elems_and_freelist+0x86/0x1c0 [ 764.054466][T19640] stack_map_alloc+0x32b/0x4b0 [ 764.059222][T19640] map_create+0x877/0x12f0 [ 764.063631][T19640] __sys_bpf+0x651/0x890 [ 764.067863][T19640] __x64_sys_bpf+0x7c/0x90 [ 764.072272][T19640] do_syscall_64+0x55/0xb0 [ 764.076944][T19640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.082842][T19640] [ 764.085156][T19640] The buggy address belongs to the object at ffff88805ca90880 [ 764.085156][T19640] which belongs to the cache kmalloc-cg-64 of size 64 [ 764.099291][T19640] The buggy address is located 16 bytes inside of [ 764.099291][T19640] allocated 40-byte region [ffff88805ca90880, ffff88805ca908a8) [ 764.113250][T19640] [ 764.115564][T19640] The buggy address belongs to the physical page: [ 764.122044][T19640] page:ffffea000172a400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ca90 [ 764.132199][T19640] memcg:ffff888045976001 [ 764.136428][T19640] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 764.143964][T19640] page_type: 0xffffffff() [ 764.148285][T19640] raw: 00fff00000000800 ffff888017c4da00 dead000000000122 0000000000000000 [ 764.156860][T19640] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff888045976001 [ 764.165515][T19640] page dumped because: kasan: bad access detected [ 764.171923][T19640] page_owner tracks the page as allocated [ 764.177625][T19640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 17800, tgid 17800 (syz-executor), ts 762114943674, free_ts 762114279547 [ 764.196203][T19640] post_alloc_hook+0x1c1/0x200 [ 764.201109][T19640] get_page_from_freelist+0x2181/0x22a0 [ 764.206762][T19640] __alloc_pages+0x1f0/0x460 [ 764.211354][T19640] alloc_slab_page+0x5d/0x180 [ 764.216029][T19640] new_slab+0x87/0x2d0 [ 764.220090][T19640] ___slab_alloc+0xc5c/0x12f0 [ 764.224758][T19640] __kmem_cache_alloc_node+0x11f/0x250 [ 764.230228][T19640] kmalloc_trace+0x2a/0xe0 [ 764.234647][T19640] alloc_fdtable+0xca/0x2c0 [ 764.239147][T19640] dup_fd+0x747/0xa20 [ 764.243123][T19640] copy_files+0xaf/0x110 [ 764.247359][T19640] copy_process+0x157d/0x3da0 [ 764.252027][T19640] kernel_clone+0x24b/0x8a0 [ 764.256524][T19640] __x64_sys_clone+0x1b7/0x230 [ 764.261284][T19640] do_syscall_64+0x55/0xb0 [ 764.265734][T19640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.271626][T19640] page last free stack trace: [ 764.276285][T19640] free_unref_page_prepare+0x7d7/0x8f0 [ 764.281740][T19640] free_unref_page+0x32/0x2e0 [ 764.286419][T19640] vfree+0x1a7/0x340 [ 764.290315][T19640] __do_replace+0x878/0x9b0 [ 764.294963][T19640] do_ip6t_set_ctl+0xb41/0xe10 [ 764.299748][T19640] nf_setsockopt+0x263/0x280 [ 764.304387][T19640] do_sock_setsockopt+0x175/0x1a0 [ 764.309413][T19640] __x64_sys_setsockopt+0x182/0x200 [ 764.314607][T19640] do_syscall_64+0x55/0xb0 [ 764.319019][T19640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.324954][T19640] [ 764.327274][T19640] Memory state around the buggy address: [ 764.332920][T19640] ffff88805ca90780: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 764.340993][T19640] ffff88805ca90800: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 764.349052][T19640] >ffff88805ca90880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 764.357143][T19640] ^ [ 764.362508][T19640] ffff88805ca90900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 764.370561][T19640] ffff88805ca90980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 764.378611][T19640] ================================================================== [ 764.386681][T19640] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 764.393883][T19640] CPU: 1 PID: 19640 Comm: syz.0.3845 Not tainted syzkaller #0 [ 764.401356][T19640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 764.411414][T19640] Call Trace: [ 764.414698][T19640] [ 764.417622][T19640] dump_stack_lvl+0x18c/0x250 [ 764.422310][T19640] ? show_regs_print_info+0x20/0x20 [ 764.427546][T19640] ? load_image+0x420/0x420 [ 764.432051][T19640] panic+0x2ca/0x720 [ 764.435942][T19640] ? __lock_acquire+0x7d80/0x7d80 [ 764.440964][T19640] ? bpf_jit_dump+0xd0/0xd0 [ 764.445505][T19640] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 764.451397][T19640] ? _raw_spin_unlock+0x40/0x40 [ 764.456244][T19640] ? __bpf_get_stackid+0x6c7/0x900 [ 764.461363][T19640] check_panic_on_warn+0x84/0xa0 [ 764.466296][T19640] ? __bpf_get_stackid+0x6c7/0x900 [ 764.471404][T19640] end_report+0x6f/0x130 [ 764.475646][T19640] kasan_report+0x128/0x150 [ 764.480143][T19640] ? __bpf_get_stackid+0x6c7/0x900 [ 764.485257][T19640] kasan_check_range+0x241/0x290 [ 764.490194][T19640] ? __bpf_get_stackid+0x6c7/0x900 [ 764.495301][T19640] __asan_memcpy+0x40/0x70 [ 764.499757][T19640] __bpf_get_stackid+0x6c7/0x900 [ 764.504700][T19640] bpf_get_stackid_pe+0x343/0x410 [ 764.509734][T19640] bpf_prog_a448e89f4c9ad9d1+0x30/0x4a [ 764.515185][T19640] bpf_overflow_handler+0x1fc/0x510 [ 764.520381][T19640] ? perf_prepare_header+0x1e0/0x1e0 [ 764.525663][T19640] ? bpf_overflow_handler+0xde/0x510 [ 764.530947][T19640] ? tp_perf_event_destroy+0x20/0x20 [ 764.536230][T19640] ? perf_trace_preemptirq_template+0xac/0x330 [ 764.542386][T19640] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 764.549583][T19640] ? __perf_event_account_interrupt+0x187/0x280 [ 764.555820][T19640] __perf_event_overflow+0x461/0x660 [ 764.561108][T19640] perf_swevent_event+0x319/0x570 [ 764.566130][T19640] ? perf_tp_event+0x1550/0x1550 [ 764.571065][T19640] ___perf_sw_event+0x4ab/0x730 [ 764.575913][T19640] ? ___perf_sw_event+0x19e/0x730 [ 764.580934][T19640] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 764.587365][T19640] ? __lock_acquire+0x1336/0x7d80 [ 764.592390][T19640] ? rep_movs_alternative+0x4a/0x90 [ 764.597597][T19640] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 764.603570][T19640] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 764.610765][T19640] ? lock_chain_count+0x20/0x20 [ 764.615628][T19640] __perf_sw_event+0x139/0x270 [ 764.620391][T19640] do_user_addr_fault+0x1242/0x12d0 [ 764.625590][T19640] ? rcu_is_watching+0x15/0xb0 [ 764.630356][T19640] exc_page_fault+0x64/0x100 [ 764.634941][T19640] asm_exc_page_fault+0x26/0x30 [ 764.639799][T19640] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 764.645621][T19640] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 764.665221][T19640] RSP: 0018:ffffc90003867bd0 EFLAGS: 00050206 [ 764.671287][T19640] RAX: ffffffff84342b01 RBX: 000000000000056d RCX: 00000000000004ed [ 764.679255][T19640] RDX: 0000000000000001 RSI: 0000200000002000 RDI: ffff8880764b2080 [ 764.687225][T19640] RBP: ffffc90003867d20 R08: 0000000000000004 R09: 0000000000000005 [ 764.695192][T19640] R10: dffffc0000000000 R11: ffffed100ec964ad R12: 00002000000024ed [ 764.703158][T19640] R13: 1ffff9200070cfbd R14: ffff8880764b2000 R15: 0000200000001f80 [ 764.711132][T19640] ? rcuref_put_slowpath+0x101/0x150 [ 764.716432][T19640] _copy_from_user+0x8b/0xe0 [ 764.721022][T19640] generic_map_update_batch+0x58c/0x800 [ 764.726566][T19640] ? rcu_read_unlock+0xa0/0xa0 [ 764.731325][T19640] ? __fdget+0x180/0x210 [ 764.735568][T19640] ? rcu_read_unlock+0xa0/0xa0 [ 764.740331][T19640] bpf_map_do_batch+0x3f2/0x600 [ 764.745176][T19640] ? bpf_lsm_key_free+0x10/0x10 [ 764.750025][T19640] __sys_bpf+0x381/0x890 [ 764.754264][T19640] ? bpf_link_show_fdinfo+0x560/0x560 [ 764.759635][T19640] ? lock_chain_count+0x20/0x20 [ 764.764540][T19640] __x64_sys_bpf+0x7c/0x90 [ 764.768964][T19640] do_syscall_64+0x55/0xb0 [ 764.773406][T19640] ? clear_bhb_loop+0x40/0x90 [ 764.778110][T19640] ? clear_bhb_loop+0x40/0x90 [ 764.782800][T19640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 764.788700][T19640] RIP: 0033:0x7fae77d9e159 [ 764.793113][T19640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.812712][T19640] RSP: 002b:00007fae78c99028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 764.821121][T19640] RAX: ffffffffffffffda RBX: 00007fae78025fa0 RCX: 00007fae77d9e159 [ 764.829175][T19640] RDX: 0000000000000038 RSI: 00002000000006c0 RDI: 000000000000001a [ 764.837143][T19640] RBP: 00007fae77e3506b R08: 0000000000000000 R09: 0000000000000000 [ 764.845113][T19640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.853166][T19640] R13: 00007fae78026038 R14: 00007fae78025fa0 R15: 00007ffe35996a28 [ 764.861141][T19640] [ 764.864408][T19640] Kernel Offset: disabled [ 764.868745][T19640] Rebooting in 86400 seconds..