last executing test programs: 4.288011368s ago: executing program 3 (id=1980): socketpair(0x2, 0x6, 0x960, &(0x7f0000000240)) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001480)="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", 0x46a}, {&(0x7f0000000740)="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", 0x5da}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @local}}}], 0x20}, 0x0) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) (async, rerun: 32) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f", 0x51}, {&(0x7f00000003c0)="3574dc29abe806ecb544a70727e1a1affaec7276c18dd0a3c7eb5078ed14dc632fcc", 0x22}], 0x3, &(0x7f0000000700)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0x79}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}], 0xa8}, 0x800) (async, rerun: 32) r5 = socket$kcm(0x10, 0x3, 0x10) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000400000004ebdcd73b77f616f000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) close(0x3) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) (async, rerun: 64) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r7}, 0x20) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r10, 0x4) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) (rerun: 32) 3.124605716s ago: executing program 3 (id=1984): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, 0x0, &(0x7f0000000080)=r3}, 0x20) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10140) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8934, &(0x7f00000007c0)={'hsr0\x00', @local}) 3.092784976s ago: executing program 1 (id=1985): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r0], 0x48) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0x5, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000040)="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", 0x5f9}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000100000000700003f4b5a30c45756a30011000000000000000000000001000000fc000000000000001400000000000000"], 0x4c}, 0x24005850) 2.95435598s ago: executing program 3 (id=1986): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = gettid() r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, r2, 0x2, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRESOCT=r3, @ANYRES64=r2, @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100000000000000000000000000000000ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000400"/28], 0x50) r6 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYRES16=r7], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$sock_attach_bpf(r8, 0x88, 0x67, &(0x7f00000000c0)=r9, 0x4) (async) sendmsg$inet(r8, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80", 0x28}], 0x1, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4c}}], 0x38}, 0x4840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) syz_clone(0x80080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r10, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES8=r6, @ANYRES16=r5, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000400000000"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b7"], 0x0}, 0x94) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a0000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r11}, 0x38) (async) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r12, 0x29, 0x4b, 0x0, 0x0) 2.852533262s ago: executing program 1 (id=1987): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYRES32=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r5) write$cgroup_subtree(r5, &(0x7f00000009c0)=ANY=[], 0xfdef) r6 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000b00)=ANY=[@ANYRESDEC=r6, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000090000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000804000085000000a5000000bf91000000000000b702000001000000a000000085000000b7000000000000009500000040000000"], &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x17, r5, 0x8, &(0x7f0000000c40)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000c80)={0x2, 0xb, 0x8, 0xe46b}, 0x10, 0x63bd, r3, 0x3, &(0x7f0000000cc0)=[r8, r2], &(0x7f0000000d00)=[{0x5, 0x5, 0xc, 0x4}, {0x0, 0x4, 0x8, 0x6}, {0x4, 0x2, 0x0, 0x1}], 0x10, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1b, &(0x7f0000000fc0)=ANY=[@ANYBLOB="180000005872000000000000ff03000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000202073250000000ec110c7207b1af8ff00000000bfa10000000007010000f8ffffffb702000008002100b703000015ee00008500000006000000bf91000000000000b7020000020000008500000084000000b70000000000000790fb2ac12b9f4af50c9a33009500000000000000631319f4c392ec785cb4f6afacb688d8a9dfb019af91095114ba00a077"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r11, 0x1, 0x28, &(0x7f0000000040), 0x4) r12 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x618}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r12, 0x40042408, r10) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={&(0x7f0000000180)="c01d9d0a25a680589af2735404a172dedd85fb87a4d0daa0769cdb5f7ee58ba851983fa50b88bc17000b3f8001fca384cdb0d0527ec8972ec0c13a19f09af011ced890ee60b2d5eafbf07a69a8fe34fba529c3c9d778689e2dda907ea95a4dc7ed48c6", 0x0, &(0x7f00000004c0)="67d51fab4e79a1cf9539bc2a17fc4a7f8c9282871057b23c3384cc2ee015b39af90ec139270d1a4b4df55185621c99e2d3b8e6b32611944b4e256912a9ef51a61ebb1bf6a34660e764ea4775b41824c395a5fd5783cfefba09c4bd5cb131f549c5b3ba0dd8706dc2a11e44e566b1b1e0008ee5713af2fd40024d4c4a03f4959b5d084cfbfcb5020bfaf495", 0x0, 0x6}, 0x38) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 2.5164374s ago: executing program 3 (id=1990): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000b0000002f4900000500000041000000", @ANYRES32=0x1, @ANYBLOB="fcfff43999c4000000000000000000000000000058bf062629ea63d77826fabef80183acbcea61ee4b97bad4c3f2560c4f9ad09f744ab5bbf4e55db60edc0271100fac94ea9886cf7671ca63ba8ae859e329303921a40486119d0f40b11955fb26c816af72972017f706b36ca428c2e9469beabddfbd16e968e66121709164790c235fdd36e9fc23c9c8ad1c706079f7e78dc308c6a823ff5bf1e46f30503b55fa97a31d076f11534cab42cb7afaac9934809608a8240fd9379f2e19a38c6b9efa77c1b9a2aa4b3d5202b408728ee52c4a3d2957703933ece38a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140), 0xca, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000300)=""/16}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0x1ff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000300), 0x4}, 0x400, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r5, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/14, 0xe}, {&(0x7f0000002780)=""/128, 0x80}, {&(0x7f0000002800)=""/161, 0xa1}, {&(0x7f00000028c0)=""/148, 0x94}, {&(0x7f0000002980)=""/48, 0x30}, {&(0x7f00000029c0)=""/165, 0xa5}], 0x7, &(0x7f0000002b00)=""/121, 0x79}, 0x10100) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) 2.449070702s ago: executing program 0 (id=1991): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x19) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 2.403201833s ago: executing program 2 (id=1992): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10004000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.240675427s ago: executing program 2 (id=1993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000f"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66, 0x0, 0x0, 0x0, 0x80ffffff}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 2.240256657s ago: executing program 0 (id=1994): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r2, 0x12) r5 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) 2.148456969s ago: executing program 3 (id=1995): r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x67, 0xa9, 0xe7, 0x7, 0x0, 0x4, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x68f, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x8080, 0x7, 0x200, 0x1, 0x8, 0x4, 0x7, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x68) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x92b) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="2bb918945356d3abbdd8e2802d0c42a99fcf07875773daf92eb8ae27eeb9df198374d0dd7e1a6384ea2f691488821874274b557db8824b075700caf778675b66cd3062c419a43530a290aed95670b42aa48bfcde1f415e2402b5873217b4ff32ab1df11c643c008def0d71d07edf497304bb8a8c24491391a6afe8453edb5cdf8e63fc15f2057d3913d314aab67ec595caec729ab17233a37218014ef8fa0e489b6b3034a6b55eec9b38eba27d5246e2ed0b583bd432a2c7f38b5ad547eefe3373f26d4b2c4943d87adf6529e6aeab2d6b", 0xd1}], 0x1, &(0x7f00000002c0)=[{0x60, 0xff, 0x6, "93a1f1accddc8de95a13dad6439c7d8f2a966045a45f96eb2d53f8da15043ebe3608147f98dea286f786eba772770463e8fe4ca35a5b01f8585e3270fd9f27516168622e1457a479a6535419"}, {0x48, 0x103, 0xd, "285c0881476e27a9c0e153012e14e45e8b0fd6fb8555adee2f3bffacb5a1844a1cb72371ae0ad21c1c6b5932b19ff7338d08"}], 0xa8}, 0x20008000) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = openat$cgroup_ro(r2, &(0x7f0000000400)='memory.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000440)={r1}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000540)={r2, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x0, 0x1ff, 0x0, 0x60, 0x0, &(0x7f00000004c0)="e9e13ffae6def0e93987abe5d52a3f85fafafdc96e4ba8a4d31109989b4981139356ef7c1d6577b87f568e8209a97b210db48024847feb0b1585ab5add521a95a2af6dc0ec18595b9442359f096b0cfe14995fa20e67725634765645870e0a32", 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0], 0x0, 0xdc, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x5e, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x8, 0xc, 0x3, 0xd, 0x10, 0x1, 0x0, '\x00', r4, r3, 0x4, 0x1, 0x4}, 0x50) openat$cgroup_int(r2, &(0x7f0000000940)='memory.oom.group\x00', 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x8, &(0x7f0000000980)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @alu={0x7, 0x1, 0x7, 0x0, 0xc42868f06e5b5707, 0x80, 0x4}, @call={0x85, 0x0, 0x0, 0x72}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f00000009c0)='GPL\x00', 0xa0b, 0xa1, &(0x7f0000000a00)=""/161, 0x40f00, 0x0, '\x00', r4, 0x0, r3, 0x8, &(0x7f0000000ac0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x0, 0x10, 0x12000000, 0x100}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000b40)=[{0x0, 0x2, 0x10, 0xc}, {0x1, 0x4, 0x9}, {0x3, 0x3, 0xf, 0x4}, {0x1, 0x1, 0x7, 0x8}], 0x10, 0x4}, 0x94) close(r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r3, 0x0, 0xae, 0xa3, &(0x7f0000000c40)="cd3a12485f5cd93c7520e587794e7d51f9cbd7b164249ae1f7a019f7a6e1890bf9e0713b4b3a6dac27bf1c88c323fd25df5884bb901417ebdf2ac6835f547c5df4012a9bc15ff332b9b0db055574beb42c12e98953a3b913b86738dc5ef20f39bcfa47616864897dc716f39ae870d581ee2e2898c4f486709bb3c008ceef69618193a139b6d3c07fecf3e3e5389d16aae17ffea9f30293788904a02b930b9f4a76c0db80e0c749b1cec6e5ef45de", &(0x7f0000000d00)=""/163, 0x1, 0x0, 0x2c, 0x9, &(0x7f0000000dc0)="a75f60ea874531bf905c08a0e51c6c0ba1d1c388b77de1700e2137591747528bc5c395e7e6c8d8117ed258ba", &(0x7f0000000e00)="b4abe0185c216ff31a", 0x5, 0x0, 0x4}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x9, '\x00', 0x0, r3, 0x1, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000f40)) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x1) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000fc0)=@generic={&(0x7f0000000f80)='./file0\x00', 0x0, 0x28}, 0x18) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0x9, 0x9, 0x5, 0xa, 0x1000, r8, 0x2, '\x00', r4, r3, 0x0, 0x5, 0x2}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)={0x1b, 0x0, 0x0, 0x4, 0x0, r7, 0xfffffffd, '\x00', 0x0, r2, 0x2, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x9, &(0x7f0000001100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x0, 0x1, 0x0, r10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x3, 0x1, 0x0, 0xa, 0x2, 0x10, 0x10}], &(0x7f0000001180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r4, 0x0, r2, 0x8, &(0x7f00000011c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001200)={0x5, 0xb, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001240)=[r7, r3, r7, r9, r9], &(0x7f0000001280)=[{0x0, 0x5, 0xe, 0x6}, {0x1, 0x3, 0xd, 0xb}, {0x2, 0x2, 0xf, 0x8}, {0x4, 0x4, 0x5, 0x5}, {0x4, 0x4, 0x8, 0x2}, {0x5, 0x2, 0x5}, {0x3, 0x2, 0x0, 0xc}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={0xffffffffffffffff, 0x0, 0xb5, 0x5f, &(0x7f00000013c0)="8ca11a78c7d6790b0774c8f4708bee24d4a7ab72f43fc1cdb7eb2382941f1b7aaaf106eea9f438a829cc9f7d2c40971571b373668827ca339f7d99d4695e81ca2490448136e6f435f86ed8c6f11502df5f8007bdbf38643d6ca4e53c4e9048ffb39c5683f4a0b3a5db4dd3ed8845ef36467ec159d7b4799904948c2d248559d9e61d1d8c68eb3aa9762d759a23934699ce14c692968d5b554369c43cf42394c6de70b62d98427b4a485c38e34e74deb39fefa7ec36", &(0x7f0000001480)=""/95, 0x100, 0x0, 0xef, 0xfb, &(0x7f0000001500)="7f08c2f15402052d1323b45c541441accb24a331363186574cc61bd51a53e03ce123b3779055718e8c56a9c19e28c15ffd118ce16cbca98611e022c536b35ad9bb04f7f9a27294e61dd34818d44480bcdd8fafb30dfbfb0b15eb62ba2b2a54feefd82964d62317c577268937315898e13951669574c75bd2ce8eac38819e7b55a0c39ad85eeca767037446d0651786482ee8a8dd657bd459c73ebcf61e598406c0039e73d09ec124f8b7549e85a9fe8553fe3329853ba917c9eb3a00b104f1783b5bbe0935e4323f8ddd37ffe45e46e71e0df8f41bceec57742a2479cea27cc6cf0afa0151f769933573d5b8dd0c50", &(0x7f0000001600)="54afbfb79c52d67dc7a0322ee1fadd0a6662fd4b442c7fcd33d7cb1ac8709331ba3ef05fa953ec2bd458d5c07d499081c7d110d14307df3cf1391324649ddc86b8a11338bdc31557fa0b7332bc3c3276861e90b9065be4cdf9f36b64f1be40e7a76af662f9cdb997a2d91a766b7e0488e5547fe70c43eac557c64dbb815e025514e82ee806c49ba0afc883ede86253552d8feaaa3391b467978b449bc5190b9713c3ac0e72e1eb31667bd11ba32763a7b07f5671834822bcaf48e5422e2bb132f7de349d56ac477a4b74b90054ef8b42a828612e6475b646177b98c675a4eca1e3e5d46984b0d961469681af82d72c9f43dfe951c75a303b1c3a7c", 0x2, 0x0, 0x10000}, 0x50) r11 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f0000001dc0)={&(0x7f0000001780)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x54}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001800)="6e8f910f2217542d6614adcb1b3115cdd903d554091ffa1d5d811afbf9a56ee927d2abe31eac9597f0ea8cfd15304fe4b85370c602d9fc6cfb900df16ef4f6ed5b2336a2a8b91c85053f590a069b711a2df86382b6cda43ea076931b44614ef1454de674df36994c93304572d62ccd3f9f75811d0390b53541f48fb433493ac051d780b7125abd7a527d98348477da7239411d04da96ce024b62cdd3d1b2", 0x9e}, {&(0x7f00000018c0)="e18e41f2d81defbc003304627f9819141c1667877a41d27bd187242032acad08f8b0c0d47ca95abdab8f99ec323a9300b3c1006c0099d126b45cc4cd0f470fff6114ebb799752f0c7c5cd560c3b71181e1", 0x51}, {&(0x7f0000001940)="4017fe0ed5dcb6f0add617788c1ff38614b57565f14b01ed001d0a1b355e9c0924694c96f94920a0d30e221d07efd1a8b9dfb1b9b05797c399d79dca22b0b54a81a9e1db1c6a5930edfb69ad29e7a18141c95c164f7d38c5c6cab76aa4b3b76a79caedc80c1e96fb3fae957fcbd4ea3a58e0ddfb638cea1550d581", 0x7b}, {&(0x7f00000019c0)="5cfafec65352ef14136cca9831305db668c56d86182e0ead27570d64b02bcfdc089c66d9a58796675e8b4bc496f498437318c3c5b60910fe6d8299356ab6b434e36f82c2c7234eb59b9ceec334df2d27ad7b4a274f445cbcb88b9b03c7502f5b577053d31bde06cd4b4934177dc12c65f4f84b343727d3fcd61042c84764ef", 0x7f}, {&(0x7f0000001a40)="e0fba3948233a3eddb5b7e8726cd519d60148083beaf3efd872e85994fb8bf3765fd063dbf21861e277dca0b1802eb653d8af9afa471bbe206d4ebe20a8b5fc09c1d4445a4d61b9ed1293f122adee797645c4030b4d5184be91ea16a93b8063b27ba6332ed1804872d643946fcb3d6cfbfa7300275d83ac7110d8899551fde0934753e5e155f858f8439fd5358659e099096b63e", 0x94}, {&(0x7f0000001b00)="43bbaf5085a023b842c2d982a83cff1c1c4dfabfd3627284c2b9ecdee4e0a16df9fc66f28e581afa40bc", 0x2a}, {&(0x7f0000001b40)="9c2b42cfd18a7ab79c28141908ce56f768c18bc7692d62aa614a2a3e307f6843d411f002c55c549fd1e66db22e", 0x2d}, {&(0x7f0000001b80)="763a51c324a750bedf30408ac64d809af5a7cd898d0f1928f230e02fb1d0b7a4c887962285f5709a9e8e55cbdf3390510ae2cf70a934367d4a108d3ce1c0bab1cc580eb959bb7e7ecd186febfe0eb1ad0b693fcb2a16d44df6f642f836cc2ac0a17936df55e2aa21c2e45928af636b150d6ac6c52101962e89873f1af09d1f547def0505a537806ea498bdfa380b3d294c96790dd6332a90", 0x98}], 0x8, &(0x7f0000001cc0)=[{0x38, 0xc2f6b8e849272087, 0x64, "041f040eaf1fb37171d3a9381d173f255d7a6c42a4fa0b1ef0d12674c4e2e60565"}, {0x18, 0x10c, 0x3, "779cad"}, {0xb0, 0x116, 0x5, "fdc9b9874192a45237fc37f92212e05c21450c7b2d565f9b5ebf60ca1097c549ae76f1fc69fe667688247bda83d48bd355bc00d4c59d88ba9ce802524803507c579098622a66bef8c5cd5cd69f62f278f30659632384e6bad49dc14b099ff32e78ec0ec36d6b74718566d8a280e10ffc9ec07e18a142d0d77caae4c111ba1f363684a9e2798193717ac33a4d8a23f3d961adf44566123bd36ad0"}], 0x100}, 0x0) write$cgroup_int(r3, &(0x7f0000001e00)=0x7fffffffffffffff, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001ec0)={r5, 0x58, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f00)={0x1b, 0x0, 0x0, 0x3, 0x0, r7, 0x7, '\x00', r12, r2, 0x0, 0x3, 0x5}, 0x50) 2.08774299s ago: executing program 2 (id=1996): socket$kcm(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES16=r0], &(0x7f0000000c00)='GPL\x00'}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000480)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r5}, 0x94) socket$kcm(0x29, 0x5, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x7, [@enum={0x10, 0xa, 0x0, 0x6, 0x4, [{0x1}, {0x1}, {0x1, 0x7}, {0x6, 0x7}, {0xb, 0x4}, {0x4, 0x1}, {0xa}, {0xc, 0x10000}, {0xb, 0x9}, {0x8, 0x8000}]}, @restrict, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x5a, 0x0, 0x5, 0x2}, @struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x6d, [{0xe, 0x5, 0x100}, {0x4}]}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x61, 0x0, 0x5f, 0x0]}}, &(0x7f0000000a00)=""/152, 0xc7, 0x98, 0x0, 0xb}, 0x28) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)=r0}, 0x20) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100030000009500000000000000bf71000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xf7, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x42}, 0x21) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@o_path={&(0x7f0000000c80)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x22, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@map_fd={0x18, 0x9, 0x1, 0x0, r2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0xfffffff7, 0xa3, &(0x7f0000000840)=""/163, 0x41000, 0x1, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000b00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x2, 0x8, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000d00)=[r9, r10, r11], &(0x7f0000000d40)=[{0x1, 0x5, 0xd}], 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) syz_clone(0x801000, 0x0, 0xfffffffffffffdaa, 0x0, 0x0, 0x0) 1.844274826s ago: executing program 1 (id=1997): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000000dfff60118c00"/22], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0xffffff33}, 0x48) (async) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708500180040010200400", 0x33fe0}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0xfffffffd, 0xe}, {0x10000002, 0x0, 0x4, 0x2}]}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) (async) recvmsg$unix(r5, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) r8 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10400002}]}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) (async) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000040)='./file0\x00', r12}, 0x18) 1.838035216s ago: executing program 3 (id=1998): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x4, 0x310c, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x140) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000a40)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x1, 0x3, 0x0, {0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf0d}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)="11592ee8178781bfced535d086f817b115eb", 0x12}, {&(0x7f00000006c0)="743e90ccc956f26a5ebeca8883390c891e3353d60a43ed865a31d10b9d29f923cb7787847bb72193d9d4b2d2e4108a4642dc9bcb4b8ddeb612c765afeb5625bb90e433d6c6b333aa0b407b8f359cf96d20809bfc5c80e34849c0ac795df8088baa05403fa5e57fb14162a4b3f90c44930b1db413d1966c2740f1799c329c6253bc1a169a07de84ed2e555410e42258cf9c34d7b922e8cc7223b364b644ba164c10bd6f868bd33c1a8beb27cf3c8b5a9b9eaf97cbfa67835962243778e772d4d441816a9d67b82ca7cb76263992fe9fa27f028a0e8f84b842ffcd", 0xda}], 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="00010000000000001801000000ffffff37f95cac8502be40a17959b25f94901a6758aa49b0c7914ab8b5c28d3361b911fb3b56ce0bc90c17d53cb5fca870da9975a9ed7b9e99a804af2fbe80aec0753f4679bf13b6bb7cc90fbe7ce29d102e93b345bacf7215c00ff56945bb7e3b28848ea1f39394649730e8f987e5c2aede2b222fb5393b5415c6f5bd747745696bf5d1d7043e07e6c66ccf5059b58698414f3e0be3dd3a08a4b06f0615a995daaeb03ca7458288b70bc20181eb040cbc7a7beb98bca2a49496f027740fcbc29b56c4f4c1420f2533d7edf2925eb37f7f4826b0a7e5be392b34274405bba0982c13c04a85b3a1ca3ad9fc82587035e0d06c00000000e800000000000000080100000010000086f614197f13fe500d90ecea11d51847f37ed24c1b825d1c6694955e2496cb6276ee11cabc2b709fc5b98dbbed7a4e7666658fb43e1759b555056d0b0ae2d2fa97bd205db9bc063191a461b5e583a53705ba0175fbb2ca95d0418d55c5e7458afd57e57d53b42d41a50d74fed79776281490b40cae7ca552087fc2cd71a5278a54af19a0488ae0fa3dbd75609fe529114a818857f25002a80fdb30dfea3747d8dd313eb9d528f7bcb5c14a93ebf34ba1e0f522b965c2030cf46ededdc653e6b5c1cac0f025862c134bd8408e0310a70f0b27430000"], 0x1e8}, 0x20000015) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x74}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) 1.782884308s ago: executing program 0 (id=1999): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)="1f90fee967aa4d1e758083fde3f8fcd443c8df1dcd16efe07b", &(0x7f0000000500), 0x7, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.580443352s ago: executing program 2 (id=2000): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) (async) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x4, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000100), 0x12) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r11 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x890b, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x100, 0x81, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r12 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x890c, &(0x7f0000000000)) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) 1.241384351s ago: executing program 1 (id=2001): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0x3, 0x0, 0x904813a5, 0x4, 0x0, 0x2, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r1}, 0x20) sendmsg(r3, &(0x7f0000002180)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000a40)=""/240, 0xf0}], 0x1}, 0x2002) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1200000f0100810401a80016ea1f0008400304000803600cfab94dcf660461c1d67f6f94007134cf6ee0ff03000000000000075c0100000000000000cb0905000000000000005ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4008804) 1.240602901s ago: executing program 0 (id=2002): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="2bb32d", 0x3}, {0x0}], 0x2}, 0x4880) 1.239872701s ago: executing program 0 (id=2003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f0", 0x1}], 0x1}, 0x0) 1.226059941s ago: executing program 2 (id=2004): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000880)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x6, 0xff, 0x0, 0x3140c, r0, 0x7, '\x00', 0x0, r1, 0x4, 0x2, 0x5, 0x1, @void, @value, @value=r2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r4, &(0x7f0000000580), 0x0}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000700)={r4, &(0x7f0000000580), 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="2b678fcd8622384bd8735f8e5288", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="2b678fcd8622384bd8735f8e5288", 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu<00||!') 960.929637ms ago: executing program 0 (id=2005): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x5, 0x5, 0x8, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x8, 0x4, 0x0, 0x5, 0x7fff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000300143d10aab1000000f05c0000000000000000"], 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000780)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f00000007c0)=[0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1b, &(0x7f0000000840)=[{}], 0x8, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x17, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6fb, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x81, 0x1, 0x6, 0xffff, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x6, 0x51, &(0x7f0000000c00)=""/81, 0x41000, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c80)={0x2, 0x8, 0x5, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000cc0)=[r0], &(0x7f0000000d00)=[{0x4, 0x3, 0xe, 0xb}, {0x5, 0x5, 0x4, 0x2}], 0x10, 0xbd59}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0x14, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1af}, @map_val={0x18, 0x1, 0x2, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x23, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x3, 0xd, 0x1ff, 0xd0}, 0x10, 0x9073, r5, 0x3, 0x0, &(0x7f0000000e00)=[{0x1, 0x2, 0x5, 0x7}, {0x0, 0x5, 0xc, 0x1}, {0x0, 0x3, 0x0, 0x1}], 0x10, 0x5}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x4, 0x3, 0x8a, 0x7, 0x0, 0x6000000, 0x8001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x5}, 0x1000, 0x10000, 0x5, 0x1, 0x7, 0x7530, 0x2, 0x0, 0x9d2, 0x0, 0x7}, r6, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000070000000000000000000000850000004100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x68, 0x0, &(0x7f0000000540)="13a2b38a556ae0e1a43001d96fc922aa3446561d3505000000000000b954d7c627c9cc18889836837bb36f1d1d75ce9b9460cf74e330453ef1b80563defb0038a7af498fd66024f75980af4baeb4dc07a9ab7d5dea62f80869cd02d861d23bfe898cef596f8c4442", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x67, 0xc, 0xfe, 0x0, 0x0, 0x9, 0x644a9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000580), 0x1}, 0x8000, 0x3, 0x1000, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0x5}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x10009, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 184.341996ms ago: executing program 1 (id=2006): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r1, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r2, 0x24, 0x0, 0xd8, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x3, 0x10) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={0x0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x3, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x2, 0xa, 0x84b4, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffe}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) (async) recvmsg(0xffffffffffffffff, 0x0, 0x12100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0xfffe, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x702, 0x0, 0x0, &(0x7f0000000580), 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) (async) sendmsg$kcm(r5, 0x0, 0x0) (async) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6f0ad76c5cedfaac000000000000000000000036d1699700000000e643c27a59236b985adff535c24b8752b77c7479bfa5496f16f3a13117ce5ff26ba4d69042a106fa6b4a7b304fc7da6a731c28736aeec738977b0c74132fadb650016c758208552a64de1418c1"], 0x50) (async) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000003c0)=r8, 0x4) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r9}, 0x50) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e00280010000000028000001266", 0x2e}, {&(0x7f0000000040)="9e0242e4bf38808e9f35cd839ae726fe36e94989eb1881d05a12fb238635149f1e3b38e94619f9872dfb8d6150eb6a0458254bbc4b639a3fbc91bef51dc98a6816e9691ce11da400dd6efbb1e7cdd2de3c020000000000000048f8d10b9124f1d7e9e11d134988c8ebd4be7bf66c2c2644c798331c6811f98688394a9fc805ef0dc12675f320e55463f7eeaf9d5bb5fdf736d130807cbe99cdfb00000000000004ad3c51065898a9cb9a401db657e334be44cbbf3ef234641b4e820da9ebffbed78ee0083190c58073cd155115419ff0045edbdc0038a306a10680feb1800da519ad767e437e17e45e440d8b3356345583b070781fe4fe4182476d56a96125c100", 0x101}, {&(0x7f0000000240)="20cd22d1121999db0f456758b740f17d", 0x10}], 0x3}, 0x0) 181.221295ms ago: executing program 2 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 0s ago: executing program 1 (id=2008): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18ed49fe42237b0e8195f2e000000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = getpid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001cc0)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="4b7ecf3c143f25b4600fb01cc1c8baf16921d0e3bb52da481c7d90d38dd4950d1cecee15ddd08e9baf969a8373f3ed3ffa79fb33504702fc7b46cb8480a575628f4fa0b679d7c4c701ac32cbf4a7b22e1ee77968be121c399cdee08d79c508c5a43a8867413ac4a4d8e70b8d6e4a466b69565cfd366bdec243477c879209295a", 0x80}, {&(0x7f0000001980)="a29fb1e26f6c77fc2c302e33caa9f068ccc7497669519c0efad756270515b93d04ed6da29a9ac77e0357a1005e9443e7046b17268e062f90bac26121094fa8cf4d65982375d60bdb87540afb45516286c9b4a94d9032a463e8a89fdd79e30641351f6a984634c675742c1dc370c233e4d3bfbb402cb680633f7fad0d43f66c5a06f6a5781cca8dc7671fbcf8b31633cde10da91b9f7e25a3fb62bdf1c41bc8937c7ef457eb92909adb65e7057c4f67da06aa25c1e0fdda09", 0xb8}, {&(0x7f0000001a40)="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", 0xfc}, {&(0x7f0000001b40)="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", 0xff}], 0x5, &(0x7f0000001d00)=[@rights={{0x28, 0x1, 0x1, [r4, r1, r1, r3, r3, r2]}}, @rights={{0x28, 0x1, 0x1, [r2, r2, r1, r2, r2, r4]}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r2, r3]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r6, r3, r3, r2, r3, r3]}}], 0xd8, 0x4}, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0xa, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r11, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) r12 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r14) recvmsg$unix(r13, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r12, 0x107, 0x12, &(0x7f00000008c0)=r15, 0x4) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r16, 0x0, 0x7406, 0x0, &(0x7f00000003c0)="452846938cebbd031f4d", 0x0, 0x7406, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)={0x1, 0x9, [@local, @empty, @multicast, @broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @random="243ba183d528", @broadcast, @random="c0e1644359bc"]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) kernel console output (not intermixed with test programs): hen creating new route [ 220.733804][ T8030] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.566'. [ 220.778552][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.821888][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.840086][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.854903][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.907615][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.923750][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.963941][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.014056][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.048941][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.079439][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.108577][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.141489][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.178586][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.213587][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.271353][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 221.304978][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.918084][ T8042] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.942244][ T8059] netlink: 763 bytes leftover after parsing attributes in process `syz.2.573'. [ 223.967569][ T8066] netlink: 'syz.3.574': attribute type 4 has an invalid length. [ 224.010505][ T8069] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.575'. [ 224.030643][ T8068] netlink: 175304 bytes leftover after parsing attributes in process `syz.0.575'. [ 224.542951][ T8078] netlink: 132 bytes leftover after parsing attributes in process `syz.2.578'. [ 225.615305][ T8096] netlink: 'syz.1.583': attribute type 21 has an invalid length. [ 225.638279][ T8096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.583'. [ 225.684885][ T8096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.583'. [ 226.126097][ T8108] netlink: 'syz.1.586': attribute type 39 has an invalid length. [ 226.895691][ T8136] netlink: 'syz.0.594': attribute type 4 has an invalid length. [ 226.972013][ T8136] netlink: 184040 bytes leftover after parsing attributes in process `syz.0.594'. [ 227.017599][ T8139] netlink: 'syz.2.595': attribute type 21 has an invalid length. [ 227.035679][ T8139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.595'. [ 227.092664][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.2.595'. [ 227.172296][ T8144] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.603'. [ 227.411972][ T8144] netlink: 'syz.1.603': attribute type 4 has an invalid length. [ 227.640708][ T8156] netlink: 'syz.1.599': attribute type 10 has an invalid length. [ 227.689400][ T8156] bridge0: port 1(ipvlan1) entered blocking state [ 227.729063][ T8156] bridge0: port 1(ipvlan1) entered disabled state [ 227.833398][ T8156] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 229.045270][ T8203] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 229.064387][ T8203] __nla_validate_parse: 3 callbacks suppressed [ 229.064431][ T8203] netlink: 40 bytes leftover after parsing attributes in process `syz.0.614'. [ 229.097083][ T8203] veth0_vlan: entered allmulticast mode [ 229.154883][ T8203] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 231.994425][ T8279] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.630'. [ 232.108669][ T8283] netlink: 'syz.0.631': attribute type 10 has an invalid length. [ 232.695528][ T8303] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.639'. [ 232.790909][ T8304] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.639'. [ 233.156606][ T8322] netlink: 'syz.2.644': attribute type 29 has an invalid length. [ 233.187763][ T8322] netlink: 'syz.2.644': attribute type 29 has an invalid length. [ 234.147123][ T8348] netlink: 'syz.3.652': attribute type 21 has an invalid length. [ 234.176378][ T8348] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.652'. [ 234.414375][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 18 [ 235.280405][ T8368] netlink: 'syz.1.659': attribute type 2 has an invalid length. [ 235.309418][ T8368] netlink: 'syz.1.659': attribute type 9 has an invalid length. [ 235.317743][ T8368] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 235.329069][ T8368] netlink: 'syz.1.659': attribute type 11 has an invalid length. [ 235.347389][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.1.659'. [ 235.557709][ T8371] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.660'. [ 235.600849][ T8371] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 236.726030][ T8409] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 239.951242][ T8440] veth1_macvtap: left promiscuous mode [ 240.258356][ T8454] netlink: 539 bytes leftover after parsing attributes in process `syz.1.679'. [ 240.976173][ T8456] tun0: tun_chr_ioctl cmd 1074025677 [ 240.984252][ T8456] tun0: linktype set to 776 [ 241.165905][ T8457] netlink: 128 bytes leftover after parsing attributes in process `syz.2.680'. [ 241.222688][ T8457] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.413850][ T8476] netlink: 'syz.3.684': attribute type 6 has an invalid length. [ 241.562599][ T8476] netlink: 164 bytes leftover after parsing attributes in process `syz.3.684'. [ 241.601821][ T8480] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.685'. [ 242.075851][ T8488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.107405][ T8488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.163092][ T8488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.212511][ T8488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.239209][ T8488] batman_adv: batadv0: Interface deactivated: vlan1 [ 242.257014][ T8488] batman_adv: batadv0: Removing interface: vlan1 [ 242.640450][ T8490] netlink: 10 bytes leftover after parsing attributes in process `syz.3.688'. [ 243.056055][ T8511] batman_adv: batadv0: Interface deactivated: vlan1 [ 243.253095][ T8511] batman_adv: batadv0: Removing interface: vlan1 [ 243.378835][ T8513] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.694'. [ 243.607400][ T8521] netlink: 'syz.2.698': attribute type 33 has an invalid length. [ 243.621098][ T8521] netlink: 152 bytes leftover after parsing attributes in process `syz.2.698'. [ 243.631885][ T8521] `: renamed from 26 (while UP) [ 243.645170][ T8521] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 243.670422][ T8525] netlink: 'syz.2.698': attribute type 33 has an invalid length. [ 243.685248][ T8525] netlink: 152 bytes leftover after parsing attributes in process `syz.2.698'. [ 243.696721][ T8525] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 245.009059][ T8547] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.703'. [ 245.033539][ T8546] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.703'. [ 245.096983][ T8543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 245.150051][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.220553][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.265138][ T8557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.352521][ T8557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.403313][ T8557] batman_adv: batadv0: Removing interface: vlan1 [ 245.530427][ T8560] netlink: 'syz.1.706': attribute type 3 has an invalid length. [ 245.591460][ T8560] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.706'. [ 246.685844][ T8575] netlink: set zone limit has 8 unknown bytes [ 247.378467][ T8583] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.713'. [ 247.457581][ T8583] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.713'. [ 247.754656][ T8589] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.069770][ T8596] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.138949][ T8582] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.713'. [ 248.159714][ T8589] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.185557][ T8590] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.199714][ T8595] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 248.219211][ T8599] netlink: 148 bytes leftover after parsing attributes in process `syz.2.716'. [ 248.228799][ T8584] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.713'. [ 248.247642][ T8591] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.263450][ T8592] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.282472][ T8597] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.290556][ T8593] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.428656][ T8598] netlink: 'syz.0.715': attribute type 29 has an invalid length. [ 248.749122][ T8614] netlink: 'syz.1.719': attribute type 10 has an invalid length. [ 249.466794][ T8628] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.720'. [ 250.004853][ T8638] sctp: [Deprecated]: syz.0.723 (pid 8638) Use of int in max_burst socket option deprecated. [ 250.004853][ T8638] Use struct sctp_assoc_value instead [ 250.644687][ T8644] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.725'. [ 251.144891][ T8639] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 251.158196][ T8639] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 251.172201][ T8640] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'. [ 251.184720][ T8644] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.725'. [ 251.197839][ T8644] tipc: Started in network mode [ 251.203306][ T8644] tipc: Node identity b, cluster identity 57 [ 251.209516][ T8644] tipc: Node number set to 11 [ 251.219819][ T8647] netlink: 60 bytes leftover after parsing attributes in process `syz.0.723'. [ 251.795414][ T8664] bond0: entered promiscuous mode [ 251.800540][ T8664] bond_slave_0: entered promiscuous mode [ 251.832472][ T8664] bond_slave_1: entered promiscuous mode [ 251.838435][ T8664] bond0: entered allmulticast mode [ 251.843774][ T8664] bond_slave_0: entered allmulticast mode [ 251.849591][ T8664] bond_slave_1: entered allmulticast mode [ 252.147935][ T6399] wlan1: Trigger new scan to find an IBSS to join [ 252.575064][ T8677] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.733'. [ 253.242323][ T8677] ieee80211 phy23: Failed to add default virtual iface [ 253.358774][ T8687] validate_nla: 1 callbacks suppressed [ 253.358792][ T8687] netlink: 'syz.0.737': attribute type 21 has an invalid length. [ 253.636487][ T8695] netlink: 160 bytes leftover after parsing attributes in process `syz.2.738'. [ 254.796674][ T8705] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 254.807134][ T8705] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.741'. [ 254.842212][ T8705] netlink: 'syz.1.741': attribute type 1 has an invalid length. [ 254.887189][ T8705] netlink: 'syz.1.741': attribute type 8 has an invalid length. [ 254.906746][ T8705] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.741'. [ 255.186049][ T6401] wlan1: Trigger new scan to find an IBSS to join [ 256.008382][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.015217][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.464988][ T6401] wlan1: Creating new IBSS network, BSSID 42:7b:93:d2:05:41 [ 256.489615][ T8730] tun0: tun_chr_ioctl cmd 1074025677 [ 256.508445][ T8730] tun0: linktype set to 776 [ 256.693167][ T8734] netlink: 128 bytes leftover after parsing attributes in process `syz.0.750'. [ 256.730884][ T8734] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.840451][ T8741] netlink: 'syz.1.752': attribute type 10 has an invalid length. [ 257.347691][ T8750] netlink: 14 bytes leftover after parsing attributes in process `syz.0.755'. [ 257.358628][ T8750] hsr0: entered promiscuous mode [ 258.387675][ T8757] delete_channel: no stack [ 258.423260][ T8776] netlink: 'syz.0.763': attribute type 21 has an invalid length. [ 259.946589][ T8799] netlink: 'syz.2.768': attribute type 5 has an invalid length. [ 259.974590][ T8797] netlink: 128 bytes leftover after parsing attributes in process `syz.3.764'. [ 260.006100][ T8797] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.599790][ T8818] netlink: 164 bytes leftover after parsing attributes in process `syz.2.773'. [ 262.196811][ T8837] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.779'. [ 262.382418][ T8841] netlink: 'syz.2.781': attribute type 1 has an invalid length. [ 262.394359][ T8841] netlink: 5 bytes leftover after parsing attributes in process `syz.2.781'. [ 262.465101][ T8847] netlink: 153060 bytes leftover after parsing attributes in process `syz.2.781'. [ 262.521587][ T8847] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 262.555088][ T8847] CPU: 0 PID: 8847 Comm: syz.2.781 Not tainted syzkaller #0 [ 262.562469][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.572633][ T8847] Call Trace: [ 262.575964][ T8847] [ 262.578949][ T8847] dump_stack_lvl+0x18c/0x250 [ 262.583701][ T8847] ? show_regs_print_info+0x20/0x20 [ 262.588971][ T8847] ? load_image+0x420/0x420 [ 262.593552][ T8847] sysfs_warn_dup+0x8e/0xa0 [ 262.598149][ T8847] sysfs_do_create_link_sd+0xc0/0x110 [ 262.603589][ T8847] device_add_class_symlinks+0x1cf/0x240 [ 262.609288][ T8847] device_add+0x4f9/0xc40 [ 262.613687][ T8847] wiphy_register+0x1d99/0x2ac0 [ 262.618628][ T8847] ? cfg80211_event_work+0x40/0x40 [ 262.623825][ T8847] ? minstrel_ht_alloc+0x88a/0x990 [ 262.629006][ T8847] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 262.635157][ T8847] ieee80211_register_hw+0x2dd8/0x3b30 [ 262.640685][ T8847] ? ieee80211_register_hw+0xf11/0x3b30 [ 262.646284][ T8847] ? ieee80211_tasklet_handler+0x20/0x20 [ 262.651974][ T8847] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 262.657907][ T8847] ? __debug_object_init+0xec/0x450 [ 262.663144][ T8847] ? __asan_memset+0x22/0x40 [ 262.667772][ T8847] ? __hrtimer_init+0x189/0x270 [ 262.672660][ T8847] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 262.678544][ T8847] ? mac80211_hwsim_free+0x220/0x220 [ 262.683884][ T8847] ? rcu_is_watching+0x15/0xb0 [ 262.688702][ T8847] ? kstrndup+0xbd/0x140 [ 262.693007][ T8847] hwsim_new_radio_nl+0xdad/0x1a70 [ 262.698184][ T8847] ? __nla_validate+0x50/0x50 [ 262.702944][ T8847] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 262.709335][ T8847] ? __nla_parse+0x40/0x50 [ 262.713803][ T8847] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 262.720182][ T8847] genl_family_rcv_msg_doit+0x21a/0x310 [ 262.725772][ T8847] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 262.731710][ T8847] ? bpf_lsm_capable+0x9/0x10 [ 262.736432][ T8847] ? security_capable+0x89/0xb0 [ 262.741327][ T8847] genl_rcv_msg+0x611/0x7a0 [ 262.745876][ T8847] ? genl_bind+0x360/0x360 [ 262.750322][ T8847] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 262.756712][ T8847] netlink_rcv_skb+0x235/0x4c0 [ 262.761526][ T8847] ? genl_bind+0x360/0x360 [ 262.766064][ T8847] ? netlink_ack+0x1160/0x1160 [ 262.770872][ T8847] ? __lock_acquire+0x7d80/0x7d80 [ 262.775933][ T8847] ? down_read+0x1ac/0x2e0 [ 262.780387][ T8847] genl_rcv+0x28/0x40 [ 262.784403][ T8847] netlink_unicast+0x7b1/0x930 [ 262.789228][ T8847] netlink_sendmsg+0x8d0/0xbf0 [ 262.794037][ T8847] ? netlink_getsockopt+0x590/0x590 [ 262.799265][ T8847] ? apparmor_socket_sendmsg+0x8e/0x330 [ 262.804843][ T8847] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 262.810154][ T8847] ? security_socket_sendmsg+0x80/0xa0 [ 262.815654][ T8847] ? netlink_getsockopt+0x590/0x590 [ 262.820880][ T8847] ____sys_sendmsg+0x61b/0x980 [ 262.825700][ T8847] ? __asan_memset+0x22/0x40 [ 262.830351][ T8847] ? __sys_sendmsg_sock+0x30/0x30 [ 262.835431][ T8847] ? __import_iovec+0x5f2/0x850 [ 262.840347][ T8847] ? import_iovec+0x73/0xa0 [ 262.844910][ T8847] ___sys_sendmsg+0x2a6/0x360 [ 262.849631][ T8847] ? __sys_sendmsg+0x2b0/0x2b0 [ 262.854473][ T8847] __se_sys_sendmsg+0x1d0/0x2c0 [ 262.859367][ T8847] ? __x64_sys_sendmsg+0x80/0x80 [ 262.864354][ T8847] ? lockdep_hardirqs_on+0x98/0x150 [ 262.869598][ T8847] do_syscall_64+0x55/0xb0 [ 262.874043][ T8847] ? clear_bhb_loop+0x40/0x90 [ 262.878749][ T8847] ? clear_bhb_loop+0x40/0x90 [ 262.883474][ T8847] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.889414][ T8847] RIP: 0033:0x7f666d99e159 [ 262.893868][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.913537][ T8847] RSP: 002b:00007f666e937028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.921982][ T8847] RAX: ffffffffffffffda RBX: 00007f666dc26090 RCX: 00007f666d99e159 [ 262.929993][ T8847] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 262.937994][ T8847] RBP: 00007f666da35024 R08: 0000000000000000 R09: 0000000000000000 [ 262.945997][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.954002][ T8847] R13: 00007f666dc26128 R14: 00007f666dc26090 R15: 00007ffdfb2c5528 [ 262.962192][ T8847] [ 263.144470][ T8861] netlink: 'syz.3.785': attribute type 5 has an invalid length. [ 263.157799][ T8862] netlink: 'syz.3.785': attribute type 5 has an invalid length. [ 263.663897][ T8851] delete_channel: no stack [ 263.921197][ T8879] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 263.942303][ T8879] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.789'. [ 263.964658][ T8879] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 264.304373][ T8881] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.789'. [ 264.334561][ T8881] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 265.283288][ T8897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 265.335086][ T8897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 265.505535][ T8901] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 265.542479][ T8897] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'. [ 265.630916][ T8897] netlink: 128 bytes leftover after parsing attributes in process `syz.2.794'. [ 265.667737][ T8897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.576004][ T8911] pim6reg1: entered promiscuous mode [ 266.604966][ T8911] pim6reg1: entered allmulticast mode [ 266.960404][ T8918] netlink: 'syz.2.798': attribute type 21 has an invalid length. [ 268.963556][ T8963] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 269.147878][ T8963] team0: Device wg1 is of different type [ 269.657897][ T8981] __nla_validate_parse: 2 callbacks suppressed [ 269.657915][ T8981] netlink: 128 bytes leftover after parsing attributes in process `syz.3.812'. [ 269.706992][ T8981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.146944][ T8995] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 270.175810][ T8995] netlink: 'syz.3.818': attribute type 29 has an invalid length. [ 270.415166][ T8999] netlink: 'syz.2.820': attribute type 12 has an invalid length. [ 270.457525][ T8999] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.820'. [ 270.616927][ T9005] netlink: 'syz.3.818': attribute type 1 has an invalid length. [ 270.658044][ T9005] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.818'. [ 270.730906][ T8995] syzkaller0: entered promiscuous mode [ 270.752838][ T8995] syzkaller0: entered allmulticast mode [ 271.005152][ T9012] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.824'. [ 273.238409][ T9025] netlink: 132 bytes leftover after parsing attributes in process `syz.1.827'. [ 273.719949][ T9044] netlink: 'syz.1.834': attribute type 10 has an invalid length. [ 273.765415][ T9044] netlink: 55 bytes leftover after parsing attributes in process `syz.1.834'. [ 278.244979][ T9103] netlink: 'syz.3.848': attribute type 10 has an invalid length. [ 278.320425][ T9103] netlink: 2 bytes leftover after parsing attributes in process `syz.3.848'. [ 278.398599][ T9104] netlink: 'syz.3.848': attribute type 1 has an invalid length. [ 278.414546][ T9104] netlink: 'syz.3.848': attribute type 3 has an invalid length. [ 278.426426][ T9103] hsr0: entered promiscuous mode [ 278.459780][ T9104] netlink: 132 bytes leftover after parsing attributes in process `syz.3.848'. [ 279.654913][ T9156] netlink: 'syz.3.860': attribute type 5 has an invalid length. [ 279.685276][ T9157] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 279.736416][ T9157] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 279.784083][ T9162] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 279.806706][ T9162] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 279.822734][ T9158] netlink: 'syz.3.860': attribute type 5 has an invalid length. [ 279.848267][ T9153] netlink: 'syz.2.861': attribute type 29 has an invalid length. [ 280.172724][ T9170] netlink: 24643 bytes leftover after parsing attributes in process `syz.3.864'. [ 280.233365][ T9167] netlink: 128 bytes leftover after parsing attributes in process `syz.2.863'. [ 280.284938][ T9167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 280.428686][ T9184] netlink: set zone limit has 8 unknown bytes [ 282.109841][ T9210] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.868'. [ 282.403445][ T9223] netlink: 152 bytes leftover after parsing attributes in process `syz.0.872'. [ 283.022998][ T9230] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.874'. [ 283.335909][ T9235] validate_nla: 8 callbacks suppressed [ 283.335926][ T9235] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 283.375973][ T9235] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 283.403031][ T9239] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 283.434580][ T9235] netlink: 'syz.2.877': attribute type 29 has an invalid length. [ 283.610967][ T5786] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 284.807095][ T9268] netlink: 'syz.3.886': attribute type 2 has an invalid length. [ 284.839528][ T9268] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.886'. [ 286.642114][ T9299] : port 1(veth1_to_batadv) entered blocking state [ 286.655508][ T9299] : port 1(veth1_to_batadv) entered disabled state [ 286.665764][ T9299] veth1_to_batadv: entered allmulticast mode [ 286.676077][ T9299] veth1_to_batadv: entered promiscuous mode [ 287.338665][ T9310] netlink: 164 bytes leftover after parsing attributes in process `syz.2.898'. [ 287.977770][ T9321] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.901'. [ 288.107019][ T9321] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 289.665016][ T9345] syzkaller0: entered promiscuous mode [ 289.670621][ T9345] syzkaller0: entered allmulticast mode [ 292.294481][ T9368] netlink: 128 bytes leftover after parsing attributes in process `syz.0.912'. [ 292.338032][ T9368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 296.951530][ T9433] netlink: 'syz.3.922': attribute type 1 has an invalid length. [ 296.973445][ T9433] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.922'. [ 297.019466][ T9446] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.924'. [ 297.910385][ T9456] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 297.928681][ T9456] netlink: 40 bytes leftover after parsing attributes in process `syz.3.928'. [ 298.015153][ T9456] batman_adv: batadv0: Adding interface: virt_wifi0 [ 298.046357][ T9456] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.148147][ T9456] batman_adv: batadv0: Interface activated: virt_wifi0 [ 298.177072][ T9459] netlink: 'syz.0.929': attribute type 10 has an invalid length. [ 298.187770][ T9459] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.929'. [ 298.453503][ T9464] netlink: 76 bytes leftover after parsing attributes in process `syz.2.931'. [ 298.503700][ T9474] netlink: 'syz.3.932': attribute type 11 has an invalid length. [ 298.582554][ T9474] netlink: 168 bytes leftover after parsing attributes in process `syz.3.932'. [ 298.647100][ T9469] wg2: entered promiscuous mode [ 298.699654][ T9469] wg2: entered allmulticast mode [ 301.675384][ T9509] Q6`Ҙ: renamed from lo (while UP) [ 302.386711][ T9512] netlink: 'syz.0.941': attribute type 10 has an invalid length. [ 303.295863][ T9512] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 303.322280][ T9512] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 303.342528][ T9512] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 303.367442][ T9512] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 304.273956][ T9542] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.949'. [ 304.298783][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.949'. [ 304.456907][ T9545] netlink: 14 bytes leftover after parsing attributes in process `syz.0.950'. [ 304.712297][ T9545] hsr_slave_0: left promiscuous mode [ 305.024834][ T9545] hsr_slave_1: left promiscuous mode [ 306.148364][ T9572] netlink: 'syz.2.960': attribute type 10 has an invalid length. [ 306.242489][ T9572] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.283094][ T9572] team0: entered promiscuous mode [ 306.290646][ T9572] team_slave_1: entered promiscuous mode [ 306.312842][ T9572] geneve1: entered promiscuous mode [ 306.330076][ T9572] team0: entered allmulticast mode [ 306.339155][ T9572] team_slave_1: entered allmulticast mode [ 306.352290][ T9572] geneve1: entered allmulticast mode [ 306.364186][ T9572] bond0: (slave team0): Enslaving as an active interface with an up link [ 306.394224][ T9579] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 307.325517][ T9598] netlink: 'syz.3.968': attribute type 3 has an invalid length. [ 307.366773][ T9598] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.968'. [ 307.994512][ T9610] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.971'. [ 308.032543][ T9608] netlink: 184 bytes leftover after parsing attributes in process `syz.2.970'. [ 309.198717][ T6584] wlan1: Trigger new scan to find an IBSS to join [ 309.319298][ T9617] netlink: 'syz.0.972': attribute type 10 has an invalid length. [ 309.348641][ T9617] netlink: 40 bytes leftover after parsing attributes in process `syz.0.972'. [ 309.381105][ T9617] ipvlan1: entered promiscuous mode [ 309.392374][ T9617] ipvlan1: entered allmulticast mode [ 309.426432][ T9617] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 309.462720][ T9636] netlink: 'syz.3.976': attribute type 39 has an invalid length. [ 309.970099][ T9636] hsr_slave_1 (unregistering): left promiscuous mode [ 310.181836][ T9637] netlink: 'syz.3.976': attribute type 39 has an invalid length. [ 310.322688][ T9621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.568572][ T9651] netlink: 'syz.2.978': attribute type 10 has an invalid length. [ 310.669682][ T9648] vcan0: entered allmulticast mode [ 312.415888][ T9693] netlink: 6527 bytes leftover after parsing attributes in process `syz.3.991'. [ 312.732260][ T9136] syz.1.856 (9136) used greatest stack depth: 16264 bytes left [ 314.143057][ T42] wlan1: Trigger new scan to find an IBSS to join [ 314.183183][ T9187] syz.1.862 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 314.196916][ T9187] CPU: 1 PID: 9187 Comm: syz.1.862 Not tainted syzkaller #0 [ 314.204370][ T9187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 314.214699][ T9187] Call Trace: [ 314.218119][ T9187] [ 314.221100][ T9187] dump_stack_lvl+0x18c/0x250 [ 314.225870][ T9187] ? show_regs_print_info+0x20/0x20 [ 314.231130][ T9187] ? load_image+0x420/0x420 [ 314.235688][ T9187] ? ___ratelimit+0x478/0x610 [ 314.240437][ T9187] ? radix_tree_cpu_dead+0x160/0x160 [ 314.245795][ T9187] dump_header+0xd8/0x820 [ 314.250298][ T9187] oom_kill_process+0x390/0x580 [ 314.255318][ T9187] out_of_memory+0xe0e/0x1200 [ 314.260077][ T9187] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 314.265795][ T9187] ? trace_event_raw_event_lock+0x240/0x240 [ 314.271845][ T9187] ? mutex_lock_nested+0x20/0x20 [ 314.276861][ T9187] ? unregister_oom_notifier+0x20/0x20 [ 314.282921][ T9187] mem_cgroup_out_of_memory+0x2c2/0x390 [ 314.288989][ T9187] ? try_charge_memcg+0xc91/0x17c0 [ 314.294179][ T9187] ? drain_local_stock+0x630/0x630 [ 314.299392][ T9187] ? do_raw_spin_unlock+0x121/0x230 [ 314.304694][ T9187] try_charge_memcg+0xca1/0x17c0 [ 314.309720][ T9187] ? folio_flags+0x120/0x120 [ 314.314369][ T9187] ? shmem_alloc_folio+0x1f4/0x2a0 [ 314.319564][ T9187] ? percpu_ref_tryget+0x15/0x180 [ 314.324658][ T9187] ? get_mem_cgroup_from_mm+0x38/0x290 [ 314.330202][ T9187] charge_memcg+0x11b/0x3b0 [ 314.334784][ T9187] ? __mem_cgroup_charge+0x80/0x80 [ 314.339975][ T9187] ? get_mem_cgroup_from_mm+0x38/0x290 [ 314.345520][ T9187] ? get_mem_cgroup_from_mm+0x38/0x290 [ 314.351061][ T9187] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 314.356688][ T9187] __mem_cgroup_charge+0x25/0x80 [ 314.361716][ T9187] shmem_add_to_page_cache+0x8d3/0x1b80 [ 314.367411][ T9187] ? xas_load+0x12b/0x140 [ 314.371826][ T9187] ? shmem_alloc_folio+0x2a0/0x2a0 [ 314.377023][ T9187] shmem_get_folio_gfp+0x1037/0x2b40 [ 314.382447][ T9187] shmem_write_begin+0xf2/0x430 [ 314.387371][ T9187] generic_perform_write+0x2fe/0x5c0 [ 314.392745][ T9187] ? generic_file_direct_write+0x3e0/0x3e0 [ 314.398614][ T9187] ? down_write+0x16e/0x200 [ 314.403198][ T9187] ? file_update_time+0x98/0x1a0 [ 314.408199][ T9187] shmem_file_write_iter+0xfb/0x120 [ 314.413466][ T9187] __kernel_write_iter+0x29f/0x6d0 [ 314.418682][ T9187] ? vfs_read+0x990/0x990 [ 314.423103][ T9187] ? get_dump_page+0x156/0x200 [ 314.427976][ T9187] ? __asan_memset+0x22/0x40 [ 314.432670][ T9187] ? iov_iter_bvec+0xd4/0x1b0 [ 314.437420][ T9187] dump_user_range+0x418/0x840 [ 314.442288][ T9187] ? dump_skip+0x40/0x40 [ 314.446612][ T9187] ? dump_emit+0x78/0xe0 [ 314.450943][ T9187] ? dump_emit+0xa6/0xe0 [ 314.455239][ T9187] ? elf_core_dump+0x2dbb/0x37c0 [ 314.460241][ T9187] elf_core_dump+0x320e/0x37c0 [ 314.465091][ T9187] ? load_elf_binary+0x2850/0x2850 [ 314.470269][ T9187] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 314.476137][ T9187] ? verify_lock_unused+0x140/0x140 [ 314.481430][ T9187] ? perf_trace_lock_acquire+0x342/0x400 [ 314.487172][ T9187] ? rcu_read_lock_any_held+0xb4/0x140 [ 314.492698][ T9187] ? 0xffffffffff600000 [ 314.496906][ T9187] ? do_raw_spin_unlock+0x121/0x230 [ 314.502179][ T9187] do_coredump+0x1791/0x24a0 [ 314.506861][ T9187] ? nfs_stat_to_errno+0x170/0x170 [ 314.512055][ T9187] ? lock_chain_count+0x20/0x20 [ 314.516971][ T9187] ? _raw_spin_unlock_irq+0x23/0x50 [ 314.522228][ T9187] ? lockdep_hardirqs_on+0x98/0x150 [ 314.527498][ T9187] get_signal+0x10da/0x1390 [ 314.532089][ T9187] arch_do_signal_or_restart+0xc2/0x7b0 [ 314.537710][ T9187] ? get_sigframe_size+0x20/0x20 [ 314.542722][ T9187] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 314.548820][ T9187] ? exit_to_user_mode_loop+0x3b/0x110 [ 314.554356][ T9187] exit_to_user_mode_loop+0x70/0x110 [ 314.559724][ T9187] exit_to_user_mode_prepare+0xee/0x180 [ 314.565346][ T9187] irqentry_exit_to_user_mode+0x9/0x30 [ 314.570904][ T9187] exc_page_fault+0x8c/0x100 [ 314.575566][ T9187] asm_exc_page_fault+0x26/0x30 [ 314.580474][ T9187] RIP: 0033:0x7f338179e161 [ 314.584956][ T9187] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 314.604664][ T9187] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 314.610784][ T9187] RAX: 0000000000000000 RBX: 00007f3381a25fa0 RCX: 00007f338179e159 [ 314.618808][ T9187] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 314.626838][ T9187] RBP: 00007f3381835024 R08: 0000000000000000 R09: 0000000000000000 [ 314.634878][ T9187] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 314.642919][ T9187] R13: 00007f3381a26038 R14: 00007f3381a25fa0 R15: 00007ffe166c0868 [ 314.651147][ T9187] [ 314.669860][ T9187] memory: usage 307200kB, limit 307200kB, failcnt 16910 [ 314.676996][ T9187] memory+swap: usage 432196kB, limit 9007199254740988kB, failcnt 0 [ 314.688006][ T9187] kmem: usage 5060kB, limit 9007199254740988kB, failcnt 0 [ 314.695272][ T9187] Memory cgroup stats for /syz1: [ 314.695980][ T9187] cache 308584448 [ 314.712167][ T9187] rss 802816 [ 314.720212][ T9187] rss_huge 0 [ 314.726362][ T9187] shmem 308568064 [ 314.730295][ T9187] mapped_file 12288 [ 314.734667][ T9187] dirty 12288 [ 314.738013][ T9187] writeback 0 [ 314.741568][ T9187] workingset_refault_anon 0 [ 314.756482][ T9187] workingset_refault_file 38 [ 314.761148][ T9187] swap 127995904 [ 314.767925][ T9187] pgpgin 173684 [ 314.771441][ T9187] pgpgout 98149 [ 314.781124][ T9187] pgfault 43564 [ 314.787984][ T9187] pgmajfault 6 [ 314.791510][ T9187] inactive_anon 182378496 [ 314.796395][ T9187] active_anon 126992384 [ 314.800748][ T9187] inactive_file 16384 [ 314.805666][ T9187] active_file 0 [ 314.809182][ T9187] unevictable 0 [ 314.813257][ T9187] hierarchical_memory_limit 314572800 [ 314.818783][ T9187] hierarchical_memsw_limit 9223372036854771712 [ 314.828926][ T9187] total_cache 308584448 [ 314.833232][ T9187] total_rss 802816 [ 314.841323][ T9187] total_rss_huge 0 [ 314.845535][ T9187] total_shmem 308568064 [ 314.850018][ T9187] total_mapped_file 12288 [ 314.854974][ T9187] total_dirty 12288 [ 314.858839][ T9187] total_writeback 0 [ 314.866325][ T9187] total_workingset_refault_anon 0 [ 314.871430][ T9187] total_workingset_refault_file 38 [ 314.880527][ T9187] total_swap 127995904 [ 314.888150][ T9187] total_pgpgin 173684 [ 314.981590][ T9187] total_pgpgout 98149 [ 315.002200][ T9187] total_pgfault 43564 [ 315.006281][ T9187] total_pgmajfault 6 [ 315.010463][ T9187] total_inactive_anon 182378496 [ 315.022178][ T5832] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 315.048627][ T9187] total_active_anon 126992384 [ 315.065925][ T9187] total_inactive_file 16384 [ 315.070515][ T9187] total_active_file 0 [ 315.090139][ T9187] total_unevictable 0 [ 315.097778][ T9187] anon_cost 0 [ 315.101190][ T9187] file_cost 0 [ 315.104956][ T9187] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.862,pid=9168,uid=0 [ 315.122329][ T9187] Memory cgroup out of memory: Killed process 9168 (syz.1.862) total-vm:98536kB, anon-rss:1248kB, file-rss:56320kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 315.154084][ T9731] netlink: 'syz.3.1000': attribute type 10 has an invalid length. [ 315.701455][ T6584] wlan1: Creating new IBSS network, BSSID 3a:d3:c9:8f:88:15 [ 316.381352][ T9742] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1002'. [ 316.931406][ T9207] syz.1.862 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 317.288194][ T9207] CPU: 0 PID: 9207 Comm: syz.1.862 Not tainted syzkaller #0 [ 317.295629][ T9207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 317.305767][ T9207] Call Trace: [ 317.309130][ T9207] [ 317.312153][ T9207] dump_stack_lvl+0x18c/0x250 [ 317.316950][ T9207] ? show_regs_print_info+0x20/0x20 [ 317.322257][ T9207] ? load_image+0x420/0x420 [ 317.326851][ T9207] ? ___ratelimit+0x478/0x610 [ 317.331659][ T9207] ? radix_tree_cpu_dead+0x160/0x160 [ 317.337072][ T9207] dump_header+0xd8/0x820 [ 317.341535][ T9207] oom_kill_process+0x390/0x580 [ 317.346519][ T9207] out_of_memory+0xe0e/0x1200 [ 317.351332][ T9207] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 317.357046][ T9207] ? trace_event_raw_event_lock+0x240/0x240 [ 317.363014][ T9207] ? mutex_lock_nested+0x20/0x20 [ 317.368040][ T9207] ? unregister_oom_notifier+0x20/0x20 [ 317.373609][ T9207] mem_cgroup_out_of_memory+0x2c2/0x390 [ 317.379242][ T9207] ? drain_local_stock+0x630/0x630 [ 317.384447][ T9207] ? preempt_schedule_thunk+0x1a/0x30 [ 317.389923][ T9207] try_charge_memcg+0xca1/0x17c0 [ 317.394993][ T9207] ? folio_prep_large_rmappable+0x9e/0x1b0 [ 317.400896][ T9207] ? folio_flags+0x120/0x120 [ 317.405559][ T9207] ? shmem_alloc_folio+0x1f4/0x2a0 [ 317.410789][ T9207] ? percpu_ref_tryget+0x15/0x180 [ 317.415896][ T9207] ? get_mem_cgroup_from_mm+0x38/0x290 [ 317.421465][ T9207] charge_memcg+0x11b/0x3b0 [ 317.426068][ T9207] ? __mem_cgroup_charge+0x80/0x80 [ 317.431361][ T9207] ? get_mem_cgroup_from_mm+0x38/0x290 [ 317.436925][ T9207] ? get_mem_cgroup_from_mm+0x38/0x290 [ 317.442458][ T9207] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 317.448089][ T9207] __mem_cgroup_charge+0x25/0x80 [ 317.453104][ T9207] shmem_add_to_page_cache+0x8d3/0x1b80 [ 317.458721][ T9207] ? xas_load+0x12b/0x140 [ 317.463154][ T9207] ? shmem_alloc_folio+0x2a0/0x2a0 [ 317.468391][ T9207] shmem_get_folio_gfp+0x1037/0x2b40 [ 317.473865][ T9207] shmem_write_begin+0xf2/0x430 [ 317.478825][ T9207] generic_perform_write+0x2fe/0x5c0 [ 317.484251][ T9207] ? generic_file_direct_write+0x3e0/0x3e0 [ 317.490158][ T9207] ? down_write+0x16e/0x200 [ 317.494781][ T9207] ? file_update_time+0x98/0x1a0 [ 317.499812][ T9207] shmem_file_write_iter+0xfb/0x120 [ 317.505091][ T9207] __kernel_write_iter+0x29f/0x6d0 [ 317.510567][ T9207] ? vfs_read+0x990/0x990 [ 317.514964][ T9207] ? get_dump_page+0x156/0x200 [ 317.519819][ T9207] ? __asan_memset+0x22/0x40 [ 317.524477][ T9207] ? iov_iter_bvec+0xd4/0x1b0 [ 317.529231][ T9207] dump_user_range+0x418/0x840 [ 317.534110][ T9207] ? dump_skip+0x40/0x40 [ 317.538429][ T9207] ? dump_emit+0x78/0xe0 [ 317.542805][ T9207] ? dump_emit+0xa6/0xe0 [ 317.547119][ T9207] ? elf_core_dump+0x2dbb/0x37c0 [ 317.552155][ T9207] elf_core_dump+0x320e/0x37c0 [ 317.557074][ T9207] ? load_elf_binary+0x2850/0x2850 [ 317.562294][ T9207] ? verify_lock_unused+0x140/0x140 [ 317.567559][ T9207] ? __lock_acquire+0x7d80/0x7d80 [ 317.572654][ T9207] ? mas_next_slot+0x94c/0x980 [ 317.577616][ T9207] ? rcu_read_lock_any_held+0xb4/0x140 [ 317.583141][ T9207] ? 0xffffffffff600000 [ 317.587363][ T9207] ? do_raw_spin_unlock+0x121/0x230 [ 317.592662][ T9207] do_coredump+0x1791/0x24a0 [ 317.597387][ T9207] ? nfs_stat_to_errno+0x170/0x170 [ 317.602637][ T9207] ? lock_chain_count+0x20/0x20 [ 317.607573][ T9207] ? _raw_spin_unlock_irq+0x23/0x50 [ 317.612836][ T9207] ? lockdep_hardirqs_on+0x98/0x150 [ 317.618113][ T9207] get_signal+0x10da/0x1390 [ 317.622760][ T9207] arch_do_signal_or_restart+0xc2/0x7b0 [ 317.628394][ T9207] ? get_sigframe_size+0x20/0x20 [ 317.633434][ T9207] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 317.639522][ T9207] ? exit_to_user_mode_loop+0x3b/0x110 [ 317.645068][ T9207] exit_to_user_mode_loop+0x70/0x110 [ 317.650436][ T9207] exit_to_user_mode_prepare+0xee/0x180 [ 317.656061][ T9207] irqentry_exit_to_user_mode+0x9/0x30 [ 317.661619][ T9207] exc_page_fault+0x8c/0x100 [ 317.666301][ T9207] asm_exc_page_fault+0x26/0x30 [ 317.671222][ T9207] RIP: 0033:0x7f338179e161 [ 317.675733][ T9207] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 317.695405][ T9207] RSP: 002b:00000000fffffeb0 EFLAGS: 00010217 [ 317.701543][ T9207] RAX: 0000000000000000 RBX: 00007f3381a25fa0 RCX: 00007f338179e159 [ 317.709571][ T9207] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 317.717613][ T9207] RBP: 00007f3381835024 R08: 0000000000000000 R09: 0000000000000000 [ 317.725665][ T9207] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 317.733698][ T9207] R13: 00007f3381a26038 R14: 00007f3381a25fa0 R15: 00007ffe166c0868 [ 317.741787][ T9207] [ 317.824205][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.830655][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.922353][ T9207] memory: usage 307168kB, limit 307200kB, failcnt 17387 [ 317.929435][ T9207] memory+swap: usage 431444kB, limit 9007199254740988kB, failcnt 0 [ 317.964066][ T9207] kmem: usage 4776kB, limit 9007199254740988kB, failcnt 0 [ 317.971321][ T9207] Memory cgroup stats for /syz1: [ 317.971555][ T9207] cache 308359168 [ 318.212954][ T9207] rss 761856 [ 318.216322][ T9207] rss_huge 0 [ 318.219614][ T9207] shmem 308310016 [ 318.345364][ T9207] mapped_file 12288 [ 318.349306][ T9207] dirty 12288 [ 318.433658][ T9207] writeback 0 [ 318.472354][ T9207] workingset_refault_anon 0 [ 318.509260][ T9207] workingset_refault_file 96 [ 318.559848][ T9207] swap 127713280 [ 318.572205][ T9207] pgpgin 173856 [ 318.577438][ T9207] pgpgout 98384 [ 318.682375][ T9207] pgfault 43570 [ 318.706818][ T9207] pgmajfault 8 [ 318.710321][ T9207] inactive_anon 5550080 [ 318.868470][ T9207] active_anon 302669824 [ 318.972660][ T9207] inactive_file 32768 [ 318.976775][ T9207] active_file 16384 [ 318.980663][ T9207] unevictable 0 [ 319.152918][ T9207] hierarchical_memory_limit 314572800 [ 319.295829][ T9207] hierarchical_memsw_limit 9223372036854771712 [ 319.412260][ T9207] total_cache 308359168 [ 319.417031][ T9207] total_rss 761856 [ 319.420832][ T9207] total_rss_huge 0 [ 319.738497][ T9207] total_shmem 308310016 [ 319.766755][ T9207] total_mapped_file 12288 [ 319.771188][ T9207] total_dirty 12288 [ 319.904829][ T9207] total_writeback 0 [ 319.908730][ T9207] total_workingset_refault_anon 0 [ 320.124416][ T9207] total_workingset_refault_file 96 [ 320.129987][ T9207] total_swap 127713280 [ 320.272362][ T9207] total_pgpgin 173856 [ 320.276432][ T9207] total_pgpgout 98384 [ 320.280462][ T9207] total_pgfault 43570 [ 320.396967][ T9771] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 320.405607][ T9771] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 320.422202][ T9207] total_pgmajfault 8 [ 320.433706][ T9771] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 320.449167][ T9771] netlink: 'syz.3.1009': attribute type 29 has an invalid length. [ 320.457327][ T9207] total_inactive_anon 5550080 [ 320.490114][ T9207] total_active_anon 302669824 [ 320.521345][ T9774] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.1008'. [ 320.587257][ T9207] total_inactive_file 32768 [ 320.701734][ T9207] total_active_file 16384 [ 320.725537][ T9207] total_unevictable 0 [ 320.760263][ T9207] anon_cost 0 [ 320.812458][ T9781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1011'. [ 320.823720][ T9207] file_cost 0 [ 320.827099][ T9207] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.862,pid=9224,uid=0 [ 320.972228][ T9207] Memory cgroup out of memory: Killed process 9224 (syz.1.862) total-vm:98932kB, anon-rss:1388kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 320.994526][ T9780] syzkaller0: entered promiscuous mode [ 321.031006][ T9780] syzkaller0: entered allmulticast mode [ 321.059296][ T9781] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1011'. [ 321.117632][ T9782] netlink: 'syz.2.1011': attribute type 10 has an invalid length. [ 321.457959][ T9782] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.465832][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.519648][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.527980][ T9782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.536705][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.543993][ T9782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.595657][ T9782] bridge0: entered promiscuous mode [ 321.606864][ T9782] bridge0: entered allmulticast mode [ 321.629163][ T9782] team0: Port device bridge0 added [ 327.878877][ T9781] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1011'. [ 327.897069][ T9790] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 328.294784][ T9797] syzkaller0: entered promiscuous mode [ 328.312166][ T9797] syzkaller0: entered allmulticast mode [ 328.337817][ T9797] netlink: 'syz.0.1014': attribute type 6 has an invalid length. [ 328.362250][ T9797] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1014'. [ 332.086972][ T9813] netlink: 'syz.2.1019': attribute type 2 has an invalid length. [ 332.096543][ T9819] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1019'. [ 332.458593][ T9844] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 332.482160][ T9844] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1027'. [ 333.060869][ T9848] netlink: 'syz.2.1029': attribute type 9 has an invalid length. [ 333.069886][ T9848] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1029'. [ 333.751992][ T9858] netlink: 'syz.0.1032': attribute type 3 has an invalid length. [ 333.822908][ T9858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1032'. [ 334.788309][ T9890] netlink: 'syz.2.1039': attribute type 21 has an invalid length. [ 334.802971][ T9890] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1039'. [ 334.945089][ T9893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.019240][ T9893] netlink: 'syz.1.1042': attribute type 9 has an invalid length. [ 335.035840][ T9893] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1042'. [ 335.786586][ T9897] netlink: 'syz.1.1042': attribute type 9 has an invalid length. [ 335.805831][ T9897] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1042'. [ 335.914488][ T9903] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1043'. [ 336.016902][ T9903] netlink: 22808 bytes leftover after parsing attributes in process `syz.2.1043'. [ 336.482651][ T9920] netlink: 'syz.3.1048': attribute type 10 has an invalid length. [ 336.870503][ T9920] veth0_macvtap: left promiscuous mode [ 337.638361][ T5786] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 337.661568][ T9948] delete_channel: no stack [ 337.675552][ T9952] delete_channel: no stack [ 337.691102][ T9953] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1057'. [ 337.701279][ T9948] delete_channel: no stack [ 337.719583][ T9952] delete_channel: no stack [ 338.326253][ T9967] netlink: 'syz.3.1060': attribute type 10 has an invalid length. [ 338.746747][ T9980] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 338.787469][ T9980] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1064'. [ 339.241669][ T9996] netlink: 'syz.1.1068': attribute type 21 has an invalid length. [ 339.270198][ T9996] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1068'. [ 342.687029][T10018] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 342.775688][T10018] syzkaller0: entered promiscuous mode [ 342.781392][T10018] syzkaller0: entered allmulticast mode [ 343.194083][T10035] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.1077'. [ 344.988657][T10029] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 347.105308][ T6380] wlan1: Trigger new scan to find an IBSS to join [ 347.940887][T10073] can: request_module (can-proto-0) failed. [ 348.717187][T10086] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1088'. [ 348.812458][T10087] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1088'. [ 350.594239][T10097] netlink: 'syz.3.1091': attribute type 22 has an invalid length. [ 350.622131][T10097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1091'. [ 350.643820][T10099] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1092'. [ 351.102715][ T42] wlan1: Trigger new scan to find an IBSS to join [ 351.237694][T10117] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1099'. [ 351.255575][T10118] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1098'. [ 351.289568][T10117] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.1099'. [ 351.329341][T10118] netlink: 'syz.2.1098': attribute type 10 has an invalid length. [ 351.373402][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.380947][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.575128][T10121] netlink: 'syz.3.1100': attribute type 41 has an invalid length. [ 352.112833][ T42] wlan1: Creating new IBSS network, BSSID 56:1c:83:0c:88:b7 [ 352.236294][T10139] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1104'. [ 352.441970][T10145] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1107'. [ 352.922989][T10159] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.970878][T10159] netlink: 'syz.1.1110': attribute type 9 has an invalid length. [ 352.980382][T10159] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1110'. [ 353.028349][T10157] netlink: 'syz.3.1112': attribute type 21 has an invalid length. [ 353.229098][T10166] netlink: 'syz.1.1110': attribute type 9 has an invalid length. [ 354.024447][T10184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.113168][T10184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.195190][T10184] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 354.252630][T10184] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 354.279109][T10184] bond0 (unregistering): Released all slaves [ 355.361445][T10209] syzkaller0: entered promiscuous mode [ 355.382878][T10209] syzkaller0: entered allmulticast mode [ 356.752555][T10226] __nla_validate_parse: 3 callbacks suppressed [ 356.752579][T10226] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.1130'. [ 356.777836][T10226] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 360.172827][T10235] netlink: 'syz.0.1133': attribute type 10 has an invalid length. [ 360.180761][T10235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1133'. [ 360.223244][T10235] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 360.282388][T10242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1135'. [ 360.953016][T10247] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.1137'. [ 361.542911][T10270] netlink: 'syz.1.1142': attribute type 4 has an invalid length. [ 361.604159][T10275] netlink: 'syz.1.1142': attribute type 10 has an invalid length. [ 361.684151][T10270] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1142'. [ 362.330617][T10289] netlink: 'syz.3.1144': attribute type 21 has an invalid length. [ 363.787624][T10343] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 363.838526][T10343] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 365.419108][T10377] netlink: 'syz.0.1153': attribute type 2 has an invalid length. [ 365.784323][T10381] C: renamed from team_slave_0 [ 365.807316][T10381] netlink: 'syz.1.1154': attribute type 3 has an invalid length. [ 365.832118][T10381] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1154'. [ 365.853871][T10381] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 365.904525][T10383] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1154'. [ 366.765622][T10390] netlink: 'syz.3.1155': attribute type 10 has an invalid length. [ 366.791041][T10390] team0: left promiscuous mode [ 366.850268][T10390] team_slave_0: left promiscuous mode [ 366.856227][T10390] team_slave_1: left promiscuous mode [ 366.861958][T10390] geneve1: left promiscuous mode [ 366.867436][T10390] team0: left allmulticast mode [ 366.872598][T10390] team_slave_0: left allmulticast mode [ 366.878306][T10390] team_slave_1: left allmulticast mode [ 366.884078][T10390] geneve1: left allmulticast mode [ 367.203943][T10410] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1161'. [ 367.219378][T10406] netlink: 'syz.0.1160': attribute type 21 has an invalid length. [ 367.251491][T10410] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1161'. [ 367.283378][T10410] tipc: Started in network mode [ 367.296178][T10410] tipc: Node identity b, cluster identity 57 [ 367.313989][T10410] tipc: Node number set to 11 [ 368.818617][T10429] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1165'. [ 369.150146][T10440] netdevsim netdevsim2 : renamed from netdevsim0 [ 369.535177][ T5786] Bluetooth: hci1: ACL packet for unknown connection handle 3053 [ 370.071661][T10457] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 370.122677][T10457] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1172'. [ 370.157717][T10449] netlink: 'syz.1.1171': attribute type 10 has an invalid length. [ 370.978094][T10466] syzkaller0: entered promiscuous mode [ 370.983736][T10466] syzkaller0: entered allmulticast mode [ 373.991498][T10500] netlink: 'syz.0.1182': attribute type 29 has an invalid length. [ 374.018191][T10500] netlink: 'syz.0.1182': attribute type 3 has an invalid length. [ 374.040512][T10500] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1182'. [ 375.285663][T10539] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1190'. [ 375.395904][T10540] netlink: 'syz.2.1189': attribute type 17 has an invalid length. [ 375.432304][T10540] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1189'. [ 375.464086][T10540] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 376.619280][T10580] netlink: 'syz.0.1197': attribute type 10 has an invalid length. [ 376.636208][T10580] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1197'. [ 376.657928][T10580] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 378.381516][T10621] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1206'. [ 378.454939][T10625] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1207'. [ 378.609492][T10637] netlink: 'syz.3.1209': attribute type 1 has an invalid length. [ 378.617525][T10637] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1209'. [ 378.802524][T10643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1211'. [ 378.841209][T10643] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1211'. [ 378.865863][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.872342][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.925013][T10647] netlink: 'syz.3.1212': attribute type 10 has an invalid length. [ 379.364621][T10657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1217'. [ 379.967345][T10672] netdevsim netdevsim0 : renamed from netdevsim0 [ 379.975993][T10665] netlink: 'syz.2.1218': attribute type 3 has an invalid length. [ 380.006649][T10665] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1218'. [ 382.562814][T10691] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1224'. [ 382.915194][T10709] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 383.701704][T10734] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 383.716341][T10734] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 383.954902][T10742] netlink: 207716 bytes leftover after parsing attributes in process `syz.2.1239'. [ 383.971185][T10742] netlink: 'syz.2.1239': attribute type 1 has an invalid length. [ 383.985712][T10742] netlink: 'syz.2.1239': attribute type 2 has an invalid length. [ 384.182888][T10755] netlink: 'syz.2.1242': attribute type 12 has an invalid length. [ 384.190864][T10755] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.1242'. [ 384.622217][T10272] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 385.262465][T10799] netlink: 47147 bytes leftover after parsing attributes in process `syz.1.1254'. [ 385.398204][T10801] netlink: 'syz.1.1255': attribute type 11 has an invalid length. [ 385.408760][T10801] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1255'. [ 386.009986][T10813] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 386.054344][T10813] syzkaller1: linktype set to 769 [ 386.086804][T10814] netlink: 'syz.3.1260': attribute type 3 has an invalid length. [ 386.197516][T10814] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1260'. [ 388.784221][T10833] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.792066][T10833] IPv6: NLM_F_CREATE should be set when creating new route [ 388.800200][T10833] IPv6: NLM_F_CREATE should be set when creating new route [ 388.808125][T10833] IPv6: NLM_F_CREATE should be set when creating new route [ 390.963758][T10870] : port 2(hsr_slave_0) entered blocking state [ 390.971653][T10870] : port 2(hsr_slave_0) entered disabled state [ 390.979928][T10870] hsr_slave_0: entered allmulticast mode [ 391.019189][T10870] hsr_slave_0: left allmulticast mode [ 391.413910][T10876] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1277'. [ 391.894151][T10880] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.1279'. [ 392.299849][T10891] netlink: 'syz.0.1281': attribute type 1 has an invalid length. [ 392.350893][T10891] netlink: 'syz.0.1281': attribute type 2 has an invalid length. [ 392.431912][T10891] netlink: 'syz.0.1281': attribute type 2 has an invalid length. [ 392.462084][T10891] netlink: 'syz.0.1281': attribute type 3 has an invalid length. [ 392.469911][T10891] netlink: 'syz.0.1281': attribute type 4 has an invalid length. [ 392.528764][T10891] netlink: 'syz.0.1281': attribute type 5 has an invalid length. [ 392.564031][T10891] netlink: 'syz.0.1281': attribute type 6 has an invalid length. [ 392.611381][T10891] netlink: 'syz.0.1281': attribute type 7 has an invalid length. [ 392.647295][T10891] netlink: 'syz.0.1281': attribute type 9 has an invalid length. [ 392.687993][T10891] netlink: 'syz.0.1281': attribute type 10 has an invalid length. [ 392.693973][T10909] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1284'. [ 392.696616][T10891] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1281'. [ 392.743816][T10891] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1281'. [ 392.763001][T10891] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1281'. [ 392.780838][T10891] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1281'. [ 392.798339][T10891] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1281'. [ 392.824879][T10891] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1281'. [ 392.846574][T10891] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1281'. [ 393.035391][T10910] syzkaller0: entered promiscuous mode [ 393.048172][T10910] syzkaller0: entered allmulticast mode [ 396.701874][T10919] team0: Device wg1 is of different type [ 397.517363][T10974] __nla_validate_parse: 26 callbacks suppressed [ 397.517375][T10974] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1296'. [ 397.538523][T10974] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1296'. [ 397.617946][T10976] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1297'. [ 397.642086][T10976] tc_dump_action: action bad kind [ 397.665955][T10979] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1296'. [ 397.716392][T10981] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1296'. [ 397.762983][T10979] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1296'. [ 398.433849][T11020] tap0: tun_chr_ioctl cmd 1074025677 [ 398.439873][T11020] tap0: linktype set to 1 [ 398.449289][T11020] tap0: tun_chr_ioctl cmd 1074025681 [ 398.478206][T11019] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1308'. [ 398.512486][T11019] openvswitch: netlink: IP tunnel dst address not specified [ 399.256226][T11036] validate_nla: 389 callbacks suppressed [ 399.256295][T11036] netlink: 'syz.0.1312': attribute type 10 has an invalid length. [ 400.250119][T11079] netlink: 'syz.2.1318': attribute type 3 has an invalid length. [ 400.279755][T11079] netlink: 'syz.2.1318': attribute type 5 has an invalid length. [ 401.968399][T11091] netlink: 'syz.3.1323': attribute type 39 has an invalid length. [ 402.254820][T11107] netlink: 'syz.3.1327': attribute type 2 has an invalid length. [ 402.289974][T11107] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1327'. [ 402.351545][T11109] netlink: 'syz.3.1327': attribute type 2 has an invalid length. [ 402.402561][T11109] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1327'. [ 403.044516][T11120] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1331'. [ 403.109890][T11118] netlink: 'syz.1.1330': attribute type 5 has an invalid length. [ 403.130364][T11118] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 403.150366][T11118] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1330'. [ 403.352218][T11127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1334'. [ 403.618253][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1337'. [ 403.639594][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1337'. [ 403.673865][T11137] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1337'. [ 404.156981][T11153] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1343'. [ 404.220729][T11153] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 407.767291][T11202] netlink: 539 bytes leftover after parsing attributes in process `syz.1.1355'. [ 407.804127][T11203] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1353'. [ 407.883135][T11198] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1353'. [ 408.969811][T11225] netlink: 'syz.3.1361': attribute type 39 has an invalid length. [ 409.109381][T11231] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1362'. [ 409.121735][T11231] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 409.233961][T11235] netlink: 'syz.2.1363': attribute type 14 has an invalid length. [ 409.252201][T11235] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1363'. [ 409.268927][T11235] netlink: 'syz.2.1363': attribute type 2 has an invalid length. [ 409.283248][T11235] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1363'. [ 410.015481][T11249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1366'. [ 410.292619][T11254] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1367'. [ 410.303452][T11254] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 413.475809][T11267] delete_channel: no stack [ 413.567564][T11273] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1372'. [ 413.645378][T11279] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1375'. [ 413.675970][T11279] netlink: 'syz.1.1375': attribute type 3 has an invalid length. [ 413.717944][T11279] netlink: 'syz.1.1375': attribute type 1 has an invalid length. [ 413.762214][T11279] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1375'. [ 414.508208][T11315] syz.1.1383[11315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.508405][T11315] syz.1.1383[11315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.528779][T11317] syz.1.1383[11317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.572965][T11317] syz.1.1383[11317] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.666758][T11320] sctp: [Deprecated]: syz.2.1385 (pid 11320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.666758][T11320] Use struct sctp_sack_info instead [ 415.411733][T11350] netlink: 'syz.2.1394': attribute type 29 has an invalid length. [ 415.420689][T11350] netlink: 'syz.2.1394': attribute type 29 has an invalid length. [ 415.429378][T11352] netlink: 'syz.2.1394': attribute type 29 has an invalid length. [ 415.439684][T11350] netlink: 'syz.2.1394': attribute type 29 has an invalid length. [ 415.638815][T11356] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1396'. [ 415.841746][T11358] syz.2.1397[11358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.854419][T11360] netlink: 'syz.1.1398': attribute type 27 has an invalid length. [ 415.865635][T11358] syz.2.1397[11358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 415.877567][T11360] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1398'. [ 416.137277][T11358] syzkaller0: entered promiscuous mode [ 416.143960][T11358] syzkaller0: entered allmulticast mode [ 416.645551][T10262] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 417.340740][T11384] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1404'. [ 417.398144][T11387] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1406'. [ 417.430091][T11387] netlink: 'syz.3.1406': attribute type 2 has an invalid length. [ 418.628639][T11416] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1413'. [ 418.738717][T11411] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1412'. [ 423.537423][T11433] netlink: 'syz.2.1418': attribute type 2 has an invalid length. [ 423.545474][T11433] netlink: 'syz.2.1418': attribute type 11 has an invalid length. [ 423.553591][T11433] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1418'. [ 423.583584][T11436] netlink: 'syz.3.1419': attribute type 10 has an invalid length. [ 423.613557][T11436] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1419'. [ 423.655007][T11436] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 423.692499][T11436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.118766][T11455] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.1420'. [ 424.128966][T11454] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.1420'. [ 424.151816][T11440] sit0: entered allmulticast mode [ 424.437562][T11460] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1424'. [ 424.460303][T11459] -: renamed from syzkaller0 [ 424.693202][ T5786] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 424.868368][T11472] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1430'. [ 425.741140][T11500] -: renamed from syzkaller0 [ 426.008183][T11502] netlink: 'syz.3.1436': attribute type 2 has an invalid length. [ 426.018763][T11502] netlink: 'syz.3.1436': attribute type 8 has an invalid length. [ 426.026794][T11502] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1436'. [ 426.419785][T11517] tap0: tun_chr_ioctl cmd 1074025692 [ 426.515039][T11519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 426.522417][T11519] IPv6: NLM_F_CREATE should be set when creating new route [ 426.529813][T11519] IPv6: NLM_F_CREATE should be set when creating new route [ 426.537284][T11519] IPv6: NLM_F_CREATE should be set when creating new route [ 426.580332][T11519] netlink: 'syz.2.1441': attribute type 9 has an invalid length. [ 426.607770][T11519] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1441'. [ 426.762632][T11531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1443'. [ 426.787307][T11529] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1444'. [ 426.962740][T11536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.003859][T11537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.445231][T11555] -: renamed from syzkaller0 [ 430.832814][T11564] sit0: entered allmulticast mode [ 431.245674][T11575] netlink: 'syz.3.1457': attribute type 2 has an invalid length. [ 431.263225][T11576] netlink: 'syz.3.1457': attribute type 2 has an invalid length. [ 431.322434][T11577] __nla_validate_parse: 4 callbacks suppressed [ 431.322455][T11577] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1457'. [ 431.367959][T11581] netlink: 'syz.1.1459': attribute type 21 has an invalid length. [ 431.387981][T11581] netlink: 'syz.1.1459': attribute type 12 has an invalid length. [ 431.396774][T11581] netlink: 'syz.1.1459': attribute type 13 has an invalid length. [ 431.406493][T11581] netlink: 'syz.1.1459': attribute type 14 has an invalid length. [ 431.457385][T11581] netlink: 'syz.1.1459': attribute type 15 has an invalid length. [ 431.492621][T11581] netlink: 'syz.1.1459': attribute type 16 has an invalid length. [ 431.500542][T11581] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.1459'. [ 431.554047][T11587] netlink: 'syz.1.1459': attribute type 21 has an invalid length. [ 431.587666][T11589] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1461'. [ 431.597488][T11587] netlink: 'syz.1.1459': attribute type 6 has an invalid length. [ 431.606242][T11587] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.1459'. [ 431.616066][T11589] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1461'. [ 432.289107][T11604] netlink: 209832 bytes leftover after parsing attributes in process `syz.2.1464'. [ 432.346497][T11601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1464'. [ 432.372653][T11603] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1465'. [ 432.403374][T11603] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 437.220504][T11655] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1479'. [ 437.385988][T11655] openvswitch: netlink: Duplicate key (type 0). [ 438.175467][T11666] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1481'. [ 440.317464][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.323966][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.513209][T11680] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1485'. [ 440.978140][T11685] validate_nla: 1 callbacks suppressed [ 440.978161][T11685] netlink: 'syz.0.1487': attribute type 21 has an invalid length. [ 441.029738][T11685] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.055773][T11685] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 441.063287][T11685] IPv6: NLM_F_CREATE should be set when creating new route [ 441.070679][T11685] IPv6: NLM_F_CREATE should be set when creating new route [ 441.078157][T11685] IPv6: NLM_F_CREATE should be set when creating new route [ 441.736639][T11696] netlink: 'syz.3.1489': attribute type 1 has an invalid length. [ 441.746402][T11696] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1489'. [ 441.773288][T11704] netlink: 'syz.0.1491': attribute type 63 has an invalid length. [ 441.781602][T11704] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1491'. [ 442.090841][T11708] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.1492'. [ 442.139936][T11709] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.1492'. [ 442.170487][T11712] syzkaller0: tun_chr_ioctl cmd 21731 [ 442.931451][T11720] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 442.956690][T11720] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 442.998247][T11720] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 443.041975][T11720] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 443.138625][T11727] netlink: 'syz.3.1495': attribute type 39 has an invalid length. [ 443.170202][T11729] netlink: 'syz.1.1494': attribute type 29 has an invalid length. [ 443.253059][T11727] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 443.280952][T11721] delete_channel: no stack [ 443.581901][T11746] netlink: 154936 bytes leftover after parsing attributes in process `syz.0.1500'. [ 443.605980][T11746] netlink: 'syz.0.1500': attribute type 6 has an invalid length. [ 443.875824][T11749] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 444.174387][T11764] tap0: tun_chr_ioctl cmd 1074025677 [ 444.180114][T11764] tap0: linktype set to 270 [ 444.187339][T11764] tap0: tun_chr_ioctl cmd 2148553947 [ 444.736489][T11775] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1510'. [ 445.248632][T11785] netlink: set zone limit has 8 unknown bytes [ 445.449981][T11790] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1515'. [ 445.472315][T11790] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 447.183786][T11823] netlink: 195628 bytes leftover after parsing attributes in process `syz.0.1523'. [ 447.194580][T11823] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 447.291383][T11828] sit0: entered promiscuous mode [ 447.576819][T11833] netlink: 208128 bytes leftover after parsing attributes in process `syz.1.1525'. [ 448.132277][T11842] validate_nla: 1 callbacks suppressed [ 448.132296][T11842] netlink: 'syz.2.1526': attribute type 21 has an invalid length. [ 448.803498][T11855] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.810812][T11855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.818504][T11855] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.825789][T11855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.074871][T11862] syzkaller0: entered promiscuous mode [ 449.080455][T11862] syzkaller0: entered allmulticast mode [ 450.131578][T11890] tun0: tun_chr_ioctl cmd 1074025677 [ 450.138190][T11890] tun0: linktype set to 776 [ 450.851959][T11893] syzkaller0: entered promiscuous mode [ 450.902195][T11893] syzkaller0: entered allmulticast mode [ 452.971965][T11905] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1541'. [ 453.098592][T11922] netlink: 'syz.2.1547': attribute type 10 has an invalid length. [ 453.356886][T11922] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 453.388000][T11922] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 453.436499][T11922] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 454.092609][T11941] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 454.653940][T11939] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1552'. [ 454.739885][T11939] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 454.761022][T11939] CPU: 0 PID: 11939 Comm: syz.2.1552 Not tainted syzkaller #0 [ 454.768584][T11939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 454.778702][T11939] Call Trace: [ 454.782152][T11939] [ 454.785232][T11939] dump_stack_lvl+0x18c/0x250 [ 454.790035][T11939] ? show_regs_print_info+0x20/0x20 [ 454.795306][T11939] ? load_image+0x420/0x420 [ 454.799893][T11939] sysfs_warn_dup+0x8e/0xa0 [ 454.804470][T11939] sysfs_do_create_link_sd+0xc0/0x110 [ 454.809931][T11939] device_add_class_symlinks+0x1cf/0x240 [ 454.815643][T11939] device_add+0x4f9/0xc40 [ 454.820054][T11939] wiphy_register+0x1d99/0x2ac0 [ 454.824984][T11939] ? cfg80211_event_work+0x40/0x40 [ 454.830145][T11939] ? minstrel_ht_alloc+0x88a/0x990 [ 454.835338][T11939] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 454.841491][T11939] ieee80211_register_hw+0x2dd8/0x3b30 [ 454.847073][T11939] ? ieee80211_register_hw+0xf11/0x3b30 [ 454.852709][T11939] ? ieee80211_tasklet_handler+0x20/0x20 [ 454.858408][T11939] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 454.864369][T11939] ? __debug_object_init+0xec/0x450 [ 454.869747][T11939] ? __asan_memset+0x22/0x40 [ 454.874412][T11939] ? __hrtimer_init+0x189/0x270 [ 454.879340][T11939] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 454.885164][T11939] ? mac80211_hwsim_free+0x220/0x220 [ 454.890504][T11939] ? rcu_is_watching+0x15/0xb0 [ 454.895343][T11939] ? kstrndup+0xbd/0x140 [ 454.899667][T11939] hwsim_new_radio_nl+0xdad/0x1a70 [ 454.904852][T11939] ? __nla_validate+0x50/0x50 [ 454.909623][T11939] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 454.916034][T11939] ? __nla_parse+0x40/0x50 [ 454.920525][T11939] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 454.926926][T11939] genl_family_rcv_msg_doit+0x21a/0x310 [ 454.932555][T11939] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 454.938557][T11939] ? bpf_lsm_capable+0x9/0x10 [ 454.943311][T11939] ? security_capable+0x89/0xb0 [ 454.948251][T11939] genl_rcv_msg+0x611/0x7a0 [ 454.952839][T11939] ? genl_bind+0x360/0x360 [ 454.957310][T11939] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 454.963776][T11939] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 454.970441][T11939] ? ref_tracker_free+0x686/0x830 [ 454.975525][T11939] netlink_rcv_skb+0x235/0x4c0 [ 454.980357][T11939] ? genl_bind+0x360/0x360 [ 454.985285][T11939] ? netlink_ack+0x1160/0x1160 [ 454.990126][T11939] ? __lock_acquire+0x7d80/0x7d80 [ 454.995309][T11939] ? down_read+0x1ac/0x2e0 [ 454.999796][T11939] genl_rcv+0x28/0x40 [ 455.003844][T11939] netlink_unicast+0x7b1/0x930 [ 455.008690][T11939] netlink_sendmsg+0x8d0/0xbf0 [ 455.013536][T11939] ? netlink_getsockopt+0x590/0x590 [ 455.018800][T11939] ? apparmor_socket_sendmsg+0x8e/0x330 [ 455.024407][T11939] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 455.029762][T11939] ? security_socket_sendmsg+0x80/0xa0 [ 455.035283][T11939] ? netlink_getsockopt+0x590/0x590 [ 455.040637][T11939] ____sys_sendmsg+0x61b/0x980 [ 455.045477][T11939] ? __asan_memset+0x22/0x40 [ 455.050145][T11939] ? __sys_sendmsg_sock+0x30/0x30 [ 455.055237][T11939] ? __import_iovec+0x5f2/0x850 [ 455.060173][T11939] ? import_iovec+0x73/0xa0 [ 455.064779][T11939] ___sys_sendmsg+0x2a6/0x360 [ 455.069527][T11939] ? __sys_sendmsg+0x2b0/0x2b0 [ 455.074375][T11939] __se_sys_sendmsg+0x1d0/0x2c0 [ 455.079269][T11939] ? __x64_sys_sendmsg+0x80/0x80 [ 455.084287][T11939] ? lockdep_hardirqs_on+0x98/0x150 [ 455.089580][T11939] do_syscall_64+0x55/0xb0 [ 455.094089][T11939] ? clear_bhb_loop+0x40/0x90 [ 455.098872][T11939] ? clear_bhb_loop+0x40/0x90 [ 455.103640][T11939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.109624][T11939] RIP: 0033:0x7f666d99e159 [ 455.114116][T11939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.133861][T11939] RSP: 002b:00007f666e937028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.142373][T11939] RAX: ffffffffffffffda RBX: 00007f666dc26090 RCX: 00007f666d99e159 [ 455.150509][T11939] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 455.158556][T11939] RBP: 00007f666da35024 R08: 0000000000000000 R09: 0000000000000000 [ 455.166601][T11939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.174669][T11939] R13: 00007f666dc26128 R14: 00007f666dc26090 R15: 00007ffdfb2c5528 [ 455.182749][T11939] [ 455.257257][T11969] netlink: 'syz.1.1560': attribute type 21 has an invalid length. [ 455.435105][T11978] netlink: 'syz.3.1562': attribute type 11 has an invalid length. [ 455.452153][T11978] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1562'. [ 455.496414][T11978] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 455.799598][T11983] sit0: left promiscuous mode [ 455.989507][T11991] sit0: entered promiscuous mode [ 456.830846][T12009] netlink: 'syz.0.1572': attribute type 21 has an invalid length. [ 456.852268][T12009] netlink: 'syz.0.1572': attribute type 1 has an invalid length. [ 456.861353][T12009] netlink: 'syz.0.1572': attribute type 2 has an invalid length. [ 456.881273][T12009] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.1572'. [ 458.065038][T12046] netlink: 'syz.0.1581': attribute type 10 has an invalid length. [ 458.520624][T12059] netlink: 'syz.2.1584': attribute type 5 has an invalid length. [ 458.611302][T12059] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1584'. [ 458.718497][T12058] veth1_macvtap: left promiscuous mode [ 458.935358][T12074] netlink: 227 bytes leftover after parsing attributes in process `syz.0.1587'. [ 458.995602][T12072] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1586'. [ 459.291599][T12078] syzkaller0: entered promiscuous mode [ 459.297845][T12078] syzkaller0: entered allmulticast mode [ 460.437535][T12092] netlink: 'syz.0.1592': attribute type 10 has an invalid length. [ 460.446050][T12092] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1592'. [ 460.456458][T12092] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 461.754011][T12093] pim6reg1: entered promiscuous mode [ 461.764101][T12093] pim6reg1: entered allmulticast mode [ 461.860620][T12098] netlink: 'syz.2.1593': attribute type 3 has an invalid length. [ 461.874529][T12101] netlink: 'syz.3.1594': attribute type 39 has an invalid length. [ 461.902643][T12098] netlink: 'syz.2.1593': attribute type 1 has an invalid length. [ 461.910449][T12098] netlink: 130160 bytes leftover after parsing attributes in process `syz.2.1593'. [ 462.192959][T12107] netlink: 'syz.1.1595': attribute type 3 has an invalid length. [ 462.201074][T12107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1595'. [ 462.280385][T12112] netlink: 'syz.0.1598': attribute type 21 has an invalid length. [ 462.323615][T12112] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1598'. [ 462.958480][T12129] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1606'. [ 464.093091][T12170] cgroup: fork rejected by pids controller in /syz0 [ 464.591046][T12275] netlink: 'syz.1.1615': attribute type 21 has an invalid length. [ 464.619519][T12275] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1615'. [ 464.749853][T12280] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1617'. [ 465.042331][T12289] netlink: 'syz.3.1620': attribute type 21 has an invalid length. [ 465.362044][T12298] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1623'. [ 465.478849][ T1092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.535082][T12295] netlink: 'syz.1.1621': attribute type 10 has an invalid length. [ 465.548665][T12295] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1621'. [ 465.697253][ T1092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.864077][ T1092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.934724][T12303] netlink: 'syz.3.1627': attribute type 10 has an invalid length. [ 465.972175][T12303] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 466.010430][T12303] team0: Port device wlan1 added [ 466.031803][T12301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.129484][ T1092] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.314501][T12306] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1625'. [ 466.473144][T12316] netlink: 'syz.2.1629': attribute type 10 has an invalid length. [ 466.758210][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 466.768299][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 466.802658][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 466.814419][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 466.822438][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 466.830010][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.314943][T12336] netlink: 'syz.3.1635': attribute type 3 has an invalid length. [ 467.337642][T12336] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1635'. [ 468.154401][T10534] wlan1: Trigger new scan to find an IBSS to join [ 468.899920][T12365] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1640'. [ 468.942604][ T5786] Bluetooth: hci3: command tx timeout [ 469.021487][T12365] team0: Port device team_slave_0 removed [ 469.063101][T12365] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 469.295855][T12376] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1641'. [ 470.126686][T12393] ref_ctr_offset mismatch. inode: 0x8b0 offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 470.156895][T12392] netlink: 'syz.3.1647': attribute type 6 has an invalid length. [ 470.168496][T12392] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1647'. [ 470.535652][T12320] chnl_net:caif_netlink_parms(): no params data found [ 471.022386][ T5786] Bluetooth: hci3: command tx timeout [ 471.256877][T12320] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.302346][T12320] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.310225][T12320] bridge_slave_0: entered allmulticast mode [ 471.362963][T12320] bridge_slave_0: entered promiscuous mode [ 471.380469][T12320] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.408078][T12320] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.438756][T12320] bridge_slave_1: entered allmulticast mode [ 471.475369][T12320] bridge_slave_1: entered promiscuous mode [ 471.723899][T12320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.843921][T12320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.018632][T12320] team0: Port device team_slave_0 added [ 472.114336][T12320] team0: Port device team_slave_1 added [ 472.305764][T12320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.324501][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.433318][T12465] ref_ctr_offset mismatch. inode: 0x823 offset: 0x0 ref_ctr_offset(old): 0x8c ref_ctr_offset(new): 0x0 [ 472.444645][T12320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.617213][T12460] netlink: 'syz.1.1658': attribute type 6 has an invalid length. [ 472.632202][T12460] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1658'. [ 472.765706][T12320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.806949][T12320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.852593][T12320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.112638][ T5786] Bluetooth: hci3: command tx timeout [ 473.194047][ T6388] wlan1: Trigger new scan to find an IBSS to join [ 473.313108][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.340538][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.357791][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.372163][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.435042][ T1092] veth1_macvtap: left promiscuous mode [ 473.454667][ T1092] veth1_vlan: left promiscuous mode [ 473.661743][T12489] netlink: 'syz.1.1665': attribute type 2 has an invalid length. [ 473.690361][T12489] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1665'. [ 473.939868][T12494] netlink: 'syz.1.1666': attribute type 153 has an invalid length. [ 473.955312][T12494] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1666'. [ 474.176051][T10534] wlan1: Creating new IBSS network, BSSID 46:01:5f:ef:ad:40 [ 475.124153][T12320] hsr_slave_0: entered promiscuous mode [ 475.142550][T12320] hsr_slave_1: entered promiscuous mode [ 475.182538][ T5786] Bluetooth: hci3: command tx timeout [ 475.608962][T12505] syzkaller0: entered promiscuous mode [ 475.615380][T12505] syzkaller0: entered allmulticast mode [ 476.545824][T12531] netlink: 'syz.1.1674': attribute type 29 has an invalid length. [ 476.691588][T12531] netlink: 'syz.1.1674': attribute type 29 has an invalid length. [ 477.025766][T12320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 477.057981][T12550] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1678'. [ 477.102468][T12549] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1678'. [ 477.138529][T12320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.190211][T12320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.226728][T12320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.294650][T12558] netlink: 'syz.1.1680': attribute type 2 has an invalid length. [ 477.342515][T12562] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.1679'. [ 477.556682][T12320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.652946][T12320] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.712566][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.720250][T10261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.025409][ T6388] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.032863][ T6388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.117303][T12575] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1682'. [ 478.303518][T12584] netlink: 'syz.3.1685': attribute type 21 has an invalid length. [ 478.311491][T12584] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1685'. [ 478.597171][T12592] netlink: 'syz.3.1686': attribute type 39 has an invalid length. [ 478.645694][T12591] delete_channel: no stack [ 478.697440][T12320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.853668][T12320] veth0_vlan: entered promiscuous mode [ 478.870643][T12320] veth1_vlan: entered promiscuous mode [ 478.964865][T12320] veth0_macvtap: entered promiscuous mode [ 478.988624][T12320] veth1_macvtap: entered promiscuous mode [ 479.051722][T12616] netlink: 'syz.2.1688': attribute type 3 has an invalid length. [ 479.060988][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.082168][T12616] netlink: 'syz.2.1688': attribute type 5 has an invalid length. [ 479.092553][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.134256][T12320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.188828][T12628] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1691'. [ 479.225630][T12320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.239922][T12320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.256011][T12320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.270830][T12320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.281122][T12320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.290433][T12320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.299995][T12320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.485539][T10531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.531315][T10531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.607874][T10261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.630784][T10261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.806378][T12643] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.1624'. [ 479.905684][T12648] syz.3.1693[12648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.906048][T12648] syz.3.1693[12648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.135598][T12650] netlink: 'syz.2.1695': attribute type 10 has an invalid length. [ 480.300587][T12650] bond0: left promiscuous mode [ 480.325641][T12650] bond_slave_0: left promiscuous mode [ 480.378307][T12650] bond_slave_1: left promiscuous mode [ 480.434786][T12650] team0: left promiscuous mode [ 480.441489][T12650] team_slave_1: left promiscuous mode [ 480.517688][T12650] geneve1: left promiscuous mode [ 480.623670][T12662] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1696'. [ 480.733771][T12650] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 480.745540][T12650] bond0: left allmulticast mode [ 480.750830][T12650] bond_slave_0: left allmulticast mode [ 480.757351][T12650] bond_slave_1: left allmulticast mode [ 480.763574][T12650] team0: left allmulticast mode [ 480.771133][T12650] team_slave_1: left allmulticast mode [ 480.777697][T12650] geneve1: left allmulticast mode [ 480.784166][T12650] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 480.873602][T12650] team0: Device bond0 is already an upper device of the team interface [ 481.958419][T12696] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.1701'. [ 485.234390][T12762] netlink: set zone limit has 8 unknown bytes [ 488.475809][T12774] syzkaller0: entered promiscuous mode [ 488.481434][T12774] syzkaller0: entered allmulticast mode [ 488.507036][T12775] : renamed from veth0_vlan (while UP) [ 488.991877][T12783] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1719'. [ 489.124764][T12783] syzkaller0: entered promiscuous mode [ 489.130528][T12783] syzkaller0: entered allmulticast mode [ 489.776944][T12796] netlink: 'syz.3.1722': attribute type 3 has an invalid length. [ 489.791716][T12796] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 489.800757][T12796] netlink: 'syz.3.1722': attribute type 2 has an invalid length. [ 489.814207][T12796] netlink: 198036 bytes leftover after parsing attributes in process `syz.3.1722'. [ 490.081155][T12801] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1723'. [ 492.251248][T12807] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1725'. [ 492.264590][T12807] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.331786][T12807] bridge_slave_0 (unregistering): left allmulticast mode [ 492.340252][T12807] bridge_slave_0 (unregistering): left promiscuous mode [ 492.352314][T12807] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.476200][T12824] C: renamed from team_slave_0 (while UP) [ 492.491154][T12824] netlink: 'syz.0.1738': attribute type 2 has an invalid length. [ 492.514514][T12824] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1738'. [ 492.535542][T12824] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 496.181115][T12889] netlink: 'syz.1.1744': attribute type 21 has an invalid length. [ 496.191836][T12889] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1744'. [ 496.201532][T12889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1744'. [ 497.354680][T12910] delete_channel: no stack [ 497.364544][T12910] delete_channel: no stack [ 498.003689][T12928] syzkaller0: entered promiscuous mode [ 498.012111][T12928] syzkaller0: entered allmulticast mode [ 498.028887][T12928] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 498.156868][T12919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.280833][T12919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.426611][T12919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.482914][T12919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.513411][T12919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.558000][T12919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.638371][T12919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.566158][T12981] syzkaller0: entered promiscuous mode [ 499.571733][T12981] syzkaller0: entered allmulticast mode [ 499.729067][T12995] netlink: 'syz.3.1770': attribute type 1 has an invalid length. [ 499.757687][T12995] netlink: 'syz.3.1770': attribute type 2 has an invalid length. [ 499.787699][T12995] netlink: 'syz.3.1770': attribute type 2 has an invalid length. [ 499.818981][T12995] netlink: 'syz.3.1770': attribute type 3 has an invalid length. [ 499.832053][T12995] netlink: 'syz.3.1770': attribute type 4 has an invalid length. [ 499.844326][T12995] netlink: 'syz.3.1770': attribute type 5 has an invalid length. [ 499.852567][T12995] netlink: 'syz.3.1770': attribute type 6 has an invalid length. [ 499.860793][T12995] netlink: 'syz.3.1770': attribute type 7 has an invalid length. [ 499.871283][T12995] netlink: 'syz.3.1770': attribute type 9 has an invalid length. [ 499.879523][T12995] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.1770'. [ 501.753478][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.759884][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.775405][T13011] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1774'. [ 503.611119][T13030] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1779'. [ 503.728258][T13038] validate_nla: 3 callbacks suppressed [ 503.728277][T13038] netlink: 'syz.1.1780': attribute type 21 has an invalid length. [ 503.778352][T13038] IPv6: NLM_F_CREATE should be specified when creating new route [ 503.812256][T13038] IPv6: Can't replace route, no match found [ 504.032952][T13053] sctp: [Deprecated]: syz.2.1784 (pid 13053) Use of struct sctp_assoc_value in delayed_ack socket option. [ 504.032952][T13053] Use struct sctp_sack_info instead [ 504.785133][T13067] netlink: 'syz.3.1788': attribute type 3 has an invalid length. [ 504.795642][T13067] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1788'. [ 506.225918][ T6388] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 507.798430][T13091] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1790'. [ 507.925145][T13091] netlink: zone id is out of range [ 507.943819][T13091] netlink: zone id is out of range [ 507.961434][T13091] netlink: zone id is out of range [ 508.052519][T13091] netlink: zone id is out of range [ 508.065302][T13091] netlink: zone id is out of range [ 508.079224][T13091] netlink: zone id is out of range [ 508.115895][T13091] netlink: zone id is out of range [ 508.121133][T13091] netlink: zone id is out of range [ 508.149460][T13108] netlink: 'syz.2.1796': attribute type 28 has an invalid length. [ 508.154690][T13091] netlink: zone id is out of range [ 508.173094][T13091] netlink: zone id is out of range [ 508.203263][T13108] netlink: 'syz.2.1796': attribute type 29 has an invalid length. [ 508.211164][T13108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1796'. [ 508.364676][T13111] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1797'. [ 508.445880][T13117] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1798'. [ 508.699448][T13124] raw_sendmsg: syz.2.1801 forgot to set AF_INET. Fix it! [ 508.720124][T13120] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1800'. [ 508.740477][T13124] mac80211_hwsim hwsim9 ..c: renamed from wlan1 (while UP) [ 508.761411][T13127] netlink: 'syz.3.1802': attribute type 21 has an invalid length. [ 508.783725][T13127] netlink: 'syz.3.1802': attribute type 20 has an invalid length. [ 509.821067][T13148] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1805'. [ 510.165982][T13158] netlink: 'syz.2.1808': attribute type 9 has an invalid length. [ 510.228368][T13164] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1809'. [ 510.245716][T13158] netlink: 'syz.2.1808': attribute type 23 has an invalid length. [ 510.255095][T13158] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.1808'. [ 510.721025][T13182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 510.732321][T13182] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1813'. [ 511.248755][T13188] syzkaller0: entered promiscuous mode [ 511.264863][T13188] syzkaller0: entered allmulticast mode [ 511.519561][T13207] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 515.268566][T13207] netlink: 'syz.2.1819': attribute type 29 has an invalid length. [ 515.636526][T13252] netlink: 'syz.3.1826': attribute type 21 has an invalid length. [ 515.732955][T13252] netlink: 'syz.3.1826': attribute type 6 has an invalid length. [ 515.741064][T13256] netlink: 'syz.2.1831': attribute type 27 has an invalid length. [ 515.761925][T13256] __nla_validate_parse: 2 callbacks suppressed [ 515.768596][T13256] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1831'. [ 515.783618][T13256] net_ratelimit: 9 callbacks suppressed [ 515.783664][T13256] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 516.123946][T13267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1833'. [ 516.809706][T13275] syzkaller0: entered promiscuous mode [ 516.831091][T13275] syzkaller0: entered allmulticast mode [ 521.663978][T13323] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 521.802353][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.924060][T13323] bridge_slave_1: left allmulticast mode [ 521.929845][T13323] bridge_slave_1: left promiscuous mode [ 522.008287][T13323] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.079449][T13323] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 522.754909][T13348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.052252][T13357] netlink: 'syz.3.1851': attribute type 21 has an invalid length. [ 523.060771][T13357] netlink: 'syz.3.1851': attribute type 1 has an invalid length. [ 523.097710][T13359] netlink: 'syz.3.1851': attribute type 3 has an invalid length. [ 523.133842][T13359] netlink: 'syz.3.1851': attribute type 6 has an invalid length. [ 523.168644][T13359] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1851'. [ 523.226733][T13357] netlink: 'syz.3.1851': attribute type 10 has an invalid length. [ 523.246669][T13357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1851'. [ 523.258593][T13357] vcan0: entered promiscuous mode [ 523.269084][T13357] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 523.490810][T13363] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1853'. [ 524.073347][T13369] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1854'. [ 525.605484][T13374] netlink: 'syz.1.1855': attribute type 1 has an invalid length. [ 525.613732][T13374] netlink: 'syz.1.1855': attribute type 2 has an invalid length. [ 525.621575][T13374] netlink: 'syz.1.1855': attribute type 2 has an invalid length. [ 525.630514][T13374] netlink: 'syz.1.1855': attribute type 3 has an invalid length. [ 525.639124][T13374] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.1855'. [ 526.360582][T13388] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.1859'. [ 526.408098][T13391] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1860'. [ 526.825705][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 526.836898][ T5786] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 526.859624][T13403] delete_channel: no stack [ 527.124507][T13414] validate_nla: 10 callbacks suppressed [ 527.124529][T13414] netlink: 'syz.2.1866': attribute type 46 has an invalid length. [ 527.490103][T13416] syz.3.1868: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 527.533143][T13416] CPU: 1 PID: 13416 Comm: syz.3.1868 Not tainted syzkaller #0 [ 527.540820][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 527.551410][T13416] Call Trace: [ 527.554757][T13416] [ 527.557744][T13416] dump_stack_lvl+0x18c/0x250 [ 527.562564][T13416] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 527.568882][T13416] ? show_regs_print_info+0x20/0x20 [ 527.574161][T13416] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 527.580399][T13416] ? dump_stack+0x9/0x20 [ 527.584725][T13416] warn_alloc+0x246/0x340 [ 527.589190][T13416] ? stack_trace_save+0xaa/0x100 [ 527.594213][T13416] ? zone_watermark_ok_safe+0x230/0x230 [ 527.599832][T13416] ? kasan_set_track+0x5f/0x70 [ 527.604644][T13416] ? kasan_set_track+0x4e/0x70 [ 527.609454][T13416] ? __kasan_kmalloc+0x8f/0xa0 [ 527.614703][T13416] ? xsk_init_queue+0xad/0x100 [ 527.619597][T13416] ? xsk_setsockopt+0x4c9/0x750 [ 527.624493][T13416] ? do_sock_setsockopt+0x175/0x1a0 [ 527.629786][T13416] ? __x64_sys_setsockopt+0x182/0x200 [ 527.635204][T13416] __vmalloc_node_range+0x129/0x1320 [ 527.640580][T13416] ? free_vm_area+0x50/0x50 [ 527.645149][T13416] vmalloc_user+0x74/0x80 [ 527.649544][T13416] ? xskq_create+0xbf/0x170 [ 527.654088][T13416] xskq_create+0xbf/0x170 [ 527.658466][T13416] xsk_init_queue+0xad/0x100 [ 527.663107][T13416] xsk_setsockopt+0x4c9/0x750 [ 527.667823][T13416] ? xsk_poll+0x670/0x670 [ 527.672196][T13416] ? __fget_files+0x28/0x460 [ 527.676834][T13416] ? aa_sock_opt_perm+0x74/0x100 [ 527.681813][T13416] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 527.687427][T13416] ? security_socket_setsockopt+0x7e/0xa0 [ 527.693193][T13416] ? xsk_poll+0x670/0x670 [ 527.697569][T13416] do_sock_setsockopt+0x175/0x1a0 [ 527.702664][T13416] ? __fdget+0x180/0x210 [ 527.706971][T13416] __x64_sys_setsockopt+0x182/0x200 [ 527.712234][T13416] do_syscall_64+0x55/0xb0 [ 527.716742][T13416] ? clear_bhb_loop+0x40/0x90 [ 527.721475][T13416] ? clear_bhb_loop+0x40/0x90 [ 527.726197][T13416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.732144][T13416] RIP: 0033:0x7fdee579e159 [ 527.736608][T13416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.756267][T13416] RSP: 002b:00007fdee6673028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 527.764747][T13416] RAX: ffffffffffffffda RBX: 00007fdee5a25fa0 RCX: 00007fdee579e159 [ 527.772766][T13416] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000c [ 527.780779][T13416] RBP: 00007fdee5835024 R08: 0000000000000004 R09: 0000000000000000 [ 527.788814][T13416] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 527.796892][T13416] R13: 00007fdee5a26038 R14: 00007fdee5a25fa0 R15: 00007fff21026268 [ 527.804966][T13416] [ 527.887164][T13440] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1871'. [ 528.298434][T13439] netlink: 'syz.0.1873': attribute type 3 has an invalid length. [ 528.307896][T13439] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1873'. [ 528.318291][T13416] Mem-Info: [ 528.345373][T13416] active_anon:10805 inactive_anon:2 isolated_anon:0 [ 528.345373][T13416] active_file:14766 inactive_file:42155 isolated_file:0 [ 528.345373][T13416] unevictable:768 dirty:133 writeback:0 [ 528.345373][T13416] slab_reclaimable:10749 slab_unreclaimable:96001 [ 528.345373][T13416] mapped:26589 shmem:4151 pagetables:590 [ 528.345373][T13416] sec_pagetables:0 bounce:0 [ 528.345373][T13416] kernel_misc_reclaimable:0 [ 528.345373][T13416] free:1341088 free_pcp:8167 free_cma:0 [ 528.460799][T13416] Node 0 active_anon:43720kB inactive_anon:8kB active_file:59064kB inactive_file:168416kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106956kB dirty:532kB writeback:0kB shmem:15668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13156kB pagetables:2260kB sec_pagetables:0kB all_unreclaimable? no [ 528.635524][T13416] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 528.809996][T13453] syzkaller0: entered promiscuous mode [ 528.818781][T13453] syzkaller0: entered allmulticast mode [ 528.838500][T13416] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 528.941737][T13460] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1877'. [ 529.009062][T13416] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 529.082340][T13416] Node 0 DMA32 free:1457008kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:49784kB inactive_anon:8kB active_file:59064kB inactive_file:167592kB unevictable:1536kB writepending:532kB present:3129332kB managed:2586824kB mlocked:0kB bounce:0kB free_pcp:9020kB local_pcp:3872kB free_cma:0kB [ 529.163423][T13416] lowmem_reserve[]: 0 0 0 0 0 [ 529.204103][T13416] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 529.365845][T13416] lowmem_reserve[]: 0 0 0 0 0 [ 529.371623][T13416] Node 1 Normal free:3884180kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:24464kB local_pcp:15256kB free_cma:0kB [ 529.470792][T13416] lowmem_reserve[]: 0 0 0 0 0 [ 529.483415][T13416] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 529.514967][T13416] Node 0 DMA32: 1495*4kB (UME) 792*8kB (U) 709*16kB (UME) 1001*32kB (UME) 616*64kB (UME) 359*128kB (UME) 205*256kB (UME) 108*512kB (UME) 58*1024kB (UM) 24*2048kB (UM) 267*4096kB (UM) = 1451020kB [ 529.551166][T13472] netlink: set zone limit has 8 unknown bytes [ 529.602437][T13416] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 529.629613][T13416] Node 1 Normal: 79*4kB (U) 53*8kB (UM) 27*16kB (UME) 64*32kB (UME) 20*64kB (UE) 6*128kB (UME) 2*256kB (UE) 1*512kB (M) 1*1024kB (U) 1*2048kB (E) 946*4096kB (M) = 3884180kB [ 529.685185][T13416] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.706149][T13416] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 529.729201][T13416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 529.766775][T13416] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 529.821513][T13416] 65198 total pagecache pages [ 529.827492][T13416] 0 pages in swap cache [ 529.879353][T13416] Free swap = 124872kB [ 529.909862][T13416] Total swap = 124996kB [ 529.942243][T13416] 2097051 pages RAM [ 529.946674][T13416] 0 pages HighMem/MovableOnly [ 529.958590][T13484] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 529.984817][T13416] 416959 pages reserved [ 529.989473][T13416] 0 pages cma reserved [ 530.265651][T13491] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1884'. [ 530.732330][T13498] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 530.782562][T13493] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1885'. [ 531.293684][T13506] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1887'. [ 532.068476][T13515] IPv6: NLM_F_CREATE should be specified when creating new route [ 532.089670][T13515] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1890'. [ 532.631335][T13528] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 532.651388][T13528] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 533.462280][T13545] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1899'. [ 533.504235][T13545] netlink: 'syz.0.1899': attribute type 1 has an invalid length. [ 533.544584][T13545] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1899'. [ 533.673580][T13551] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1901'. [ 533.864876][T13551] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 533.906616][T13551] CPU: 1 PID: 13551 Comm: syz.2.1901 Not tainted syzkaller #0 [ 533.914376][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.924510][T13551] Call Trace: [ 533.927847][T13551] [ 533.930837][T13551] dump_stack_lvl+0x18c/0x250 [ 533.935864][T13551] ? show_regs_print_info+0x20/0x20 [ 533.941151][T13551] ? load_image+0x420/0x420 [ 533.945769][T13551] sysfs_warn_dup+0x8e/0xa0 [ 533.950382][T13551] sysfs_do_create_link_sd+0xc0/0x110 [ 533.955829][T13551] device_add_class_symlinks+0x1cf/0x240 [ 533.961545][T13551] device_add+0x4f9/0xc40 [ 533.966098][T13551] wiphy_register+0x1d99/0x2ac0 [ 533.971196][T13551] ? cfg80211_event_work+0x40/0x40 [ 533.976480][T13551] ? minstrel_ht_alloc+0x88a/0x990 [ 533.984386][T13551] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 533.990641][T13551] ieee80211_register_hw+0x2dd8/0x3b30 [ 533.996259][T13551] ? ieee80211_register_hw+0xf11/0x3b30 [ 534.001988][T13551] ? ieee80211_tasklet_handler+0x20/0x20 [ 534.007703][T13551] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 534.013755][T13551] ? __debug_object_init+0xec/0x450 [ 534.019041][T13551] ? __asan_memset+0x22/0x40 [ 534.023711][T13551] ? __hrtimer_init+0x189/0x270 [ 534.028634][T13551] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 534.034464][T13551] ? mac80211_hwsim_free+0x220/0x220 [ 534.039880][T13551] hwsim_new_radio_nl+0xdad/0x1a70 [ 534.045108][T13551] ? __nla_validate+0x50/0x50 [ 534.049893][T13551] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 534.056320][T13551] ? __nla_parse+0x40/0x50 [ 534.060926][T13551] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 534.067424][T13551] genl_family_rcv_msg_doit+0x21a/0x310 [ 534.073030][T13551] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 534.078995][T13551] ? bpf_lsm_capable+0x9/0x10 [ 534.083749][T13551] ? security_capable+0x89/0xb0 [ 534.088641][T13551] genl_rcv_msg+0x611/0x7a0 [ 534.093198][T13551] ? genl_bind+0x360/0x360 [ 534.097655][T13551] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 534.104045][T13551] netlink_rcv_skb+0x235/0x4c0 [ 534.108865][T13551] ? genl_bind+0x360/0x360 [ 534.113325][T13551] ? netlink_ack+0x1160/0x1160 [ 534.118145][T13551] ? __lock_acquire+0x7d80/0x7d80 [ 534.123216][T13551] ? down_read+0x1ac/0x2e0 [ 534.127913][T13551] genl_rcv+0x28/0x40 [ 534.131943][T13551] netlink_unicast+0x7b1/0x930 [ 534.136754][T13551] netlink_sendmsg+0x8d0/0xbf0 [ 534.141570][T13551] ? netlink_getsockopt+0x590/0x590 [ 534.146807][T13551] ? apparmor_socket_sendmsg+0x8e/0x330 [ 534.152393][T13551] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 534.157730][T13551] ? security_socket_sendmsg+0x80/0xa0 [ 534.163223][T13551] ? netlink_getsockopt+0x590/0x590 [ 534.168461][T13551] ____sys_sendmsg+0x61b/0x980 [ 534.173302][T13551] ? lockdep_hardirqs_on+0x98/0x150 [ 534.178549][T13551] ? __asan_memset+0x22/0x40 [ 534.183181][T13551] ? __sys_sendmsg_sock+0x30/0x30 [ 534.188249][T13551] ? __import_iovec+0x5f2/0x850 [ 534.193254][T13551] ? import_iovec+0x73/0xa0 [ 534.197799][T13551] ___sys_sendmsg+0x2a6/0x360 [ 534.202699][T13551] ? __sys_sendmsg+0x2b0/0x2b0 [ 534.207548][T13551] __se_sys_sendmsg+0x1d0/0x2c0 [ 534.212574][T13551] ? __x64_sys_sendmsg+0x80/0x80 [ 534.217565][T13551] do_syscall_64+0x55/0xb0 [ 534.222019][T13551] ? clear_bhb_loop+0x40/0x90 [ 534.226732][T13551] ? clear_bhb_loop+0x40/0x90 [ 534.231446][T13551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 534.237380][T13551] RIP: 0033:0x7f666d99e159 [ 534.241831][T13551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.261485][T13551] RSP: 002b:00007f666e958028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.269944][T13551] RAX: ffffffffffffffda RBX: 00007f666dc25fa0 RCX: 00007f666d99e159 [ 534.278070][T13551] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 534.286085][T13551] RBP: 00007f666da35024 R08: 0000000000000000 R09: 0000000000000000 [ 534.294119][T13551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.302157][T13551] R13: 00007f666dc26038 R14: 00007f666dc25fa0 R15: 00007ffdfb2c5528 [ 534.310193][T13551] [ 534.830754][T13571] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1907'. [ 535.555873][T13577] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1908'. [ 536.284950][T13593] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1912'. [ 536.419359][T13595] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1912'. [ 537.062839][T13593] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1912'. [ 537.103821][T13595] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1912'. [ 537.139268][T13600] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1912'. [ 537.595161][T10263] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 542.605212][T13603] netlink: 'syz.2.1914': attribute type 33 has an invalid length. [ 542.614131][T13603] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1914'. [ 542.624293][T13603] A link change request failed with some changes committed already. Interface ..c may have been left with an inconsistent configuration, please check. [ 542.640761][T13607] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1915'. [ 542.973279][T13630] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1921'. [ 543.381773][T13640] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1923'. [ 544.619796][T13683] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 547.123381][T13700] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1936'. [ 547.133277][T13700] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.1936'. [ 547.144430][T13700] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1936'. [ 547.204783][T13703] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1938'. [ 547.216587][T13699] netlink: 'syz.3.1937': attribute type 21 has an invalid length. [ 547.232532][T13699] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1937'. [ 548.280971][T13723] netlink: 'syz.1.1945': attribute type 10 has an invalid length. [ 548.332992][T13723] syzkaller0: tun_chr_ioctl cmd 21731 [ 548.360472][T13730] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1947'. [ 548.783923][T13747] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1951'. [ 548.803302][T13739] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1950'. [ 548.838874][T13749] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1951'. [ 549.642575][T13775] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 550.055327][T13785] netlink: 'syz.3.1963': attribute type 4 has an invalid length. [ 550.127564][T13785] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1963'. [ 550.143358][T13784] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1962'. [ 550.843743][T13799] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 551.208243][T13805] netlink: 'syz.0.1968': attribute type 21 has an invalid length. [ 551.228911][T13805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1968'. [ 551.606956][T13823] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 551.634293][T13826] netlink: 'syz.0.1975': attribute type 10 has an invalid length. [ 551.703636][T13826] macvlan0: entered promiscuous mode [ 551.800281][T13826] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 551.842410][T13825] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 552.115184][T13836] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1979'. [ 552.458332][T13844] netlink: 'syz.3.1980': attribute type 9 has an invalid length. [ 552.467698][T13844] netlink: 172716 bytes leftover after parsing attributes in process `syz.3.1980'. [ 552.562187][T13844] netlink: 'syz.3.1980': attribute type 9 has an invalid length. [ 552.570261][T13844] netlink: 172716 bytes leftover after parsing attributes in process `syz.3.1980'. [ 552.657876][T13844] netlink: 'syz.3.1980': attribute type 9 has an invalid length. [ 552.766360][T13844] netlink: 'syz.3.1980': attribute type 9 has an invalid length. [ 552.880611][T13844] netlink: 'syz.3.1980': attribute type 9 has an invalid length. [ 553.792673][T13882] syzkaller0: entered promiscuous mode [ 553.809068][T13882] syzkaller0: entered allmulticast mode [ 554.717079][T13909] __nla_validate_parse: 4 callbacks suppressed [ 554.717101][T13909] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1997'. [ 554.782396][T13909] openvswitch: netlink: Key type 8208 is out of range max 32 [ 555.224806][T13923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2001'. [ 556.364924][T13941] validate_nla: 1 callbacks suppressed [ 556.364955][T13941] netlink: 'syz.1.2006': attribute type 40 has an invalid length. [ 556.567131][ C1] [ 556.567141][ C1] ================================ [ 556.567154][ C1] WARNING: inconsistent lock state [ 556.567172][ C1] syzkaller #0 Not tainted [ 556.567183][ C1] -------------------------------- [ 556.567189][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 556.567197][ C1] syz.1.2008/13947 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 556.567220][ C1] ffff88802d362420 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 556.567279][ C1] {INITIAL USE} state was registered at: [ 556.567287][ C1] lock_acquire+0x19e/0x420 [ 556.567309][ C1] _raw_spin_lock+0x2e/0x40 [ 556.567326][ C1] htab_lock_bucket+0x17d/0x300 [ 556.567346][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 556.567366][ C1] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 556.567395][ C1] bpf_overflow_handler+0x1fc/0x510 [ 556.567430][ C1] __perf_event_overflow+0x461/0x660 [ 556.567451][ C1] perf_swevent_event+0x319/0x570 [ 556.567472][ C1] perf_bp_event+0x319/0x430 [ 556.567492][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 556.567516][ C1] notifier_call_chain+0x18f/0x380 [ 556.567538][ C1] atomic_notifier_call_chain+0xda/0x180 [ 556.567562][ C1] notify_die+0x145/0x1a0 [ 556.567583][ C1] notify_debug+0x2e/0x50 [ 556.567599][ C1] noist_exc_debug+0x77/0x120 [ 556.567620][ C1] asm_exc_debug+0x33/0x40 [ 556.567645][ C1] irq event stamp: 5216 [ 556.567657][ C1] hardirqs last enabled at (5215): [] perf_swevent_event+0x476/0x570 [ 556.567686][ C1] hardirqs last disabled at (5216): [] exc_debug+0x73/0x140 [ 556.567713][ C1] softirqs last enabled at (5138): [] bpf_prog_load+0x1204/0x1610 [ 556.567738][ C1] softirqs last disabled at (5134): [] bpf_ksym_add+0x2c/0x330 [ 556.567770][ C1] [ 556.567770][ C1] other info that might help us debug this: [ 556.567776][ C1] Possible unsafe locking scenario: [ 556.567776][ C1] [ 556.567781][ C1] CPU0 [ 556.567784][ C1] ---- [ 556.567788][ C1] lock(&htab->lockdep_key); [ 556.567801][ C1] [ 556.567804][ C1] lock(&htab->lockdep_key); [ 556.567816][ C1] [ 556.567816][ C1] *** DEADLOCK *** [ 556.567816][ C1] [ 556.567820][ C1] no locks held by syz.1.2008/13947. [ 556.567828][ C1] [ 556.567828][ C1] stack backtrace: [ 556.567834][ C1] CPU: 1 PID: 13947 Comm: syz.1.2008 Not tainted syzkaller #0 [ 556.567853][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 556.567864][ C1] Call Trace: [ 556.567872][ C1] <#DB> [ 556.567885][ C1] dump_stack_lvl+0x18c/0x250 [ 556.567932][ C1] ? show_regs_print_info+0x20/0x20 [ 556.567996][ C1] ? print_usage_bug+0x43d/0x6a0 [ 556.568030][ C1] ? verify_lock_unused+0x15/0x140 [ 556.568076][ C1] lock_acquire+0x2c2/0x420 [ 556.568126][ C1] ? htab_lock_bucket+0x17d/0x300 [ 556.568165][ C1] ? read_lock_is_recursive+0x20/0x20 [ 556.568261][ C1] _raw_spin_lock+0x2e/0x40 [ 556.568280][ C1] ? htab_lock_bucket+0x17d/0x300 [ 556.568305][ C1] htab_lock_bucket+0x17d/0x300 [ 556.568349][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 556.568380][ C1] ? look_up_lock_class+0x75/0x140 [ 556.568499][ C1] ? verify_lock_unused+0x15/0x140 [ 556.568537][ C1] ? jhash+0x34e/0x740 [ 556.568579][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 556.568638][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 556.568659][ C1] ? perf_trace_lock+0x19d/0x3b0 [ 556.568684][ C1] ? perf_callchain+0x220/0x220 [ 556.568751][ C1] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 556.568789][ C1] bpf_overflow_handler+0x1fc/0x510 [ 556.568844][ C1] ? bpf_overflow_handler+0xde/0x510 [ 556.568879][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 556.568906][ C1] ? lock_release+0xb5/0x8c0 [ 556.568971][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 556.569016][ C1] __perf_event_overflow+0x461/0x660 [ 556.569078][ C1] perf_swevent_event+0x319/0x570 [ 556.569124][ C1] ? perf_tp_event+0x1550/0x1550 [ 556.569145][ C1] ? perf_trace_lock_acquire+0x1a7/0x400 [ 556.569235][ C1] perf_bp_event+0x319/0x430 [ 556.569296][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 556.569483][ C1] ? lock_acquire+0x2c2/0x420 [ 556.569555][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 556.569615][ C1] notifier_call_chain+0x18f/0x380 [ 556.569661][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 556.569705][ C1] atomic_notifier_call_chain+0xda/0x180 [ 556.569748][ C1] notify_die+0x145/0x1a0 [ 556.569795][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 556.569867][ C1] ? rcu_is_watching+0x15/0xb0 [ 556.569916][ C1] notify_debug+0x2e/0x50 [ 556.569942][ C1] exc_debug+0xde/0x140 [ 556.569991][ C1] asm_exc_debug+0x1e/0x40 [ 556.570014][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 556.570042][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 556.570061][ C1] RSP: 0018:ffffc90003947d50 EFLAGS: 00050202 [ 556.570078][ C1] RAX: ffffffff8433b501 RBX: 0000000000000050 RCX: 000000000000000f [ 556.570092][ C1] RDX: 0000000000000001 RSI: 0000200000000301 RDI: ffffc90003947e01 [ 556.570105][ C1] RBP: ffffc90003947ee8 R08: ffffc90003947e0f R09: 1ffff92000728fc1 [ 556.570119][ C1] R10: dffffc0000000000 R11: fffff52000728fc2 R12: 0000200000000310 [ 556.570133][ C1] R13: 0000000000000050 R14: ffffc90003947dc0 R15: 00002000000002c0 [ 556.570184][ C1] ? _copy_from_user+0x21/0xe0 [ 556.570240][ C1] [ 556.570246][ C1] [ 556.570252][ C1] _copy_from_user+0x8b/0xe0 [ 556.570288][ C1] __sys_bpf+0x23e/0x890 [ 556.570331][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 556.570442][ C1] ? lock_chain_count+0x20/0x20 [ 556.570519][ C1] __x64_sys_bpf+0x7c/0x90 [ 556.570554][ C1] do_syscall_64+0x55/0xb0 [ 556.570577][ C1] ? clear_bhb_loop+0x40/0x90 [ 556.570600][ C1] ? clear_bhb_loop+0x40/0x90 [ 556.570637][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.570660][ C1] RIP: 0033:0x7f338179e159 [ 556.570688][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.570704][ C1] RSP: 002b:00007f33826a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.570725][ C1] RAX: ffffffffffffffda RBX: 00007f3381a25fa0 RCX: 00007f338179e159 [ 556.570739][ C1] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 556.570752][ C1] RBP: 00007f3381835024 R08: 0000000000000000 R09: 0000000000000000 [ 556.570764][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.570775][ C1] R13: 00007f3381a26038 R14: 00007f3381a25fa0 R15: 00007ffe166c0868 [ 556.570865][ C1] [ 563.185959][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.192501][ T1294] ieee802154 phy1 wpan1: encryption failed: -22