last executing test programs: 6.033050617s ago: executing program 4 (id=2184): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fd, 0x1, @perf_config_ext={0x76, 0x400001ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x800, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1efa}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 5.836986802s ago: executing program 2 (id=2187): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90724fc", 0x13}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c00000000000000000000008106ceee3076a14183e4cb07000000003d006082e7440c1080000006f5f91713fb4fc69dd86873ad8e40afa1249209ed77b632afd2285c1a3ab7fa5285974165aff888e67fd164791fdab72758aeb5831e5da40fbf52a24a3cad587bb6a732bd72b8584aa82ac14e329aabf18871f093c58855b8793a0f9c1e435f8eadb78bc6b3aa624d09650d266a8def29dacc478a52e78444d6aef5370e22be4c1f080134850a453383525484008306798a7bb027df0dc75b6784e3d03f969a44ff25d20f3b5eb170b1d80d"], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 5.523433529s ago: executing program 2 (id=2189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000580)={0x7, 0x80, 0xd, 0x3, 0x5, 0x6, 0x0, 0x8, 0xc200, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xf702, 0x4, @perf_bp={&(0x7f0000000340), 0x4}, 0x1013, 0x7845, 0x0, 0x9, 0x8, 0x30, 0x839, 0x0, 0x32ba, 0x0, 0x8}) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@caif=@dgm={0x25, 0xe}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="1895", 0x2}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) recvmsg(r3, &(0x7f0000000d00)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/134, 0x86}, {&(0x7f0000000ac0)=""/67, 0x43}, {&(0x7f0000000b40)=""/132, 0x84}], 0x3, &(0x7f0000000c40)=""/179, 0xb3}, 0x40011023) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa00000000000071101b000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0xfc, 0x0, 0x100000000, 0x2a609, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x14107, 0x4, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000900), 0x802, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) 5.398619051s ago: executing program 4 (id=2190): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="81fefff4c8"], 0x0}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff63, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000001d25a80", 0x14}], 0x1}, 0x0) 5.052667399s ago: executing program 1 (id=2191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000040000008500000005000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8fbffffb702000008000000b703000005000000850000007b00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 5.052082019s ago: executing program 4 (id=2192): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000380)="c1188e99001d4d296204c0a586dd79e8753805fd8efc90e16ec514581a4556b7ceca310981378cbecd1e6fc05d8fdba502a5383c8ae9", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c00e, 0xac5d, 0x0, 0x0, 0x7ff, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffdf8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x5a, 0x753f08fd}, 0x881, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x8, 0x2}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x19, &(0x7f0000000000), 0x8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[], 0x50) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003600000085000000070000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0x7, 0x0, &(0x7f00000000c0)="61df712bc884fe", 0x0, 0x739d}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 4.585257029s ago: executing program 3 (id=2194): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x28}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES8=r5], 0x9a) openat$cgroup_ro(r6, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) close(r7) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x104101, 0xd11, 0x0, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.165638139s ago: executing program 2 (id=2195): r0 = socket$kcm(0x1e, 0x4, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x21, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2", 0x1, 0x0, 0x13}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000900)="27030200590200000100002f1eafaef706e1050000008847000f110186cee84400000008000000001900000000000200000000000000000000000000266c9356927e7c8b73ee7f717395a0296526bfa631", 0x51}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada302c9e37eed5653ecb716cdb8981cd819af0b33254465cc904be0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55", 0x76}, {&(0x7f0000000280)="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", 0x19c}], 0x3}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2e00000011008188040f80ec59acbc0413a1f848100000005e0c0000000000000e001c001400000002800000121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0xd8, &(0x7f0000000300)=""/216}, 0x94) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000400)=""/188, 0x43, 0xbc, 0x1}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r1, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xffffff00, 0x0, r1, 0x10, '\x00', r5, 0xffffffffffffffff, 0x5, 0x1, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x3, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x118183, 0x6, 0x7, 0x4, 0x81, 0x2, 0x1, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36510001ac004000202080002000300010004000600eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfeff, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e140614000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000c000000080000000100000f0500010000000000000000000000000000000000000000002e51"], &(0x7f00000001c0)=""/257, 0x3c, 0x101, 0x6}, 0x28) 3.891587935s ago: executing program 3 (id=2197): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000003a40)=""/4103, 0x1007}, {&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000340)=""/151, 0x97}, {&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000600)=""/202, 0xca}, {&(0x7f0000002080)=""/207, 0xcf}, {&(0x7f0000000540)=""/92, 0x5c}], 0x9}, 0x40000020) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f00000001c0)=0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x18000000000002a0, 0x32, 0x0, &(0x7f0000010000)="b9fa0307110800a6a4321ab9a703c8e0ffff00124000638477fbac141416e00003f511f8be4c73c30e251f5ce0fa0a94029f", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000668711100739151100002f000300000005c0f6a57624295189ad7d9acf0a51b6d1295e"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0x59, 0x2f, &(0x7f0000000040)="a455a5f35b73ec939ddb4908f15c1a34523344f21c1cef2cf5767f2bfaaaebe3c25c9312ef07eb766a66b26d1770d0b5b4708a535057548ebd0388e36561c6e23d080a73ce6f1e0bb111c80b3929440889b5967726526df05b", &(0x7f00000000c0)=""/47, 0x2, 0x0, 0x77, 0xd3, &(0x7f0000000140)="8110fcac42f8df9f223a1fb0b6bbbba0a58b96bde680456bed56c7d1f6de205c295286af57dd824b8a1b9df78284", &(0x7f0000000180)="b19efcfc38d612437f10556ee3533851bad5a10aed230300b602b450e2f3e440abeb3e1e6fc65adddbf289f18a9d267092c842e44dcbd38f01589bdff1aff907c8f3ae9de45c43da11e140c2e6915067b29e8573d02d8f3f5df5a69d9c8f1b610a2551b4094ca46dc69caf2ef69c6796e633d1acd41705491e5715d98f4ce4d3efd9051fc441305dc10d77c7e76c8b849719e9e3e280a7f4b46af166dbc025023adf6a348b4a8c68b1c4640ba22f76744ea571e29ecb980e8b680d6b8571df6bf9f66bc41d262b2f62bb883ef8e7b82a1cd3aa", 0x0, 0x0, 0xc5}, 0x50) 3.6284905s ago: executing program 1 (id=2199): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c00000000000000000000008106ceee3076a14183e4cb07000000003d006082e7440c1080000006f5f91713fb4fc69dd86873ad8e40afa1249209ed77b632afd2285c1a3ab7fa5285974165aff888e67fd164791fdab72758aeb5831e5da40fbf52a24a3cad587bb6a732bd72b8584aa82ac14e329aabf18871f093c58855b8793a0f9c1e435f8eadb78bc6b3aa624d09650d266a8def29dacc478a52e78444d6aef5370e22be4c1f080134850a453383525484008306798a7bb027df0dc75b6784e3d03f969a44ff25d20f3b5eb170b1d80d"], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3.450244714s ago: executing program 3 (id=2201): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0x2, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone(0x8009000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0x2, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) syz_clone(0x8009000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 3.249621829s ago: executing program 4 (id=2202): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e23, @dev}, 0x10, 0x0}, 0x3000c085) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180029a4edaa4f1b4560a4103fdb00000000000000000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x24}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="0010001d000000136e53532f2848", 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89b0, &(0x7f0000000080)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$tipc(r3, &(0x7f0000001b80)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x4, 0x4}}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000000380)="edd978e98d2f45ead4302c612b0067846b9fe9fefba53790d4c61f891df07e851ca3e68417fd7f359f18526422a6eaf516d287f0896143d2118fcb873612184064ab762838a9560812fc2a3e6007259a9f7abcd951a39486d88d97122256df4cbf3cf3f6a75cf261f9e4d0aae0a8e8f2d416f140a908099e189560b80060f7597185319346bb6617b4f60540a1a115a742b95f22ee77ac7c273ebe9e516e9d0b2ebc45bc37accd43852112ffe0bed1d8240715ae3fb80bb857bb9a58331244221f8b578fe0", 0xc5}, {&(0x7f0000000500)="74c9c2d4c75ea7acf0bc42bcb753ea65a7f3cfdbb654a6bc5bb4e148c93d8b28487d2e09844780c98da60cd110df3eb5fad29e9841a773890dc4e0e0c3946c20f959807ccc976340edba6ac4ddcc25b33ffb0fe9d2a575d6eeb3", 0x5a}, {&(0x7f0000000580)="21928f661ac4577ca29a73d124d83496e5e0f634dfb85abc798d82c4784638c7246c8dfd13c6b4fbffce1cbadc4931a6f3bc699052e54c51dfed5fd88808dd65d3939850ffd72f571ca35b113a6bb3d99a4d761ad039c04490120663faa376cf7fcd0f1f57a724a2740de0eae9eb33ecdd90fbc3092ea18b0bd22930232f4a812b868f382b8c65101f2050bae7e4b075ddcf394df722f141a43ccd3549d24a8782216ca560a07a312a95fa859aeb029a6b1ecc5ff2feae142db2f5bdc4f7f6c3c42d0c9c04e05e75774a53eec44b12ec22d653d9cbfec4b8ec555a0a7a93d8aab0c7478612dbbdf47da22688db722dcd80", 0xf1}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="9052b8a35b11aa0b5ec4ec68ed765e407989bb1d6b99158ab8a38cea19b5b76e1e8d88a356a8cf0fab34ac1ef72b5d249acac44596196700faeffcc8f16fa46cf2b5b4106146f8a469d72c12e65cb7a97f1b56dc5256ea28bb494c5d06421b512c703117993f8d53b8fff45084b5", 0x6e}, {&(0x7f0000001980)="8ff117404ebcb52fc1ba83639c1ed83098b720ba20945a4ea9428b98577edfce3e147f415b8aefb987f5ce092dcd170a40e675625bdeb02663dde572817e34bea814df87b00c5d1ba3c883a8c9363e44d07f39ddfb12f005ad12feb01a86c1a0f55f7067201e4eb82d05bbf112c460c84d2e9771c7ea226bc497bbf7b7298d970093c2fadae33bd5a8885d17467f259be9e567dbe651466faade9f234791792ca6e25919693ba07e5b93f852abd212d0253623bfa9f4470d93d3020b056715e187d90de4ac15b588d19951152200e13d432116232350c204a8bf513178ae5c3bf56ed5e35420e538ad0b7a", 0xeb}], 0x6, &(0x7f0000001b00)="4179a1c907f97ef563546bc1b850ba41ec4b904a4b8340cc8e28e3528a5461f64e58b3925d592c8b1c7add14411e6d7752de81b314c28fdbed2194818649fd6efb5b427e0589d668415efc739e358994aad0bbfa", 0x54}, 0x1) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x101d0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) close(0x3) 3.183490711s ago: executing program 2 (id=2203): socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="88", 0x1}], 0x1}, 0x45) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x27, 0x0, 0xb) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff0000000071109300000000"], &(0x7f0000000580)='GPL\x00'}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x60, 0x0}, 0x40000001) sendmsg$inet(r1, 0x0, 0x4040081) close(0x3) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r6 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) socket$kcm(0x10, 0x2, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x10) 2.862841147s ago: executing program 1 (id=2204): socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071107b000000000066710000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xff, 0x1, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000440)="14000000320081024e627903db4cb95915f46a3d", 0x14}], 0x1}, 0x4000) (async, rerun: 32) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) (rerun: 32) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x3d, 0x7, 0x4, 0x9, 0x0, 0x0, 0x10, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7442c95d, 0x4}, 0x8, 0x8, 0x4, 0x0, 0x80000000, 0x3ff, 0x4, 0x0, 0x81, 0x0, 0xfffffffffffff672}) (async, rerun: 64) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, 0x0, 0x0}, 0x20) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.797703809s ago: executing program 0 (id=2205): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000050000000900000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)="d800000018008111e00212ba0d8105040afd0200030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x53}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8924, &(0x7f0000000080)) 2.71712039s ago: executing program 3 (id=2206): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {0x0, 0x4}, {}, {}, {}]}, @fwd, @volatile, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x3}, 0x80) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0x3, 0x6, 0x3, 0x104, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x5, 0x32, &(0x7f0000000380)=""/50, 0x41000, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000540)=[0xffffffffffffffff, 0x1, 0x1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x4, 0x3, 0xc}, {0x2, 0x1, 0x1, 0x4}, {0x1, 0x4, 0xf, 0xb}, {0x0, 0x1, 0x1}, {0x5, 0x3, 0x7, 0xb}, {0x2, 0x4, 0x7, 0x7}, {0x0, 0x5, 0xc, 0x3}, {0x0, 0x5, 0x9}], 0x10, 0x66800000}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000006c0)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000006c0)=r3, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002080)={r0, 0x20, &(0x7f0000002040)={&(0x7f0000001ec0)=""/115, 0x73, 0x0, &(0x7f0000001f40)=""/212, 0xd4}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002080)={r0, 0x20, &(0x7f0000002040)={&(0x7f0000001ec0)=""/115, 0x73, 0x0, &(0x7f0000001f40)=""/212, 0xd4}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0xa, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000640)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000640)=r5, 0x4) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002100)=@generic={&(0x7f00000020c0)='./file0\x00', 0x0, 0x18}, 0x18) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xd, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r8, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0xa, 0x18, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4b}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff8}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000001e00)='syzkaller\x00', 0x7, 0x2a, &(0x7f0000001e40)=""/42, 0x41100, 0x13, '\x00', 0x0, @fallback=0xb, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001e80)={0x0, 0xf, 0x10001, 0xb76}, 0x10, r4, r3, 0x7, &(0x7f0000002140)=[r5, r7, r8], &(0x7f0000002180)=[{0x2, 0x3, 0x2, 0xb}, {0x2, 0x4, 0x0, 0x9}, {0x3, 0x4, 0x6, 0xc}, {0x4, 0x2, 0xa}, {0x1, 0x4, 0xe, 0x1}, {0x0, 0x3, 0x1, 0xddbbfeb4479cb12}, {0x4, 0x4, 0x1, 0x9}], 0x10, 0x8001}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = getpid() perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x7f, 0x4, 0x8, 0xfc, 0x0, 0x9, 0x80880, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x9}, 0x1000, 0x3, 0x14, 0x9, 0x9, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, r10, 0x8, 0xffffffffffffffff, 0x9) recvmsg$kcm(r2, &(0x7f0000001bc0)={&(0x7f0000000780)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000980)=""/22, 0x16}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/51, 0x33}, {&(0x7f0000001a00)=""/158, 0x9e}], 0x6, &(0x7f0000001b40)=""/98, 0x62}, 0x40) r11 = perf_event_open$cgroup(&(0x7f0000001c00)={0x0, 0x80, 0x7, 0xe, 0x4, 0xeb, 0x0, 0x3, 0x49800, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xb7ff, 0x2, @perf_config_ext={0x2, 0x35}, 0x100, 0x9, 0x4, 0x1, 0x9, 0xc9, 0x2, 0x0, 0x5, 0x0, 0x7ff}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x9, 0x3d, 0x9, 0x3, 0x0, 0x5, 0x2200, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0x7, 0xfffffffffffffeba}, 0x0, 0x0, 0x10001, 0x7, 0x4, 0x1, 0x2, 0x0, 0x5, 0x0, 0x6}, r10, 0x5, r11, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r9}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r9}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) 2.477177396s ago: executing program 0 (id=2207): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x2e]}}, 0x0, 0x65}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb8, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) (async) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)}, 0xe900) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) (async) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)) 2.365726058s ago: executing program 3 (id=2208): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100000000000000000000001000000000000000100100000b"], 0x28}, 0xfc40) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000500)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60000040) syz_clone(0x188000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@const={0x0, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x44}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0xc2ba, 0x5, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000002380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0xc028, 0x0, 0xc2ba, 0x0, 0x3fffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12074250}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x10) 2.158445993s ago: executing program 1 (id=2209): socket$kcm(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000085000000a000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x61) 2.026053216s ago: executing program 2 (id=2210): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x3, 0x8, &(0x7f00000002c0)='\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000600)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.913380658s ago: executing program 0 (id=2211): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8ed9e90c1d4f2726, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x3, 0x6, 0x6, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="d80000001e0081124e81f782db4cb9040a1d080006007c095dd2086518000a800de7ffff02600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x2000, 0x40000000, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.82299771s ago: executing program 4 (id=2212): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0xaaec}, 0x0, 0x0, 0xc2ba, 0x4, 0x4000000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x85, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0xffffffffffffffb1, &(0x7f0000000040)=[{&(0x7f0000000480)="2e00000010008188e6be2aa72f72cc9f0ba1f848120000005e140602000000000e000a001013583c9b2eb08ede9e92058500a00a3b8031d9b0211b2b661f0004000a8000011294", 0x3e}]}, 0x40400) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x4090) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x4, 0x3, 0x5}, 0x10}, 0x94) socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x73, 0x0, 0x0, 0x0, 0x6, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x2, @perf_bp={0x0, 0xc}, 0x9, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0xdffc, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x48, &(0x7f00000000c0), 0x18) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x1, &(0x7f0000000240)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x5, 0xffffffffffffffe5, &(0x7f000000cf3d)=""/195, 0x0, 0x2d}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) sendmsg$kcm(r1, 0x0, 0x5744935563dc5412) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0xffffffffffffff0c, 0x0, 0xfffffffffffffff7}, 0x440c4) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="53a662373466e242eceb556aa7278335bdd3311b24d3ce9ab7447f2324f64f0fcf917de446c4e5ef1a1b63c6c59c2d821504157a1b80d1930d228a9d118b379781136753682ee3f389372ef2858406c8f783d72ed1b6a6ea7c83fd451dcefdf40dc38df0715910db890f99a93131ee067193"}], 0x5, 0x0, 0xfffffffffffffd19}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, &(0x7f0000001740)=""/4085}, 0x20) sendmsg(r1, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000004700)={0x0, r1}, 0x8) 1.577524046s ago: executing program 0 (id=2213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0x127, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x8, 0xfffffffffffffed6, 0x0}}, 0xa) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="fafb26eb8bfbb28aac5708c2451baeed2ce9a86d5eaf25a573611140605e9467bf35ce21a997b607efaad7e4a6699c6a0f0712e574ccd6011aa650bd8cf1f1d4be467907bcde9f9fd4d7fb29997ce9191076", 0x52}, {&(0x7f00000001c0)="3dae0c92fb6617e94b23d080b15abb99b5fa34ad18a0d93d106268004c6fb0", 0x1f}, {&(0x7f0000000200)="88ed706042cd84dae45490d674d63dc4fe11eb3f6e6fa1bbbce43108615c30a22a4143669a8c3b4782a2eef28f50bd88aa57005542a8ea9a7b", 0x39}, {&(0x7f0000000240)="29d6259ca822449480df2352b5acbaf376279d2c9958eb6aa1810d278a2d98f20f3833f2663a2c70de94d96922dc5b815e6f20ecb010a9c192b2fca59eabdb99e5b865bf0ee9e7fde389e1d44e5207eecd82a4508e7daab1dc7146c8bf14bcbdf1ae1b4b93dd830be4700d8ad6c64c9664229bed1548aed2096574e9bcf77f8f41ff738dc60c04be074471386673dfdf542c463fa3691dc25ceb5708e70746e6baff83bc934dc7f3dd5e10762b1635d62cffa786c7693beb2daa1e75aad1f205b6f0a3bc050226a9b2fbc00625e6c089450310a9494fce9dee3f40bc9362cc7328e8dd7c779eedb36f389a3e375bdb56bd3ab86f", 0xf4}, {&(0x7f0000000380)="a5cea4639235b8d702d07f68be17f0746b77a7b66b4768", 0x17}], 0x5}, 0x4000011) (async) openat$cgroup_pressure(r1, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) 1.345637521s ago: executing program 1 (id=2214): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f8c6394f90724fc60", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c00000000000000000000008106ceee3076a14183e4cb07000000003d006082e7440c1080000006f5f91713fb4fc69dd86873ad8e40afa1249209ed77b632afd2285c1a3ab7fa5285974165aff888e67fd164791fdab72758aeb5831e5da40fbf52a24a3cad587bb6a732bd72b8584aa82ac14e329aabf18871f093c58855b8793a0f9c1e435f8eadb78bc6b3aa624d09650d266a8def29dacc478a52e78444d6aef5370e22be4c1f080134850a453383525484008306798a7bb027df0dc75b6784e3d03f969a44ff25d20f3b5eb170b1d80d"], 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.340094381s ago: executing program 0 (id=2215): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x6, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000340), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, &(0x7f0000000180), &(0x7f0000000280)=""/95}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="13120000120091ef04e9befbbd00005c0a"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f0000000880)=""/220, 0xdc}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f0000000380)=""/226, 0xe2}, {&(0x7f0000000280)=""/209, 0xd1}], 0x6}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x2f, &(0x7f0000000480)=r6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r2], 0x128}, 0x40004) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x8}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03"], 0x0, 0x5}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe80, 0x602f, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) ioctl$PERF_EVENT_IOC_ID(r7, 0x80082407, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) 1.166956285s ago: executing program 3 (id=2216): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="850000008c00000006120000", @ANYRES32], &(0x7f0000000200)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x84, 0xfffffffffffffffc}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x3}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x7, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xd0400, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 782.003143ms ago: executing program 4 (id=2217): r0 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000009c0)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000002500)=ANY=[@ANYBLOB="1800"], 0x18}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b18, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x32a0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800800000ab40411c0000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r8}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0e0000040000000700000000000000864e625f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) 101.571678ms ago: executing program 0 (id=2218): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup=r0, 0x2b, 0x1, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000f4ff0095"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async, rerun: 32) socket$kcm(0x21, 0x2, 0x2) (rerun: 32) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x15, 0x0, 0x2, 0xfffffffd}]}) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, 0x0, 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async, rerun: 32) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (rerun: 32) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYRES16=r5, @ANYRESHEX=r3, @ANYBLOB="ae03316e3247223ff75a21607de83a841155b4f38bcaf658e0a3c6312a57493a4a6e5a89b61b93ede5427ee539e4eeab7d38ce966407f99aca2e2a8451d92a4401f349e7e3702061f0a832b52134f469f446e07c88fb17b1a8b705376cebb4cbfe7ed34193dd5d30d02f2eceb6003953ce744251dca48913599d9b3bbe0ab54737271285749d89ca8ccde2f2ffdbd42fac4d065c41402e599652b0d40010e62122f9c932f3cc7e1b7ec87e241a813d5ad37bb8b11df5642e72530d23892e81e066d21e4963ca07992bfefac1873728", @ANYRES32=r1], 0xcfa4) 100.099998ms ago: executing program 1 (id=2219): ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x0, @perf_config_ext, 0x5601, 0x0, 0xffff, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800000004136}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000580000001800000004000000020000000000000c02000000000000000000000d0000000000005f00"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) (async) r3 = syz_clone(0x5324000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x9, 0xe0, 0x7, 0x17, 0x0, 0x5, 0x840, 0x1b, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x1, 0xc}, 0x2, 0x6, 0x5, 0x8, 0x3, 0x6, 0x3, 0x0, 0x400, 0x0, 0xffffffff}, r3, 0x10, r0, 0x0) (async) r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) (async) r6 = socket$kcm(0x1e, 0x2, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r7 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x4) perf_event_open$cgroup(&(0x7f0000000300)={0x0, 0x80, 0x8, 0x4e, 0x1, 0x5, 0x0, 0x899, 0x8, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_config_ext={0xc, 0x401}, 0x100020, 0x2, 0x0, 0x5, 0x2c, 0x8, 0x0, 0x0, 0x7fff, 0x0, 0x9}, 0xffffffffffffffff, 0x10, r7, 0x3) (async) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, r8, 0x0) (async) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000021000b12d25a805bb98222f90324fc60", 0x14}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @alu={0x4, 0x0, 0xc, 0x3, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) r10 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r10, &(0x7f0000000180)={0x0, 0x140, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) (async) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000100)=@tipc=@id, 0x80, 0xffffffffffffffff}, 0x0) (async) write$cgroup_pid(r5, &(0x7f0000002980), 0x12) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 0s ago: executing program 2 (id=2220): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xb, 0xffffffff, 0x7, 0x0, 0x100ff, 0xa611}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b35d25a806f8c6394f91424fc60", 0x14}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af3653c001a0008286d0e3af93a08ae0017d34460bc24eab556a705251e618294ff0051f60a84c9f4d4938037e7860400c80004000300c5bb5b64f6985300", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0xc080) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, &(0x7f00000001c0), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x4, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x0, 0xfd07, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9f, 0x10}, 0x10c002, 0xac5d, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb}, 0x0, 0xa, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.1.242'. [ 566.392247][ T5289] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 566.446955][ T5289] syzkaller1: linktype set to 786 [ 567.120051][ T5319] netlink: 188 bytes leftover after parsing attributes in process `syz.4.250'. [ 567.201701][ T5319] ksmbd: Unknown IPC event: 10, ignore. [ 567.218166][ T5320] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.251'. [ 567.778221][ T5330] netlink: 196 bytes leftover after parsing attributes in process `syz.1.253'. [ 569.532088][ T5382] netlink: 128 bytes leftover after parsing attributes in process `syz.0.270'. [ 569.599874][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 569.746632][ T5382] net_ratelimit: 467 callbacks suppressed [ 569.746703][ T5382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 570.272052][ T5399] netlink: 'syz.4.273': attribute type 6 has an invalid length. [ 570.310813][ T5399] netlink: 168 bytes leftover after parsing attributes in process `syz.4.273'. [ 570.664065][ T5421] netlink: 'syz.1.279': attribute type 21 has an invalid length. [ 570.708223][ T5421] netlink: 'syz.1.279': attribute type 20 has an invalid length. [ 570.917966][ T5424] netlink: 'syz.2.275': attribute type 1 has an invalid length. [ 570.945229][ T5424] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.275'. [ 572.560644][ T5439] netlink: 'syz.2.284': attribute type 7 has an invalid length. [ 572.881638][ T5455] netlink: 'syz.1.288': attribute type 30 has an invalid length. [ 573.018717][ T5457] netlink: 'syz.0.286': attribute type 10 has an invalid length. [ 574.773011][ T5478] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.292'. [ 575.349794][ T5478] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.292'. [ 575.489180][ T5486] netlink: 'syz.4.293': attribute type 15 has an invalid length. [ 575.567089][ T5486] netlink: 'syz.4.293': attribute type 16 has an invalid length. [ 575.605954][ T5486] netlink: 'syz.4.293': attribute type 4 has an invalid length. [ 575.659435][ T5486] netlink: 'syz.4.293': attribute type 6 has an invalid length. [ 575.691707][ T5486] netlink: 'syz.4.293': attribute type 15 has an invalid length. [ 575.735026][ T5486] netlink: 'syz.4.293': attribute type 16 has an invalid length. [ 575.759308][ T5486] netlink: 'syz.4.293': attribute type 20 has an invalid length. [ 575.795355][ T5486] netlink: 'syz.4.293': attribute type 21 has an invalid length. [ 575.841382][ T5486] netlink: 'syz.4.293': attribute type 23 has an invalid length. [ 575.878228][ T5486] netlink: 'syz.4.293': attribute type 25 has an invalid length. [ 575.903906][ T5486] netlink: 13226 bytes leftover after parsing attributes in process `syz.4.293'. [ 576.353608][ T5514] netlink: 144 bytes leftover after parsing attributes in process `syz.4.302'. [ 576.861069][ T5518] netlink: 128 bytes leftover after parsing attributes in process `syz.1.304'. [ 576.902966][ T5518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.954017][ T5526] netlink: 128 bytes leftover after parsing attributes in process `syz.3.306'. [ 577.444925][ T5542] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.309'. [ 579.408276][ T5579] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.317'. [ 579.550039][ T5581] netlink: 132 bytes leftover after parsing attributes in process `syz.0.318'. [ 581.094053][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 581.151805][ T5622] validate_nla: 11 callbacks suppressed [ 581.151825][ T5622] netlink: 'syz.3.327': attribute type 1 has an invalid length. [ 581.259190][ T5622] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.327'. [ 581.517716][ T5629] netlink: 14 bytes leftover after parsing attributes in process `syz.1.329'. [ 581.545376][ T5629] openvswitch: netlink: Flow key attr not present in new flow. [ 583.610585][ T5631] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 583.823100][ T5631] device syzkaller0 entered promiscuous mode [ 583.856940][ T5656] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.336'. [ 584.998010][ T5701] netlink: 'syz.1.349': attribute type 29 has an invalid length. [ 585.290864][ T5703] can: request_module (can-proto-0) failed. [ 586.641601][ T5701] netlink: 'syz.1.349': attribute type 29 has an invalid length. [ 587.249332][ T5741] netlink: 132 bytes leftover after parsing attributes in process `syz.3.359'. [ 587.369555][ T5741] netlink: 'syz.3.359': attribute type 10 has an invalid length. [ 587.413641][ T5741] netlink: 2 bytes leftover after parsing attributes in process `syz.3.359'. [ 587.467518][ T5741] device bond0 entered promiscuous mode [ 587.476965][ T5741] device bond_slave_0 entered promiscuous mode [ 587.545226][ T5741] device bond_slave_1 entered promiscuous mode [ 587.575534][ T5741] bridge0: port 3(bond0) entered blocking state [ 587.583242][ T5741] bridge0: port 3(bond0) entered disabled state [ 587.618815][ T5741] bridge0: port 3(bond0) entered blocking state [ 587.625560][ T5741] bridge0: port 3(bond0) entered forwarding state [ 587.639505][ T5747] netlink: 'syz.0.360': attribute type 21 has an invalid length. [ 588.215503][ T5770] netlink: 'syz.4.363': attribute type 21 has an invalid length. [ 589.077907][ T5786] netlink: 'syz.1.371': attribute type 2 has an invalid length. [ 589.094394][ T5785] netlink: 60 bytes leftover after parsing attributes in process `syz.4.368'. [ 589.514946][ T5795] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.373'. [ 589.941930][ T5786] device 0 entered promiscuous mode [ 589.948747][ T5798] netlink: 'syz.0.374': attribute type 10 has an invalid length. [ 589.957826][ T5798] netlink: 'syz.0.374': attribute type 25 has an invalid length. [ 589.967088][ T5791] netlink: 'syz.3.372': attribute type 10 has an invalid length. [ 589.982850][ T5791] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 590.020977][ T5781] delete_channel: no stack [ 590.153223][ T4341] cgroup: fork rejected by pids controller in /syz4 [ 590.201492][ T5804] netlink: 48 bytes leftover after parsing attributes in process `syz.2.375'. [ 590.438226][ T5814] netlink: 'syz.2.380': attribute type 29 has an invalid length. [ 590.542626][ T5814] netlink: 'syz.2.380': attribute type 29 has an invalid length. [ 590.779779][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.967283][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.103187][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.368104][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.637135][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.390'. [ 591.976223][ T4342] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 591.991350][ T4342] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 591.999800][ T4342] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 592.010601][ T4342] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 592.018544][ T4342] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 592.027496][ T4337] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 592.952511][ T5873] validate_nla: 1 callbacks suppressed [ 592.952558][ T5873] netlink: 'syz.1.395': attribute type 2 has an invalid length. [ 592.981202][ T5873] netlink: 'syz.1.395': attribute type 1 has an invalid length. [ 593.032231][ T5873] netlink: 'syz.1.395': attribute type 4 has an invalid length. [ 593.079027][ T5873] netlink: 208312 bytes leftover after parsing attributes in process `syz.1.395'. [ 593.458394][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 593.671338][ T11] team0: Port device wlan1 removed [ 594.095440][ T4337] Bluetooth: hci3: command 0x0409 tx timeout [ 594.230155][ T11] device hsr_slave_0 left promiscuous mode [ 594.250511][ T11] device hsr_slave_1 left promiscuous mode [ 594.282372][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.303811][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.342675][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.370475][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.404995][ T11] device bridge_slave_1 left promiscuous mode [ 594.424095][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.470603][ T11] device bridge_slave_0 left promiscuous mode [ 594.491786][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.655216][ T11] device veth1_macvtap left promiscuous mode [ 594.673359][ T11] device veth0_macvtap left promiscuous mode [ 595.657638][ T11] team0 (unregistering): Port device team_slave_1 removed [ 595.702590][ T11] team0 (unregistering): Port device team_slave_0 removed [ 595.741088][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.991929][ T11] team0 (unregistering): Port device dummy0 removed [ 596.044851][ T11] bond0 (unregistering): Released all slaves [ 596.175418][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 596.286870][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.294126][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.331593][ T5856] device bridge_slave_0 entered promiscuous mode [ 596.397303][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.412605][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.463905][ T5856] device bridge_slave_1 entered promiscuous mode [ 596.553699][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.604893][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.713404][ T5856] team0: Port device team_slave_0 added [ 596.753612][ T5856] team0: Port device team_slave_1 added [ 596.883219][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.902077][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.971024][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.006229][ T5968] netlink: 64543 bytes leftover after parsing attributes in process `syz.1.406'. [ 597.056014][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.063032][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.139289][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.196391][ T5979] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.413'. [ 597.237873][ T5977] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 597.281096][ T5977] netlink: 176 bytes leftover after parsing attributes in process `syz.3.413'. [ 597.516530][ T5987] device wlan1 entered promiscuous mode [ 597.537542][ T5989] netlink: 'syz.2.415': attribute type 3 has an invalid length. [ 597.553103][ T5989] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.415'. [ 597.656074][ T5856] device hsr_slave_0 entered promiscuous mode [ 597.673587][ T5856] device hsr_slave_1 entered promiscuous mode [ 597.686766][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.726086][ T5856] Cannot create hsr debugfs directory [ 598.221311][ T5997] netlink: 'syz.0.416': attribute type 46 has an invalid length. [ 598.248436][ T5997] netlink: 36 bytes leftover after parsing attributes in process `syz.0.416'. [ 598.266895][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 598.575820][ T6002] netlink: 168 bytes leftover after parsing attributes in process `syz.1.418'. [ 599.235410][ T6025] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.423'. [ 599.320623][ T6026] bridge0: port 3(ip6gretap0) entered blocking state [ 599.383566][ T6026] bridge0: port 3(ip6gretap0) entered disabled state [ 599.443564][ T6026] device ip6gretap0 entered promiscuous mode [ 599.491029][ T6026] bridge0: port 3(ip6gretap0) entered blocking state [ 599.498211][ T6026] bridge0: port 3(ip6gretap0) entered forwarding state [ 600.076494][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 600.153622][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 600.192420][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 600.248202][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 600.335554][ T4337] Bluetooth: hci3: command 0x0419 tx timeout [ 600.453686][ T6043] netlink: 126324 bytes leftover after parsing attributes in process `syz.3.428'. [ 600.608216][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.641031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.658399][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.711985][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.759960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.785211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.829629][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.836895][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.860891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 600.898759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.931855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.967963][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.975489][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.011737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.036930][ T6062] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 601.061473][ T6062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.433'. [ 601.082251][ T6062] batman_adv: batadv0: Adding interface: virt_wifi0 [ 601.154736][ T6062] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 601.191802][ T6062] batman_adv: batadv0: Interface activated: virt_wifi0 [ 601.226757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.240655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.264960][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.284441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.337601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.359361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.404551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.440445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.482001][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.504589][ T5856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.525608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.534636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.637795][ T6086] netlink: 'syz.3.438': attribute type 10 has an invalid length. [ 601.665463][ T6086] device netdevsim0 entered promiscuous mode [ 602.940747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.949039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.969888][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.009821][ T6156] netlink: 'syz.2.451': attribute type 21 has an invalid length. [ 604.098683][ T6156] netlink: 152 bytes leftover after parsing attributes in process `syz.2.451'. [ 604.658679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 604.676292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 604.857669][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 604.886698][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 604.964905][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 604.997177][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 605.016079][ T5856] device veth0_vlan entered promiscuous mode [ 605.031489][ T5856] device veth1_vlan entered promiscuous mode [ 605.151220][ T6169] netlink: 'syz.2.454': attribute type 21 has an invalid length. [ 605.328925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 605.346036][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 605.415697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 605.475865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 605.516214][ T5856] device veth0_macvtap entered promiscuous mode [ 605.541376][ T5856] device veth1_macvtap entered promiscuous mode [ 605.625350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 605.638139][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 605.673447][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.724160][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.753929][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.792588][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.815042][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.845443][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.867024][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.892041][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.934982][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.968606][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.997329][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.027907][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.079162][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.100584][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.125223][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.182253][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.232090][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.258187][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.291092][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 606.330974][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 606.379107][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 606.410381][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 606.460835][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.478686][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.490804][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.500704][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.673257][ T6206] netlink: 144 bytes leftover after parsing attributes in process `syz.0.462'. [ 606.848920][ T6206] team0: Port device team_slave_0 removed [ 606.879412][ T6206] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 607.076198][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.084071][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.172188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 607.241278][ T6214] netlink: 132 bytes leftover after parsing attributes in process `syz.1.464'. [ 607.311449][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.371760][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.487541][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 607.883539][ T6231] netlink: 'syz.4.382': attribute type 2 has an invalid length. [ 608.149105][ T6243] netlink: 44 bytes leftover after parsing attributes in process `syz.1.469'. [ 608.549845][ T6255] netlink: 'syz.4.473': attribute type 2 has an invalid length. [ 608.593495][ T6255] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 608.629947][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.187216][ T6269] netlink: 164 bytes leftover after parsing attributes in process `syz.1.477'. [ 609.791570][ T6289] netlink: 'syz.2.482': attribute type 2 has an invalid length. [ 609.889353][ T6298] IPv6: NLM_F_CREATE should be specified when creating new route [ 611.999042][ T6416] netlink: 'syz.4.493': attribute type 3 has an invalid length. [ 612.013294][ T6416] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.493'. [ 612.019969][ T6417] netlink: 134268 bytes leftover after parsing attributes in process `syz.1.495'. [ 612.117172][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.125399][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.172087][ T6418] device bridge_slave_1 left promiscuous mode [ 612.179866][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.317215][ T6418] device bridge_slave_0 left promiscuous mode [ 612.323562][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.723861][ T6436] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 612.789187][ T6436] netlink: 'syz.2.499': attribute type 29 has an invalid length. [ 613.051731][ T6446] netlink: 'syz.2.503': attribute type 29 has an invalid length. [ 613.145955][ T6446] netlink: 'syz.2.503': attribute type 29 has an invalid length. [ 613.268772][ T6449] Driver unsupported XDP return value 0 on prog (id 331) dev N/A, expect packet loss! [ 613.692093][ T6456] device syzkaller0 entered promiscuous mode [ 614.094526][ T6466] netlink: 'syz.0.506': attribute type 2 has an invalid length. [ 614.224210][ T6468] netlink: 60 bytes leftover after parsing attributes in process `syz.2.507'. [ 616.219563][ T6466] device .*! entered promiscuous mode [ 616.436289][ T6484] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.511'. [ 616.484751][ T6487] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.514'. [ 616.691367][ T6487] netlink: 'syz.1.514': attribute type 10 has an invalid length. [ 616.765278][ T6487] netlink: 'syz.1.514': attribute type 25 has an invalid length. [ 616.812161][ T6502] netlink: 10 bytes leftover after parsing attributes in process `syz.2.516'. [ 617.023814][ T6505] netlink: 'syz.4.519': attribute type 9 has an invalid length. [ 617.066241][ T6505] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.519'. [ 617.566814][ T6522] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.523'. [ 618.140099][ T6550] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.530'. [ 618.468804][ T6565] netlink: 'syz.1.533': attribute type 2 has an invalid length. [ 621.154985][ T6573] netlink: 'syz.0.537': attribute type 29 has an invalid length. [ 621.176164][ T6573] netlink: 'syz.0.537': attribute type 29 has an invalid length. [ 621.225345][ T6568] netlink: 14 bytes leftover after parsing attributes in process `syz.2.534'. [ 621.921618][ T6578] netlink: 'syz.0.537': attribute type 29 has an invalid length. [ 621.930587][ T6573] netlink: 'syz.0.537': attribute type 29 has an invalid length. [ 621.939081][ T6581] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.539'. [ 621.982938][ T6583] netlink: 'syz.0.537': attribute type 29 has an invalid length. [ 622.940795][ T6609] netlink: 'syz.1.547': attribute type 3 has an invalid length. [ 622.995364][ T6609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.547'. [ 623.297802][ T6622] netlink: 'syz.3.549': attribute type 2 has an invalid length. [ 623.540643][ T6622] device 0 entered promiscuous mode [ 623.551000][ T6627] device wlan1 entered promiscuous mode [ 624.241485][ T6652] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 624.726416][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.732785][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.780472][ T6659] netlink: 'syz.2.558': attribute type 2 has an invalid length. [ 625.728180][ T6684] netlink: 'syz.2.565': attribute type 39 has an invalid length. [ 626.045828][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'. [ 626.077938][ T6682] netlink: 152 bytes leftover after parsing attributes in process `syz.3.564'. [ 626.119335][ T6693] netlink: 132 bytes leftover after parsing attributes in process `syz.1.568'. [ 626.160730][ T6696] netlink: 128 bytes leftover after parsing attributes in process `syz.1.568'. [ 626.252131][ T6696] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 626.559740][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.570'. [ 626.596355][ T6708] netlink: 60 bytes leftover after parsing attributes in process `syz.3.570'. [ 626.763902][ T6714] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.572'. [ 626.835694][ T6713] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.572'. [ 627.094808][ T6721] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.574'. [ 627.119564][ T6718] netlink: 'syz.2.573': attribute type 1 has an invalid length. [ 627.150018][ T6718] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.573'. [ 629.375076][ T6777] device syzkaller0 entered promiscuous mode [ 629.458294][ T6790] netlink: 15039 bytes leftover after parsing attributes in process `syz.3.591'. [ 630.893982][ T6821] netlink: 'syz.2.599': attribute type 21 has an invalid length. [ 630.908872][ T6821] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 631.277151][ T6833] netlink: 164 bytes leftover after parsing attributes in process `syz.2.602'. [ 631.459609][ T6836] netlink: 'syz.3.606': attribute type 29 has an invalid length. [ 631.485630][ T6836] netlink: 'syz.3.606': attribute type 29 has an invalid length. [ 631.519461][ T6836] netlink: 'syz.3.606': attribute type 10 has an invalid length. [ 631.572925][ T6836] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 631.626217][ T6847] netlink: 'syz.4.604': attribute type 6 has an invalid length. [ 631.696600][ T6840] netlink: 'syz.4.604': attribute type 21 has an invalid length. [ 631.769162][ T6847] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.604'. [ 632.751693][ T6874] bridge0: port 4(ip6gretap0) entered blocking state [ 632.789064][ T6874] bridge0: port 4(ip6gretap0) entered disabled state [ 632.834204][ T6874] device ip6gretap0 entered promiscuous mode [ 632.880536][ T6874] bridge0: port 4(ip6gretap0) entered blocking state [ 632.887700][ T6874] bridge0: port 4(ip6gretap0) entered forwarding state [ 633.016314][ T6880] netlink: 'syz.1.616': attribute type 33 has an invalid length. [ 633.093430][ T6880] netlink: 152 bytes leftover after parsing attributes in process `syz.1.616'. [ 636.925582][ T4346] Bluetooth: hci0: command 0x0406 tx timeout [ 636.931679][ T4346] Bluetooth: hci1: command 0x0406 tx timeout [ 636.937835][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 636.937939][ T4342] Bluetooth: hci2: command 0x0406 tx timeout [ 639.086062][ T7029] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 640.295969][ T7050] netlink: 'syz.3.643': attribute type 21 has an invalid length. [ 640.323783][ T7050] netlink: 128 bytes leftover after parsing attributes in process `syz.3.643'. [ 640.356952][ T7050] netlink: 'syz.3.643': attribute type 4 has an invalid length. [ 640.375498][ T7050] netlink: 'syz.3.643': attribute type 5 has an invalid length. [ 640.404592][ T7050] netlink: 3 bytes leftover after parsing attributes in process `syz.3.643'. [ 640.434313][ T7053] netlink: 'syz.2.644': attribute type 21 has an invalid length. [ 640.468193][ T7053] netlink: 132 bytes leftover after parsing attributes in process `syz.2.644'. [ 641.445558][ T7075] netlink: 'syz.2.658': attribute type 10 has an invalid length. [ 646.248949][ T7215] netlink: 168 bytes leftover after parsing attributes in process `syz.3.673'. [ 646.261120][ T7216] netlink: 14 bytes leftover after parsing attributes in process `syz.0.674'. [ 646.344278][ T7216] openvswitch: netlink: Flow key attr not present in new flow. [ 647.554177][ T7235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.676'. [ 648.566045][ T7254] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.683'. [ 650.515397][ T7292] netlink: 'syz.3.694': attribute type 10 has an invalid length. [ 650.783134][ T7292] team0: Port device veth0_to_bond added [ 650.825294][ T7294] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 650.831654][ T7294] syzkaller1: linktype set to 0 [ 651.765500][ T7301] device syzkaller0 entered promiscuous mode [ 651.814492][ T7320] netlink: 'syz.1.701': attribute type 1 has an invalid length. [ 651.855222][ T7320] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.701'. [ 652.122744][ T7320] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.701'. [ 652.211063][ T7320] netlink: zone id is out of range [ 652.231598][ T7320] netlink: zone id is out of range [ 652.392045][ T7320] netlink: zone id is out of range [ 652.495522][ T7320] netlink: zone id is out of range [ 652.531820][ T7320] netlink: zone id is out of range [ 652.547368][ T7320] netlink: zone id is out of range [ 652.553555][ T7320] netlink: zone id is out of range [ 652.569880][ T7320] netlink: zone id is out of range [ 652.662028][ T7320] netlink: zone id is out of range [ 652.669369][ T7320] netlink: zone id is out of range [ 655.105346][ T7340] delete_channel: no stack [ 655.203074][ T7329] device syzkaller0 entered promiscuous mode [ 655.210097][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.221467][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.235584][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.243029][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.251124][ T7333] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 655.258394][ T7333] batman_adv: batadv0: Removing interface: virt_wifi0 [ 655.311382][ T4393] syzkaller0: tun_net_xmit 48 [ 657.368589][ T7348] netlink: 'syz.3.710': attribute type 8 has an invalid length. [ 657.376549][ T7348] netlink: 156 bytes leftover after parsing attributes in process `syz.3.710'. [ 657.386374][ T7345] netlink: 168 bytes leftover after parsing attributes in process `syz.2.709'. [ 657.400309][ T7349] netlink: 140 bytes leftover after parsing attributes in process `syz.1.708'. [ 657.647738][ T7364] netlink: 'syz.2.714': attribute type 10 has an invalid length. [ 657.858816][ T7367] netlink: 'syz.4.716': attribute type 10 has an invalid length. [ 658.074575][ T7367] team0: Port device veth0_to_bond added [ 658.372528][ T7385] syz.4.720 (7385) used obsolete PPPIOCDETACH ioctl [ 658.483877][ T7388] netlink: 'syz.2.721': attribute type 10 has an invalid length. [ 659.547337][ T7393] netlink: 'syz.0.722': attribute type 13 has an invalid length. [ 659.588596][ T7393] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.722'. [ 659.943925][ T7411] net_ratelimit: 140 callbacks suppressed [ 659.943942][ T7411] sock: sock_set_timeout: `syz.0.727' (pid 7411) tries to set negative timeout [ 660.077195][ T7415] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 660.131968][ T7415] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 660.187257][ T7415] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.728'. [ 660.359466][ T6378] tipc: Subscription rejected, illegal request [ 662.480941][ T7478] netlink: 'syz.3.744': attribute type 25 has an invalid length. [ 662.518154][ T7478] netlink: 'syz.3.744': attribute type 3 has an invalid length. [ 662.567921][ T7478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.744'. [ 663.010738][ T7489] netlink: 'syz.3.747': attribute type 29 has an invalid length. [ 663.135440][ T7489] netlink: 'syz.3.747': attribute type 3 has an invalid length. [ 663.153604][ T7489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.747'. [ 663.791344][ T7506] netlink: 'syz.0.752': attribute type 10 has an invalid length. [ 664.076643][ T7506] team0 (unregistering): Port device team_slave_1 removed [ 664.216433][ T7521] netlink: 14 bytes leftover after parsing attributes in process `syz.1.757'. [ 664.235412][ T7521] openvswitch: netlink: Flow key attr not present in new flow. [ 664.688307][ T7537] sctp: [Deprecated]: syz.0.761 (pid 7537) Use of int in maxseg socket option. [ 664.688307][ T7537] Use struct sctp_assoc_value instead [ 665.254626][ T6372] tipc: Subscription rejected, illegal request [ 665.722177][ T7565] netlink: 184 bytes leftover after parsing attributes in process `syz.0.770'. [ 666.358745][ T7571] netlink: 152 bytes leftover after parsing attributes in process `syz.4.773'. [ 666.405472][ T7571] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.773'. [ 666.456308][ T7572] netlink: 'syz.2.772': attribute type 10 has an invalid length. [ 666.461127][ T7571] netlink: zone id is out of range [ 666.491706][ T7571] netlink: zone id is out of range [ 666.506933][ T7571] netlink: zone id is out of range [ 666.524413][ T7571] netlink: zone id is out of range [ 666.558510][ T7571] netlink: zone id is out of range [ 666.590558][ T7571] netlink: zone id is out of range [ 666.631819][ T7571] netlink: zone id is out of range [ 666.638604][ T7571] netlink: zone id is out of range [ 666.644248][ T7571] netlink: zone id is out of range [ 666.651067][ T7571] netlink: zone id is out of range [ 666.988751][ T7572] device veth0_vlan left promiscuous mode [ 667.096931][ T7587] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 667.102180][ T7572] device veth0_vlan entered promiscuous mode [ 667.104624][ T7587] netlink: 16511 bytes leftover after parsing attributes in process `syz.0.777'. [ 667.309790][ T7572] team0: Device veth0_vlan failed to register rx_handler [ 676.753098][ T7689] netlink: 'syz.3.801': attribute type 10 has an invalid length. [ 676.936990][ T7689] team0 (unregistering): Port device team_slave_0 removed [ 676.997510][ T7689] team0 (unregistering): Port device team_slave_1 removed [ 677.039198][ T7689] team0 (unregistering): Port device wlan1 removed [ 677.050426][ T7706] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 677.074483][ T7706] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.803'. [ 677.092292][ T7689] team0 (unregistering): Port device veth0_to_bond removed [ 677.148521][ T7695] netlink: 'syz.0.802': attribute type 21 has an invalid length. [ 677.174674][ T7700] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 677.210093][ T7703] netlink: 'syz.4.803': attribute type 28 has an invalid length. [ 677.245857][ T7703] netlink: 2 bytes leftover after parsing attributes in process `syz.4.803'. [ 677.572219][ T7712] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.808'. [ 678.218229][ T7728] netlink: 132 bytes leftover after parsing attributes in process `syz.1.813'. [ 679.034180][ T7752] netlink: 'syz.2.819': attribute type 29 has an invalid length. [ 679.056420][ T7752] netlink: 'syz.2.819': attribute type 29 has an invalid length. [ 680.046635][ T7782] netlink: 'syz.0.828': attribute type 21 has an invalid length. [ 680.075333][ T7782] netlink: 'syz.0.828': attribute type 6 has an invalid length. [ 680.093414][ T7782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.828'. [ 680.136978][ T7782] netlink: 'syz.0.828': attribute type 2 has an invalid length. [ 680.692649][ T7798] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.834'. [ 681.027228][ T7811] netlink: 'syz.2.836': attribute type 2 has an invalid length. [ 681.056306][ T7811] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'. [ 681.076954][ T7806] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'. [ 681.089122][ T7805] netlink: 132 bytes leftover after parsing attributes in process `syz.2.836'. [ 681.145516][ T6342] wlan1: Trigger new scan to find an IBSS to join [ 681.308904][ T7815] netlink: 144 bytes leftover after parsing attributes in process `syz.3.839'. [ 686.025863][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.032561][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.096086][ T6342] wlan1: Trigger new scan to find an IBSS to join [ 686.173997][ T7902] netlink: 128 bytes leftover after parsing attributes in process `syz.1.864'. [ 686.193876][ T7902] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 686.272080][ T7902] net_ratelimit: 1 callbacks suppressed [ 686.272102][ T7902] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 687.023834][ T6378] wlan1: Creating new IBSS network, BSSID fe:f0:ff:13:60:90 [ 687.262993][ T7914] validate_nla: 5 callbacks suppressed [ 687.263012][ T7914] netlink: 'syz.1.868': attribute type 10 has an invalid length. [ 687.313425][ T7914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.351102][ T7914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.108529][ T7928] netlink: 'syz.2.873': attribute type 10 has an invalid length. [ 688.156029][ T7928] netlink: 55 bytes leftover after parsing attributes in process `syz.2.873'. [ 688.633357][ T7935] netlink: 'syz.0.874': attribute type 3 has an invalid length. [ 688.644512][ T7935] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.874'. [ 690.062328][ T7949] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.877'. [ 692.077535][ T7998] netlink: 175 bytes leftover after parsing attributes in process `syz.1.890'. [ 692.595954][ T8020] netlink: 'syz.1.897': attribute type 21 has an invalid length. [ 692.616646][ T8020] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.897'. [ 692.784704][ T8021] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.893'. [ 693.538973][ T8035] netlink: 'syz.0.902': attribute type 30 has an invalid length. [ 693.956694][ T8048] delete_channel: no stack [ 693.961320][ T8048] delete_channel: no stack [ 694.587081][ T8068] netlink: 'syz.2.910': attribute type 10 has an invalid length. [ 695.314680][ T8068] team0: Device wg1 is of different type [ 695.377878][ T8085] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 695.567897][ T8085] team0: Port device wlan1 added [ 695.912974][ T8098] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.917'. [ 696.810717][ T8125] netlink: 132 bytes leftover after parsing attributes in process `syz.1.925'. [ 696.936043][ T8125] netlink: 'syz.1.925': attribute type 21 has an invalid length. [ 697.013038][ T8125] netlink: 156 bytes leftover after parsing attributes in process `syz.1.925'. [ 697.089552][ T8127] netlink: 128 bytes leftover after parsing attributes in process `syz.1.925'. [ 697.141309][ T8127] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 697.385371][ T8128] netlink: 'syz.3.923': attribute type 21 has an invalid length. [ 697.462748][ T8137] netlink: 'syz.4.928': attribute type 21 has an invalid length. [ 697.485271][ T8137] IPv6: NLM_F_CREATE should be specified when creating new route [ 697.522167][ T8137] IPv6: Can't replace route, no match found [ 697.575056][ T8137] netlink: 14 bytes leftover after parsing attributes in process `syz.4.928'. [ 697.908029][ T8139] netlink: 'syz.1.929': attribute type 10 has an invalid length. [ 698.095858][ T6340] wlan1: Trigger new scan to find an IBSS to join [ 698.175211][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.301625][ T8139] device bridge_slave_1 left promiscuous mode [ 698.321046][ T8139] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.533262][ T8147] device syzkaller0 entered promiscuous mode [ 699.048832][ T8170] netlink: 'syz.3.935': attribute type 29 has an invalid length. [ 701.280412][ T7852] syz.3.850 (7852) used greatest stack depth: 17616 bytes left [ 701.832100][ T7855] syz.3.850 (7855) used greatest stack depth: 17056 bytes left [ 701.917489][ T7862] syz.3.850 (7862) used greatest stack depth: 16784 bytes left [ 702.871289][ T8170] netlink: 'syz.3.935': attribute type 29 has an invalid length. [ 703.056001][ T6372] wlan1: Trigger new scan to find an IBSS to join [ 703.166558][ T8197] netlink: 'syz.1.941': attribute type 21 has an invalid length. [ 703.539727][ T8217] netlink: 'syz.3.947': attribute type 2 has an invalid length. [ 703.624701][ T8217] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.947'. [ 704.275943][ T4400] wlan1: Creating new IBSS network, BSSID 9a:e1:ca:a7:a5:10 [ 704.312721][ T8219] netlink: 'syz.1.948': attribute type 10 has an invalid length. [ 704.362799][ T8219] bridge0: port 3(dummy0) entered disabled state [ 704.369937][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.420603][ T8219] bridge0: port 3(dummy0) entered blocking state [ 704.428116][ T8219] bridge0: port 3(dummy0) entered forwarding state [ 704.438593][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.446388][ T8219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 704.473804][ T8219] team0: Port device bridge0 added [ 704.480089][ T8224] netlink: 168 bytes leftover after parsing attributes in process `syz.2.946'. [ 704.491047][ T8226] netlink: 'syz.0.949': attribute type 21 has an invalid length. [ 704.518630][ T8226] netlink: 164 bytes leftover after parsing attributes in process `syz.0.949'. [ 704.565839][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 704.584247][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 704.663435][ T8231] netlink: 'syz.1.950': attribute type 3 has an invalid length. [ 704.689344][ T8231] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.950'. [ 706.381235][ T8296] tap0: tun_chr_ioctl cmd 1074025688 [ 707.044621][ T8313] netlink: 152 bytes leftover after parsing attributes in process `syz.4.976'. [ 707.077844][ T8313] netlink: 'syz.4.976': attribute type 10 has an invalid length. [ 707.103451][ T8313] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 708.001827][ T8343] can: request_module (can-proto-0) failed. [ 708.578463][ T8376] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 708.633655][ T8367] netlink: 'syz.2.989': attribute type 2 has an invalid length. [ 708.643829][ T8376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.835166][ T8367] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.989'. [ 708.944963][ T8367] netlink: zone id is out of range [ 708.986047][ T8367] netlink: zone id is out of range [ 708.992267][ T8367] netlink: zone id is out of range [ 709.056896][ T8367] netlink: zone id is out of range [ 709.062617][ T8367] netlink: zone id is out of range [ 709.098946][ T8367] netlink: zone id is out of range [ 709.155363][ T8367] netlink: zone id is out of range [ 709.261792][ T8367] netlink: zone id is out of range [ 709.293583][ T8367] netlink: zone id is out of range [ 709.814295][ T8410] device pim6reg1 entered promiscuous mode [ 710.112891][ T8414] can: request_module (can-proto-0) failed. [ 710.183332][ T8421] netlink: 'syz.1.1004': attribute type 25 has an invalid length. [ 710.191269][ T8421] netlink: 'syz.1.1004': attribute type 29 has an invalid length. [ 710.208227][ T8413] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1004'. [ 710.441535][ T8429] netlink: 'syz.3.1006': attribute type 3 has an invalid length. [ 710.449667][ T8429] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1006'. [ 711.658705][ T8449] device syzkaller0 entered promiscuous mode [ 711.699742][ T8466] can: request_module (can-proto-0) failed. [ 712.192437][ T4342] Bluetooth: hci4: unexpected event 0x32 length: 15 > 9 [ 717.079825][ T8484] netlink: 'syz.1.1021': attribute type 17 has an invalid length. [ 717.095241][ T8484] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1021'. [ 717.104642][ T8484] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 717.125576][ T8484] net_ratelimit: 233 callbacks suppressed [ 717.125596][ T8484] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 718.815844][ T4342] Bluetooth: hci3: command 0x0406 tx timeout [ 718.816719][ T8523] netlink: 'syz.4.1032': attribute type 2 has an invalid length. [ 718.881705][ T8523] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1032'. [ 718.978324][ T8523] netlink: zone id is out of range [ 719.044268][ T8529] netlink: 'syz.0.1034': attribute type 1 has an invalid length. [ 719.079155][ T8523] netlink: zone id is out of range [ 719.100820][ T8523] netlink: zone id is out of range [ 719.127857][ T8523] netlink: zone id is out of range [ 719.157305][ T8523] netlink: zone id is out of range [ 719.165391][ T8529] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1034'. [ 719.236240][ T8523] netlink: zone id is out of range [ 719.263448][ T8523] netlink: zone id is out of range [ 719.342702][ T8523] netlink: zone id is out of range [ 719.372366][ T8523] netlink: zone id is out of range [ 719.787859][ T8542] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.1038'. [ 720.272490][ T8554] netlink: 198580 bytes leftover after parsing attributes in process `syz.3.1041'. [ 721.100976][ T8567] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 722.879268][ T8592] netlink: 'syz.0.1051': attribute type 2 has an invalid length. [ 723.100080][ T4346] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 723.217663][ T8589] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1051'. [ 723.274892][ T8589] net_ratelimit: 233 callbacks suppressed [ 723.274911][ T8589] netlink: zone id is out of range [ 723.314464][ T8607] netlink: 'syz.1.1057': attribute type 1 has an invalid length. [ 723.338394][ T8589] netlink: zone id is out of range [ 723.338410][ T8607] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1057'. [ 723.344915][ T8589] netlink: zone id is out of range [ 723.402248][ T8589] netlink: zone id is out of range [ 723.450456][ T8589] netlink: zone id is out of range [ 723.469074][ T8589] netlink: zone id is out of range [ 723.507134][ T8589] netlink: zone id is out of range [ 723.517902][ T8589] netlink: zone id is out of range [ 723.523939][ T8589] netlink: zone id is out of range [ 723.561178][ T8589] netlink: zone id is out of range [ 723.911337][ T8617] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1061'. [ 723.950034][ T8626] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1063'. [ 723.993399][ T8624] netlink: 'syz.3.1061': attribute type 21 has an invalid length. [ 724.045657][ T8624] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1061'. [ 724.060821][ T8630] netlink: 'syz.0.1064': attribute type 10 has an invalid length. [ 724.072145][ T8615] can: request_module (can-proto-0) failed. [ 725.697061][ T8669] netlink: 'syz.2.1073': attribute type 12 has an invalid length. [ 725.813461][ T8669] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1073'. [ 727.799562][ T8690] device ip6gretap0 left promiscuous mode [ 727.825425][ T8690] bridge0: port 4(ip6gretap0) entered disabled state [ 727.904988][ T8690] bridge0: port 3(bond0) entered disabled state [ 728.034254][ T8690] device bridge_slave_1 left promiscuous mode [ 728.061530][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.103961][ T8690] device bridge_slave_0 left promiscuous mode [ 728.144902][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.658547][ T8732] netlink: 'syz.1.1092': attribute type 11 has an invalid length. [ 729.763708][ T8732] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1092'. [ 730.313804][ T8748] netlink: 'syz.2.1098': attribute type 21 has an invalid length. [ 730.327932][ T8748] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1098'. [ 730.853361][ T8759] netlink: 'syz.1.1101': attribute type 4 has an invalid length. [ 730.863843][ T8759] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1101'. [ 731.556838][ T8767] netlink: 'syz.1.1105': attribute type 2 has an invalid length. [ 731.621124][ T8767] device 0 entered promiscuous mode [ 731.758919][ T8772] netlink: 'syz.2.1106': attribute type 3 has an invalid length. [ 731.775468][ T8772] netlink: 114680 bytes leftover after parsing attributes in process `syz.2.1106'. [ 731.803895][ T8767] netlink: 8964 bytes leftover after parsing attributes in process `syz.1.1105'. [ 732.064344][ T8789] netlink: 'syz.2.1110': attribute type 25 has an invalid length. [ 732.130391][ T8789] netlink: 'syz.2.1110': attribute type 29 has an invalid length. [ 732.183862][ T8797] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1110'. [ 736.024391][ T8820] netlink: 'syz.1.1118': attribute type 2 has an invalid length. [ 736.196265][ T8820] device 1 entered promiscuous mode [ 736.576159][ T6353] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 737.231082][ T8865] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1131'. [ 737.369666][ T8871] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 737.455421][ T8871] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1133'. [ 737.457138][ T8874] netlink: 'syz.1.1133': attribute type 29 has an invalid length. [ 737.645714][ T8874] netlink: 'syz.1.1133': attribute type 29 has an invalid length. [ 737.961665][ T8884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1137'. [ 738.361601][ T8888] device bridge0 entered promiscuous mode [ 738.553439][ T8895] FAULT_INJECTION: forcing a failure. [ 738.553439][ T8895] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 738.685197][ T8895] CPU: 1 PID: 8895 Comm: syz.1.1140 Not tainted syzkaller #0 [ 738.692647][ T8895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 738.702740][ T8895] Call Trace: [ 738.706131][ T8895] [ 738.709166][ T8895] dump_stack_lvl+0x188/0x24e [ 738.713979][ T8895] ? show_regs_print_info+0x12/0x12 [ 738.719225][ T8895] ? load_image+0x410/0x410 [ 738.723770][ T8895] ? __lock_acquire+0x7c40/0x7c40 [ 738.728838][ T8895] ? perf_trace_lock_acquire+0x101/0x3f0 [ 738.734515][ T8895] should_fail_ex+0x390/0x4c0 [ 738.739248][ T8895] _copy_from_user+0x2c/0x170 [ 738.743959][ T8895] ___sys_sendmsg+0x1c3/0x360 [ 738.748691][ T8895] ? __sys_sendmsg+0x2a0/0x2a0 [ 738.753521][ T8895] ? __lock_acquire+0x7c40/0x7c40 [ 738.758625][ T8895] __se_sys_sendmsg+0x1c3/0x2b0 [ 738.763518][ T8895] ? __x64_sys_sendmsg+0x80/0x80 [ 738.768517][ T8895] ? lockdep_hardirqs_on+0x94/0x140 [ 738.773770][ T8895] do_syscall_64+0x4c/0xa0 [ 738.778260][ T8895] ? clear_bhb_loop+0x60/0xb0 [ 738.782984][ T8895] ? clear_bhb_loop+0x60/0xb0 [ 738.787699][ T8895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 738.793624][ T8895] RIP: 0033:0x7f025af9de59 [ 738.798141][ T8895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.817838][ T8895] RSP: 002b:00007f025bea2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.826450][ T8895] RAX: ffffffffffffffda RBX: 00007f025b225fa0 RCX: 00007f025af9de59 [ 738.834553][ T8895] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 738.842581][ T8895] RBP: 00007f025bea2090 R08: 0000000000000000 R09: 0000000000000000 [ 738.850694][ T8895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.858708][ T8895] R13: 00007f025b226038 R14: 00007f025b225fa0 R15: 00007ffe623130c8 [ 738.866751][ T8895] [ 740.706726][ T8916] device syzkaller0 entered promiscuous mode [ 741.018771][ T8933] netlink: 'syz.2.1148': attribute type 4 has an invalid length. [ 741.046955][ T8933] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1148'. [ 741.566043][ T8950] FAULT_INJECTION: forcing a failure. [ 741.566043][ T8950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.584636][ T8950] CPU: 0 PID: 8950 Comm: syz.2.1152 Not tainted syzkaller #0 [ 741.592076][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.602174][ T8950] Call Trace: [ 741.605522][ T8950] [ 741.608492][ T8950] dump_stack_lvl+0x188/0x24e [ 741.613224][ T8950] ? show_regs_print_info+0x12/0x12 [ 741.618463][ T8950] ? load_image+0x410/0x410 [ 741.623190][ T8950] ? __lock_acquire+0x7c40/0x7c40 [ 741.628350][ T8950] should_fail_ex+0x390/0x4c0 [ 741.633078][ T8950] _copy_from_user+0x2c/0x170 [ 741.637833][ T8950] iovec_from_user+0x143/0x360 [ 741.642666][ T8950] __import_iovec+0x6c/0x510 [ 741.647310][ T8950] import_iovec+0x6f/0xa0 [ 741.651693][ T8950] ___sys_sendmsg+0x252/0x360 [ 741.656430][ T8950] ? __sys_sendmsg+0x2a0/0x2a0 [ 741.661441][ T8950] ? __lock_acquire+0x7c40/0x7c40 [ 741.666710][ T8950] __se_sys_sendmsg+0x1c3/0x2b0 [ 741.671618][ T8950] ? __x64_sys_sendmsg+0x80/0x80 [ 741.676618][ T8950] ? lockdep_hardirqs_on+0x94/0x140 [ 741.681870][ T8950] do_syscall_64+0x4c/0xa0 [ 741.686330][ T8950] ? clear_bhb_loop+0x60/0xb0 [ 741.691048][ T8950] ? clear_bhb_loop+0x60/0xb0 [ 741.695858][ T8950] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.701797][ T8950] RIP: 0033:0x7f9729b9de59 [ 741.706247][ T8950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.725896][ T8950] RSP: 002b:00007f972ab57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.734359][ T8950] RAX: ffffffffffffffda RBX: 00007f9729e25fa0 RCX: 00007f9729b9de59 [ 741.742373][ T8950] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 741.750387][ T8950] RBP: 00007f972ab57090 R08: 0000000000000000 R09: 0000000000000000 [ 741.758402][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.766411][ T8950] R13: 00007f9729e26038 R14: 00007f9729e25fa0 R15: 00007fff8aa9d8a8 [ 741.774437][ T8950] [ 744.452120][ T8935] netlink: 'syz.1.1149': attribute type 21 has an invalid length. [ 744.460274][ T8938] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1143'. [ 744.475864][ T8962] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1156'. [ 745.266730][ T8992] FAULT_INJECTION: forcing a failure. [ 745.266730][ T8992] name failslab, interval 1, probability 0, space 0, times 1 [ 745.321272][ T8992] CPU: 1 PID: 8992 Comm: syz.4.1165 Not tainted syzkaller #0 [ 745.328735][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 745.339003][ T8992] Call Trace: [ 745.342307][ T8992] [ 745.345258][ T8992] dump_stack_lvl+0x188/0x24e [ 745.349974][ T8992] ? show_regs_print_info+0x12/0x12 [ 745.355203][ T8992] ? load_image+0x410/0x410 [ 745.359749][ T8992] ? __might_sleep+0xd0/0xd0 [ 745.364382][ T8992] ? __lock_acquire+0x7c40/0x7c40 [ 745.369450][ T8992] should_fail_ex+0x390/0x4c0 [ 745.374171][ T8992] should_failslab+0x5/0x20 [ 745.378714][ T8992] slab_pre_alloc_hook+0x59/0x300 [ 745.383785][ T8992] kmem_cache_alloc_node+0x5a/0x310 [ 745.389052][ T8992] ? __alloc_skb+0xf9/0x7d0 [ 745.393597][ T8992] __alloc_skb+0xf9/0x7d0 [ 745.397968][ T8992] netlink_sendmsg+0x654/0xbd0 [ 745.402776][ T8992] ? netlink_getsockopt+0x550/0x550 [ 745.408099][ T8992] ? apparmor_socket_sendmsg+0x8a/0x330 [ 745.413756][ T8992] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 745.419053][ T8992] ? security_socket_sendmsg+0x7c/0xa0 [ 745.424530][ T8992] ? netlink_getsockopt+0x550/0x550 [ 745.429774][ T8992] ____sys_sendmsg+0x5ed/0x9a0 [ 745.434584][ T8992] ? __sys_sendmsg_sock+0x30/0x30 [ 745.439642][ T8992] ? __import_iovec+0x306/0x510 [ 745.444529][ T8992] ? import_iovec+0x6f/0xa0 [ 745.449073][ T8992] ___sys_sendmsg+0x2a2/0x360 [ 745.453774][ T8992] ? __sys_sendmsg+0x2a0/0x2a0 [ 745.458569][ T8992] ? __lock_acquire+0x7c40/0x7c40 [ 745.463722][ T8992] __se_sys_sendmsg+0x1c3/0x2b0 [ 745.468587][ T8992] ? __x64_sys_sendmsg+0x80/0x80 [ 745.473725][ T8992] ? lockdep_hardirqs_on+0x94/0x140 [ 745.478934][ T8992] do_syscall_64+0x4c/0xa0 [ 745.483384][ T8992] ? clear_bhb_loop+0x60/0xb0 [ 745.488083][ T8992] ? clear_bhb_loop+0x60/0xb0 [ 745.492778][ T8992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 745.498686][ T8992] RIP: 0033:0x7f4c5179de59 [ 745.503123][ T8992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.523094][ T8992] RSP: 002b:00007f4c52728028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.531533][ T8992] RAX: ffffffffffffffda RBX: 00007f4c51a25fa0 RCX: 00007f4c5179de59 [ 745.539690][ T8992] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 745.547665][ T8992] RBP: 00007f4c52728090 R08: 0000000000000000 R09: 0000000000000000 [ 745.555737][ T8992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.564063][ T8992] R13: 00007f4c51a26038 R14: 00007f4c51a25fa0 R15: 00007ffc89607838 [ 745.572056][ T8992] [ 746.847922][ T9043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.904070][ T9043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.005002][ T9045] netlink: 'syz.2.1182': attribute type 10 has an invalid length. [ 747.028020][ T9045] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1182'. [ 747.052393][ T9045] device hsr0 entered promiscuous mode [ 747.058545][ T4400] wlan1: Trigger new scan to find an IBSS to join [ 747.080817][ T9045] bridge0: port 4(hsr0) entered blocking state [ 747.088404][ T9045] bridge0: port 4(hsr0) entered disabled state [ 747.102753][ T9045] bridge0: port 4(hsr0) entered blocking state [ 747.109177][ T9045] bridge0: port 4(hsr0) entered forwarding state [ 747.209631][ T9057] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1184'. [ 747.469760][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.476168][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.863009][ T9070] netlink: 'syz.2.1187': attribute type 10 has an invalid length. [ 747.922206][ T9070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1187'. [ 747.968802][ T9070] device team0 entered promiscuous mode [ 747.999844][ T9070] device team_slave_0 entered promiscuous mode [ 748.041912][ T9070] device team_slave_1 entered promiscuous mode [ 748.056143][ T9070] bridge0: port 5(team0) entered blocking state [ 748.062653][ T9070] bridge0: port 5(team0) entered disabled state [ 748.139770][ T9070] bridge0: port 5(team0) entered blocking state [ 748.146233][ T9070] bridge0: port 5(team0) entered forwarding state [ 748.174095][ T9086] FAULT_INJECTION: forcing a failure. [ 748.174095][ T9086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.270493][ T9086] CPU: 0 PID: 9086 Comm: syz.0.1192 Not tainted syzkaller #0 [ 748.277949][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 748.288084][ T9086] Call Trace: [ 748.291404][ T9086] [ 748.294374][ T9086] dump_stack_lvl+0x188/0x24e [ 748.299101][ T9086] ? show_regs_print_info+0x12/0x12 [ 748.304363][ T9086] ? load_image+0x410/0x410 [ 748.308916][ T9086] ? __might_fault+0xa6/0x120 [ 748.313649][ T9086] should_fail_ex+0x390/0x4c0 [ 748.318470][ T9086] copyin+0x1b/0x120 [ 748.322585][ T9086] _copy_from_iter+0x447/0x1130 [ 748.327492][ T9086] ? copyout_mc+0x110/0x110 [ 748.332056][ T9086] ? __virt_addr_valid+0x188/0x540 [ 748.337305][ T9086] ? __virt_addr_valid+0x188/0x540 [ 748.341502][ T9090] netlink: 'syz.1.1193': attribute type 3 has an invalid length. [ 748.342449][ T9086] ? __virt_addr_valid+0x467/0x540 [ 748.342485][ T9086] ? __phys_addr_symbol+0x2b/0x70 [ 748.342508][ T9086] ? __check_object_size+0x4f6/0xa70 [ 748.342533][ T9086] netlink_sendmsg+0x755/0xbd0 [ 748.342568][ T9086] ? netlink_getsockopt+0x550/0x550 [ 748.342595][ T9086] ? apparmor_socket_sendmsg+0x8a/0x330 [ 748.342621][ T9086] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 748.342640][ T9086] ? security_socket_sendmsg+0x7c/0xa0 [ 748.342662][ T9086] ? netlink_getsockopt+0x550/0x550 [ 748.361896][ T9090] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1193'. [ 748.366170][ T9086] ____sys_sendmsg+0x5ed/0x9a0 [ 748.366216][ T9086] ? __sys_sendmsg_sock+0x30/0x30 [ 748.366238][ T9086] ? __import_iovec+0x306/0x510 [ 748.366271][ T9086] ? import_iovec+0x6f/0xa0 [ 748.366298][ T9086] ___sys_sendmsg+0x2a2/0x360 [ 748.366327][ T9086] ? __sys_sendmsg+0x2a0/0x2a0 [ 748.366371][ T9086] ? __lock_acquire+0x7c40/0x7c40 [ 748.366423][ T9086] __se_sys_sendmsg+0x1c3/0x2b0 [ 748.366449][ T9086] ? __x64_sys_sendmsg+0x80/0x80 [ 748.366488][ T9086] ? lockdep_hardirqs_on+0x94/0x140 [ 748.366511][ T9086] do_syscall_64+0x4c/0xa0 [ 748.366533][ T9086] ? clear_bhb_loop+0x60/0xb0 [ 748.366556][ T9086] ? clear_bhb_loop+0x60/0xb0 [ 748.366581][ T9086] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 748.366603][ T9086] RIP: 0033:0x7fc79899de59 [ 748.366622][ T9086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.366638][ T9086] RSP: 002b:00007fc799909028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.508726][ T9086] RAX: ffffffffffffffda RBX: 00007fc798c25fa0 RCX: 00007fc79899de59 [ 748.516798][ T9086] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 748.524806][ T9086] RBP: 00007fc799909090 R08: 0000000000000000 R09: 0000000000000000 [ 748.532964][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.541029][ T9086] R13: 00007fc798c26038 R14: 00007fc798c25fa0 R15: 00007fff2c514e88 [ 748.549023][ T9086] [ 748.589744][ T9093] netlink: 'syz.3.1194': attribute type 21 has an invalid length. [ 748.625353][ T9093] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1194'. [ 748.831321][ T9099] netlink: 'syz.2.1196': attribute type 3 has an invalid length. [ 748.850424][ T9099] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1196'. [ 749.290315][ T9120] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1204'. [ 749.300986][ T9117] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1203'. [ 749.420804][ T9122] FAULT_INJECTION: forcing a failure. [ 749.420804][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 749.438144][ T9122] CPU: 0 PID: 9122 Comm: syz.1.1205 Not tainted syzkaller #0 [ 749.445754][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 749.455933][ T9122] Call Trace: [ 749.459250][ T9122] [ 749.462373][ T9122] dump_stack_lvl+0x188/0x24e [ 749.467102][ T9122] ? show_regs_print_info+0x12/0x12 [ 749.472339][ T9122] ? load_image+0x410/0x410 [ 749.476866][ T9122] ? verify_lock_unused+0x140/0x140 [ 749.482120][ T9122] should_fail_ex+0x390/0x4c0 [ 749.487002][ T9122] should_failslab+0x5/0x20 [ 749.491521][ T9122] slab_pre_alloc_hook+0x59/0x300 [ 749.496566][ T9122] kmem_cache_alloc+0x56/0x2f0 [ 749.501339][ T9122] ? skb_clone+0x1e7/0x370 [ 749.505805][ T9122] skb_clone+0x1e7/0x370 [ 749.510102][ T9122] __netlink_deliver_tap+0x3e4/0x7e0 [ 749.515592][ T9122] ? netlink_deliver_tap+0x2e/0x1b0 [ 749.520808][ T9122] netlink_deliver_tap+0x19c/0x1b0 [ 749.526020][ T9122] netlink_unicast+0x777/0x920 [ 749.530808][ T9122] netlink_sendmsg+0x8ad/0xbd0 [ 749.535596][ T9122] ? netlink_getsockopt+0x550/0x550 [ 749.540813][ T9122] ? apparmor_socket_sendmsg+0x8a/0x330 [ 749.546371][ T9122] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 749.551667][ T9122] ? security_socket_sendmsg+0x7c/0xa0 [ 749.557136][ T9122] ? netlink_getsockopt+0x550/0x550 [ 749.562353][ T9122] ____sys_sendmsg+0x5ed/0x9a0 [ 749.567135][ T9122] ? __sys_sendmsg_sock+0x30/0x30 [ 749.572165][ T9122] ? __import_iovec+0x306/0x510 [ 749.577034][ T9122] ? import_iovec+0x6f/0xa0 [ 749.581584][ T9122] ___sys_sendmsg+0x2a2/0x360 [ 749.586279][ T9122] ? __sys_sendmsg+0x2a0/0x2a0 [ 749.591100][ T9122] ? __lock_acquire+0x7c40/0x7c40 [ 749.596174][ T9122] __se_sys_sendmsg+0x1c3/0x2b0 [ 749.601043][ T9122] ? __x64_sys_sendmsg+0x80/0x80 [ 749.606016][ T9122] ? lockdep_hardirqs_on+0x94/0x140 [ 749.611228][ T9122] do_syscall_64+0x4c/0xa0 [ 749.615922][ T9122] ? clear_bhb_loop+0x60/0xb0 [ 749.620620][ T9122] ? clear_bhb_loop+0x60/0xb0 [ 749.625312][ T9122] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 749.631215][ T9122] RIP: 0033:0x7f025af9de59 [ 749.635659][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.655390][ T9122] RSP: 002b:00007f025bea2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 749.663905][ T9122] RAX: ffffffffffffffda RBX: 00007f025b225fa0 RCX: 00007f025af9de59 [ 749.671890][ T9122] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 749.679871][ T9122] RBP: 00007f025bea2090 R08: 0000000000000000 R09: 0000000000000000 [ 749.688027][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.696007][ T9122] R13: 00007f025b226038 R14: 00007f025b225fa0 R15: 00007ffe623130c8 [ 749.704086][ T9122] [ 749.713612][ T9125] netlink: 'syz.4.1206': attribute type 7 has an invalid length. [ 749.765292][ T9122] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1205'. [ 750.183248][ T9143] net_ratelimit: 232 callbacks suppressed [ 750.183358][ T9143] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 750.260286][ T9143] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1211'. [ 750.438089][ T9155] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1215'. [ 750.561951][ T9160] wlan1: mtu greater than device maximum [ 750.955523][ T9173] netlink: 'syz.0.1220': attribute type 21 has an invalid length. [ 750.958180][ T9176] FAULT_INJECTION: forcing a failure. [ 750.958180][ T9176] name failslab, interval 1, probability 0, space 0, times 0 [ 750.969720][ T9173] netlink: 'syz.0.1220': attribute type 6 has an invalid length. [ 750.976321][ T9176] CPU: 0 PID: 9176 Comm: syz.1.1221 Not tainted syzkaller #0 [ 750.976347][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 750.976359][ T9176] Call Trace: [ 750.976368][ T9176] [ 750.976377][ T9176] dump_stack_lvl+0x188/0x24e [ 750.976413][ T9176] ? show_regs_print_info+0x12/0x12 [ 750.976440][ T9176] ? load_image+0x410/0x410 [ 751.022248][ T9176] ? skb_network_protocol+0x525/0x790 [ 751.027645][ T9176] should_fail_ex+0x390/0x4c0 [ 751.032346][ T9176] should_failslab+0x5/0x20 [ 751.036858][ T9176] slab_pre_alloc_hook+0x59/0x300 [ 751.042063][ T9176] ? netif_skb_features+0xafa/0x1630 [ 751.047391][ T9176] kmem_cache_alloc+0x56/0x2f0 [ 751.052262][ T9176] ? skb_clone+0x1e7/0x370 [ 751.056702][ T9176] skb_clone+0x1e7/0x370 [ 751.061046][ T9176] ? dev_queue_xmit_nit+0x200/0xba0 [ 751.066264][ T9176] dev_queue_xmit_nit+0x23b/0xba0 [ 751.071388][ T9176] ? dev_queue_xmit_nit+0x29/0xba0 [ 751.076515][ T9176] ? validate_xmit_skb+0x7ca/0xe80 [ 751.081638][ T9176] dev_hard_start_xmit+0x158/0x8b0 [ 751.086866][ T9176] ? validate_xmit_skb_list+0x120/0x120 [ 751.092457][ T9176] __dev_queue_xmit+0x1b4b/0x3810 [ 751.097950][ T9176] ? __dev_queue_xmit+0x281/0x3810 [ 751.103092][ T9176] ? netdev_core_pick_tx+0x360/0x360 [ 751.108386][ T9176] ? ref_tracker_alloc+0x333/0x490 [ 751.113511][ T9176] ? __copy_skb_header+0x3ba/0x4f0 [ 751.118640][ T9176] ? memcpy+0x3c/0x60 [ 751.122643][ T9176] ? __copy_skb_header+0x3ba/0x4f0 [ 751.127802][ T9176] ? __skb_clone+0x446/0x6c0 [ 751.132433][ T9176] ? skb_clone+0x21b/0x370 [ 751.136884][ T9176] __netlink_deliver_tap+0x55c/0x7e0 [ 751.142352][ T9176] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.147568][ T9176] netlink_deliver_tap+0x19c/0x1b0 [ 751.152695][ T9176] netlink_unicast+0x777/0x920 [ 751.157567][ T9176] netlink_sendmsg+0x8ad/0xbd0 [ 751.162349][ T9176] ? netlink_getsockopt+0x550/0x550 [ 751.167561][ T9176] ? apparmor_socket_sendmsg+0x8a/0x330 [ 751.173123][ T9176] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 751.178415][ T9176] ? security_socket_sendmsg+0x7c/0xa0 [ 751.183883][ T9176] ? netlink_getsockopt+0x550/0x550 [ 751.189097][ T9176] ____sys_sendmsg+0x5ed/0x9a0 [ 751.193884][ T9176] ? __sys_sendmsg_sock+0x30/0x30 [ 751.198924][ T9176] ? __import_iovec+0x306/0x510 [ 751.203793][ T9176] ? import_iovec+0x6f/0xa0 [ 751.208310][ T9176] ___sys_sendmsg+0x2a2/0x360 [ 751.213007][ T9176] ? __sys_sendmsg+0x2a0/0x2a0 [ 751.217819][ T9176] ? __lock_acquire+0x7c40/0x7c40 [ 751.222886][ T9176] __se_sys_sendmsg+0x1c3/0x2b0 [ 751.227842][ T9176] ? __x64_sys_sendmsg+0x80/0x80 [ 751.232807][ T9176] ? lockdep_hardirqs_on+0x94/0x140 [ 751.238018][ T9176] do_syscall_64+0x4c/0xa0 [ 751.242447][ T9176] ? clear_bhb_loop+0x60/0xb0 [ 751.247134][ T9176] ? clear_bhb_loop+0x60/0xb0 [ 751.251864][ T9176] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.257824][ T9176] RIP: 0033:0x7f025af9de59 [ 751.262260][ T9176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.281879][ T9176] RSP: 002b:00007f025bea2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.290331][ T9176] RAX: ffffffffffffffda RBX: 00007f025b225fa0 RCX: 00007f025af9de59 [ 751.298327][ T9176] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 751.306312][ T9176] RBP: 00007f025bea2090 R08: 0000000000000000 R09: 0000000000000000 [ 751.314468][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.322448][ T9176] R13: 00007f025b226038 R14: 00007f025b225fa0 R15: 00007ffe623130c8 [ 751.330683][ T9176] [ 751.350811][ T6353] wlan1: Trigger new scan to find an IBSS to join [ 751.418651][ T9176] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1221'. [ 751.810921][ T4346] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6 [ 751.832174][ T9188] netlink: 'syz.4.1223': attribute type 21 has an invalid length. [ 752.125466][ T9199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1227'. [ 752.207953][ T9202] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1229'. [ 752.355392][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1230'. [ 752.682578][ T9222] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1234'. [ 752.909798][ T9222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.921451][ T9222] device bond_slave_0 left promiscuous mode [ 752.954461][ T9222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.120697][ T9222] device bond_slave_1 left promiscuous mode [ 753.199800][ T9222] bond0 (unregistering): Released all slaves [ 753.259266][ T9221] device pim6reg1 entered promiscuous mode [ 753.368438][ T9230] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1235'. [ 753.387103][ T9236] netlink: 11518 bytes leftover after parsing attributes in process `syz.0.1236'. [ 754.095439][ T6340] wlan1: Trigger new scan to find an IBSS to join [ 754.108760][ T9262] netlink: 'syz.4.1244': attribute type 10 has an invalid length. [ 754.135197][ T9262] device team0 entered promiscuous mode [ 754.140893][ T9262] device team_slave_0 entered promiscuous mode [ 754.167622][ T9262] device team_slave_1 entered promiscuous mode [ 754.174264][ T9262] device veth0_to_bond entered promiscuous mode [ 754.370719][ T9262] device wlan1 entered promiscuous mode [ 754.450543][ T9262] bridge0: port 3(team0) entered blocking state [ 754.451260][ T6340] wlan1: Creating new IBSS network, BSSID 5e:96:71:15:cf:8d [ 754.507608][ T9262] bridge0: port 3(team0) entered disabled state [ 754.551484][ T9262] bridge0: port 3(team0) entered blocking state [ 754.557947][ T9262] bridge0: port 3(team0) entered forwarding state [ 754.604213][ T9274] netlink: 'syz.1.1248': attribute type 14 has an invalid length. [ 754.669481][ T9289] FAULT_INJECTION: forcing a failure. [ 754.669481][ T9289] name failslab, interval 1, probability 0, space 0, times 0 [ 754.713673][ T9289] CPU: 0 PID: 9289 Comm: syz.0.1250 Not tainted syzkaller #0 [ 754.721222][ T9289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 754.731325][ T9289] Call Trace: [ 754.734637][ T9289] [ 754.737604][ T9289] dump_stack_lvl+0x188/0x24e [ 754.742510][ T9289] ? __alloc_skb+0xf9/0x7d0 [ 754.747051][ T9289] ? show_regs_print_info+0x12/0x12 [ 754.752273][ T9289] ? load_image+0x410/0x410 [ 754.756789][ T9289] ? __kasan_kmalloc+0x8e/0xa0 [ 754.761566][ T9289] ? verify_lock_unused+0x140/0x140 [ 754.766870][ T9289] should_fail_ex+0x390/0x4c0 [ 754.771572][ T9289] should_failslab+0x5/0x20 [ 754.776082][ T9289] slab_pre_alloc_hook+0x59/0x300 [ 754.781120][ T9289] kmem_cache_alloc+0x56/0x2f0 [ 754.785909][ T9289] ? skb_clone+0x1e7/0x370 [ 754.790344][ T9289] skb_clone+0x1e7/0x370 [ 754.794601][ T9289] __netlink_deliver_tap+0x3e4/0x7e0 [ 754.799905][ T9289] ? netlink_deliver_tap+0x2e/0x1b0 [ 754.805124][ T9289] netlink_deliver_tap+0x19c/0x1b0 [ 754.810424][ T9289] netlink_sendskb+0x64/0x130 [ 754.815112][ T9289] netlink_ack+0xcd1/0x1160 [ 754.819642][ T9289] ? netlink_dump+0xcd0/0xcd0 [ 754.824334][ T9289] ? __copy_skb_header+0x3ba/0x4f0 [ 754.829546][ T9289] ? __skb_clone+0x446/0x6c0 [ 754.834151][ T9289] netlink_rcv_skb+0x26d/0x440 [ 754.838928][ T9289] ? rtnetlink_bind+0x80/0x80 [ 754.843621][ T9289] ? netlink_ack+0x1160/0x1160 [ 754.848403][ T9289] ? netlink_deliver_tap+0x2e/0x1b0 [ 754.853619][ T9289] netlink_unicast+0x7ad/0x920 [ 754.858414][ T9289] netlink_sendmsg+0x8ad/0xbd0 [ 754.863215][ T9289] ? netlink_getsockopt+0x550/0x550 [ 754.868623][ T9289] ? apparmor_socket_sendmsg+0x8a/0x330 [ 754.874181][ T9289] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 754.879574][ T9289] ? security_socket_sendmsg+0x7c/0xa0 [ 754.885151][ T9289] ? netlink_getsockopt+0x550/0x550 [ 754.890391][ T9289] ____sys_sendmsg+0x5ed/0x9a0 [ 754.895188][ T9289] ? __sys_sendmsg_sock+0x30/0x30 [ 754.900224][ T9289] ? __import_iovec+0x306/0x510 [ 754.905103][ T9289] ? import_iovec+0x6f/0xa0 [ 754.909621][ T9289] ___sys_sendmsg+0x2a2/0x360 [ 754.914319][ T9289] ? __sys_sendmsg+0x2a0/0x2a0 [ 754.919115][ T9289] ? __lock_acquire+0x7c40/0x7c40 [ 754.924261][ T9289] __se_sys_sendmsg+0x1c3/0x2b0 [ 754.929133][ T9289] ? __x64_sys_sendmsg+0x80/0x80 [ 754.934098][ T9289] ? lockdep_hardirqs_on+0x94/0x140 [ 754.939343][ T9289] do_syscall_64+0x4c/0xa0 [ 754.943776][ T9289] ? clear_bhb_loop+0x60/0xb0 [ 754.948469][ T9289] ? clear_bhb_loop+0x60/0xb0 [ 754.953247][ T9289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 754.959236][ T9289] RIP: 0033:0x7fc79899de59 [ 754.963663][ T9289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.983384][ T9289] RSP: 002b:00007fc799909028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.991814][ T9289] RAX: ffffffffffffffda RBX: 00007fc798c25fa0 RCX: 00007fc79899de59 [ 754.999910][ T9289] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 755.008179][ T9289] RBP: 00007fc799909090 R08: 0000000000000000 R09: 0000000000000000 [ 755.016268][ T9289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.024257][ T9289] R13: 00007fc798c26038 R14: 00007fc798c25fa0 R15: 00007fff2c514e88 [ 755.032439][ T9289] [ 755.058051][ T9292] device syzkaller0 entered promiscuous mode [ 755.916521][ T9312] can: request_module (can-proto-0) failed. [ 757.814405][ T9297] __nla_validate_parse: 3 callbacks suppressed [ 757.814424][ T9297] netlink: 175 bytes leftover after parsing attributes in process `syz.4.1252'. [ 757.834851][ T9296] netlink: 'syz.1.1251': attribute type 10 has an invalid length. [ 757.862784][ T9296] team0: Port device geneve1 added [ 757.917298][ T9310] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1255'. [ 758.372398][ T9337] netlink: 'syz.1.1262': attribute type 10 has an invalid length. [ 758.493000][ T9337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 758.517237][ T9337] team0: Port device hsr0 added [ 758.938723][ T9350] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1266'. [ 759.953960][ T9371] netlink: 'syz.4.1271': attribute type 29 has an invalid length. [ 759.976944][ T9371] netlink: 'syz.4.1271': attribute type 29 has an invalid length. [ 760.126560][ T9376] netlink: 'syz.1.1270': attribute type 10 has an invalid length. [ 760.160224][ T9375] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1272'. [ 760.173234][ T9376] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1270'. [ 760.824868][ T9386] netlink: 'syz.2.1275': attribute type 10 has an invalid length. [ 760.913729][ T9386] device geneve1 entered promiscuous mode [ 760.922478][ T9392] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1277'. [ 760.953571][ T9386] team0: Port device geneve1 added [ 761.225878][ T9398] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1279'. [ 761.875545][ T9416] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 764.409465][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1287'. [ 764.493959][ T9437] netlink: 'syz.3.1291': attribute type 153 has an invalid length. [ 764.532970][ T9437] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.1291'. [ 764.923521][ T9447] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1292'. [ 764.992932][ T9447] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 765.049584][ T9457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1294'. [ 765.071603][ T9458] netlink: 'syz.1.1295': attribute type 3 has an invalid length. [ 765.126739][ T9455] netlink: 'syz.3.1296': attribute type 2 has an invalid length. [ 765.149339][ T9458] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1295'. [ 765.436465][ T9467] netlink: 'syz.2.1298': attribute type 7 has an invalid length. [ 765.445604][ T9467] netlink: 'syz.2.1298': attribute type 6 has an invalid length. [ 766.703339][ T9463] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 767.750511][ T9503] netlink: 'syz.3.1307': attribute type 27 has an invalid length. [ 767.778960][ T9503] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1307'. [ 767.893159][ T9509] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1309'. [ 768.414987][ T9514] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1311'. [ 768.606812][ T9514] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 769.149681][ T6372] wlan1: Trigger new scan to find an IBSS to join [ 770.077492][ T9531] netlink: 'syz.1.1314': attribute type 10 has an invalid length. [ 770.182137][ T9531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1314'. [ 770.242836][ T9531] device team0 entered promiscuous mode [ 770.262879][ T9531] device team_slave_0 entered promiscuous mode [ 770.270867][ T9531] device team_slave_1 entered promiscuous mode [ 770.296343][ T9531] device bridge0 entered promiscuous mode [ 770.302523][ T9531] device geneve1 entered promiscuous mode [ 770.308768][ T9531] device hsr0 entered promiscuous mode [ 770.361765][ T9531] bridge0: port 2(team0) entered blocking state [ 770.421261][ T9531] bridge0: port 2(team0) entered disabled state [ 770.440947][ T9531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 770.461006][ T9536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1315'. [ 770.857314][ T9546] netlink: 'syz.2.1320': attribute type 21 has an invalid length. [ 770.878990][ T9546] netlink: 'syz.2.1320': attribute type 1 has an invalid length. [ 770.915793][ T9549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1322'. [ 771.131740][ T9555] device syzkaller0 left promiscuous mode [ 771.461299][ T9560] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1325'. [ 771.840306][ T9572] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1329'. [ 771.979496][ T9572] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 772.070949][ T9572] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.098380][ T6340] wlan1: Trigger new scan to find an IBSS to join [ 772.717956][ T9582] can: request_module (can-proto-4) failed. [ 772.825869][ T9593] netlink: 103 bytes leftover after parsing attributes in process `syz.3.1333'. [ 772.882921][ T9597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1334'. [ 773.058925][ T9600] netlink: 'syz.1.1336': attribute type 21 has an invalid length. [ 773.105821][ T9600] netlink: 'syz.1.1336': attribute type 6 has an invalid length. [ 773.125945][ T9600] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1336'. [ 773.269559][ T9613] netlink: 'syz.4.1340': attribute type 10 has an invalid length. [ 773.292958][ T9613] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1340'. [ 774.095575][ T6372] wlan1: Creating new IBSS network, BSSID 1a:b0:cd:b3:08:e2 [ 774.301602][ T9623] netlink: 'syz.1.1343': attribute type 29 has an invalid length. [ 774.593001][ T9623] netlink: 'syz.1.1343': attribute type 29 has an invalid length. [ 774.917040][ T9633] netlink: 16247 bytes leftover after parsing attributes in process `syz.4.1346'. [ 775.045990][ T9640] device syzkaller0 entered promiscuous mode [ 775.380939][ T9656] __nla_validate_parse: 1 callbacks suppressed [ 775.380979][ T9656] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1353'. [ 775.474983][ T9657] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1354'. [ 776.293620][ T9683] netlink: 'syz.2.1361': attribute type 3 has an invalid length. [ 776.338527][ T9683] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1361'. [ 777.036184][ T9705] netlink: 15039 bytes leftover after parsing attributes in process `syz.3.1366'. [ 777.076162][ T4346] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 777.341062][ T9711] netlink: 'syz.4.1368': attribute type 11 has an invalid length. [ 777.413267][ T9711] netlink: 'syz.4.1368': attribute type 11 has an invalid length. [ 777.445470][ T9711] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1368'. [ 777.948077][ T9712] netlink: 'syz.4.1368': attribute type 16 has an invalid length. [ 778.026726][ T9712] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1368'. [ 778.246584][ T9718] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1371'. [ 778.941551][ T9734] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1373'. [ 779.484446][ T9751] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 779.962826][ T9746] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1376'. [ 780.670374][ T9779] netlink: 'syz.2.1384': attribute type 10 has an invalid length. [ 781.406716][ T9779] device wg1 entered promiscuous mode [ 781.412417][ T9779] team0: Device wg1 is of different type [ 781.571091][ T9794] netlink: 'syz.0.1388': attribute type 29 has an invalid length. [ 781.636621][ T9794] netlink: 'syz.0.1388': attribute type 29 has an invalid length. [ 781.675358][ T9794] netlink: 'syz.0.1388': attribute type 29 has an invalid length. [ 787.581523][ T9877] netlink: 'syz.2.1410': attribute type 2 has an invalid length. [ 788.598550][ T9891] netlink: 'syz.3.1413': attribute type 1 has an invalid length. [ 788.615723][ T9891] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1413'. [ 789.040542][ T9902] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 789.663919][ T9920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1421'. [ 789.716986][ T9920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1421'. [ 789.747445][ T9921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1421'. [ 789.791711][ T9917] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1420'. [ 789.819187][ T9922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1421'. [ 789.902692][ T9917] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 789.926604][ T9915] netlink: 180900 bytes leftover after parsing attributes in process `syz.1.1418'. [ 790.075156][ T9923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 790.257520][ T9915] openvswitch: netlink: Flow actions attr not present in new flow. [ 791.233776][ T9930] delete_channel: no stack [ 791.275166][ T9935] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1424'. [ 792.597367][ T9982] netlink: 'syz.3.1435': attribute type 12 has an invalid length. [ 792.625176][ T9982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1435'. [ 794.524817][T10025] netlink: 'syz.0.1446': attribute type 1 has an invalid length. [ 794.545402][T10025] __nla_validate_parse: 1 callbacks suppressed [ 794.545426][T10025] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1446'. [ 795.053041][T10038] device syzkaller0 entered promiscuous mode [ 795.181002][T10047] netlink: 'syz.0.1452': attribute type 1 has an invalid length. [ 795.215439][T10050] netlink: 16278 bytes leftover after parsing attributes in process `syz.3.1453'. [ 795.224920][T10051] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1450'. [ 795.472573][T10052] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.1453'. [ 797.730465][T10074] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1458'. [ 799.062036][T10090] netlink: 'syz.1.1461': attribute type 29 has an invalid length. [ 799.885644][T10090] netlink: 'syz.1.1461': attribute type 29 has an invalid length. [ 799.914225][T10093] device lo entered promiscuous mode [ 799.937947][T10093] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 800.658405][T10117] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1467'. [ 801.184700][T10137] netlink: 'syz.3.1472': attribute type 3 has an invalid length. [ 801.241626][T10137] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1472'. [ 801.323554][T10142] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1474'. [ 801.354030][T10144] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1474'. [ 801.487614][T10149] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1476'. [ 801.953755][T10158] netlink: 'syz.4.1477': attribute type 29 has an invalid length. [ 802.028816][T10158] netlink: 'syz.4.1477': attribute type 29 has an invalid length. [ 802.129889][T10161] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1480'. [ 802.175865][T10169] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1480'. [ 802.187081][T10154] device lo entered promiscuous mode [ 802.436366][T10170] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1482'. [ 802.701051][T10182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1484'. [ 803.117782][T10192] netlink: 92148 bytes leftover after parsing attributes in process `syz.0.1488'. [ 803.881558][T10213] netlink: 'syz.0.1494': attribute type 3 has an invalid length. [ 804.090898][T10225] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 804.119956][T10225] netlink: 'syz.2.1497': attribute type 29 has an invalid length. [ 804.247805][T10223] device lo entered promiscuous mode [ 804.304374][T10223] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 806.644391][T10300] netlink: 'syz.1.1516': attribute type 7 has an invalid length. [ 806.787325][T10304] netlink: 'syz.1.1516': attribute type 21 has an invalid length. [ 806.895778][T10300] __nla_validate_parse: 3 callbacks suppressed [ 806.895800][T10300] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.1516'. [ 806.896391][T10304] netlink: 'syz.1.1516': attribute type 6 has an invalid length. [ 807.164162][T10304] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1516'. [ 808.255679][T10327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1526'. [ 808.316866][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1527'. [ 808.418037][T10335] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1524'. [ 808.441826][T10340] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1525'. [ 808.463291][T10332] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1524'. [ 808.946078][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.952682][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.136746][T10345] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1529'. [ 810.445929][T10351] device vlan0 left promiscuous mode [ 810.451397][T10351] À: port 1(vlan0) entered disabled state [ 811.911204][T10364] netlink: 'syz.1.1534': attribute type 21 has an invalid length. [ 811.988631][T10364] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1534'. [ 813.058286][T10382] netlink: 'syz.2.1536': attribute type 10 has an invalid length. [ 813.778315][T10392] netlink: 'syz.3.1541': attribute type 3 has an invalid length. [ 813.825242][T10392] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1541'. [ 813.962537][T10394] netlink: 'syz.0.1542': attribute type 13 has an invalid length. [ 813.980182][T10394] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1542'. [ 814.112140][T10394] erspan0: refused to change device tx_queue_len [ 814.182449][T10394] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 814.974774][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 815.959250][T10433] delete_channel: no stack [ 816.079026][T10441] netlink: 'syz.1.1554': attribute type 2 has an invalid length. [ 816.119650][T10441] netlink: 'syz.1.1554': attribute type 8 has an invalid length. [ 816.205155][T10441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1554'. [ 817.464836][T10458] netlink: 'syz.0.1559': attribute type 21 has an invalid length. [ 817.551184][T10458] IPv6: NLM_F_CREATE should be specified when creating new route [ 817.635222][T10458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 817.642569][T10458] IPv6: NLM_F_CREATE should be set when creating new route [ 817.649990][T10458] IPv6: NLM_F_CREATE should be set when creating new route [ 817.657322][T10458] IPv6: NLM_F_CREATE should be set when creating new route [ 817.973951][T10470] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 818.067587][T10470] syzkaller1: linktype set to 823 [ 818.607816][T10477] netlink: 'syz.0.1562': attribute type 29 has an invalid length. [ 818.645386][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 818.855837][T10477] netlink: 'syz.0.1562': attribute type 29 has an invalid length. [ 818.917587][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 820.364787][T10515] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 820.394554][T10515] netlink: 'syz.2.1570': attribute type 8 has an invalid length. [ 820.427526][T10515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1570'. [ 820.471972][T10519] netlink: 'syz.2.1570': attribute type 2 has an invalid length. [ 820.515739][T10519] netlink: 'syz.2.1570': attribute type 8 has an invalid length. [ 820.559929][T10519] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1570'. [ 820.797880][T10524] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1573'. [ 823.085563][T10562] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1585'. [ 823.131106][T10561] netlink: 'syz.2.1585': attribute type 10 has an invalid length. [ 823.167809][T10561] device netdevsim0 entered promiscuous mode [ 823.265231][T10570] netlink: 'syz.4.1588': attribute type 275 has an invalid length. [ 823.493394][T10580] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1591'. [ 825.658210][T10603] netlink: 'syz.2.1596': attribute type 29 has an invalid length. [ 825.692736][T10603] netlink: 'syz.2.1596': attribute type 29 has an invalid length. [ 825.884908][T10611] netlink: 177648 bytes leftover after parsing attributes in process `syz.1.1598'. [ 827.617720][T10649] netlink: 'syz.1.1608': attribute type 11 has an invalid length. [ 827.652551][T10649] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1608'. [ 828.416826][T10663] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1613'. [ 828.429114][T10668] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.1615'. [ 828.850105][T10686] netlink: 'syz.4.1618': attribute type 2 has an invalid length. [ 828.955206][T10686] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.1618'. [ 829.512822][T10702] netlink: 'syz.3.1622': attribute type 2 has an invalid length. [ 829.704681][T10702] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1622'. [ 831.665006][T10744] netlink: 130181 bytes leftover after parsing attributes in process `syz.0.1636'. [ 832.009512][T10757] netlink: 'syz.2.1638': attribute type 8 has an invalid length. [ 832.055220][T10757] netlink: 'syz.2.1638': attribute type 4 has an invalid length. [ 832.075338][T10757] netlink: 'syz.2.1638': attribute type 7 has an invalid length. [ 832.106315][T10759] netlink: 'syz.4.1639': attribute type 8 has an invalid length. [ 832.124085][T10757] netlink: 'syz.2.1638': attribute type 8 has an invalid length. [ 832.147464][T10757] netlink: 'syz.2.1638': attribute type 7 has an invalid length. [ 832.166027][T10759] netlink: 'syz.4.1639': attribute type 1 has an invalid length. [ 832.174201][T10759] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.1639'. [ 832.175160][T10757] netlink: 125876 bytes leftover after parsing attributes in process `syz.2.1638'. [ 833.813752][T10796] netlink: 'syz.2.1649': attribute type 2 has an invalid length. [ 835.670219][T10666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 837.181439][T10845] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1661'. [ 837.696278][T10861] netlink: 'syz.3.1664': attribute type 2 has an invalid length. [ 840.792332][T10932] sctp: [Deprecated]: syz.0.1682 (pid 10932) Use of struct sctp_assoc_value in delayed_ack socket option. [ 840.792332][T10932] Use struct sctp_sack_info instead [ 841.061580][T10942] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1680'. [ 841.513315][T10937] netlink: 16083 bytes leftover after parsing attributes in process `syz.3.1683'. [ 841.537052][T10942] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 841.565191][T10942] CPU: 1 PID: 10942 Comm: syz.2.1680 Not tainted syzkaller #0 [ 841.572815][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 841.582912][T10942] Call Trace: [ 841.586432][T10942] [ 841.589396][T10942] dump_stack_lvl+0x188/0x24e [ 841.594142][T10942] ? show_regs_print_info+0x12/0x12 [ 841.599476][T10942] ? load_image+0x410/0x410 [ 841.604042][T10942] sysfs_warn_dup+0x8a/0xa0 [ 841.608612][T10942] sysfs_do_create_link_sd+0xc0/0x110 [ 841.614051][T10942] device_add+0x83b/0x1050 [ 841.618517][T10942] wiphy_register+0x1d8b/0x2aa0 [ 841.623503][T10942] ? cfg80211_event_work+0x40/0x40 [ 841.628714][T10942] ? minstrel_ht_alloc+0x894/0xa20 [ 841.633864][T10942] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 841.639945][T10942] ieee80211_register_hw+0x2d48/0x39f0 [ 841.645609][T10942] ? ieee80211_register_hw+0xf61/0x39f0 [ 841.651174][T10942] ? ieee80211_register_hw+0xf61/0x39f0 [ 841.656734][T10942] ? ieee80211_tasklet_handler+0x20/0x20 [ 841.662464][T10942] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 841.668377][T10942] ? __debug_object_init+0xed/0x440 [ 841.673594][T10942] ? memset+0x1e/0x40 [ 841.677692][T10942] ? __hrtimer_init+0x189/0x270 [ 841.682562][T10942] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 841.688307][T10942] ? memcpy+0x3c/0x60 [ 841.692301][T10942] hwsim_new_radio_nl+0xab7/0xc90 [ 841.697362][T10942] genl_family_rcv_msg_doit+0x22f/0x350 [ 841.702946][T10942] ? end_current_label_crit_section+0x170/0x170 [ 841.709226][T10942] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 841.715152][T10942] ? bpf_lsm_capable+0x5/0x10 [ 841.719848][T10942] ? security_capable+0x85/0xb0 [ 841.724717][T10942] genl_rcv_msg+0x601/0x790 [ 841.729352][T10942] ? genl_bind+0x360/0x360 [ 841.733782][T10942] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 841.740238][T10942] netlink_rcv_skb+0x1ef/0x440 [ 841.745194][T10942] ? genl_bind+0x360/0x360 [ 841.749633][T10942] ? netlink_ack+0x1160/0x1160 [ 841.754421][T10942] ? down_read+0x1a8/0x2d0 [ 841.758853][T10942] genl_rcv+0x24/0x40 [ 841.762892][T10942] netlink_unicast+0x7ad/0x920 [ 841.767795][T10942] netlink_sendmsg+0x8ad/0xbd0 [ 841.772603][T10942] ? netlink_getsockopt+0x550/0x550 [ 841.777830][T10942] ? apparmor_socket_sendmsg+0x8a/0x330 [ 841.783405][T10942] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 841.788702][T10942] ? security_socket_sendmsg+0x7c/0xa0 [ 841.794193][T10942] ? netlink_getsockopt+0x550/0x550 [ 841.799407][T10942] ____sys_sendmsg+0x5ed/0x9a0 [ 841.804394][T10942] ? __sys_sendmsg_sock+0x30/0x30 [ 841.809441][T10942] ? __import_iovec+0x306/0x510 [ 841.814402][T10942] ? import_iovec+0x6f/0xa0 [ 841.819013][T10942] ___sys_sendmsg+0x2a2/0x360 [ 841.823716][T10942] ? __sys_sendmsg+0x2a0/0x2a0 [ 841.828542][T10942] __se_sys_sendmsg+0x1c3/0x2b0 [ 841.833415][T10942] ? __x64_sys_sendmsg+0x80/0x80 [ 841.838385][T10942] ? lockdep_hardirqs_on+0x94/0x140 [ 841.843616][T10942] do_syscall_64+0x4c/0xa0 [ 841.848065][T10942] ? clear_bhb_loop+0x60/0xb0 [ 841.852763][T10942] ? clear_bhb_loop+0x60/0xb0 [ 841.857461][T10942] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 841.863454][T10942] RIP: 0033:0x7f9729b9de59 [ 841.867883][T10942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.887762][T10942] RSP: 002b:00007f972aad3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.896193][T10942] RAX: ffffffffffffffda RBX: 00007f9729e26360 RCX: 00007f9729b9de59 [ 841.904360][T10942] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 841.912354][T10942] RBP: 00007f9729c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 841.920337][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.928404][T10942] R13: 00007f9729e263f8 R14: 00007f9729e26360 R15: 00007fff8aa9d8a8 [ 841.936421][T10942] [ 842.378527][T10963] netlink: 194236 bytes leftover after parsing attributes in process `syz.4.1690'. [ 842.408642][T10963] netlink: zone id is out of range [ 842.425488][T10963] netlink: get zone limit has 8 unknown bytes [ 842.910895][T10975] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 843.285823][T10979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1693'. [ 843.392057][T10987] netlink: 'syz.2.1694': attribute type 5 has an invalid length. [ 843.434934][T10987] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1694'. [ 843.510120][T10993] syz.1.1696[10993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.510278][T10993] syz.1.1696[10993] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 843.534048][ T4346] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 843.578897][ T4346] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 843.647163][T10976] netlink: 'syz.4.1692': attribute type 10 has an invalid length. [ 843.709059][T10976] device syz_tun entered promiscuous mode [ 843.790045][T10976] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 844.464428][T11007] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1699'. [ 847.622758][T11007] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 847.715202][T11038] netlink: 'syz.1.1705': attribute type 2 has an invalid length. [ 847.723000][T11038] netlink: 'syz.1.1705': attribute type 1 has an invalid length. [ 847.766058][T11038] netlink: 'syz.1.1705': attribute type 4 has an invalid length. [ 847.795697][T11038] netlink: 208312 bytes leftover after parsing attributes in process `syz.1.1705'. [ 848.070096][T11042] netlink: 'syz.0.1708': attribute type 23 has an invalid length. [ 848.221063][T11055] netlink: 'syz.1.1711': attribute type 4 has an invalid length. [ 848.279875][T11056] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1712'. [ 848.315285][T11055] netlink: 113044 bytes leftover after parsing attributes in process `syz.1.1711'. [ 848.784358][T11066] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1715'. [ 848.916571][T11065] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1714'. [ 853.121598][T11129] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1732'. [ 853.879150][T11136] netlink: 'syz.1.1735': attribute type 46 has an invalid length. [ 854.140512][T11138] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 854.317298][T11138] syzkaller1: linktype set to 0 [ 855.342655][T11159] netlink: 'syz.4.1741': attribute type 25 has an invalid length. [ 855.385663][T11159] netlink: 'syz.4.1741': attribute type 3 has an invalid length. [ 855.472633][T11159] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1741'. [ 856.148465][T11165] device syzkaller0 entered promiscuous mode [ 856.321622][T11174] IPv6: NLM_F_CREATE should be specified when creating new route [ 856.408791][T11174] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1743'. [ 856.478054][T11171] netlink: 'syz.0.1744': attribute type 21 has an invalid length. [ 856.526393][T11171] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.1744'. [ 859.255193][T11212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1755'. [ 859.275288][T11212] device caif0 entered promiscuous mode [ 859.304164][T11212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 859.764613][T11226] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1762'. [ 859.862525][T11233] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1762'. [ 860.024250][T11233] bridge0: port 5(team0) entered disabled state [ 860.083824][T11238] netlink: 'syz.2.1762': attribute type 21 has an invalid length. [ 860.116819][T11238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1762'. [ 860.135226][T11238] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 860.180929][T11235] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1761'. [ 860.195684][T11237] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1764'. [ 860.439181][T11247] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 860.500126][T11247] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 860.538892][T11249] netlink: 'syz.2.1767': attribute type 29 has an invalid length. [ 862.585615][T11278] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1771'. [ 863.476620][T11302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1778'. [ 863.515343][T11305] netlink: 'syz.4.1778': attribute type 2 has an invalid length. [ 863.995386][T11312] can: request_module (can-proto-0) failed. [ 866.238723][T11342] device syzkaller0 entered promiscuous mode [ 866.277115][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1791'. [ 866.515538][T11342] IPv6: NLM_F_CREATE should be specified when creating new route [ 866.536905][T11342] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1789'. [ 867.048542][T11371] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1795'. [ 870.349327][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.355882][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.370423][T11377] netlink: 'syz.1.1798': attribute type 11 has an invalid length. [ 870.802248][T11415] netlink: 'syz.3.1808': attribute type 11 has an invalid length. [ 870.811257][T11415] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1808'. [ 870.833299][T11415] netlink: 'syz.3.1808': attribute type 10 has an invalid length. [ 870.865840][T11415] device wlan1 left promiscuous mode [ 870.909322][T11413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 871.142201][T11427] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1811'. [ 871.311072][T11428] netlink: 'syz.4.1809': attribute type 10 has an invalid length. [ 871.312523][T11440] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.1814'. [ 871.435717][T11436] netlink: 'syz.0.1812': attribute type 10 has an invalid length. [ 871.444353][T11436] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1812'. [ 871.472854][T11436] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 871.524639][T11447] netlink: 'syz.2.1815': attribute type 29 has an invalid length. [ 871.562608][T11436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 871.624830][T11447] netlink: 'syz.2.1815': attribute type 29 has an invalid length. [ 871.687786][T11448] netlink: 'syz.2.1815': attribute type 29 has an invalid length. [ 871.703824][T11430] device sit0 entered promiscuous mode [ 872.790033][T11482] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1825'. [ 875.949745][T11503] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1831'. [ 879.060468][T11548] netlink: 101 bytes leftover after parsing attributes in process `syz.2.1842'. [ 883.350716][T11610] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1857'. [ 883.416308][T11610] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 883.474875][T11610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.196740][T11628] netlink: 'syz.3.1862': attribute type 2 has an invalid length. [ 884.239487][T11628] netlink: 'syz.3.1862': attribute type 1 has an invalid length. [ 884.257992][T11628] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1862'. [ 886.608982][T11704] netlink: 'syz.2.1882': attribute type 10 has an invalid length. [ 886.638392][T11704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1882'. [ 886.854329][T11704] batman_adv: batadv0: Adding interface: virt_wifi0 [ 886.889450][T11704] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.029874][T11710] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1882'. [ 887.064661][T11704] batman_adv: batadv0: Interface activated: virt_wifi0 [ 889.601906][T11719] netlink: 'syz.1.1886': attribute type 10 has an invalid length. [ 889.625409][T11719] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1886'. [ 889.657747][T11723] netlink: 'syz.0.1888': attribute type 3 has an invalid length. [ 889.735190][T11723] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1888'. [ 890.476542][T11760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'. [ 890.524916][T11760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'. [ 890.568288][T11761] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'. [ 890.600755][T11760] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1894'. [ 892.203993][T11797] netlink: 'syz.4.1904': attribute type 2 has an invalid length. [ 892.259511][T11799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1906'. [ 892.304411][T11799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1906'. [ 892.404939][T11797] device 0 entered promiscuous mode [ 892.616565][T11802] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1906'. [ 895.067659][T11828] netlink: 'syz.2.1915': attribute type 3 has an invalid length. [ 895.101455][T11828] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1915'. [ 895.467658][T11845] netlink: 'syz.1.1918': attribute type 29 has an invalid length. [ 895.479391][T11845] netlink: 'syz.1.1918': attribute type 29 has an invalid length. [ 895.491303][T11845] netlink: 'syz.1.1918': attribute type 29 has an invalid length. [ 896.023199][T11863] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1923'. [ 896.069786][T11863] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 896.144830][T11863] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 896.183702][T11867] netlink: 'syz.0.1924': attribute type 4 has an invalid length. [ 896.190329][T11868] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 896.209149][T11867] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1924'. [ 896.210577][T11868] pim6reg0: linktype set to 780 [ 896.638078][T11881] netlink: 'syz.2.1928': attribute type 10 has an invalid length. [ 896.800087][T11888] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1930'. [ 897.522333][T11904] sctp: [Deprecated]: syz.2.1934 (pid 11904) Use of struct sctp_assoc_value in delayed_ack socket option. [ 897.522333][T11904] Use struct sctp_sack_info instead [ 897.990201][T11921] netlink: 'syz.3.1941': attribute type 10 has an invalid length. [ 898.035501][T11921] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1941'. [ 898.074675][T11918] netlink: 'syz.3.1941': attribute type 10 has an invalid length. [ 898.098847][T11923] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1943'. [ 898.115423][T11918] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1941'. [ 898.503830][T11937] netlink: 'syz.1.1948': attribute type 3 has an invalid length. [ 898.533086][T11937] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1948'. [ 899.461095][T11964] netlink: 'syz.3.1956': attribute type 29 has an invalid length. [ 900.301894][T11977] validate_nla: 1 callbacks suppressed [ 900.301914][T11977] netlink: 'syz.4.1959': attribute type 46 has an invalid length. [ 900.316242][T11977] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1959'. [ 900.440621][T11979] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1960'. [ 902.322842][T11987] netlink: 'syz.4.1962': attribute type 1 has an invalid length. [ 902.358551][T11987] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1962'. [ 902.483957][T11997] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1966'. [ 902.603943][T11987] : port 1(ip6gretap0) entered blocking state [ 902.617407][T11987] : port 1(ip6gretap0) entered disabled state [ 902.643855][T11987] device ip6gretap0 entered promiscuous mode [ 902.702865][T12000] device ip6gretap0 left promiscuous mode [ 902.709450][T12000] : port 1(ip6gretap0) entered disabled state [ 903.354096][T12024] netlink: 'syz.2.1972': attribute type 15 has an invalid length. [ 903.397181][T12024] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1972'. [ 903.904763][T12037] sctp: [Deprecated]: syz.3.1976 (pid 12037) Use of int in max_burst socket option deprecated. [ 903.904763][T12037] Use struct sctp_assoc_value instead [ 904.444753][T12057] netlink: 'syz.0.1981': attribute type 153 has an invalid length. [ 904.496648][T12057] netlink: 69544 bytes leftover after parsing attributes in process `syz.0.1981'. [ 904.683024][T12065] netlink: 'syz.2.1984': attribute type 2 has an invalid length. [ 904.839584][T12065] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 904.933732][T12065] netlink: 'syz.2.1984': attribute type 4 has an invalid length. [ 905.057135][T12065] netlink: 'syz.2.1984': attribute type 6 has an invalid length. [ 905.264749][T12065] netlink: 'syz.2.1984': attribute type 7 has an invalid length. [ 905.356490][T12065] netlink: 'syz.2.1984': attribute type 5 has an invalid length. [ 905.375687][T12065] netlink: 206468 bytes leftover after parsing attributes in process `syz.2.1984'. [ 905.889518][T12081] netlink: 'syz.1.1989': attribute type 10 has an invalid length. [ 905.908466][T12083] netlink: 'syz.3.1990': attribute type 29 has an invalid length. [ 905.933831][T12081] bridge0: port 3(dummy0) entered disabled state [ 905.947179][T12081] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.093751][T12080] netlink: 'syz.0.1988': attribute type 21 has an invalid length. [ 906.104494][T12080] netlink: 'syz.0.1988': attribute type 6 has an invalid length. [ 906.112502][T12080] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1988'. [ 906.121908][T12083] netlink: 'syz.3.1990': attribute type 29 has an invalid length. [ 906.138574][T12094] netlink: 'syz.4.1993': attribute type 1 has an invalid length. [ 906.178549][T12088] netlink: 'syz.3.1990': attribute type 29 has an invalid length. [ 906.239859][T12091] netlink: 'syz.2.1992': attribute type 4 has an invalid length. [ 906.314837][T12091] netlink: 134728 bytes leftover after parsing attributes in process `syz.2.1992'. [ 907.180252][T12134] netlink: 'syz.1.2005': attribute type 10 has an invalid length. [ 907.382811][T12134] device team_slave_0 left promiscuous mode [ 907.426154][T12134] team0 (unregistering): Port device team_slave_0 removed [ 907.464242][T12134] device team_slave_1 left promiscuous mode [ 907.498125][T12134] team0 (unregistering): Port device team_slave_1 removed [ 907.537336][T12134] device bridge0 left promiscuous mode [ 907.558827][T12134] team0 (unregistering): Port device bridge0 removed [ 907.585456][T12134] device geneve1 left promiscuous mode [ 907.629364][T12134] team0 (unregistering): Port device geneve1 removed [ 907.656881][T12134] device hsr0 left promiscuous mode [ 907.725330][T12134] team0 (unregistering): Port device hsr0 removed [ 907.900079][T12143] netlink: 64019 bytes leftover after parsing attributes in process `syz.3.2007'. [ 908.420360][T12156] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.2010'. [ 908.548506][T12174] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2013'. [ 908.645864][T12174] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.2013'. [ 910.594789][T12213] validate_nla: 2 callbacks suppressed [ 910.594835][T12213] netlink: 'syz.4.2024': attribute type 29 has an invalid length. [ 910.665737][T12213] netlink: 'syz.4.2024': attribute type 29 has an invalid length. [ 910.674955][T12216] netlink: 'syz.4.2024': attribute type 29 has an invalid length. [ 910.729625][T12215] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2025'. [ 911.017457][T12226] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 911.564146][T12246] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2034'. [ 911.599837][T12246] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 911.772539][T12246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 912.187916][T12259] netlink: 'syz.3.2036': attribute type 21 has an invalid length. [ 912.376683][T12266] netlink: 'syz.2.2039': attribute type 29 has an invalid length. [ 912.392775][T12259] netlink: 'syz.3.2036': attribute type 22 has an invalid length. [ 912.413829][T12259] netlink: 'syz.3.2036': attribute type 13 has an invalid length. [ 912.532072][T12259] netlink: 6188 bytes leftover after parsing attributes in process `syz.3.2036'. [ 912.589668][T12272] netlink: 'syz.1.2040': attribute type 29 has an invalid length. [ 912.606997][T12272] netlink: 'syz.1.2040': attribute type 29 has an invalid length. [ 912.637913][T12266] netlink: 'syz.2.2039': attribute type 29 has an invalid length. [ 913.061148][T12286] can: request_module (can-proto-0) failed. [ 913.079828][T12291] device veth1_macvtap left promiscuous mode [ 913.150964][ T11] wlan1: Trigger new scan to find an IBSS to join [ 913.176706][T12295] device veth1_macvtap entered promiscuous mode [ 913.244509][T12295] device macsec0 entered promiscuous mode [ 913.278664][ T6361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 915.502030][T12350] ref_ctr_offset mismatch. inode: 0x8b7 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 915.701947][T12352] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2063'. [ 916.630620][T12380] tun0: tun_chr_ioctl cmd 1074025675 [ 916.642763][T12380] tun0: persist enabled [ 916.650642][T12380] tun0: tun_chr_ioctl cmd 1074025675 [ 916.658011][T12380] tun0: persist enabled [ 917.215793][T12391] validate_nla: 1 callbacks suppressed [ 917.215814][T12391] netlink: 'syz.2.2074': attribute type 10 has an invalid length. [ 917.807950][T12406] netlink: 'syz.3.2078': attribute type 21 has an invalid length. [ 918.096326][ T6353] wlan1: Trigger new scan to find an IBSS to join [ 918.312893][T12421] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2081'. [ 918.479848][T12421] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 919.058369][ T6361] wlan1: Creating new IBSS network, BSSID 4e:5b:6f:1b:e4:f7 [ 919.464562][T12462] netlink: 'syz.0.2092': attribute type 2 has an invalid length. [ 919.493662][T12464] netlink: 'syz.1.2093': attribute type 2 has an invalid length. [ 919.502208][T12464] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.2093'. [ 919.538919][T12462] device 0 entered promiscuous mode [ 919.728104][T12468] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.2094'. [ 919.770077][T12475] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.2095'. [ 919.805877][T12475] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 920.305969][T12484] netlink: 175 bytes leftover after parsing attributes in process `syz.2.2099'. [ 920.423535][T12485] netlink: 'syz.4.2097': attribute type 16 has an invalid length. [ 920.436293][T12485] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2097'. [ 921.747393][T12524] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2109'. [ 924.103575][T12541] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 924.296385][T12553] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2117'. [ 924.850605][T12565] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2120'. [ 924.947758][T12571] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2121'. [ 925.177613][T12574] netlink: 'syz.2.2123': attribute type 21 has an invalid length. [ 925.215910][T12574] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2123'. [ 925.245698][T12574] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 925.295536][T12574] netlink: 'syz.2.2123': attribute type 5 has an invalid length. [ 925.309281][T12574] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2123'. [ 925.343183][T12575] netlink: 'syz.2.2123': attribute type 21 has an invalid length. [ 925.372029][T12575] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2123'. [ 925.388334][T12575] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 925.439247][T12575] netlink: 'syz.2.2123': attribute type 5 has an invalid length. [ 925.476319][T12575] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2123'. [ 925.531119][T12578] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2124'. [ 925.596560][T12586] netlink: 'syz.1.2127': attribute type 21 has an invalid length. [ 925.604720][T12586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2127'. [ 926.008811][T12598] tipc: Started in network mode [ 926.021731][T12598] tipc: Node identity 9215a268, cluster identity 4711 [ 926.031522][T12598] tipc: Node number set to 2450891368 [ 926.389518][T12608] TCP: TCP_TX_DELAY enabled [ 926.939442][T12626] netlink: 'syz.3.2137': attribute type 3 has an invalid length. [ 926.975341][T12626] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2137'. [ 927.641734][T12658] device pim6reg1 entered promiscuous mode [ 927.862999][T12660] netlink: 'syz.4.2146': attribute type 20 has an invalid length. [ 929.372982][T12690] netlink: 'syz.1.2153': attribute type 10 has an invalid length. [ 930.392181][T12730] __nla_validate_parse: 1 callbacks suppressed [ 930.392203][T12730] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2164'. [ 930.473806][T12730] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2164'. [ 930.909946][T12746] validate_nla: 1 callbacks suppressed [ 930.909970][T12746] netlink: 'syz.2.2167': attribute type 10 has an invalid length. [ 930.948336][T12746] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 931.396141][T12760] netlink: 'syz.2.2171': attribute type 1 has an invalid length. [ 931.432656][T12760] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.2171'. [ 931.792445][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.798997][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.017562][T12767] delete_channel: no stack [ 932.022385][T12767] delete_channel: no stack [ 932.923947][T12791] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 933.062119][T12798] netlink: 'syz.2.2182': attribute type 21 has an invalid length. [ 933.905909][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 933.960422][T12815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.006046][T12815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.024017][T12815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.203569][ T4346] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 935.520281][T12842] netlink: 'syz.3.2197': attribute type 29 has an invalid length. [ 935.531111][T12837] netlink: 'syz.2.2195': attribute type 28 has an invalid length. [ 935.588021][T12842] netlink: 'syz.3.2197': attribute type 29 has an invalid length. [ 935.607427][T12842] netlink: 'syz.3.2197': attribute type 29 has an invalid length. [ 935.952500][T12850] netlink: 'syz.2.2195': attribute type 10 has an invalid length. [ 936.256083][ T4346] Bluetooth: hci3: command 0x0409 tx timeout [ 936.395375][T12854] delete_channel: no stack [ 937.104445][T12883] netlink: 'syz.0.2207': attribute type 3 has an invalid length. [ 937.128759][T12883] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2207'. [ 937.655809][T12897] netlink: 'syz.0.2211': attribute type 10 has an invalid length. [ 937.663797][T12897] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2211'. [ 938.209520][T12910] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2215'. [ 939.500771][T12924] ================================================================== [ 939.508919][T12924] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6c9/0x920 [ 939.517019][T12924] Write of size 88 at addr ffff88807b520710 by task syz.4.2217/12924 [ 939.525199][T12924] [ 939.527571][T12924] CPU: 0 PID: 12924 Comm: syz.4.2217 Not tainted syzkaller #0 [ 939.535048][T12924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.545124][T12924] Call Trace: [ 939.548453][T12924] [ 939.551404][T12924] dump_stack_lvl+0x188/0x24e [ 939.556869][T12924] ? __lock_acquire+0x7c40/0x7c40 [ 939.561953][T12924] ? show_regs_print_info+0x12/0x12 [ 939.567185][T12924] ? load_image+0x410/0x410 [ 939.571824][T12924] ? __virt_addr_valid+0x467/0x540 [ 939.576976][T12924] ? __bpf_get_stackid+0x6c9/0x920 [ 939.582286][T12924] print_report+0xa8/0x210 [ 939.586904][T12924] kasan_report+0x10b/0x140 [ 939.591789][T12924] ? __bpf_get_stackid+0x6c9/0x920 [ 939.596954][T12924] kasan_check_range+0x235/0x290 [ 939.602212][T12924] ? __bpf_get_stackid+0x6c9/0x920 [ 939.607550][T12924] memcpy+0x3c/0x60 [ 939.611470][T12924] __bpf_get_stackid+0x6c9/0x920 [ 939.616438][T12924] bpf_get_stackid_pe+0x33f/0x400 [ 939.621767][T12924] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 939.627414][T12924] bpf_overflow_handler+0x50b/0x790 [ 939.632670][T12924] ? bpf_overflow_handler+0xd9/0x790 [ 939.638085][T12924] ? perf_swevent_overflow+0x230/0x230 [ 939.643668][T12924] ? ct_irq_exit_irqson+0x113/0x170 [ 939.648919][T12924] ? __perf_event_account_interrupt+0x187/0x280 [ 939.655473][T12924] __perf_event_overflow+0x457/0x630 [ 939.660970][T12924] perf_swevent_event+0x315/0x570 [ 939.666371][T12924] ? perf_tp_event+0xc10/0xc10 [ 939.671336][T12924] ___perf_sw_event+0x498/0x6d0 [ 939.676300][T12924] ? ___perf_sw_event+0x184/0x6d0 [ 939.681356][T12924] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 939.687795][T12924] ? mark_lock+0x94/0x320 [ 939.692160][T12924] ? ct_nmi_exit+0x145/0x1c0 [ 939.696796][T12924] ? ct_irq_exit_irqson+0x113/0x170 [ 939.702284][T12924] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 939.708730][T12924] ? lock_chain_count+0x20/0x20 [ 939.713602][T12924] __perf_sw_event+0x135/0x260 [ 939.718514][T12924] do_user_addr_fault+0x497/0xb20 [ 939.723653][T12924] ? trace_hardirqs_off_finish+0x86/0x180 [ 939.729482][T12924] exc_page_fault+0x60/0x100 [ 939.734092][T12924] asm_exc_page_fault+0x22/0x30 [ 939.738992][T12924] RIP: 0010:copy_user_short_string+0xd/0x40 [ 939.744942][T12924] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 939.764751][T12924] RSP: 0018:ffffc9000c4772a8 EFLAGS: 00050202 [ 939.770849][T12924] RAX: ffffffff84155001 RBX: 000000000000000b RCX: 0000000000000001 [ 939.778925][T12924] RDX: 0000000000000003 RSI: ffff88802a16066c RDI: 000020000000cf3d [ 939.787007][T12924] RBP: 0000000000000000 R08: 40203023636e7566 R09: 1ffff1100542c0ce [ 939.795087][T12924] R10: dffffc0000000000 R11: ffffed100542c0cf R12: 00007fffffffeff5 [ 939.803077][T12924] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88802a16066c [ 939.811156][T12924] ? _copy_from_user+0x151/0x170 [ 939.816130][T12924] _copy_to_user+0xea/0x130 [ 939.820651][T12924] bpf_verifier_vlog+0x172/0x3a0 [ 939.825705][T12924] verbose+0x1f0/0x2b0 [ 939.829797][T12924] ? check_func_arg_reg_off+0x280/0x280 [ 939.835371][T12924] ? kvmalloc_node+0x6c/0x180 [ 939.840157][T12924] ? bpf_lsm_capable+0x5/0x10 [ 939.844882][T12924] ? security_capable+0x85/0xb0 [ 939.849765][T12924] bpf_check+0x2f48/0x11000 [ 939.854292][T12924] ? __lock_acquire+0x138a/0x7c40 [ 939.859431][T12924] ? mark_lock+0x94/0x320 [ 939.863790][T12924] ? bpf_get_btf_vmlinux+0x10/0x10 [ 939.868920][T12924] ? __lock_acquire+0x1465/0x7c40 [ 939.873989][T12924] ? mark_lock+0x94/0x320 [ 939.878389][T12924] ? __lock_acquire+0x138a/0x7c40 [ 939.883530][T12924] ? mark_lock+0x94/0x320 [ 939.887887][T12924] ? __lock_acquire+0x1465/0x7c40 [ 939.892932][T12924] ? mark_lock+0x94/0x320 [ 939.897285][T12924] ? __lock_acquire+0x1465/0x7c40 [ 939.902332][T12924] ? verify_lock_unused+0x140/0x140 [ 939.907557][T12924] ? verify_lock_unused+0x140/0x140 [ 939.912778][T12924] ? verify_lock_unused+0x140/0x140 [ 939.918175][T12924] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 939.924096][T12924] ? ct_nmi_exit+0x145/0x1c0 [ 939.928915][T12924] ? ct_irq_exit_irqson+0x113/0x170 [ 939.934134][T12924] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 939.940139][T12924] ? __lock_acquire+0x7c40/0x7c40 [ 939.945192][T12924] ? lock_chain_count+0x20/0x20 [ 939.950065][T12924] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 939.956429][T12924] ? lockdep_hardirqs_on+0x94/0x140 [ 939.961650][T12924] ? ktime_get_with_offset+0xff/0x320 [ 939.967042][T12924] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 939.973303][T12924] ? ktime_get_real_ts64+0x440/0x440 [ 939.978608][T12924] ? do_raw_spin_unlock+0x11d/0x230 [ 939.983856][T12924] ? __might_fault+0xc2/0x120 [ 939.988552][T12924] ? memset+0x1e/0x40 [ 939.992572][T12924] ? bpf_obj_name_cpy+0x190/0x1d0 [ 939.997638][T12924] bpf_prog_load+0x100e/0x1530 [ 940.002432][T12924] ? map_freeze+0x390/0x390 [ 940.006960][T12924] ? __might_fault+0xa6/0x120 [ 940.011661][T12924] ? __might_fault+0xa6/0x120 [ 940.016358][T12924] ? __might_fault+0xc2/0x120 [ 940.021072][T12924] ? __might_fault+0xa6/0x120 [ 940.025800][T12924] ? bpf_lsm_bpf+0x5/0x10 [ 940.030176][T12924] ? security_bpf+0x7a/0xa0 [ 940.034713][T12924] __sys_bpf+0x5b8/0x780 [ 940.038988][T12924] ? bpf_link_show_fdinfo+0x380/0x380 [ 940.044391][T12924] ? lock_chain_count+0x20/0x20 [ 940.049280][T12924] __x64_sys_bpf+0x78/0x90 [ 940.053720][T12924] do_syscall_64+0x4c/0xa0 [ 940.058161][T12924] ? clear_bhb_loop+0x60/0xb0 [ 940.062963][T12924] ? clear_bhb_loop+0x60/0xb0 [ 940.067749][T12924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.073662][T12924] RIP: 0033:0x7f4c5179de59 [ 940.078102][T12924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.098009][T12924] RSP: 002b:00007f4c52728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.106541][T12924] RAX: ffffffffffffffda RBX: 00007f4c51a25fa0 RCX: 00007f4c5179de59 [ 940.114718][T12924] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 940.122703][T12924] RBP: 00007f4c51833e6f R08: 0000000000000000 R09: 0000000000000000 [ 940.130691][T12924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.138679][T12924] R13: 00007f4c51a26038 R14: 00007f4c51a25fa0 R15: 00007ffc89607838 [ 940.146675][T12924] [ 940.149707][T12924] [ 940.152067][T12924] Allocated by task 12924: [ 940.156597][T12924] kasan_set_track+0x4b/0x70 [ 940.161590][T12924] __kasan_kmalloc+0x8e/0xa0 [ 940.166205][T12924] __kmalloc_node+0xb2/0x240 [ 940.170821][T12924] bpf_map_area_alloc+0x47/0xe0 [ 940.175775][T12924] prealloc_elems_and_freelist+0x86/0x1c0 [ 940.181511][T12924] stack_map_alloc+0x386/0x510 [ 940.186384][T12924] map_create+0x524/0xff0 [ 940.190731][T12924] __sys_bpf+0x38b/0x780 [ 940.195004][T12924] __x64_sys_bpf+0x78/0x90 [ 940.199429][T12924] do_syscall_64+0x4c/0xa0 [ 940.203872][T12924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.209793][T12924] [ 940.212128][T12924] Last potentially related work creation: [ 940.217935][T12924] kasan_save_stack+0x3a/0x60 [ 940.222638][T12924] __kasan_record_aux_stack+0xb2/0xc0 [ 940.228081][T12924] kvfree_call_rcu+0x103/0x890 [ 940.232872][T12924] trie_update_elem+0x9a8/0xdd0 [ 940.237842][T12924] bpf_map_update_value+0x59d/0x670 [ 940.243078][T12924] generic_map_update_batch+0x52e/0x7f0 [ 940.248656][T12924] bpf_map_do_batch+0x475/0x5f0 [ 940.253537][T12924] __sys_bpf+0x6f7/0x780 [ 940.257898][T12924] __x64_sys_bpf+0x78/0x90 [ 940.262333][T12924] do_syscall_64+0x4c/0xa0 [ 940.266771][T12924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 940.272704][T12924] [ 940.275051][T12924] Second to last potentially related work creation: [ 940.281661][T12924] kasan_save_stack+0x3a/0x60 [ 940.286468][T12924] __kasan_record_aux_stack+0xb2/0xc0 [ 940.291878][T12924] call_rcu+0x14f/0x950 [ 940.296079][T12924] nf_unregister_net_hooks+0xc7/0x130 [ 940.301651][T12924] cleanup_net+0x703/0xba0 [ 940.306105][T12924] process_one_work+0x8ab/0x1160 [ 940.311060][T12924] worker_thread+0xaf5/0x12a0 [ 940.315764][T12924] kthread+0x29d/0x330 [ 940.319859][T12924] ret_from_fork+0x1f/0x30 [ 940.324300][T12924] [ 940.326637][T12924] The buggy address belongs to the object at ffff88807b520700 [ 940.326637][T12924] which belongs to the cache kmalloc-cg-64 of size 64 [ 940.340955][T12924] The buggy address is located 16 bytes inside of [ 940.340955][T12924] 64-byte region [ffff88807b520700, ffff88807b520740) [ 940.354071][T12924] [ 940.356414][T12924] The buggy address belongs to the physical page: [ 940.362911][T12924] page:ffffea0001ed4800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b520 [ 940.373274][T12924] memcg:ffff888043253001 [ 940.377529][T12924] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 940.385099][T12924] raw: 00fff00000000200 ffffea0001d7a500 dead000000000002 ffff888017442780 [ 940.393709][T12924] raw: 0000000000000000 0000000000200020 00000001ffffffff ffff888043253001 [ 940.402299][T12924] page dumped because: kasan: bad access detected [ 940.408718][T12924] page_owner tracks the page as allocated [ 940.414449][T12924] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112800(GFP_NOWAIT|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 8375, tgid 8372 (syz.4.991), ts 708637905496, free_ts 708402658916 [ 940.434376][T12924] post_alloc_hook+0x173/0x1a0 [ 940.439204][T12924] get_page_from_freelist+0x206b/0x2180 [ 940.444778][T12924] __alloc_pages+0x1ec/0x4f0 [ 940.449672][T12924] alloc_slab_page+0x5d/0x180 [ 940.454371][T12924] new_slab+0x87/0x2d0 [ 940.458455][T12924] ___slab_alloc+0xbc5/0x1240 [ 940.463155][T12924] __kmem_cache_alloc_node+0x126/0x270 [ 940.468627][T12924] __kmalloc_node+0xa2/0x240 [ 940.473237][T12924] bpf_map_kmalloc_node+0xb8/0x1a0 [ 940.478371][T12924] trie_update_elem+0x15e/0xdd0 [ 940.483239][T12924] bpf_map_update_value+0x59d/0x670 [ 940.488513][T12924] generic_map_update_batch+0x52e/0x7f0 [ 940.494166][T12924] bpf_map_do_batch+0x475/0x5f0 [ 940.499035][T12924] __sys_bpf+0x6f7/0x780 [ 940.503296][T12924] __x64_sys_bpf+0x78/0x90 [ 940.507737][T12924] do_syscall_64+0x4c/0xa0 [ 940.512173][T12924] page last free stack trace: [ 940.516855][T12924] free_unref_page_prepare+0x8e5/0x9e0 [ 940.522337][T12924] free_unref_page+0x2e/0x3f0 [ 940.527035][T12924] __pskb_pull_tail+0xa8c/0x14c0 [ 940.532000][T12924] ipv6_gso_pull_exthdrs+0x32f/0x520 [ 940.537313][T12924] ipv6_gso_segment+0x479/0x1b70 [ 940.542270][T12924] skb_mac_gso_segment+0x2ff/0x620 [ 940.547406][T12924] __skb_gso_segment+0x315/0x4b0 [ 940.552443][T12924] validate_xmit_skb+0x4b7/0xe80 [ 940.557405][T12924] validate_xmit_skb_list+0x80/0x120 [ 940.562725][T12924] sch_direct_xmit+0xdd/0x4a0 [ 940.567445][T12924] __dev_queue_xmit+0x180d/0x3810 [ 940.572494][T12924] packet_sendmsg+0x3b95/0x4de0 [ 940.577383][T12924] ____sys_sendmsg+0x5ed/0x9a0 [ 940.582176][T12924] ___sys_sendmsg+0x2a2/0x360 [ 940.586966][T12924] __se_sys_sendmsg+0x1c3/0x2b0 [ 940.591836][T12924] do_syscall_64+0x4c/0xa0 [ 940.596363][T12924] [ 940.598698][T12924] Memory state around the buggy address: [ 940.604422][T12924] ffff88807b520600: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 940.612514][T12924] ffff88807b520680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 940.620657][T12924] >ffff88807b520700: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 940.628874][T12924] ^ [ 940.634283][T12924] ffff88807b520780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 940.642364][T12924] ffff88807b520800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 940.650624][T12924] ================================================================== [ 940.658703][T12924] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 940.665993][T12924] CPU: 0 PID: 12924 Comm: syz.4.2217 Not tainted syzkaller #0 [ 940.673464][T12924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 940.683707][T12924] Call Trace: [ 940.687008][T12924] [ 940.690041][T12924] dump_stack_lvl+0x188/0x24e [ 940.694744][T12924] ? memcpy+0x3c/0x60 [ 940.698742][T12924] ? show_regs_print_info+0x12/0x12 [ 940.703964][T12924] ? load_image+0x410/0x410 [ 940.708495][T12924] panic+0x2d3/0x710 [ 940.712430][T12924] ? bpf_jit_dump+0xd0/0xd0 [ 940.716944][T12924] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 940.722859][T12924] ? _raw_spin_unlock+0x40/0x40 [ 940.727734][T12924] ? print_memory_metadata+0x314/0x400 [ 940.733215][T12924] check_panic_on_warn+0x80/0xa0 [ 940.738178][T12924] ? __bpf_get_stackid+0x6c9/0x920 [ 940.743310][T12924] end_report+0x66/0x110 [ 940.747612][T12924] kasan_report+0x118/0x140 [ 940.752143][T12924] ? __bpf_get_stackid+0x6c9/0x920 [ 940.757273][T12924] kasan_check_range+0x235/0x290 [ 940.762319][T12924] ? __bpf_get_stackid+0x6c9/0x920 [ 940.767453][T12924] memcpy+0x3c/0x60 [ 940.771278][T12924] __bpf_get_stackid+0x6c9/0x920 [ 940.776259][T12924] bpf_get_stackid_pe+0x33f/0x400 [ 940.781336][T12924] bpf_prog_ee9fdca00c0e1e15+0x28/0x3d [ 940.786833][T12924] bpf_overflow_handler+0x50b/0x790 [ 940.792156][T12924] ? bpf_overflow_handler+0xd9/0x790 [ 940.797462][T12924] ? perf_swevent_overflow+0x230/0x230 [ 940.802939][T12924] ? ct_irq_exit_irqson+0x113/0x170 [ 940.808156][T12924] ? __perf_event_account_interrupt+0x187/0x280 [ 940.814431][T12924] __perf_event_overflow+0x457/0x630 [ 940.819745][T12924] perf_swevent_event+0x315/0x570 [ 940.824827][T12924] ? perf_tp_event+0xc10/0xc10 [ 940.829620][T12924] ___perf_sw_event+0x498/0x6d0 [ 940.834495][T12924] ? ___perf_sw_event+0x184/0x6d0 [ 940.839544][T12924] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 940.845983][T12924] ? mark_lock+0x94/0x320 [ 940.850348][T12924] ? ct_nmi_exit+0x145/0x1c0 [ 940.854967][T12924] ? ct_irq_exit_irqson+0x113/0x170 [ 940.860187][T12924] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 940.866191][T12924] ? lock_chain_count+0x20/0x20 [ 940.871059][T12924] __perf_sw_event+0x135/0x260 [ 940.875849][T12924] do_user_addr_fault+0x497/0xb20 [ 940.880906][T12924] ? trace_hardirqs_off_finish+0x86/0x180 [ 940.886830][T12924] exc_page_fault+0x60/0x100 [ 940.891522][T12924] asm_exc_page_fault+0x22/0x30 [ 940.896397][T12924] RIP: 0010:copy_user_short_string+0xd/0x40 [ 940.902326][T12924] Code: 74 0a 89 d1 f3 a4 89 c8 0f 01 ca c3 89 d0 0f 01 ca c3 01 ca eb e7 90 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 940.921964][T12924] RSP: 0018:ffffc9000c4772a8 EFLAGS: 00050202 [ 940.928137][T12924] RAX: ffffffff84155001 RBX: 000000000000000b RCX: 0000000000000001 [ 940.936129][T12924] RDX: 0000000000000003 RSI: ffff88802a16066c RDI: 000020000000cf3d [ 940.944117][T12924] RBP: 0000000000000000 R08: 40203023636e7566 R09: 1ffff1100542c0ce [ 940.952102][T12924] R10: dffffc0000000000 R11: ffffed100542c0cf R12: 00007fffffffeff5 [ 940.960349][T12924] R13: 000000000000000b R14: 000020000000cf3d R15: ffff88802a16066c [ 940.968477][T12924] ? _copy_from_user+0x151/0x170 [ 940.973660][T12924] _copy_to_user+0xea/0x130 [ 940.978202][T12924] bpf_verifier_vlog+0x172/0x3a0 [ 940.983168][T12924] verbose+0x1f0/0x2b0 [ 940.987256][T12924] ? check_func_arg_reg_off+0x280/0x280 [ 940.992819][T12924] ? kvmalloc_node+0x6c/0x180 [ 940.997518][T12924] ? bpf_lsm_capable+0x5/0x10 [ 941.002396][T12924] ? security_capable+0x85/0xb0 [ 941.007392][T12924] bpf_check+0x2f48/0x11000 [ 941.012086][T12924] ? __lock_acquire+0x138a/0x7c40 [ 941.017158][T12924] ? mark_lock+0x94/0x320 [ 941.021530][T12924] ? bpf_get_btf_vmlinux+0x10/0x10 [ 941.026852][T12924] ? __lock_acquire+0x1465/0x7c40 [ 941.031900][T12924] ? mark_lock+0x94/0x320 [ 941.036355][T12924] ? __lock_acquire+0x138a/0x7c40 [ 941.041407][T12924] ? mark_lock+0x94/0x320 [ 941.045777][T12924] ? __lock_acquire+0x1465/0x7c40 [ 941.050924][T12924] ? mark_lock+0x94/0x320 [ 941.055297][T12924] ? __lock_acquire+0x1465/0x7c40 [ 941.060472][T12924] ? verify_lock_unused+0x140/0x140 [ 941.065692][T12924] ? verify_lock_unused+0x140/0x140 [ 941.070915][T12924] ? verify_lock_unused+0x140/0x140 [ 941.076769][T12924] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 941.083145][T12924] ? ct_nmi_exit+0x145/0x1c0 [ 941.087855][T12924] ? ct_irq_exit_irqson+0x113/0x170 [ 941.093162][T12924] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 941.099204][T12924] ? __lock_acquire+0x7c40/0x7c40 [ 941.104254][T12924] ? lock_chain_count+0x20/0x20 [ 941.109134][T12924] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 941.115423][T12924] ? lockdep_hardirqs_on+0x94/0x140 [ 941.120653][T12924] ? ktime_get_with_offset+0xff/0x320 [ 941.126137][T12924] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 941.132406][T12924] ? ktime_get_real_ts64+0x440/0x440 [ 941.137721][T12924] ? do_raw_spin_unlock+0x11d/0x230 [ 941.142935][T12924] ? __might_fault+0xc2/0x120 [ 941.147721][T12924] ? memset+0x1e/0x40 [ 941.151721][T12924] ? bpf_obj_name_cpy+0x190/0x1d0 [ 941.156778][T12924] bpf_prog_load+0x100e/0x1530 [ 941.161836][T12924] ? map_freeze+0x390/0x390 [ 941.166630][T12924] ? __might_fault+0xa6/0x120 [ 941.171660][T12924] ? __might_fault+0xa6/0x120 [ 941.176621][T12924] ? __might_fault+0xc2/0x120 [ 941.181317][T12924] ? __might_fault+0xa6/0x120 [ 941.186013][T12924] ? bpf_lsm_bpf+0x5/0x10 [ 941.190533][T12924] ? security_bpf+0x7a/0xa0 [ 941.195157][T12924] __sys_bpf+0x5b8/0x780 [ 941.199426][T12924] ? bpf_link_show_fdinfo+0x380/0x380 [ 941.204850][T12924] ? lock_chain_count+0x20/0x20 [ 941.210073][T12924] __x64_sys_bpf+0x78/0x90 [ 941.214514][T12924] do_syscall_64+0x4c/0xa0 [ 941.218954][T12924] ? clear_bhb_loop+0x60/0xb0 [ 941.223656][T12924] ? clear_bhb_loop+0x60/0xb0 [ 941.228443][T12924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.234356][T12924] RIP: 0033:0x7f4c5179de59 [ 941.238807][T12924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.258687][T12924] RSP: 002b:00007f4c52728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 941.267119][T12924] RAX: ffffffffffffffda RBX: 00007f4c51a25fa0 RCX: 00007f4c5179de59 [ 941.275197][T12924] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 941.283180][T12924] RBP: 00007f4c51833e6f R08: 0000000000000000 R09: 0000000000000000 [ 941.291160][T12924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.299343][T12924] R13: 00007f4c51a26038 R14: 00007f4c51a25fa0 R15: 00007ffc89607838 [ 941.307356][T12924] [ 941.310666][T12924] Kernel Offset: disabled [ 941.315078][T12924] Rebooting in 86400 seconds..