last executing test programs: 4m47.857928591s ago: executing program 2 (id=1350): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff94, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x736, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xf0, 0x61, 0x9f, 0x4, 0x0, 0x1000000000006, 0x30d31, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x4, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x8, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 4m47.46834962s ago: executing program 2 (id=1353): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x7f}, 0x100904, 0x20003, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x4d}, 0x94) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4008, r0}, 0x18) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8927, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x13\xec\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x89a3, &(0x7f0000000040)={'bridge0\x00', @random="1400"}) sendmsg$kcm(r5, &(0x7f00000019c0)={&(0x7f00000003c0)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfe}, 0x80, 0x0}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112df000000000095000000000000007f590e8b0df11182c5a7a1baf7897358c7380f8b1f4d9160bc4060f6e42a891d31fd469583f5c1350f56f61371ac048368be5a7faa0adac20ef647ec91590308a90358da7c589c65656b26ab3dbcdfa1caadf36ddf4a9431f5e4e1684be63c110ce3"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) 4m46.659825889s ago: executing program 2 (id=1358): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4m46.463889862s ago: executing program 2 (id=1364): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x24}, 0x94) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x24}, 0x94) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0x3) (async) 4m30.685310282s ago: executing program 32 (id=1364): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x24}, 0x94) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x24}, 0x94) (async) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close(0x3) (async) 1m26.383922852s ago: executing program 1 (id=2430): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000002) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x304, 0x0, 0x200, 0x0, 0xfff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000c874af0c19d261485b5c7f7ead543855ddf96daae4c9c7d8476f1d8d4b80e803af5d21847b986bdde2b3a7d0a5a04bffbcb8dff130365c7e8ead4eef064b27ef08409d0cd8a842e154c06a397afbb09fd4ca4025bd231043f4793523c97fa88bbe2cb11d83a48e2303429a51190895cf35ae152444b7445eff1a68", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xc, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000b7030000000a0000850000000c000000b707000000000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8dedcb7907009875f37500e486dd6317ce6203c23c00b980000800009ff57b80000000000000000000"], 0xfe1b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="00008cff07887e7cf83500000000000045"], 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071104100000000009500080000"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8025, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000005c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848120000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x40400) 1m25.16931485s ago: executing program 1 (id=2433): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c0200b3000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m24.955004155s ago: executing program 1 (id=2436): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000fa03000000080000000f00000100000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11b, 0x11b, 0xc, [@typedef={0xd, 0x0, 0x0, 0x8, 0x5}, @enum={0x6, 0x9, 0x0, 0x6, 0x4, [{0x4, 0x8}, {0xc, 0x2}, {0x7, 0x744}, {0x8, 0x2}, {0x7, 0x4}, {0x5, 0xffffffff}, {0x1, 0x9}, {0x1, 0x40}, {0xa, 0x7fffffff}]}, @const={0x1, 0x0, 0x0, 0xa, 0x3}, @const={0x10, 0x0, 0x0, 0xa, 0x5}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x2e, 0x0, 0x3d, 0x7}, @volatile={0xc, 0x0, 0x0, 0x9, 0x1}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @restrict={0x1, 0x0, 0x0, 0xb, 0x4}, @datasec={0xe, 0x8, 0x0, 0xf, 0x3, [{0x2, 0x80, 0x1}, {0x3, 0x1ff, 0x8}, {0x1, 0x6, 0x29}, {0x2, 0xd, 0x10001}, {0x4, 0x7, 0x93}, {0x2, 0xce, 0x10001}, {0x3, 0x3, 0x9}, {0x5, 0x7, 0x8}], "189a2f"}]}, {0x0, [0x2e, 0x5f, 0x0, 0x30, 0x2e, 0x0, 0x0, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000780)=""/16, 0x140, 0x10, 0x0, 0x7, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r2, 0x20, &(0x7f0000000980)={&(0x7f0000000840)=""/132, 0x84, 0x0, &(0x7f0000000900)=""/83, 0x53}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380), 0xa283, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r0}, 0xc) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r4, 0x0, 0xfffe}, 0x38) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x62}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@ifindex, 0x13, 0x1, 0x46cb, &(0x7f0000000040)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0}, 0x40) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x48014) sendmsg(r9, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB='\"\x00\x00\x00+\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="0722e2f5bbd8000000000000", @ANYRES32=r10, @ANYRES64=r8], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r11, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@map=r1, r3, 0x13, 0x2038, 0x0, @void, @void, @value=r11, @void, r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x246881, 0x0) 1m24.783394479s ago: executing program 3 (id=2437): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socket$kcm(0x29, 0x7, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r3, 0x20, '\x00', r4, r5, 0x0, 0x4, 0x3}, 0x50) 1m24.638668092s ago: executing program 1 (id=2439): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="180300000041d1ffc732127a630e1cdbebe3531fffffff0000000058820000181000000000000008000021cba65c0d4151dc984e131aba22c7e49583dec15c241746f7441af188cb62a46f7855ac2502feb9c2a3b78b8519e5a71e5848ddbc20062e52e42c4a1d35a5b153755adcb51dc2b3", @ANYBLOB="0084e3dfd300000007000000000000001800000000000000000000000000000072cdf9688cde92950000000000000027030000000000d51ad0d2d489fbb10095", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) 1m24.505204966s ago: executing program 1 (id=2440): r0 = socket$kcm(0x11, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000d62e6568c078aabcd7e598348a6f4f0000000000400000008500000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r2, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x2000008b, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000100010000000000fd9e0000950000000000000018120000", @ANYRES32=r4, @ANYRES8=r1, @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x1000, 0x65, &(0x7f0000000600)=""/101, 0x41100, 0x2e, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000008c0)=[r6, r2, r6, r2, r2], &(0x7f0000000900)=[{0x0, 0x4, 0x2, 0xa}, {0x2, 0x4, 0x4, 0x1}, {0x4, 0x2, 0xf, 0xc}, {0x5, 0x3, 0x10, 0x1}, {0x2, 0x2, 0xa, 0xb}, {0x2, 0x1, 0xc, 0xb}, {0x3, 0x3, 0x2, 0x6}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0xf}, 0x8000, 0x5, 0x47a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x20000, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x21, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1200000003000000080000000200000000000000", @ANYRES32, @ANYBLOB="0040000000000000000000000000000000000000adb2637466d0eb88e0b4cd1a26eb0826f98033fb03968a8938b960e41822e50164e78b83acb86f2b47a4cb260b7232c7dad2ba59d20095d56c7b76708f096cf04d7bf9fb91ee5e31bb7a80705fafa721446b2f9498fe09f60ff1867129d6759aa1d01f1e84e5142912", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r9, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f0000000700)=r8}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xd9b, 0x0, 0x1, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r10, &(0x7f00000001c0), 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x538}, 0x40) r11 = socket$kcm(0x2, 0x3, 0x2) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r13, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x45, 0x1, 0x3, 0x80000000}, {0x20, 0x8, 0x0, 0x9}, {0x0, 0x0, 0x1}, {0x2, 0x4}, {0x6, 0x0, 0x0, 0x10000000}]}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)='%+9llu \x00'}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r1, r14}, 0xc) sendmsg$inet(r11, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000094040007441405"], 0x48}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000004f00)={&(0x7f0000001e80)="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", &(0x7f0000002e80)=""/66, &(0x7f0000002f00)="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", &(0x7f0000003f00)="19597034541c318870e6f54b29325256dc5eb43161a26613edb903173e313de7e776f9d3f6adc4ca435f9b7b92c57d6ce49de535d08f9934beeb728a024adbbeb892cdd40cb951b3014bbdbcb40fd31dc5b21c09e931599c2edec217e7ab40307117dbffc10de420fb47f06fd353a085d8903c3438eb637b4a60aa46b360f7ffd841890d936de8a0a3f624eb304dbd3fc68256dbd11dc945862f2591a28c5884671e3e172c4d29f39238ac4ed80d80dd26837cf3542112303965f0b406f334561c415944271b09a1b0403cc13eda2ec982bfa5c95cf5ef3d7ff75c16eb409eafbc041ebf116dd89d3eaed741d650275cd5edcbfa86730bc22103811664537fc43b3f2c9f5c68b9fb74a9df09478c54b1048e8f31b9a953dd6e22cf32dea3427d5c6ffcfbfc2da5a817a1981f26d00c21a9f5082d95a25ae11972876539ffa760318c26a61dcc9876889cc6bd843d83534baecd012c664f793b85337134b4fa4625e8f7a06a0c80eb4b7945eb7ceb2cd3b8fda7aba4049cc9e62959b322c714f494e082bfc66ac5b257fc24e8d5a92d9e023f8bc1c3d600ed79357b0e812389e01de861dbaddc0e0d2091b194f17349ad437b4f32044afc2905c234e124ea75c274544c2ba6992b967550cb8569240e81ddb90b7274d8d8293ef0075666d26e79974c4bf67349263e427e63b9233db26f3c8646df9576625ef1f5086971926a0e375e6afc4da973a68b533d49f06d97a1bc0878a8d14fd43d7937b93a747fbaca7b4e475caddfa5587331536e367dfc8486dd111553fa1c2e8de8bb0416b0dfe295d35cf0ab12cfaead0634e1675d50bbd1532e9b584991d496bdae1118cfbc9cadbbe3221e5eefc06030d15da3860ad7a4da195942d0206da44e90841cbad2144ab2d19e5968cfdf2882a5eb799f34f8917916534f609e849dc9862732b067e631cf13987a1489013837f2301d55414f9239f14a0c06793cece3a8983f31a3bbc51f7a1040e96af870f5320734c5704d52b08885170a1576f71f967ee56023e7c366c69ee05d787c2063db37a4231134fcee271c143d8ead6d670f06457bc2198e7a9e722cbe6af5969d43e177f16f9192b352bf1e5fdaac0b7c08433d25c4b4e3154da0c3dbf0847eb5f9f714a3493c8a2018a3529d1d2450cf483fafd42cb989a49d22832c975add652a91543d0cb5cf61cee263b6d4f0b22e1d9835e6228bfafef28b031245067d75c7f69d6d80c12b3ced9ccc723c5de32f63af00e5046746a0d51587e879370f3d6eb65429db7b0a53e06641b44ae952afe8deea20006585b81f3420e8d7272064870b64b604b394fed140ffca8ec4876ca926e4189b67378ad95c568df2c4b632ce25846c055cb86ccb1f15dcb25121c9a854cf49ba042ed56f4fefdcbc6d721b076b2813fe25264f288a74e04bf2b19b715c5b2d042f1d5dc9d5f9224baf3e1efb01798f290694deada3bc29e76fb8cb7e68cbecb3e3e5dedef9594af650fcd70171674ba7a26dee87c2799c042f74850c60ca831de089d5178bec79dc5fa2b4886b7d61446840d0833299e58b8850e6ce9c24bf4c44143a5e1b8cd65d6044ef780e06cc87de9473a7c4dad84fbe3e36b03b765737fb0f72999b7c71cbaf8f369e992cfd6a8a4458b52910a4170620cb428467340b714f66438b791062f7ef86914f3c3bdbd2b9b353777db1bc6de4cf75a0da2053b16f7821f09eef8aeef559c94dadefef3f4151e31c2c76fb971346b6ebe05680500e890b2488e5bcdbd4c7b522f304424b7d4428bfb08e615a37f942391c90f92ff53ae8a29efde2832aa4cc8eb19d7c96690fa8d5dc735f3892e7b73b321d4aee250fefed8c27225865ead3b32e3c3906946d64f5036ec0ee6f9256e7d18b326b09348c671ff219249250bdb184dcb819cfb1f22cc87b2649c6b2bacee73f7ad2e3de42b0f004db222694c7458d9350def766f97c7b678368dd4c33b534cb816bf3e1146b9fcb5dcd74372ec5dfbf94c11c2716eb3999961b7ed7764d6e59b6f42fe27b3855a8fef46c4a5d97c274e9dbd21d49a7414e0014260d1ec6365ec7d5d1ac3f5789c2b73ae3abc6130d5ae27eee5c14ed63da4c6d1d5808ca32b15636e016676a05a5ae0ad581fd0b14bbd18ba3eeef4cd8d2cf0e8bbca5a042f46ac7039d7948a787b582bfbf04a7f020438e2ec67ae76c2dc16af0d3cbb1a74d04b421436bfe62cf37156a610c3ba83879025bf02e05ca3f7843220e3ea3fce84168db04bc53d2bfdc330976fe7efad0b059ba31be00486ae5cbc004ad19de880cd5779886eb4e142b6468c1b3335e11460fb19081fedad87493eea5fc9332417735bcd56053c772b78040debe9b01db6dee597ba38d07a4fbd1538198f948fca01d9634b3036415f838d00743f3aeb2c1f6c4b314151ee1314fdb3be681560eb8fd153039d57e9faf45049e1c2593be3c5b4978701a30d981f57193e73c6b4556f2f188f8905f2e89dba4bbf235c79d3c9b8e953f770e1cacced51806653f202c20f1e77a695c3bcabe951c0ce2db1dc6237b5714f6f963f49a51345fdfc843d2b2064fb718d6f71bb7c3b92078a0968c4605046097755d664b5c214cec922988888c6715b6eb871b4c0ad73032a73f34bfad03c36ce1331a132d4cb01a0ef300a693a2d45dfe2bee0f6f8c935fb65b1f75e41f6d625fae4cbd4b20fde650a8006c1ea07e0e25fc30d97ec2582bcf6c480ba321cb63c28860261296c6902634477723e5e3c38021c88d2210321cd600156fcf89607c7f8b5fbeeb8ad62b332885a5d507630519fa0457e3a2817415a6ecb0640fadb43c01088c91375450f01429303d5de310e58da7f52da059c7fcff0672190774312af54a08b21a08608e7e926b7d09ce95200d11181933afc9da28fbff3e3a8ebcb75d4ff0ccb4e24340a2f397cfbaaf9eb9b19ed74517476c39aac2c00f1b3d1af32364390fcc83532af7cd6d5d6c6e653d24683ccc5a2c61a863b42c777cb3ee89ba95a609b07772271106375c264c6af497b5d9d332f3a13b52822e6c0d8a418abf95dee23a3d3aacbb1040b94f1dd03196c3b71f585ca51ecaab5c5d4da6484d9e3f52e7bd66551410d4230f60749e239ebb6a9d1114c060d78d01a9e2e52b2e65ec8991d02911a4e2d58c075574ae90aaf0c7809ebe343c7937363556063ddd8d8df2fde036b3b68cdca985c4637527f481486b50d2562c5e0382ace0ebebb4e05ffa77c59aa1c39c1d9da6cd0bd947222e1a10f60db7125075571e921eed77515cec5400b405d89326113077100c5b66a2538fe8d975027dfe3c0f3fd4df773ba6106b2d54b3b18f9cb34908ac9c487dff09f502014bf166925b039de47d82e9f33e54d3bf6c81d584a513f1e5102953792bc216925290ed35828f711d46cee831070e3211bbe40e04887e24266138a676599803b3ded13901154419e7932e98e120d86b45eecea75238c3720391cf69eb4a2a18ef0d9448d08127d2cd56d13db2e9b64e2c23b3607d21a47d3fe3571d745b15252fe06dc458baac75b8d35cdc673ce87d850edd3de556d7b4642c390e670cb5550c051ffe987fca512725fd871b94de31e0f98a73d626688fa46b0c7d6e810aa9e170a1d90ced2607498a64a6e119a4e62141df98f54a5f829738e77ba9408fd574c9acc5438a21de2c4d0d63f2348be339c98a2bae3b9af350ba6c1e30d4b0c4f450b3b802b6bbbd39d6919385b123fe6290c984d21065d133048a94020c71049c9a947cd4c2e0a1ad9c6d784345dfa55ad3f58484043c3e0fd6f76cc0771f569f4a66a6ce14a4bb3e19859de086251c56ddd59ea75f82b37f24b796d5ae7a05cded5282d3c9b477608c4b650ff4fba18b161f9b802ca7743dc1ed8717851ba9ef6775368fea2f2fbfcaa3ecfc5796535fdc9b7d041209c946ea6a209387944422a4d9899942a37dfcb2ca79614ec91bab2016f422a8e03fef4bc3b8f1b8a5f2f141d118757f084ebad2d0f806005134bb8653776614429bb5da34546e61b8621a5dba17ce2ba165c074c5756da620c5892a56896fc94f845353418fab5e845e3a65288dae5a1b85de049acb19a89a4b66b8edd056a983c69681f9bfad96a731b575e13fdbf1a284bfaa56e780560c250a742dba8e053af0ad080310ccd32eb81b5c50f3c19444111e87119e7d2ca4740950da025a171d5057879684a6d5882767474468faaafc6730010daad52a813a714ec2d728e6bb99888ae0c490d20b8ef31b04541d109dc4ba0baa1f8e25b72d65d4757abe0d0f5591f7701a46945a493131169d92492bf15d74824c406cf2d933f14b2bc15db5a70ecc1bb5c48b67b9294069e6754a7bad95c18975a1a707d115a5a14e3a1afd483211ef44541c258114284aac311289fa6f12b69c9056df3d71f89ba06ea5df0591fa832c8122fc2ccba829ee09391a76a950da5c23898f6558c4d9feb416e9c0f0eb81094d23517bbc0891fabd7db0cd51fa27dad8527cc972950dd6893a7439bca725ff27102c81efb7397145afe3663ebb6cf54558b76782a588fe2e5b8894cc8ba642722ef199c4bc09ddb916d55626e91a1c36cad4ebb831cc17785f7c2f6bbb9510b7462e1dd506cb979a09876836f602240a70776562e8a089595a4ead9bb1786b96ae7b5777cc7b448e62c94d6e179451a16cb0b02707cfbdfc15fdaa15150b58fabb72c0c786741ff575d516345a312baac02cf2d048dbea131dbeb86e8348a0fbbd51f6398bdb3139694abc12d5feeb9cea6f855db0a54fbe3bdcd0e4da334a23259b02e24a8134e31223dcb85b74e47b4b3ea84de29c4b96e9790ac26d09cc15c97c81a629dd4e7dbd64a392c1e488099f570c02107ff70e001966a7864f953c91b597272daddc022aa034ae821c93a648d5b5ab4540a83a943437b9804a1754cab6f1ccaa3336594ae167996757bfea0c795851b28d60863ddd6bd820a8c8b2defb8a619970a7081ae43bd9c2a31667c36c389202c1599dd4fa35713906cff7392993c1b2db611d9e6c6d34ad50f5973b2284a752cfd55cabb320d5059b3a262a9418f86c6fc967f97c2dab23c0e0827cf6e40e8a5d9d05b00f5da0141fc2fdb54f200ed49df9fab0e278c318a2d7c6b3eab7caaf059a3f48bedcb383f04580f634a1b6734d3898ea2c3944672774b616fecef32d76429299b932a8d411396fe20467e8b6c9129612960fcb4be3aa741c9b9227487817697b0597b5820638a42e206c354dbcb10a98fb89795e23dfeb1bcf278fc2ce1c82e230312e31af9eb6a375a15dd53449e2550bdd8794dc6ea1e32f0fb6a5a9e74d420ad1521b70a4e33c883560e3ac4bdd370a2e65fffa811b2fa76e1f6f6ffae27c54a1e2ffc2cb2693445befcb740609813b38f0dd2f4b28afa0ac394ab10abda63238f8dbf0c32389d5e741b12f88eb3102d909f021d204fb164c4ac483e829e328e8e941337726b09acbeada22f7a68d194553a3392a33751bb109ae5df754495e7d2a3b833986420a628346f494fd08962df348d492b131a75ba885304a4d9594424f4fbf212f29d6c655674c6bb867afed8cdaffbbf99cd5d5b0c4a0dc2f54ca059314ecde68c613d51d0379b181b337186db46da22214b47d1cdb9c7bede668e063aca84704871db17211f7b22ea5bee98da3152aeaf44bc283fa21ca335c5fcd4b9061f2371d65d53894f426a4b2e69c9336a379443b498b45e0dbbb4bf79db2b5b5943612d0c7ce9ccd4b722582b10223ff936813fc48f0a03074ae9b3d", 0xffffffff, r14, 0x4}, 0x38) 1m24.172205743s ago: executing program 3 (id=2443): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x4000, 0x4, 0x8, 0x1, 0x0, 0xfffffffc, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}, 0xc420, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)='.\x00\x00\x00>', 0x5}], 0x1, 0x0, 0x0, 0x39c}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000002700000000000000920309000000183c000002000000000000000000db5c35980f642c608309db65a4905f43f72919f9bcbd4f731cb9a6dd965fe23525537004fe99aa616648b5a9983f3fb424ec7327de2b41d884bff2"], &(0x7f0000000040)='GPL\x00', 0x1, 0x75, &(0x7f0000000340)=""/117, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x9eb3b8620b88cbdc, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xffff}, 0x10, 0x0, r0, 0x6, 0x0, &(0x7f00000004c0)=[{0x1, 0x2, 0xd, 0x5}, {0x5, 0x1, 0x2}, {0x1, 0x2, 0x5, 0xb}, {0x1, 0x1, 0x10, 0xa}, {0x1, 0x1, 0xa, 0xb}, {0x0, 0x5, 0xb, 0xa}], 0x10, 0xffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) close(0x3) close(0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000b030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x8782559fc2aff2e2, &(0x7f0000000080)=[{&(0x7f0000000040)="0f02000039000511d25a80648c63940d0224fc600b003540280009000200002037153e37eb010280060410000a00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m23.994432148s ago: executing program 1 (id=2444): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000000000200"/20]) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/3, 0x3}, 0x2062) r3 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0xd, &(0x7f0000001b40), 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYRESOCT, @ANYRES32=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xfe, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a1810031000000000f000000028002002d1f00"/46, 0x2e}], 0x1}, 0x44004) 1m23.942438148s ago: executing program 3 (id=2445): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @sched_cls}, 0x94) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f0000000400)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x3, 0x2, 0x85, 0x0, r1, 0xfffffffc, '\x00', 0x0, r0, 0x5, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r5}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000340)='\x85&`\xcc?V\xe4\x03\xd3X\xa7M\xae?\xf7:\xd3\x1e\xe7\xb5?Rh\xab\xeb\xc7\x8fW\xc4\x92\x8fY4\xc0\xfd\xc5\x025\x01\xe8\xd8j\xe2\x05\x0e\xbf\x8a\x9d\x15\x06v\x99\xcd\xae\x1f63\xc2Y\x94)\xc3al-\x97w\xbf\xba\xa5[\xd6\xa4\xb1\xb3\xda\xad\x9eO\x18\x1c\\\xa6\xf3\xbew\xa69\x1e\xc0Vp\xe8Tw{\x9bK\xa3;\x10\xd5\x1e=\xae\xdc~\xe5\x1dx\x84_1\xcc\xb8\x96\xc8\xff\xdb\xa3\x86\x96\x1c\x14~R\x80+\xb3\xd3\x1cK\x13\xb5\x98\x11\xc7\xd1\xd3X\bU\x8c\vS\xe6Vp^\xa1\x1fIRLe \xb1,\xe2c\x9a\xcc>\xc0') r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x1f, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef438000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1m23.927098229s ago: executing program 4 (id=2446): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x20000005) r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000000980)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000009c0)=""/224, 0xeb}, {&(0x7f0000000240)=""/182, 0xaf}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000000480)=""/8, 0x8}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/203, 0xcb}, {&(0x7f0000000300)=""/186, 0x92}, {&(0x7f0000000700)=""/190, 0xfffffffffffffefb}, {&(0x7f00000007c0)=""/26, 0x1a}], 0xa, &(0x7f00000008c0)=""/160, 0xa0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000340), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff3e) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[], 0x0, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e25, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000040000000000000000006cecaf9600"/28], 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x15}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x40400c0) 1m23.186757106s ago: executing program 4 (id=2451): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/169, 0xa9}], 0x2}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) 1m22.924514232s ago: executing program 4 (id=2453): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000674bcc665291dd25732b4619a440d95189209eec308f4a6e2cfe55754b5ee693e54eab6997bfb9a4caf6c30d728b086273f92ea29bcfaa8057", @ANYRES32=r2, @ANYBLOB='/\t\x00'/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000030000000100"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 1m22.815480514s ago: executing program 0 (id=2454): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$kcm(0x10, 0x400000002, 0x0) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069104b000000000085100000020000004002000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8918, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8918, &(0x7f0000000000)) r6 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r3, 0x12) syz_open_procfs$namespace(r3, &(0x7f0000000240)='ns/pid\x00') sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) (async) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f00000002c0)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) (async) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd) (async) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="2d840009aa5ab9"], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x49, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x4, @perf_config_ext={0x4, 0x1}, 0x100000, 0x2, 0xfffffffe, 0x1, 0xfffffffffffffffe}, 0x0, 0xb, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 1m22.566498821s ago: executing program 4 (id=2455): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = getpid() r3 = perf_event_open$cgroup(&(0x7f0000000480)={0x1, 0x80, 0x9, 0xf, 0x9, 0x10, 0x0, 0x64a, 0x82, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x10, 0x2, @perf_bp={&(0x7f0000000140), 0x2}, 0x1, 0x74, 0x7ff, 0x4, 0x1, 0xcd, 0x0, 0x0, 0x9, 0x0, 0x10000000200}, 0xffffffffffffffff, 0x6, r1, 0x5) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6, 0x2, 0x7, 0x8, 0x0, 0x3ffffffffffffe, 0x58032, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9b6, 0x1}, 0x1006, 0xd200000000000000, 0x5, 0x2, 0x9, 0x8f, 0x7, 0x0, 0x400000}, r2, 0xd, r3, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0xd9, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2062) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000001b40), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x37) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000000c0)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={&(0x7f00000001c0), &(0x7f0000000280)=""/122, &(0x7f0000000340)="459217df459c73943578fb1633ad034313eb6c7ad8575e445280809292fe294811968c341706c1336df7094f716a9ce140e5260c6e3575f46ed09b517db28bf661d12dc3495152", &(0x7f00000003c0)="e62ebe6037e0e322f35df824db51b5eb3b9e3966100f333071fced6587d26a1b87cbe5607d12efc717fefd47aca1c28255d79f8aed036f2d36734a03b0f2", 0x80000001, r1}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9e, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0xbd, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) sendmsg$kcm(r6, 0x0, 0x44004) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1m21.800151719s ago: executing program 4 (id=2456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x7, &(0x7f0000000140)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x76}]}, &(0x7f00000000c0)='GPL\x00', 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff006, 0x81, 0x7f, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000100)=r0}, 0x20) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0)=r3, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000d"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x11, &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[r7, r2, r2, r3], &(0x7f0000000580)=[{0x2, 0x1, 0x1, 0x5}, {0x2, 0x2, 0xe}], 0x10, 0x7}, 0x94) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x20000003fff7ffe}, 0x1400, 0x32, 0x43a1bd76, 0x7, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x7, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r10, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10000) bpf$OBJ_GET_MAP(0x7, &(0x7f00000007c0)=@o_path={&(0x7f0000000780)='./file0\x00', 0x0, 0x4000, r3}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r11) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000040)=r11) 1m21.591796313s ago: executing program 0 (id=2457): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x28, 0x0, 0x2, 0x2, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100}, 0x94) 1m21.433985777s ago: executing program 0 (id=2458): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r2, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(r2, &(0x7f0000000000)='THAWED\x00', 0x7) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0x1d, 0x0, 0x7}, {0x6, 0x0, 0xfe}]}) 1m21.432532107s ago: executing program 3 (id=2459): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) (async) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000a58088869b573c04000000020000000c120000001c0000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x18}, 0x8000) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x400c804) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)='EO', 0x2}], 0x1, &(0x7f0000000140)=ANY=[], 0x368}, 0x20044000) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) (async) ioctl$TUNSETOFFLOAD(r3, 0x4004743b, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) r5 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffffffffffff71, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfe33) (async) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfffffffffffffffd) setsockopt$sock_attach_bpf(r5, 0x0, 0x60, 0x0, 0x0) (async) socket$kcm(0x2, 0x5, 0x0) 1m21.369512528s ago: executing program 4 (id=2460): r0 = socket$kcm(0x1e, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e5, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3ff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1a, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1eb, 0x0, 0x0, 0x0, 0x2800}, [@exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xec73}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000640)='GPL\x00', 0x2, 0x2f, &(0x7f0000000700)=""/47, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map=0x1, r7, 0x12, 0x35, r5}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="77ee19a31d204e51fb2b9630435f1b8ba3beb70fb8a108f59e8bf5a35a459e94d47c4e6c29c1aec506c155a698ae7a02ff55bf337db1506688e383c7f2fb60769d3ed7528da9f0175658aad4be33e18b50c9cf6eba7383b6443746346b9d4f350ef7dbc0ef9be21f6b5f63a29a84729f0044e1590bddac61ca123ce471a39088bcfd5859efa9668e00c8556d2ed0ed24871ce62f03bc48ae5a0a001eb58a79e1f72b87b54c9c44"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETVNETLE(r9, 0x400454dc, &(0x7f0000000040)=0x1) 1m21.339497459s ago: executing program 3 (id=2461): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x81, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x15, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x1, @ANYBLOB='/\x00\x00\x00 '], 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x37}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}, {&(0x7f0000000680)="6c5a7afd7d11e5435b105eb5acf1b2290892eacea2379576ca2e725d54d969bcefe717d84385cd2e9b1d8cf885af923c9542914117dd044278d0c94ac153d33a001cabc7d879152d34374ef6ddd26812ef07124a041eef183ace7895dcad7006a520788d1e19daa103263557a542d171c15e04b4fc29f9d9035f465c28622e5ee8ff25fc127ca32ed9ee7c545d112bd3a1b7ffe3d5004f202a2f016468131bd1340b63615284fa056604bd74853a5b5a90cf641844f6df4ec6dac6c03e5d79889085a7694b1af4"}, {&(0x7f00000007c0)="f823bdad5fca17c80747a2c5f17e4bb690c1e2b1f21e7e3650a8fa6102e8e78a33a2238e7715cd8496196c6929edb118b0f471200d9def3e9f810a892c3da8803ef0504b26a45b6aa4701eec419e0847f9eeb5865c9817db9f8dfe537f6846a232bdd8d5adbda1176c8a123825d64cc27a08739d7dd5ef595df99177d59d597b81bc86b57a0317b717ff753be9d90a23b04bbae4b7d8ced824dd62eedf95e1d803546fba324ff5818ba45ca295b96dc1a25b91ddac8375a1fa8e07ea5651f4b6432ac2083e02c2c8b3a6def80fc24502cbde981e6b67"}], 0x1, 0x0, 0xffffffffffffff68}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8400, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x18, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000140), 0xc}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="b9fe0307681f4c8c989a14f088a8650186dda8c6e96fd9d5a77080d1016acfeb01579fc3d2549014", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000100), 0x120) recvmsg$kcm(r1, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) 1m21.078394705s ago: executing program 0 (id=2462): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1200000011000000040000000200000000000000", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000380)=[0x0], &(0x7f0000000440)=[0x0], 0x0, 0xc6, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x77, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0xbfdb, 0x0, r2, 0x4, '\x00', r3, r0, 0x0, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0xc}, {0x10000002}]}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x76, &(0x7f0000000000)=r8, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x2, '\x00', 0x0, r8, 0x2, 0x1, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x18000000000002a0, 0x31, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r4}, &(0x7f0000000c00), &(0x7f0000000c40)=r1}, 0x20) 1m21.076076625s ago: executing program 0 (id=2463): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x480, 0x0, 0x39) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x10}, 0x94) socket$kcm(0x2b, 0x1, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x0, 0x480, 0x0, 0x39) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x101}}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41100, 0x10}, 0x94) (async) 1m20.956942958s ago: executing program 3 (id=2464): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x8000032, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x3, 0x2cd, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000d00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x28) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x0, 0x36, 0x0, &(0x7f00000001c0)="c9188e9bb95d02ff4284860186dd9c6bf2285befc8efd74787268084fae3e65014997f634a29000000001a5c83e0da5b23e7444b7ff7", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = perf_event_open$cgroup(&(0x7f0000000f00)={0x5, 0x80, 0x1, 0xf7, 0xf3, 0x6, 0x0, 0x9f, 0x24485, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000fc0)}, 0x820, 0x9, 0x7ff, 0x2, 0x3, 0x2, 0xfde, 0x0, 0x5e6, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000f80)='+,\x00') socket$kcm(0x29, 0x5, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r6, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m20.859063411s ago: executing program 0 (id=2465): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x13, 0x0, &(0x7f0000000040)="6a49c6f8ab0a67e18e4ef1d11c0d98d3cbb005", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x17b397b4dcd54698}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000340)={r3}) r6 = syz_open_procfs$namespace(0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={0x0, 0x0, 0x4008, r6}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402", @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="e5ffff"], 0xa0}, 0x4004881) socket$kcm(0xa, 0x922000000003, 0x11) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="ce00f565a5d900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r11) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) 43.216694925s ago: executing program 33 (id=2465): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x1}, 0x201, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8006}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x13, 0x0, &(0x7f0000000040)="6a49c6f8ab0a67e18e4ef1d11c0d98d3cbb005", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000100), 0x17b397b4dcd54698}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000340)={r3}) r6 = syz_open_procfs$namespace(0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@o_path={0x0, 0x0, 0x4008, r6}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402", @ANYRES32=0xee01, @ANYBLOB, @ANYBLOB="e5ffff"], 0xa0}, 0x4004881) socket$kcm(0xa, 0x922000000003, 0x11) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB="ce00f565a5d900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r11) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x1, 0x56d, 0x4, 0x42, 0xffffffffffffffff, 0x1000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r12}, 0x38) 0s ago: executing program 34 (id=2460): r0 = socket$kcm(0x1e, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100003a00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e5, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3ff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1a, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1eb, 0x0, 0x0, 0x0, 0x2800}, [@exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xec73}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000640)='GPL\x00', 0x2, 0x2f, &(0x7f0000000700)=""/47, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@map=0x1, r7, 0x12, 0x35, r5}, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x6, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="77ee19a31d204e51fb2b9630435f1b8ba3beb70fb8a108f59e8bf5a35a459e94d47c4e6c29c1aec506c155a698ae7a02ff55bf337db1506688e383c7f2fb60769d3ed7528da9f0175658aad4be33e18b50c9cf6eba7383b6443746346b9d4f350ef7dbc0ef9be21f6b5f63a29a84729f0044e1590bddac61ca123ce471a39088bcfd5859efa9668e00c8556d2ed0ed24871ce62f03bc48ae5a0a001eb58a79e1f72b87b54c9c44"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1f00}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETVNETLE(r9, 0x400454dc, &(0x7f0000000040)=0x1) kernel console output (not intermixed with test programs): ributes in process `syz.3.825'. [ 230.899853][ T8815] netlink: 'syz.3.826': attribute type 1 has an invalid length. [ 230.912787][ T8815] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.826'. [ 232.089925][ T8820] netlink: 'syz.3.827': attribute type 3 has an invalid length. [ 232.097671][ T8820] netlink: 152 bytes leftover after parsing attributes in process `syz.3.827'. [ 232.250674][ T8830] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.829'. [ 232.284650][ T8830] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 232.335109][ T8839] netlink: 'syz.2.832': attribute type 2 has an invalid length. [ 232.379197][ T8839] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.832'. [ 232.890526][ T8857] netlink: 'syz.0.836': attribute type 3 has an invalid length. [ 232.896549][ T8854] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.836'. [ 232.922378][ T8857] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.836'. [ 233.421483][ T8862] netlink: 128 bytes leftover after parsing attributes in process `syz.1.838'. [ 233.458931][ T8862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.754127][ T8878] netlink: 'syz.2.843': attribute type 2 has an invalid length. [ 233.770898][ T8878] netlink: 164 bytes leftover after parsing attributes in process `syz.2.843'. [ 233.858843][ T8885] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 233.965050][ T8885] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 234.451744][ T8896] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.846'. [ 234.513255][ T8892] netlink: 'syz.0.847': attribute type 39 has an invalid length. [ 234.710973][ T8892] hsr_slave_1 (unregistering): left promiscuous mode [ 235.078340][ T8914] netlink: 'syz.3.853': attribute type 11 has an invalid length. [ 235.106157][ T8914] netlink: 140 bytes leftover after parsing attributes in process `syz.3.853'. [ 235.175822][ T8920] netlink: 14 bytes leftover after parsing attributes in process `syz.2.854'. [ 235.316055][ T8920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.351473][ T8920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.426825][ T8920] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 235.470604][ T8920] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 235.500871][ T8920] bond0 (unregistering): Released all slaves [ 235.552781][ T8933] netlink: 10 bytes leftover after parsing attributes in process `syz.3.857'. [ 235.729147][ T8941] netlink: 'syz.0.858': attribute type 2 has an invalid length. [ 235.740440][ T8941] netlink: 164 bytes leftover after parsing attributes in process `syz.0.858'. [ 235.905655][ T8942] netlink: 'syz.2.860': attribute type 10 has an invalid length. [ 236.087783][ T8942] batadv0: mtu greater than device maximum [ 237.535343][ T8989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.873'. [ 238.506618][ T9016] netlink: 'syz.2.881': attribute type 25 has an invalid length. [ 238.514420][ T9016] netlink: 'syz.2.881': attribute type 29 has an invalid length. [ 239.958786][ T9059] syzkaller0: entered promiscuous mode [ 239.980946][ T9059] syzkaller0: entered allmulticast mode [ 240.434152][ T9066] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.895'. [ 244.123221][ T9098] €Â0“€7熦: renamed from batadv_slave_1 (while UP) [ 244.498187][ T9130] netlink: 14 bytes leftover after parsing attributes in process `syz.3.914'. [ 244.539564][ T9134] netlink: 132 bytes leftover after parsing attributes in process `syz.1.913'. [ 244.604250][ T9137] netlink: 'syz.3.915': attribute type 10 has an invalid length. [ 244.612376][ T9137] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.915'. [ 245.992767][ T9178] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.925'. [ 246.064884][ T9178] netlink: del zone limit has 8 unknown bytes [ 246.217884][ T9189] netlink: 'syz.3.928': attribute type 2 has an invalid length. [ 246.232257][ T9189] netlink: 'syz.3.928': attribute type 1 has an invalid length. [ 246.244140][ T9189] netlink: 9 bytes leftover after parsing attributes in process `syz.3.928'. [ 246.587081][ T9204] netlink: 'syz.2.932': attribute type 27 has an invalid length. [ 246.595528][ T9204] netlink: 164 bytes leftover after parsing attributes in process `syz.2.932'. [ 246.908258][ T9218] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.936'. [ 246.918073][ T9218] netlink: 'syz.3.936': attribute type 1 has an invalid length. [ 246.926202][ T9218] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.936'. [ 246.941760][ T9223] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 246.971434][ T9223] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 247.463742][ T9234] netlink: 'syz.3.941': attribute type 4 has an invalid length. [ 247.483668][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 247.703484][ T9247] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.944'. [ 248.260278][ T9271] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 249.021288][ T9300] netlink: 'syz.3.961': attribute type 28 has an invalid length. [ 249.194600][ T9305] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.562006][ T9311] __nla_validate_parse: 4 callbacks suppressed [ 249.562040][ T9311] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.964'. [ 249.607465][ T9311] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 250.519854][ T9336] validate_nla: 1 callbacks suppressed [ 250.519873][ T9336] netlink: 'syz.1.969': attribute type 10 has an invalid length. [ 250.589803][ T9336] team0: Device ipvlan1 failed to register rx_handler [ 250.910008][ T9350] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 250.913905][ T9346] netlink: 'syz.3.972': attribute type 2 has an invalid length. [ 250.918677][ T9350] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.974'. [ 250.952447][ T9346] netlink: 'syz.3.972': attribute type 1 has an invalid length. [ 250.980615][ T9333] netlink: 'syz.1.969': attribute type 8 has an invalid length. [ 251.001933][ T9333] netlink: 'syz.1.969': attribute type 6 has an invalid length. [ 251.010679][ T9333] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.969'. [ 251.041945][ T9345] delete_channel: no stack [ 253.005787][ T9368] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.980'. [ 253.015001][ T9369] netlink: 188 bytes leftover after parsing attributes in process `syz.1.980'. [ 253.156005][ T9380] netlink: 'syz.1.984': attribute type 21 has an invalid length. [ 253.600563][ T9392] netlink: 'syz.3.987': attribute type 10 has an invalid length. [ 253.616897][ T9397] netlink: 'syz.0.988': attribute type 2 has an invalid length. [ 253.625297][ T9397] netlink: 'syz.0.988': attribute type 3 has an invalid length. [ 253.645852][ T9397] netlink: 132 bytes leftover after parsing attributes in process `syz.0.988'. [ 254.053190][ T9392] team0: Device hsr_slave_0 failed to register rx_handler [ 254.679143][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.992'. [ 254.713767][ T9414] netlink: 152 bytes leftover after parsing attributes in process `syz.2.992'. [ 255.057147][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 255.088186][ T9426] netlink: 57923 bytes leftover after parsing attributes in process `syz.3.996'. [ 255.116953][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 255.136949][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 255.147600][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 255.157866][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 255.176353][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 255.191539][ T9429] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.997'. [ 255.960422][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.968098][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.109242][ T9447] validate_nla: 4 callbacks suppressed [ 256.109696][ T9447] netlink: 'syz.3.1004': attribute type 2 has an invalid length. [ 256.138975][ T9447] netlink: 'syz.3.1004': attribute type 8 has an invalid length. [ 259.409708][ T9488] netlink: 'syz.3.1014': attribute type 29 has an invalid length. [ 259.411789][ T9487] netlink: 'syz.3.1014': attribute type 29 has an invalid length. [ 259.447621][ T9487] netlink: 'syz.3.1014': attribute type 29 has an invalid length. [ 259.476049][ T9488] netlink: 'syz.3.1014': attribute type 29 has an invalid length. [ 260.974832][ T9506] syzkaller0: entered promiscuous mode [ 261.014327][ T9506] syzkaller0: entered allmulticast mode [ 261.230226][ T9520] __nla_validate_parse: 31 callbacks suppressed [ 261.230245][ T9520] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1022'. [ 264.288345][ T9579] netlink: 'syz.1.1040': attribute type 4 has an invalid length. [ 264.301728][ T9579] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1040'. [ 264.592170][ T9589] FAULT_INJECTION: forcing a failure. [ 264.592170][ T9589] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 264.626818][ T9589] CPU: 1 PID: 9589 Comm: syz.0.1044 Not tainted syzkaller #0 [ 264.634281][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.644405][ T9589] Call Trace: [ 264.647832][ T9589] [ 264.650806][ T9589] dump_stack_lvl+0x18c/0x250 [ 264.655552][ T9589] ? show_regs_print_info+0x20/0x20 [ 264.660807][ T9589] ? load_image+0x420/0x420 [ 264.665449][ T9589] ? __might_fault+0xaa/0x120 [ 264.670176][ T9589] ? __lock_acquire+0x7d80/0x7d80 [ 264.675250][ T9589] ? unix_ioctl+0x259/0x6b0 [ 264.679818][ T9589] should_fail_ex+0x394/0x4c0 [ 264.684565][ T9589] _copy_from_user+0x2f/0xe0 [ 264.689207][ T9589] sock_do_ioctl+0x190/0x310 [ 264.693858][ T9589] ? sock_show_fdinfo+0xb0/0xb0 [ 264.698840][ T9589] sock_ioctl+0x5be/0x7e0 [ 264.703227][ T9589] ? sock_poll+0x3e0/0x3e0 [ 264.707818][ T9589] ? bpf_lsm_file_ioctl+0x9/0x10 [ 264.712807][ T9589] ? security_file_ioctl+0x80/0xa0 [ 264.717980][ T9589] ? sock_poll+0x3e0/0x3e0 [ 264.722619][ T9589] __se_sys_ioctl+0xfd/0x170 [ 264.727335][ T9589] do_syscall_64+0x55/0xb0 [ 264.731793][ T9589] ? clear_bhb_loop+0x40/0x90 [ 264.736512][ T9589] ? clear_bhb_loop+0x40/0x90 [ 264.741242][ T9589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.747186][ T9589] RIP: 0033:0x7fe31ed9e0d9 [ 264.751647][ T9589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.771487][ T9589] RSP: 002b:00007fe31fb83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.779963][ T9589] RAX: ffffffffffffffda RBX: 00007fe31f025fa0 RCX: 00007fe31ed9e0d9 [ 264.788161][ T9589] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 264.796403][ T9589] RBP: 00007fe31fb83090 R08: 0000000000000000 R09: 0000000000000000 [ 264.804506][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.812522][ T9589] R13: 00007fe31f026038 R14: 00007fe31f025fa0 R15: 00007ffeba1102a8 [ 264.820596][ T9589] [ 264.988984][ T9595] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1046'. [ 265.402191][ T9606] sit0: entered allmulticast mode [ 265.885979][ T9619] netlink: 'syz.2.1052': attribute type 8 has an invalid length. [ 265.893780][ T9619] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.1052'. [ 266.021147][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1054'. [ 266.050681][ T9625] netlink: 'syz.0.1054': attribute type 1 has an invalid length. [ 266.080628][ T9625] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1054'. [ 266.260125][ T9630] FAULT_INJECTION: forcing a failure. [ 266.260125][ T9630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.273599][ T9630] CPU: 0 PID: 9630 Comm: syz.0.1055 Not tainted syzkaller #0 [ 266.281011][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.291197][ T9630] Call Trace: [ 266.294500][ T9630] [ 266.297436][ T9630] dump_stack_lvl+0x18c/0x250 [ 266.302124][ T9630] ? show_regs_print_info+0x20/0x20 [ 266.307340][ T9630] ? load_image+0x420/0x420 [ 266.311884][ T9630] ? __might_fault+0xaa/0x120 [ 266.316627][ T9630] ? __lock_acquire+0x7d80/0x7d80 [ 266.321723][ T9630] should_fail_ex+0x394/0x4c0 [ 266.326483][ T9630] _copy_from_user+0x2f/0xe0 [ 266.331135][ T9630] dev_ethtool+0xc6/0x18d0 [ 266.335639][ T9630] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 266.341931][ T9630] ? __lock_acquire+0x7d80/0x7d80 [ 266.346988][ T9630] ? __might_fault+0xaa/0x120 [ 266.351668][ T9630] ? full_name_hash+0x92/0xe0 [ 266.356394][ T9630] ? dev_load+0x21/0x1f0 [ 266.360651][ T9630] dev_ioctl+0x392/0x1140 [ 266.365022][ T9630] sock_do_ioctl+0x239/0x310 [ 266.369672][ T9630] ? sock_show_fdinfo+0xb0/0xb0 [ 266.374588][ T9630] sock_ioctl+0x5be/0x7e0 [ 266.378960][ T9630] ? sock_poll+0x3e0/0x3e0 [ 266.383467][ T9630] ? bpf_lsm_file_ioctl+0x9/0x10 [ 266.388432][ T9630] ? security_file_ioctl+0x80/0xa0 [ 266.393558][ T9630] ? sock_poll+0x3e0/0x3e0 [ 266.397998][ T9630] __se_sys_ioctl+0xfd/0x170 [ 266.402616][ T9630] do_syscall_64+0x55/0xb0 [ 266.407054][ T9630] ? clear_bhb_loop+0x40/0x90 [ 266.411738][ T9630] ? clear_bhb_loop+0x40/0x90 [ 266.416432][ T9630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.422338][ T9630] RIP: 0033:0x7fe31ed9e0d9 [ 266.426770][ T9630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.446409][ T9630] RSP: 002b:00007fe31fb83028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.454847][ T9630] RAX: ffffffffffffffda RBX: 00007fe31f025fa0 RCX: 00007fe31ed9e0d9 [ 266.462827][ T9630] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 266.470810][ T9630] RBP: 00007fe31fb83090 R08: 0000000000000000 R09: 0000000000000000 [ 266.478791][ T9630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.486769][ T9630] R13: 00007fe31f026038 R14: 00007fe31f025fa0 R15: 00007ffeba1102a8 [ 266.494783][ T9630] [ 267.379955][ T9658] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1065'. [ 267.987054][ T9669] FAULT_INJECTION: forcing a failure. [ 267.987054][ T9669] name failslab, interval 1, probability 0, space 0, times 1 [ 268.015730][ T9669] CPU: 1 PID: 9669 Comm: syz.1.1067 Not tainted syzkaller #0 [ 268.023193][ T9669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.033299][ T9669] Call Trace: [ 268.036619][ T9669] [ 268.039586][ T9669] dump_stack_lvl+0x18c/0x250 [ 268.044315][ T9669] ? show_regs_print_info+0x20/0x20 [ 268.049544][ T9669] ? load_image+0x420/0x420 [ 268.054074][ T9669] ? __might_sleep+0xe0/0xe0 [ 268.058683][ T9669] ? __lock_acquire+0x7d80/0x7d80 [ 268.063731][ T9669] should_fail_ex+0x394/0x4c0 [ 268.068524][ T9669] should_failslab+0x9/0x20 [ 268.073041][ T9669] slab_pre_alloc_hook+0x59/0x300 [ 268.078080][ T9669] ? __lock_acquire+0x7d80/0x7d80 [ 268.083121][ T9669] ? dev_ethtool+0x129/0x18d0 [ 268.087819][ T9669] __kmem_cache_alloc_node+0x53/0x250 [ 268.093202][ T9669] ? __might_fault+0xaa/0x120 [ 268.097893][ T9669] ? dev_ethtool+0x129/0x18d0 [ 268.102585][ T9669] kmalloc_trace+0x2a/0xe0 [ 268.107027][ T9669] dev_ethtool+0x129/0x18d0 [ 268.111563][ T9669] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 268.117818][ T9669] ? __lock_acquire+0x7d80/0x7d80 [ 268.122858][ T9669] ? __might_fault+0xaa/0x120 [ 268.127803][ T9669] ? full_name_hash+0x92/0xe0 [ 268.132500][ T9669] ? dev_load+0x21/0x1f0 [ 268.136762][ T9669] dev_ioctl+0x392/0x1140 [ 268.141116][ T9669] sock_do_ioctl+0x239/0x310 [ 268.145727][ T9669] ? sock_show_fdinfo+0xb0/0xb0 [ 268.150620][ T9669] sock_ioctl+0x5be/0x7e0 [ 268.154966][ T9669] ? sock_poll+0x3e0/0x3e0 [ 268.159433][ T9669] ? bpf_lsm_file_ioctl+0x9/0x10 [ 268.164388][ T9669] ? security_file_ioctl+0x80/0xa0 [ 268.169516][ T9669] ? sock_poll+0x3e0/0x3e0 [ 268.173942][ T9669] __se_sys_ioctl+0xfd/0x170 [ 268.178565][ T9669] do_syscall_64+0x55/0xb0 [ 268.182995][ T9669] ? clear_bhb_loop+0x40/0x90 [ 268.187680][ T9669] ? clear_bhb_loop+0x40/0x90 [ 268.192373][ T9669] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.198622][ T9669] RIP: 0033:0x7ff8c8d9e0d9 [ 268.203221][ T9669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.222838][ T9669] RSP: 002b:00007ff8c9ccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.231274][ T9669] RAX: ffffffffffffffda RBX: 00007ff8c9025fa0 RCX: 00007ff8c8d9e0d9 [ 268.239346][ T9669] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 268.247325][ T9669] RBP: 00007ff8c9ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 268.255308][ T9669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.263290][ T9669] R13: 00007ff8c9026038 R14: 00007ff8c9025fa0 R15: 00007fff82b1c1f8 [ 268.271308][ T9669] [ 268.966054][ T9691] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1074'. [ 269.479456][ T9705] FAULT_INJECTION: forcing a failure. [ 269.479456][ T9705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.525548][ T9705] CPU: 0 PID: 9705 Comm: syz.1.1078 Not tainted syzkaller #0 [ 269.533868][ T9705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 269.543939][ T9705] Call Trace: [ 269.547242][ T9705] [ 269.550185][ T9705] dump_stack_lvl+0x18c/0x250 [ 269.554891][ T9705] ? show_regs_print_info+0x20/0x20 [ 269.560287][ T9705] ? load_image+0x420/0x420 [ 269.564821][ T9705] ? __might_fault+0xaa/0x120 [ 269.569694][ T9705] ? __lock_acquire+0x7d80/0x7d80 [ 269.574744][ T9705] should_fail_ex+0x394/0x4c0 [ 269.579454][ T9705] _copy_to_user+0x2f/0xa0 [ 269.583896][ T9705] ethtool_get_settings+0x2c4/0x3a0 [ 269.589129][ T9705] ? ethtool_rx_flow_rule_destroy+0x40/0x40 [ 269.595065][ T9705] ? mutex_lock_nested+0x20/0x20 [ 269.600471][ T9705] ? full_name_hash+0x92/0xe0 [ 269.605176][ T9705] dev_ethtool+0xf38/0x18d0 [ 269.609714][ T9705] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 269.615970][ T9705] ? __lock_acquire+0x7d80/0x7d80 [ 269.621018][ T9705] ? __might_fault+0xaa/0x120 [ 269.625747][ T9705] ? full_name_hash+0x92/0xe0 [ 269.630471][ T9705] ? dev_load+0x21/0x1f0 [ 269.634738][ T9705] dev_ioctl+0x392/0x1140 [ 269.639198][ T9705] sock_do_ioctl+0x239/0x310 [ 269.643821][ T9705] ? sock_show_fdinfo+0xb0/0xb0 [ 269.648826][ T9705] sock_ioctl+0x5be/0x7e0 [ 269.653202][ T9705] ? sock_poll+0x3e0/0x3e0 [ 269.657677][ T9705] ? bpf_lsm_file_ioctl+0x9/0x10 [ 269.662714][ T9705] ? security_file_ioctl+0x80/0xa0 [ 269.667847][ T9705] ? sock_poll+0x3e0/0x3e0 [ 269.672277][ T9705] __se_sys_ioctl+0xfd/0x170 [ 269.676894][ T9705] do_syscall_64+0x55/0xb0 [ 269.681321][ T9705] ? clear_bhb_loop+0x40/0x90 [ 269.686011][ T9705] ? clear_bhb_loop+0x40/0x90 [ 269.690710][ T9705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.696611][ T9705] RIP: 0033:0x7ff8c8d9e0d9 [ 269.701037][ T9705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.720828][ T9705] RSP: 002b:00007ff8c9ccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.729262][ T9705] RAX: ffffffffffffffda RBX: 00007ff8c9025fa0 RCX: 00007ff8c8d9e0d9 [ 269.737267][ T9705] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 269.745252][ T9705] RBP: 00007ff8c9ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 269.753234][ T9705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.761217][ T9705] R13: 00007ff8c9026038 R14: 00007ff8c9025fa0 R15: 00007fff82b1c1f8 [ 269.769240][ T9705] [ 269.795965][ T9702] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.1077'. [ 270.887538][ T9741] can: request_module (can-proto-0) failed. [ 270.889101][ T9745] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1088'. [ 271.320504][ T9756] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1090'. [ 271.400026][ T9752] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.1091'. [ 271.609435][ T9759] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 272.546888][ T9768] netlink: 'syz.0.1095': attribute type 9 has an invalid length. [ 272.560134][ T9768] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1095'. [ 272.604893][ T9775] IPv6: NLM_F_CREATE should be specified when creating new route [ 272.846691][ T9785] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1100'. [ 272.956507][ T9789] netlink: 'syz.2.1102': attribute type 29 has an invalid length. [ 272.964899][ T9789] netlink: 'syz.2.1102': attribute type 29 has an invalid length. [ 273.239010][ T9803] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1103'. [ 273.278004][ T9806] netlink: 'syz.1.1106': attribute type 1 has an invalid length. [ 273.315798][ T9806] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1106'. [ 273.347296][ T9808] netlink: 'syz.3.1107': attribute type 7 has an invalid length. [ 273.715475][ T9818] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1109'. [ 273.755144][ T9818] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 273.763692][ T9818] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1109'. [ 273.774572][ T9818] bridge0: port 2() entered blocking state [ 273.782103][ T9818] bridge0: port 2() entered disabled state [ 273.809733][ T9818] bridge0: port 2() entered blocking state [ 273.816697][ T9818] bridge0: port 2() entered forwarding state [ 274.196943][ T9826] netlink: 15755 bytes leftover after parsing attributes in process `syz.0.1112'. [ 274.493240][ T9835] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1114'. [ 274.532061][ T9835] bridge_slave_1: default FDB implementation only supports local addresses [ 274.882692][ T9853] netlink: 'syz.2.1120': attribute type 9 has an invalid length. [ 274.891603][ T9853] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1120'. [ 274.924147][ T9853] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1120'. [ 274.934931][ T9853] : renamed from caif0 [ 274.946377][ T9853] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 274.974414][ T9853] netlink: 'syz.2.1120': attribute type 3 has an invalid length. [ 274.990850][ T9853] netlink: 'syz.2.1120': attribute type 10 has an invalid length. [ 276.609265][ T9912] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 276.622338][ T9912] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 276.753213][ T5781] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 277.349191][ T9909] delete_channel: no stack [ 279.290863][ T9944] netlink: 'syz.0.1144': attribute type 6 has an invalid length. [ 279.305463][ T9944] __nla_validate_parse: 1 callbacks suppressed [ 279.305478][ T9944] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1144'. [ 279.939956][ T9957] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1148'. [ 280.137639][ T9964] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1150'. [ 280.313829][ T9967] sit0: left promiscuous mode [ 280.659105][ T9969] sit0: entered promiscuous mode [ 281.047322][ T9980] netlink: 'syz.0.1155': attribute type 23 has an invalid length. [ 281.171826][ T9995] netlink: 'syz.0.1157': attribute type 10 has an invalid length. [ 281.378089][T10003] syzkaller0: entered promiscuous mode [ 281.383976][T10003] syzkaller0: entered allmulticast mode [ 282.994170][T10020] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1164'. [ 283.184810][T10034] netlink: 'syz.2.1169': attribute type 27 has an invalid length. [ 283.193299][T10034] netlink: 'syz.2.1169': attribute type 28 has an invalid length. [ 283.201972][T10034] netlink: 'syz.2.1169': attribute type 29 has an invalid length. [ 283.210299][T10034] netlink: 'syz.2.1169': attribute type 30 has an invalid length. [ 283.228091][T10034] netlink: 'syz.2.1169': attribute type 31 has an invalid length. [ 283.236661][T10034] netlink: 'syz.2.1169': attribute type 32 has an invalid length. [ 283.244635][T10034] netlink: 'syz.2.1169': attribute type 33 has an invalid length. [ 283.271062][T10036] sit0: entered promiscuous mode [ 283.854761][T10079] netlink: 'syz.3.1181': attribute type 11 has an invalid length. [ 283.885966][T10079] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.1181'. [ 283.955273][T10079] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 284.271966][T10098] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1186'. [ 284.275248][T10100] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1187'. [ 284.479168][T10107] validate_nla: 12 callbacks suppressed [ 284.479187][T10107] netlink: 'syz.2.1189': attribute type 10 has an invalid length. [ 285.534917][T10133] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1196'. [ 285.562986][T10133] netlink: 'syz.2.1196': attribute type 2 has an invalid length. [ 285.575540][T10133] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1196'. [ 286.387413][T10159] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1203'. [ 286.399789][T10159] team_slave_0: left promiscuous mode [ 286.406564][T10159] team_slave_0: left allmulticast mode [ 286.423690][T10159] : Port device team_slave_0 removed [ 286.435045][T10159] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 287.079716][T10185] netlink: 'syz.2.1210': attribute type 25 has an invalid length. [ 287.099892][T10185] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1210'. [ 287.249146][T10188] : renamed from bond_slave_0 (while UP) [ 287.493396][T10196] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1215'. [ 287.524578][T10201] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1216'. [ 287.535855][T10202] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1216'. [ 287.705156][T10201] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.1216'. [ 287.743295][T10206] netlink: 18187 bytes leftover after parsing attributes in process `syz.2.1216'. [ 288.571245][T10222] netlink: 'syz.1.1224': attribute type 10 has an invalid length. [ 288.581074][T10222] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1224'. [ 288.612667][T10222] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 288.622705][T10222] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.654749][T10222] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 288.769257][T10222] netlink: 'syz.1.1224': attribute type 2 has an invalid length. [ 288.870870][T10237] openvswitch: netlink: IP tunnel dst address not specified [ 289.181725][T10251] netlink: 'syz.2.1232': attribute type 10 has an invalid length. [ 289.980820][T10271] netlink: 'syz.0.1239': attribute type 10 has an invalid length. [ 290.082026][T10276] netlink: 'syz.1.1240': attribute type 3 has an invalid length. [ 290.154180][T10281] syz.2.1242[10281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 290.154502][T10281] syz.2.1242[10281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 291.216640][T10324] netlink: 'syz.3.1252': attribute type 16 has an invalid length. [ 291.276403][T10324] __nla_validate_parse: 6 callbacks suppressed [ 291.276421][T10324] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1252'. [ 291.674233][T10327] netlink: 'syz.2.1253': attribute type 3 has an invalid length. [ 291.685965][T10327] netlink: 'syz.2.1253': attribute type 6 has an invalid length. [ 291.696357][T10327] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1253'. [ 293.973985][T10331] bridge0: port 2() entered disabled state [ 294.003144][T10331] bridge_slave_0: left promiscuous mode [ 294.045685][T10331] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.172033][T10341] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1259'. [ 294.202080][T10333] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1256'. [ 294.219146][T10343] ªªªªª»: renamed from hsr0 (while UP) [ 294.682986][T10358] netlink: 'syz.2.1265': attribute type 4 has an invalid length. [ 294.691978][T10357] netlink: 'syz.2.1265': attribute type 4 has an invalid length. [ 294.978566][T10368] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1269'. [ 295.270533][T10375] delete_channel: no stack [ 295.325706][T10375] delete_channel: no stack [ 295.533880][T10387] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1273'. [ 295.587667][T10389] netlink: 'syz.3.1275': attribute type 10 has an invalid length. [ 295.600293][T10389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1275'. [ 295.613755][T10389] vcan0: entered promiscuous mode [ 295.619854][T10389] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 296.728492][T10422] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1285'. [ 296.756336][T10424] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1283'. [ 296.758442][T10422] netlink: zone id is out of range [ 296.771217][T10422] netlink: zone id is out of range [ 296.777047][T10422] netlink: zone id is out of range [ 296.782376][T10422] netlink: zone id is out of range [ 296.788107][T10422] netlink: zone id is out of range [ 296.815497][T10422] netlink: zone id is out of range [ 296.875660][T10422] netlink: zone id is out of range [ 296.915515][T10422] netlink: zone id is out of range [ 296.921408][T10422] netlink: zone id is out of range [ 297.819575][T10446] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1289'. [ 298.522769][T10470] netlink: 'syz.3.1294': attribute type 11 has an invalid length. [ 298.534480][T10470] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1294'. [ 298.749494][T10484] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1299'. [ 299.000673][T10497] netlink: 'syz.0.1302': attribute type 2 has an invalid length. [ 299.008802][T10497] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1302'. [ 299.009694][T10495] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1301'. [ 299.248917][T10509] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.1305'. [ 301.459200][T10582] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1330'. [ 301.489097][T10582] net_ratelimit: 310 callbacks suppressed [ 301.489113][T10582] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 301.737571][T10591] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 302.097619][T10600] netlink: 'syz.1.1334': attribute type 10 has an invalid length. [ 302.144216][T10600] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1334'. [ 302.511024][T10605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 303.560279][T10617] netlink: 'syz.2.1340': attribute type 15 has an invalid length. [ 303.577808][T10617] netlink: 'syz.2.1340': attribute type 7 has an invalid length. [ 305.159248][T10644] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1345'. [ 305.316364][T10646] netlink: 'syz.2.1347': attribute type 39 has an invalid length. [ 306.609565][T10671] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1355'. [ 307.158697][T10685] netlink: 'syz.2.1358': attribute type 9 has an invalid length. [ 307.176559][T10685] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1358'. [ 307.219833][T10687] netlink: 'syz.1.1361': attribute type 21 has an invalid length. [ 307.256757][T10687] netlink: 'syz.1.1361': attribute type 6 has an invalid length. [ 307.287642][T10689] netlink: 'syz.3.1362': attribute type 10 has an invalid length. [ 307.301896][T10691] netlink: 'syz.0.1363': attribute type 9 has an invalid length. [ 307.338205][T10691] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1363'. [ 307.371997][T10689] nlmon0: entered promiscuous mode [ 307.379470][T10689] nlmon0: entered allmulticast mode [ 307.385013][T10689] team0: Device nlmon0 is of different type [ 307.474530][T10691] syzkaller0: entered promiscuous mode [ 307.480846][T10691] syzkaller0: entered allmulticast mode [ 310.574773][T10710] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 310.580862][T10710] syzkaller1: linktype set to 825 [ 312.551295][T10746] netlink: set zone limit has 8 unknown bytes [ 315.549755][T10761] veth1_macvtap: entered promiscuous mode [ 315.586877][T10761] macsec0: entered promiscuous mode [ 315.618069][T10761] macsec0: entered allmulticast mode [ 315.623633][T10761] veth1_macvtap: entered allmulticast mode [ 317.398775][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.405344][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.507485][ T5781] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 317.889404][T10790] netlink: 'syz.1.1388': attribute type 4 has an invalid length. [ 317.901365][T10790] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1388'. [ 318.931666][T10814] syzkaller0: entered promiscuous mode [ 318.941487][T10814] syzkaller0: entered allmulticast mode [ 319.366093][T10834] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 319.373899][T10834] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1400'. [ 319.383398][T10834] netlink: 'syz.3.1400': attribute type 1 has an invalid length. [ 320.838300][T10841] netlink: 'syz.0.1403': attribute type 39 has an invalid length. [ 320.914732][ T5781] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 320.988942][T10849] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1405'. [ 323.663637][T10841] veth0_macvtap: left promiscuous mode [ 324.205251][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 324.229052][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 324.238695][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 324.252712][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 324.265292][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 324.273475][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 324.487906][T10869] netlink: 'syz.0.1412': attribute type 10 has an invalid length. [ 324.549370][T10869] team0: Device hsr_slave_0 failed to register rx_handler [ 324.897466][T10878] netlink: 'syz.3.1415': attribute type 7 has an invalid length. [ 324.972376][T10881] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1416'. [ 324.993110][T10881] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.1416'. [ 325.087359][T10860] chnl_net:caif_netlink_parms(): no params data found [ 325.464177][T10860] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.485533][T10860] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.492927][T10860] bridge_slave_0: entered allmulticast mode [ 325.527861][T10860] bridge_slave_0: entered promiscuous mode [ 325.555140][T10896] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.632812][T10860] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.657951][T10860] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.666658][T10860] bridge_slave_1: entered allmulticast mode [ 325.679045][T10860] bridge_slave_1: entered promiscuous mode [ 325.721931][T10178] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.752484][T10902] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1422'. [ 325.804135][T10902] netlink: zone id is out of range [ 325.909886][T10178] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.103307][T10903] syzkaller0: entered promiscuous mode [ 326.125694][T10903] syzkaller0: entered allmulticast mode [ 326.425725][ T5776] Bluetooth: hci4: command tx timeout [ 328.120727][T10178] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.180765][T10860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.211028][T10860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.276595][T10919] netlink: 'syz.0.1426': attribute type 21 has an invalid length. [ 328.375015][T10178] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.398657][T10921] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1427'. [ 328.450094][T10860] team0: Port device team_slave_0 added [ 328.475280][T10860] team0: Port device team_slave_1 added [ 328.492846][T10921] netlink: 197532 bytes leftover after parsing attributes in process `syz.1.1427'. [ 328.505814][ T5776] Bluetooth: hci4: command tx timeout [ 328.611109][T10860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.621353][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.672765][T10860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.713639][T10860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.739926][T10860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.773689][T10860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.785278][T10933] netlink: 'syz.1.1430': attribute type 17 has an invalid length. [ 328.794638][T10933] netlink: 160 bytes leftover after parsing attributes in process `syz.1.1430'. [ 328.840800][T10933] netlink: 'syz.1.1430': attribute type 2 has an invalid length. [ 328.849981][T10933] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.1430'. [ 329.037124][T10937] netlink: 'syz.1.1431': attribute type 3 has an invalid length. [ 329.051545][T10937] netlink: 'syz.1.1431': attribute type 1 has an invalid length. [ 329.053575][T10860] hsr_slave_0: entered promiscuous mode [ 329.060225][T10937] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1431'. [ 329.083219][T10860] hsr_slave_1: entered promiscuous mode [ 329.291360][T10923] delete_channel: no stack [ 329.967069][T10947] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1433'. [ 329.979342][T10947] openvswitch: netlink: Flow key attribute not present in set flow. [ 330.340994][T10964] netlink: 'syz.0.1435': attribute type 2 has an invalid length. [ 330.655825][ T5776] Bluetooth: hci4: command tx timeout [ 331.105307][T10860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.193023][T10860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.222316][T10860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.305096][T10860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.827846][T10989] netlink: 'syz.1.1439': attribute type 39 has an invalid length. [ 332.667006][ T5776] Bluetooth: hci4: command tx timeout [ 332.822791][T10178] hsr_slave_0: left promiscuous mode [ 332.897922][T10178] hsr_slave_1: left promiscuous mode [ 332.962140][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.986128][T10178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.005501][T10178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.030523][T10178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.217492][T10178] veth1_vlan: left promiscuous mode [ 333.223516][T10178] veth0_vlan: left promiscuous mode [ 334.253833][T10178] team_slave_1 (unregistering): left promiscuous mode [ 334.261827][T10178] team_slave_1 (unregistering): left allmulticast mode [ 334.273969][T10178]  (unregistering): Port device team_slave_1 removed [ 334.674490][T10860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.682395][T11004] netlink: 'syz.1.1443': attribute type 21 has an invalid length. [ 334.690864][T11004] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1443'. [ 334.836275][T11010] netlink: 'syz.1.1444': attribute type 21 has an invalid length. [ 334.844198][T11010] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1444'. [ 335.025266][T10860] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.089548][ T7962] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.096776][ T7962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.133720][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.140920][ T7962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.820632][T10860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.835262][T11050] netlink: 'syz.3.1449': attribute type 64 has an invalid length. [ 336.608049][T11074] netlink: 'syz.1.1454': attribute type 4 has an invalid length. [ 336.611932][T10860] veth0_vlan: entered promiscuous mode [ 336.634621][T11074] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1454'. [ 337.444027][T10860] veth1_vlan: entered promiscuous mode [ 337.545166][T10860] veth0_macvtap: entered promiscuous mode [ 337.593449][T10860] veth1_macvtap: entered promiscuous mode [ 337.645434][T11092] tap0: tun_chr_ioctl cmd 1074025677 [ 337.650943][T11092] tap0: linktype set to 776 [ 337.680773][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.719733][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.734630][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.750393][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.760851][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.788536][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.801685][T10860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.847496][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0“€7熦 [ 337.858716][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.872210][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.885527][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.905790][T10860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.924194][T10860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.942306][T10860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.963724][T10860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.982627][T10860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.993099][T10860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.033139][T10860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.243860][T10179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.269660][T10179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.377130][T11127] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 338.384318][ T7962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.410594][ T7962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.318821][T11212] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1476'. [ 341.385762][T11210] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1476'. [ 341.765096][T11224] netlink: 'syz.4.1478': attribute type 39 has an invalid length. [ 341.974875][T11229] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1478'. [ 342.061743][T11234] veth0_vlan: entered allmulticast mode [ 342.483426][T11263] syzkaller0: entered promiscuous mode [ 342.502150][T11263] syzkaller0: entered allmulticast mode [ 342.627827][T11266] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1488'. [ 342.983831][T11284] netlink: 'syz.1.1489': attribute type 21 has an invalid length. [ 343.252597][T11286] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1492'. [ 343.581659][T11301] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1494'. [ 343.658783][T11306] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1497'. [ 344.062877][T11329] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1501'. [ 344.083063][T11329] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 344.123176][T11317] netlink: 'syz.4.1498': attribute type 23 has an invalid length. [ 344.150050][T11313] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.157767][T11313] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.195712][T11313] bridge0: entered allmulticast mode [ 346.125197][T11352] netlink: 'syz.3.1507': attribute type 22 has an invalid length. [ 346.142358][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'. [ 346.153516][T11356] netlink: 'syz.4.1505': attribute type 6 has an invalid length. [ 346.161717][T11356] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1505'. [ 346.388007][T11365] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1509'. [ 346.399297][T11365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 346.679963][T11385] netlink: 'syz.3.1515': attribute type 3 has an invalid length. [ 346.714989][T11385] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1515'. [ 346.923953][T11391] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1516'. [ 347.020674][T11391] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.1516'. [ 347.312509][T11402] netlink: 'syz.1.1520': attribute type 9 has an invalid length. [ 347.337260][T11402] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1520'. [ 347.475244][T11407] netlink: 'syz.1.1520': attribute type 9 has an invalid length. [ 347.511207][T11407] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1520'. [ 347.760633][T11416] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1522'. [ 347.980827][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1529'. [ 348.059869][T11442] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.1529'. [ 348.070184][T11442] openvswitch: netlink: IP tunnel dst address not specified [ 348.257934][T11444] netlink: 'syz.4.1531': attribute type 10 has an invalid length. [ 348.272953][T11444] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1531'. [ 348.315163][T11451] netlink: 'syz.3.1533': attribute type 21 has an invalid length. [ 348.431085][T11455] openvswitch: netlink: IP tunnel dst address not specified [ 348.621375][T11460] syz.4.1535[11460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 348.658736][T11460] bridge_slave_1: left allmulticast mode [ 348.705819][T11460] bridge_slave_1: left promiscuous mode [ 348.720842][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.860084][T11460] bridge_slave_0: left allmulticast mode [ 348.875873][T11460] bridge_slave_0: left promiscuous mode [ 348.884873][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.189091][T11457] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 349.199837][T11457] team0: Device ipvlan1 failed to register rx_handler [ 350.157476][T11514] netlink: 'syz.3.1547': attribute type 10 has an invalid length. [ 350.276854][T11519] netlink: set zone limit has 8 unknown bytes [ 350.435273][T11528] netlink: 'syz.3.1551': attribute type 10 has an invalid length. [ 350.490650][T11528] macvlan0: entered promiscuous mode [ 350.516186][T11528] macvlan0: entered allmulticast mode [ 350.531876][T11528] veth1_vlan: entered allmulticast mode [ 350.552232][T11528] team0: Port device macvlan0 added [ 350.911851][T11549] sit0: entered allmulticast mode [ 350.935291][T11536] sit0: entered promiscuous mode [ 351.546691][T11563] can: request_module (can-proto-4) failed. [ 351.658656][T11565] netlink: 'syz.0.1559': attribute type 10 has an invalid length. [ 351.939511][T11599] netlink: 'syz.1.1565': attribute type 3 has an invalid length. [ 351.979123][T11599] __nla_validate_parse: 6 callbacks suppressed [ 351.979264][T11599] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1565'. [ 352.433437][T11604] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1567'. [ 352.583010][T11616] syz.0.1569[11616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.583467][T11616] syz.0.1569[11616] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.008637][T11661] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1579'. [ 354.933597][T11676] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1583'. [ 354.975782][T11677] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1580'. [ 354.983327][T11676] netlink: 'syz.4.1583': attribute type 3 has an invalid length. [ 355.005248][T11676] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 355.024991][T11676] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1583'. [ 356.284427][T11725] netlink: 'syz.4.1593': attribute type 41 has an invalid length. [ 356.951118][T11743] netlink: 'syz.4.1600': attribute type 10 has an invalid length. [ 356.983231][T11743] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1600'. [ 357.308290][T11752] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1602'. [ 357.341815][T11752] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô' [ 357.375942][T11752] CPU: 1 PID: 11752 Comm: syz.1.1602 Not tainted syzkaller #0 [ 357.383561][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 357.393656][T11752] Call Trace: [ 357.396964][T11752] [ 357.400012][T11752] dump_stack_lvl+0x18c/0x250 [ 357.404828][T11752] ? show_regs_print_info+0x20/0x20 [ 357.410071][T11752] ? load_image+0x420/0x420 [ 357.414682][T11752] sysfs_warn_dup+0x8e/0xa0 [ 357.419272][T11752] sysfs_do_create_link_sd+0xc0/0x110 [ 357.425071][T11752] device_add_class_symlinks+0x1cf/0x240 [ 357.430800][T11752] device_add+0x4f9/0xc40 [ 357.435172][T11752] wiphy_register+0x1d99/0x2ac0 [ 357.440386][T11752] ? cfg80211_event_work+0x40/0x40 [ 357.445531][T11752] ? minstrel_ht_alloc+0x88a/0x990 [ 357.450806][T11752] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 357.457028][T11752] ieee80211_register_hw+0x2dd8/0x3b30 [ 357.462791][T11752] ? ieee80211_register_hw+0xfb1/0x3b30 [ 357.468389][T11752] ? ieee80211_tasklet_handler+0x20/0x20 [ 357.474066][T11752] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 357.480113][T11752] ? __debug_object_init+0xec/0x450 [ 357.485372][T11752] ? __asan_memset+0x22/0x40 [ 357.489997][T11752] ? __hrtimer_init+0x189/0x270 [ 357.494892][T11752] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 357.500654][T11752] ? mac80211_hwsim_free+0x220/0x220 [ 357.506119][T11752] ? rcu_is_watching+0x15/0xb0 [ 357.510900][T11752] ? kstrndup+0xbd/0x140 [ 357.515177][T11752] hwsim_new_radio_nl+0xdad/0x1a70 [ 357.520305][T11752] ? __nla_validate+0x50/0x50 [ 357.524995][T11752] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 357.531676][T11752] ? __nla_parse+0x40/0x50 [ 357.536107][T11752] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 357.542550][T11752] genl_family_rcv_msg_doit+0x21a/0x310 [ 357.548105][T11752] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 357.554006][T11752] ? bpf_lsm_capable+0x9/0x10 [ 357.558719][T11752] ? security_capable+0x89/0xb0 [ 357.563610][T11752] genl_rcv_msg+0x611/0x7a0 [ 357.568121][T11752] ? genl_bind+0x360/0x360 [ 357.572534][T11752] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 357.578861][T11752] ? ref_tracker_free+0x686/0x830 [ 357.583887][T11752] ? __kasan_kmalloc_large+0x8b/0xa0 [ 357.589184][T11752] netlink_rcv_skb+0x235/0x4c0 [ 357.593953][T11752] ? genl_bind+0x360/0x360 [ 357.598371][T11752] ? netlink_ack+0x1160/0x1160 [ 357.603137][T11752] ? __lock_acquire+0x7d80/0x7d80 [ 357.608289][T11752] ? down_read+0x1ac/0x2e0 [ 357.612719][T11752] genl_rcv+0x28/0x40 [ 357.616704][T11752] netlink_unicast+0x7b1/0x930 [ 357.621558][T11752] netlink_sendmsg+0x8d0/0xbf0 [ 357.626341][T11752] ? netlink_getsockopt+0x590/0x590 [ 357.631558][T11752] ? apparmor_socket_sendmsg+0x8e/0x330 [ 357.637151][T11752] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 357.642448][T11752] ? security_socket_sendmsg+0x80/0xa0 [ 357.648076][T11752] ? netlink_getsockopt+0x590/0x590 [ 357.653273][T11752] ____sys_sendmsg+0x61b/0x980 [ 357.658154][T11752] ? __asan_memset+0x22/0x40 [ 357.662751][T11752] ? __sys_sendmsg_sock+0x30/0x30 [ 357.667773][T11752] ? __import_iovec+0x5f2/0x850 [ 357.672632][T11752] ? import_iovec+0x73/0xa0 [ 357.677164][T11752] ___sys_sendmsg+0x2a6/0x360 [ 357.681872][T11752] ? __sys_sendmsg+0x2b0/0x2b0 [ 357.686684][T11752] __se_sys_sendmsg+0x1d0/0x2c0 [ 357.691541][T11752] ? __x64_sys_sendmsg+0x80/0x80 [ 357.696488][T11752] ? lockdep_hardirqs_on+0x98/0x150 [ 357.701784][T11752] do_syscall_64+0x55/0xb0 [ 357.706199][T11752] ? clear_bhb_loop+0x40/0x90 [ 357.710947][T11752] ? clear_bhb_loop+0x40/0x90 [ 357.715645][T11752] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 357.721551][T11752] RIP: 0033:0x7ff8c8d9e0d9 [ 357.726007][T11752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.745615][T11752] RSP: 002b:00007ff8c9ccf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.754031][T11752] RAX: ffffffffffffffda RBX: 00007ff8c9025fa0 RCX: 00007ff8c8d9e0d9 [ 357.762003][T11752] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 357.770171][T11752] RBP: 00007ff8c8e35024 R08: 0000000000000000 R09: 0000000000000000 [ 357.778402][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.786367][T11752] R13: 00007ff8c9026038 R14: 00007ff8c9025fa0 R15: 00007fff82b1c1f8 [ 357.794357][T11752] [ 357.845460][T11750] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1601'. [ 358.082402][T11759] netlink: 'syz.4.1605': attribute type 28 has an invalid length. [ 358.090450][T11759] netlink: 'syz.4.1605': attribute type 29 has an invalid length. [ 358.108946][T11759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1605'. [ 358.246901][T11763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.257429][T11763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.277061][T11763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.284535][T11763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.774225][T11798] netlink: 'syz.0.1611': attribute type 21 has an invalid length. [ 359.843464][T11798] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 360.044209][T11807] netlink: 56843 bytes leftover after parsing attributes in process `syz.3.1610'. [ 360.316165][T11813] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 360.334795][T11814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1613'. [ 361.918288][T11873] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1627'. [ 362.236913][T11884] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1629'. [ 362.285593][T11884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.395329][T11901] netlink: 'syz.0.1631': attribute type 29 has an invalid length. [ 362.519304][T11885] netlink: 'syz.3.1625': attribute type 10 has an invalid length. [ 362.531951][T11907] netlink: 'syz.4.1630': attribute type 3 has an invalid length. [ 362.552446][T11907] netlink: 16795 bytes leftover after parsing attributes in process `syz.4.1630'. [ 363.056492][T11885] team_slave_0: left promiscuous mode [ 363.083279][T11885] team_slave_0: left allmulticast mode [ 363.116127][T11885] team0 (unregistering): Port device team_slave_0 removed [ 363.211606][T11885] team_slave_1: left promiscuous mode [ 363.242083][T11885] team_slave_1: left allmulticast mode [ 363.305221][T11885] team0 (unregistering): Port device team_slave_1 removed [ 363.325988][T11885] macvlan0: left promiscuous mode [ 363.331439][T11885] macvlan0: left allmulticast mode [ 363.354767][T11885] veth1_vlan: left allmulticast mode [ 363.379029][T11885] team0 (unregistering): Port device macvlan0 removed [ 363.405261][T11901] netlink: 'syz.0.1631': attribute type 29 has an invalid length. [ 363.423578][T11912] netlink: 'syz.0.1631': attribute type 10 has an invalid length. [ 363.431797][T11912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1631'. [ 363.441618][T11912] ipvlan1: entered promiscuous mode [ 363.457667][T11912] ipvlan1: entered allmulticast mode [ 363.463152][T11912] veth0_vlan: entered allmulticast mode [ 363.475232][T11912] bridge0: port 3(ipvlan1) entered blocking state [ 363.482218][T11912] bridge0: port 3(ipvlan1) entered disabled state [ 363.491244][T11912] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 363.591704][T11926] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1634'. [ 363.966344][ T5776] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 365.996570][T11984] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1649'. [ 366.175976][T11985] netlink: 'syz.1.1649': attribute type 12 has an invalid length. [ 366.195788][T11985] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.1649'. [ 366.300002][T11987] netlink: 'syz.4.1650': attribute type 29 has an invalid length. [ 366.326157][T11987] netlink: 'syz.4.1650': attribute type 29 has an invalid length. [ 366.375671][T11987] netlink: 'syz.4.1650': attribute type 29 has an invalid length. [ 366.547357][ T5774] cgroup: fork rejected by pids controller in /syz3 [ 366.636695][T12001] netlink: 'syz.1.1656': attribute type 3 has an invalid length. [ 366.657932][T12001] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1656'. [ 366.675338][T11995] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.1653'. [ 366.873876][T12012] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1659'. [ 366.900033][T12012] netlink: zone id is out of range [ 366.918644][T12012] netlink: zone id is out of range [ 366.932105][T12012] netlink: zone id is out of range [ 366.958627][T12012] netlink: zone id is out of range [ 366.963796][T12012] netlink: zone id is out of range [ 366.986902][T12018] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1659'. [ 367.017030][T12018] netlink: zone id is out of range [ 367.039451][ T7386] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.050875][T12012] netlink: zone id is out of range [ 367.067479][T12012] netlink: zone id is out of range [ 367.143669][T12020] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1661'. [ 367.178079][ T7386] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.293898][ T7386] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.046356][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 368.062127][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 368.088468][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 368.115704][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 368.123490][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 368.130978][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.185601][ T5776] Bluetooth: hci0: command tx timeout [ 370.325877][T12047] chnl_net:caif_netlink_parms(): no params data found [ 370.384575][T12095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1675'. [ 370.463843][T12095] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 370.495596][T12095] netlink: 'syz.0.1675': attribute type 2 has an invalid length. [ 370.503606][T12095] netlink: 'syz.0.1675': attribute type 2 has an invalid length. [ 370.540473][T12095] netlink: 'syz.0.1675': attribute type 3 has an invalid length. [ 370.573924][T12095] netlink: 'syz.0.1675': attribute type 4 has an invalid length. [ 370.595632][T12095] netlink: 'syz.0.1675': attribute type 5 has an invalid length. [ 370.645475][T12095] netlink: 'syz.0.1675': attribute type 6 has an invalid length. [ 370.653490][T12095] netlink: 'syz.0.1675': attribute type 7 has an invalid length. [ 370.710813][T12113] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1676'. [ 370.737542][T12095] netlink: 'syz.0.1675': attribute type 9 has an invalid length. [ 370.746155][T12095] netlink: 'syz.0.1675': attribute type 10 has an invalid length. [ 370.754847][T12095] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1675'. [ 370.797770][T12113] net_ratelimit: 444 callbacks suppressed [ 370.797785][T12113] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 371.364096][T12133] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1678'. [ 371.457527][T12047] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.464755][T12047] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.486255][T12047] bridge_slave_0: entered allmulticast mode [ 371.493621][T12047] bridge_slave_0: entered promiscuous mode [ 371.526595][T12132] syzkaller0: entered promiscuous mode [ 371.543172][T12132] syzkaller0: entered allmulticast mode [ 371.604361][T12047] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.618635][T12047] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.626687][T12047] bridge_slave_1: entered allmulticast mode [ 371.634118][T12047] bridge_slave_1: entered promiscuous mode [ 371.728687][T12047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.794370][T12047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.857962][ T7386] bond0: (slave .3ãc¤±): Releasing backup interface [ 371.995973][T12047] team0: Port device team_slave_0 added [ 372.266015][ T5776] Bluetooth: hci0: command tx timeout [ 372.353012][T12047] team0: Port device team_slave_1 added [ 372.366483][T12146] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1681'. [ 372.460631][T12047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.512958][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.582031][T12047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.718022][T12047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.729796][T12047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.801007][T12047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.873234][ T7386] hsr_slave_0: left promiscuous mode [ 372.915568][ T7386] hsr_slave_1: left promiscuous mode [ 372.945752][ T7386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.953653][ T7386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.984035][ T7386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.996409][ T7386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.018972][ T7386] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 373.027280][ T7386] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 373.049012][ T7386] veth1_macvtap: left allmulticast mode [ 373.054880][ T7386] veth1_macvtap: left promiscuous mode [ 373.061204][ T7386] veth0_macvtap: left promiscuous mode [ 373.067068][ T7386] veth1_vlan: left promiscuous mode [ 373.798072][ T7386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.843581][ T7386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.891406][ T7386] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 374.160592][ T7386] bond0 (unregistering): Released all slaves [ 374.239611][T12192] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 374.250476][T12192] syzkaller1: linktype set to 773 [ 374.281493][T12047] hsr_slave_0: entered promiscuous mode [ 374.288698][T12047] hsr_slave_1: entered promiscuous mode [ 374.294879][T12047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.303337][T12047] Cannot create hsr debugfs directory [ 374.345634][ T5776] Bluetooth: hci0: command tx timeout [ 374.623852][T12198] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1689'. [ 376.064219][T12235] validate_nla: 4 callbacks suppressed [ 376.064236][T12235] netlink: 'syz.0.1697': attribute type 1 has an invalid length. [ 376.089243][T12235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1697'. [ 376.129435][T12238] delete_channel: no stack [ 376.428750][ T5776] Bluetooth: hci0: command tx timeout [ 376.579413][T12047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.613992][T12250] netlink: 'syz.0.1701': attribute type 19 has an invalid length. [ 376.634685][T12250] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.1701'. [ 376.727429][T12047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.748484][T12047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.760122][T12047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.035528][T12258] netlink: 'syz.1.1704': attribute type 10 has an invalid length. [ 377.051340][T12258] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 377.062265][T12262] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1704'. [ 377.077586][T12262] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 377.257929][T12047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.317306][T12047] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.378442][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.385660][T10178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.437006][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.444190][T10178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.677209][T12280] sit0: entered promiscuous mode [ 377.804808][T12284] netlink: 'syz.0.1708': attribute type 30 has an invalid length. [ 378.078982][T12290] netlink: 'syz.1.1709': attribute type 1 has an invalid length. [ 378.124876][T12290] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 378.240579][T12047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.419863][T12047] veth0_vlan: entered promiscuous mode [ 378.459342][T12047] veth1_vlan: entered promiscuous mode [ 378.543358][T12047] veth0_macvtap: entered promiscuous mode [ 378.560869][T12047] veth1_macvtap: entered promiscuous mode [ 378.600987][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.614316][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.639067][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.660488][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.686722][T12047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.737830][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0“€7熦 [ 378.794814][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.819539][T12047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.838671][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.843726][T12047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.844989][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.857562][T12047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.908602][T12047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.931493][T12047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.945512][T12047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.954270][T12047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.192412][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.234611][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.257650][T12332] netlink: 'syz.1.1717': attribute type 1 has an invalid length. [ 379.285091][T12332] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1717'. [ 379.316269][T12339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.324152][T12339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.480442][T12347] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1720'. [ 379.589410][T12354] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1720'. [ 379.609015][T12350] netlink: 'syz.4.1719': attribute type 39 has an invalid length. [ 379.961947][T12355] netlink: 'syz.1.1721': attribute type 21 has an invalid length. [ 379.985620][T12355] IPv6: NLM_F_CREATE should be specified when creating new route [ 379.994210][T12355] IPv6: Can't replace route, no match found [ 380.027722][T12367] netlink: 'syz.1.1721': attribute type 10 has an invalid length. [ 380.202471][T12367] team0: Device wg1 is of different type [ 380.428502][T12377] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1725'. [ 381.308586][T12402] syzkaller0: entered promiscuous mode [ 381.314675][T12402] syzkaller0: entered allmulticast mode [ 381.358942][T12416] netlink: 'syz.4.1734': attribute type 11 has an invalid length. [ 383.468661][T12432] netlink: 'syz.1.1736': attribute type 10 has an invalid length. [ 383.481678][T12432] team0: Device wg1 is of different type [ 383.903824][T12476] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1741'. [ 384.537118][T12500] netlink: 'syz.3.1746': attribute type 28 has an invalid length. [ 384.545043][T12500] netlink: 'syz.3.1746': attribute type 29 has an invalid length. [ 384.600712][T12500] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1746'. [ 385.093596][T12496] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1746'. [ 385.105837][T12491] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1747'. [ 385.116179][T12492] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1747'. [ 385.215081][T12513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1753'. [ 385.587472][T12531] netlink: 'syz.0.1754': attribute type 21 has an invalid length. [ 386.051768][T12548] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 386.086232][T12548] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 386.515932][T12565] syzkaller0: refused to change device tx_queue_len [ 386.587051][T12571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1769'. [ 386.635584][T12571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1769'. [ 386.686041][T12565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1769'. [ 387.138534][T12579] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 387.214652][T12582] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 387.229802][T12582] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1776'. [ 387.266024][T12584] syzkaller0: entered promiscuous mode [ 387.270403][T12577] delete_channel: no stack [ 387.343489][T12584] syzkaller0: entered allmulticast mode [ 387.368546][T12582] netlink: 'syz.4.1776': attribute type 10 has an invalid length. [ 387.494885][T12584] netlink: 'syz.0.1775': attribute type 10 has an invalid length. [ 387.520059][T12584] hsr0: entered promiscuous mode [ 387.528486][T12584] bridge0: port 3(hsr0) entered blocking state [ 387.534870][T12584] bridge0: port 3(hsr0) entered disabled state [ 387.542785][T12584] hsr0: entered allmulticast mode [ 387.551514][T12584] hsr_slave_0: entered allmulticast mode [ 387.903493][T12612] netlink: 'syz.4.1785': attribute type 4 has an invalid length. [ 387.933455][T12622] netlink: 'syz.4.1785': attribute type 29 has an invalid length. [ 390.029570][T12622] netlink: 'syz.4.1785': attribute type 29 has an invalid length. [ 390.037680][T12625] __nla_validate_parse: 5 callbacks suppressed [ 390.037692][T12625] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1788'. [ 390.420419][T12644] netlink: 'syz.3.1795': attribute type 2 has an invalid length. [ 390.437238][T12644] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1795'. [ 390.799994][T12661] netlink: 'syz.3.1799': attribute type 21 has an invalid length. [ 390.818600][T12661] netlink: 'syz.3.1799': attribute type 20 has an invalid length. [ 390.831534][T12662] netlink: 'syz.0.1793': attribute type 10 has an invalid length. [ 390.848417][T12662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1793'. [ 390.863544][T12662] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 391.228527][T12667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1801'. [ 391.461089][T12685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1807'. [ 391.482158][T12685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1807'. [ 391.499931][T12685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1807'. [ 391.512837][T12683] netlink: 206468 bytes leftover after parsing attributes in process `syz.4.1806'. [ 391.536681][T12685] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1807'. [ 391.557475][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1806'. [ 392.612930][T12725] validate_nla: 2 callbacks suppressed [ 392.612947][T12725] netlink: 'syz.3.1817': attribute type 3 has an invalid length. [ 392.654113][T12726] netlink: 'syz.4.1820': attribute type 10 has an invalid length. [ 392.794126][T12726] team0: Device hsr_slave_0 failed to register rx_handler [ 393.200730][T12739] sit0: left promiscuous mode [ 393.423695][T12744] netlink: 'syz.0.1826': attribute type 10 has an invalid length. [ 393.451712][T12744] macvlan0: entered promiscuous mode [ 393.496987][T12744] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 393.539300][T12746] syzkaller0: entered promiscuous mode [ 393.545087][T12746] syzkaller0: entered allmulticast mode [ 393.552605][T12745] sit0: entered promiscuous mode [ 394.006136][T12776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 394.038404][T12776] netlink: 'syz.3.1832': attribute type 10 has an invalid length. [ 394.052535][T12776] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 394.067610][T12776] bridge0: port 3(netdevsim0) entered blocking state [ 394.075048][T12776] bridge0: port 3(netdevsim0) entered disabled state [ 394.098806][T12776] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 395.762505][T12815] netlink: 'syz.1.1843': attribute type 10 has an invalid length. [ 395.802640][T12815] __nla_validate_parse: 10 callbacks suppressed [ 395.802657][T12815] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1843'. [ 395.869644][T12815] caif0: entered promiscuous mode [ 395.874999][T12815] caif0: entered allmulticast mode [ 395.894050][T12815] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.340856][T12834] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1847'. [ 396.363561][T12834] openvswitch: netlink: IP tunnel dst address not specified [ 397.064014][T12847] netlink: 'syz.3.1851': attribute type 39 has an invalid length. [ 397.076073][T12847] macvlan0: entered promiscuous mode [ 397.084745][T12847] macvlan0: entered allmulticast mode [ 397.090882][T12847] veth1_vlan: entered allmulticast mode [ 397.804559][T12872] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 397.830379][T12872] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 397.837375][T12876] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1860'. [ 397.839703][T12872] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 397.869138][T12874] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1859'. [ 397.871658][T12876] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 398.631814][T12898] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1865'. [ 398.640862][T12899] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.1866'. [ 398.662929][T12899] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1866'. [ 398.918145][T12921] netlink: 'syz.3.1871': attribute type 10 has an invalid length. [ 398.953305][T12921] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.989780][T12921] bond0: (slave team0): Enslaving as an active interface with an up link [ 399.267261][T12934] netlink: 'syz.3.1874': attribute type 1 has an invalid length. [ 399.275963][T12934] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.1874'. [ 400.005924][T12952] netlink: 123072 bytes leftover after parsing attributes in process `syz.1.1879'. [ 402.270023][T12969] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1884'. [ 402.290366][T12969] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 402.437526][ T5776] Bluetooth: hci0: ISO packet for unknown connection handle 50 [ 402.659802][T12975] netlink: 'syz.0.1887': attribute type 1 has an invalid length. [ 402.676138][T12975] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1887'. [ 403.338615][T12986] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 403.351037][T12986] netlink: 'syz.4.1889': attribute type 4 has an invalid length. [ 403.361211][T12986] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1889'. [ 403.628406][T12988] netlink: 'syz.0.1890': attribute type 3 has an invalid length. [ 403.642222][T12988] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1890'. [ 403.808693][T12999] netlink: 'syz.3.1895': attribute type 21 has an invalid length. [ 403.830180][T12999] netlink: 'syz.3.1895': attribute type 6 has an invalid length. [ 403.853950][T12999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1895'. [ 404.045297][T13016] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1899'. [ 404.056517][T13016] netlink: 'syz.3.1899': attribute type 13 has an invalid length. [ 404.064869][T13016] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1899'. [ 404.090722][T13016] erspan0: refused to change device tx_queue_len [ 404.163679][T13021] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1901'. [ 404.174609][T13021] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 404.284578][T13028] netlink: 'syz.0.1903': attribute type 1 has an invalid length. [ 404.414600][T13035] netlink: 'syz.3.1906': attribute type 10 has an invalid length. [ 404.486354][T13035] team0: Device nlmon0 is of different type [ 404.676114][T13046] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1909'. [ 404.699243][T13045] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1909'. [ 404.809967][T13054] netlink: 'syz.0.1911': attribute type 21 has an invalid length. [ 405.107591][T13064] netlink: 'syz.4.1914': attribute type 10 has an invalid length. [ 405.176244][T13063] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.187705][T13064] openvswitch: netlink: Flow key attr not present in new flow. [ 405.769381][T13076] syz.3.1918[13076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.769896][T13076] syz.3.1918[13076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.808838][T13076] syz.3.1918[13076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.846088][T13076] syz.3.1918[13076] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 405.942352][T13086] netlink: 'syz.1.1921': attribute type 10 has an invalid length. [ 405.990296][T13089] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 406.696985][T13140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 406.759440][T13140] netlink: 'syz.0.1936': attribute type 39 has an invalid length. [ 407.089031][T13160] syzkaller0: entered promiscuous mode [ 407.094607][T13160] syzkaller0: entered allmulticast mode [ 411.741214][T13189] netlink: 'syz.4.1948': attribute type 12 has an invalid length. [ 411.749453][T13189] __nla_validate_parse: 6 callbacks suppressed [ 411.749465][T13189] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1948'. [ 414.308168][T13222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1959'. [ 414.322360][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 414.744062][T13252] netlink: 'syz.1.1965': attribute type 20 has an invalid length. [ 414.891475][T13245] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1966'. [ 414.984994][T13261] delete_channel: no stack [ 415.174102][T13274] netlink: 'syz.4.1973': attribute type 10 has an invalid length. [ 415.370566][T13285] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 415.393705][T13285] dvmrp1: persist disabled [ 415.407913][T13285] dvmrp1: tun_chr_ioctl cmd 1074025698 [ 415.467565][T13293] netlink: 'syz.1.1979': attribute type 10 has an invalid length. [ 415.480351][T13293] netlink: 'syz.1.1979': attribute type 29 has an invalid length. [ 415.489538][T13293] netlink: 'syz.1.1979': attribute type 29 has an invalid length. [ 415.553094][T13293] netlink: 'syz.1.1979': attribute type 10 has an invalid length. [ 415.562532][T13293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1979'. [ 415.576130][T13293] ipvlan1: entered promiscuous mode [ 415.581794][T13293] ipvlan1: entered allmulticast mode [ 415.594041][T13293] veth0_vlan: entered allmulticast mode [ 415.619775][T13293] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 415.667612][T13299] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1980'. [ 415.709491][T13301] netlink: 'syz.4.1981': attribute type 2 has an invalid length. [ 415.995318][T13314] netlink: 'syz.0.1985': attribute type 10 has an invalid length. [ 416.015582][T13314] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1985'. [ 416.040266][T13314] team0: entered promiscuous mode [ 416.057202][T13314] team_slave_1: entered promiscuous mode [ 416.077008][T13314] geneve1: entered promiscuous mode [ 416.099712][T13314] team0: entered allmulticast mode [ 416.127949][T13314] team_slave_1: entered allmulticast mode [ 416.133940][T13314] geneve1: entered allmulticast mode [ 416.180208][T13314] bridge0: port 4(team0) entered blocking state [ 416.196572][T13314] bridge0: port 4(team0) entered disabled state [ 416.226742][T13327] netlink: 209832 bytes leftover after parsing attributes in process `syz.4.1989'. [ 416.258799][T13324] tap0: tun_chr_ioctl cmd 2148553947 [ 416.347320][T13332] netlink: 'syz.0.1991': attribute type 9 has an invalid length. [ 416.355515][T13332] netlink: 207592 bytes leftover after parsing attributes in process `syz.0.1991'. [ 417.212762][T13364] syzkaller0: entered promiscuous mode [ 417.222340][T13364] syzkaller0: entered allmulticast mode [ 417.526789][T13379] netlink: 'syz.3.2004': attribute type 10 has an invalid length. [ 417.547456][T13379] veth1_macvtap: left promiscuous mode [ 417.603870][T13380] delete_channel: no stack [ 417.826498][T13393] netlink: 'syz.3.2009': attribute type 15 has an invalid length. [ 417.858252][T13393] netlink: 'syz.3.2009': attribute type 16 has an invalid length. [ 417.892535][T13393] netlink: 'syz.3.2009': attribute type 20 has an invalid length. [ 417.915980][T13393] netlink: 'syz.3.2009': attribute type 21 has an invalid length. [ 417.935576][T13393] netlink: 'syz.3.2009': attribute type 23 has an invalid length. [ 417.949624][T13393] netlink: 'syz.3.2009': attribute type 25 has an invalid length. [ 417.960423][T13393] netlink: 'syz.3.2009': attribute type 27 has an invalid length. [ 417.976965][T13393] netlink: 'syz.3.2009': attribute type 28 has an invalid length. [ 417.995699][T13393] netlink: 'syz.3.2009': attribute type 29 has an invalid length. [ 418.233361][T13413] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2014'. [ 418.256562][T13413] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 419.860092][T13452] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2022'. [ 423.683068][T13480] bridge0: port 4(team0) entered disabled state [ 423.700041][T13480] hsr0: left allmulticast mode [ 423.705257][T13480] hsr_slave_0: left allmulticast mode [ 423.712024][T13480] bridge0: port 3(hsr0) entered disabled state [ 423.721790][T13480] bridge_slave_1: left allmulticast mode [ 423.728154][T13480] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.739299][T13480] bridge_slave_0: left promiscuous mode [ 423.745081][T13480] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.850576][T13481] validate_nla: 1 callbacks suppressed [ 423.850593][T13481] netlink: 'syz.0.2024': attribute type 10 has an invalid length. [ 425.006731][ T5776] Bluetooth: hci2: ISO packet for unknown connection handle 44 [ 425.275634][T13542] netlink: 'syz.0.2039': attribute type 2 has an invalid length. [ 425.284467][T13542] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.2039'. [ 425.302207][T13539] delete_channel: no stack [ 425.579018][T13555] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.2043'. [ 426.155009][T13565] syzkaller0: entered promiscuous mode [ 426.160708][T13565] syzkaller0: entered allmulticast mode [ 426.191302][T13567] netlink: 'syz.0.2045': attribute type 10 has an invalid length. [ 426.209819][T13567] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2045'. [ 426.228054][T13567] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 426.407217][ T5776] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 426.703755][T13582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2050'. [ 426.812563][T13587] netlink: 'syz.1.2051': attribute type 30 has an invalid length. [ 428.047572][T13589] netlink: 'syz.1.2052': attribute type 1 has an invalid length. [ 428.214706][T13596] IPv6: Can't replace route, no match found [ 428.522986][T13608] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2057'. [ 428.580823][T13610] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2058'. [ 428.714530][T13614] netlink: 'syz.4.2059': attribute type 9 has an invalid length. [ 428.731606][T13614] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2059'. [ 429.456988][T13627] netlink: 'syz.4.2064': attribute type 11 has an invalid length. [ 429.475580][T13627] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2064'. [ 430.171916][T13647] netlink: 'syz.0.2069': attribute type 2 has an invalid length. [ 430.195491][T13647] netlink: 'syz.0.2069': attribute type 8 has an invalid length. [ 430.213671][T13647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2069'. [ 430.239794][T13650] syzkaller0: entered promiscuous mode [ 430.256245][T13650] syzkaller0: entered allmulticast mode [ 431.925088][T13717] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2086'. [ 431.966882][T13717] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 431.979650][T13721] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2088'. [ 432.426225][T13739] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2091'. [ 432.807407][T13754] netlink: 'syz.3.2094': attribute type 4 has an invalid length. [ 432.827250][T13754] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2094'. [ 432.859948][T13754] .`: renamed from bond0 (while UP) [ 435.265825][T13830] netlink: 279 bytes leftover after parsing attributes in process `syz.0.2111'. [ 435.524978][T13830] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2111'. [ 436.060928][T13842] netlink: 'syz.0.2114': attribute type 21 has an invalid length. [ 436.088747][T13842] netlink: 'syz.0.2114': attribute type 1 has an invalid length. [ 436.109103][T13842] netlink: 'syz.0.2114': attribute type 2 has an invalid length. [ 436.140904][T13842] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.2114'. [ 436.539044][T13850] netlink: 134736 bytes leftover after parsing attributes in process `syz.4.2117'. [ 437.645687][T13879] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2124'. [ 437.923654][T13884] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2123'. [ 437.970316][T13884] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2123'. [ 438.007492][T13877] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.2123'. [ 438.770842][T13902] netlink: 'syz.0.2131': attribute type 17 has an invalid length. [ 438.808193][T13902] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 439.281209][T13915] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2134'. [ 439.427895][T13920] netlink: 'syz.0.2134': attribute type 8 has an invalid length. [ 439.505557][T13920] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2134'. [ 439.748247][T13925] netlink: 'syz.3.2137': attribute type 21 has an invalid length. [ 440.259651][T13933] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2139'. [ 440.279086][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.285863][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.408022][T13936] netlink: 'syz.4.2140': attribute type 2 has an invalid length. [ 440.428388][T13936] netlink: 'syz.4.2140': attribute type 8 has an invalid length. [ 440.437201][T13936] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2140'. [ 442.576460][T13978] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2153'. [ 442.590913][T13978] bridge_slave_1: default FDB implementation only supports local addresses [ 442.711589][ T5776] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 442.720501][T13984] bridge0: port 3(netdevsim0) entered blocking state [ 442.727460][T13984] bridge0: port 3(netdevsim0) entered forwarding state [ 442.846322][T13990] netlink: 'syz.0.2158': attribute type 2 has an invalid length. [ 443.964251][T14026] netlink: 'syz.3.2169': attribute type 3 has an invalid length. [ 444.000654][T14026] netlink: 201336 bytes leftover after parsing attributes in process `syz.3.2169'. [ 445.263678][T14046] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2175'. [ 447.470744][ T5781] Bluetooth: hci4: command 0x0406 tx timeout [ 448.482391][T14068] netlink: 'syz.3.2182': attribute type 4 has an invalid length. [ 448.508586][T14068] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2182'. [ 448.549091][T14071] netlink: 'syz.1.2184': attribute type 10 has an invalid length. [ 448.711727][T14071] team0 (unregistering): Port device C removed [ 448.760050][T14071] team0 (unregistering): Port device team_slave_1 removed [ 451.385642][ T5764] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 452.059373][T14115] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2195'. [ 452.092933][T14124] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2196'. [ 452.602069][T14134] netlink: 'syz.0.2199': attribute type 10 has an invalid length. [ 452.622362][T14134] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2199'. [ 453.021567][T14148] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2203'. [ 453.210746][T14151] netlink: 'syz.4.2204': attribute type 10 has an invalid length. [ 453.389929][T14151] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 453.641928][T14167] netlink: 'syz.4.2209': attribute type 10 has an invalid length. [ 453.654010][T14167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2209'. [ 453.977982][T14178] syzkaller0: entered promiscuous mode [ 453.983595][T14178] syzkaller0: entered allmulticast mode [ 454.084483][T14185] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.2213'. [ 454.199944][T14187] netlink: 'syz.3.2215': attribute type 3 has an invalid length. [ 454.208229][T14187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2215'. [ 456.206658][T14211] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 456.214450][T14211] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2221'. [ 456.230381][T14211] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 456.242382][T14211] netlink: 'syz.3.2221': attribute type 2 has an invalid length. [ 456.255232][T14211] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2221'. [ 456.270589][T14211] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 456.283060][T14211] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2221'. [ 456.283130][T14216] netlink: 'syz.3.2221': attribute type 2 has an invalid length. [ 456.293361][T14211] netlink: 'syz.3.2221': attribute type 1 has an invalid length. [ 456.492277][T14219] syzkaller0: entered promiscuous mode [ 456.506835][T14219] syzkaller0: entered allmulticast mode [ 457.077435][T14239] netlink: 'syz.0.2228': attribute type 10 has an invalid length. [ 457.295246][T14248] __nla_validate_parse: 2 callbacks suppressed [ 457.295266][T14248] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2230'. [ 457.317189][T14248] tc_dump_action: action bad kind [ 460.548630][T14329] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2249'. [ 460.686337][T14329] openvswitch: netlink: Duplicate key (type 0). [ 460.796791][T14336] mac80211_hwsim hwsim24 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 461.504945][T14343] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2252'. [ 461.664677][T14347] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2254'. [ 461.695763][T14347] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2254'. [ 463.028220][T14368] syzkaller0: entered promiscuous mode [ 463.034164][T14368] syzkaller0: entered allmulticast mode [ 463.141157][T14371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2263'. [ 463.615846][T14379] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2264'. [ 463.776098][T14380] netlink: 'syz.1.2265': attribute type 10 has an invalid length. [ 463.784007][T14380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2265'. [ 464.149713][T14386] tap0: tun_chr_ioctl cmd 1074025677 [ 464.169428][T14386] tap0: linktype set to 774 [ 464.177820][T14386] tap0: tun_chr_ioctl cmd 35108 [ 464.258079][T14385] delete_channel: no stack [ 465.129626][T14401] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2271'. [ 466.104046][T14413] netlink: 'syz.4.2277': attribute type 10 has an invalid length. [ 466.120079][T14413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2277'. [ 466.149807][T14413] team0: entered promiscuous mode [ 466.168351][T14413] team_slave_0: entered promiscuous mode [ 466.191208][T14413] team_slave_1: entered promiscuous mode [ 466.208290][T14413] team0: entered allmulticast mode [ 466.220415][T14413] team_slave_0: entered allmulticast mode [ 466.234368][T14413] team_slave_1: entered allmulticast mode [ 466.260984][T14413] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 466.305583][T14419] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2278'. [ 466.348922][T14419] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 466.597002][T14420] syzkaller0: entered promiscuous mode [ 466.684625][T14420] syzkaller0: entered allmulticast mode [ 466.911799][ T5776] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 467.998097][T14430] netlink: 'syz.3.2275': attribute type 10 has an invalid length. [ 468.086385][T14430] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2275'. [ 468.110088][T14430] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 468.126636][T14441] netlink: 'syz.1.2281': attribute type 28 has an invalid length. [ 468.137027][T14430] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.145083][T14441] netlink: 'syz.1.2281': attribute type 29 has an invalid length. [ 468.192562][T14441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2281'. [ 468.225782][T14430] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 468.972814][T14451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.997310][T14451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.195783][T14451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.254034][T14451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.388825][T14451] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 469.414235][T14451] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 470.243566][T14463] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 470.294739][T14463] syzkaller1: linktype set to 769 [ 470.386186][ T56] syzkaller1: tun_net_xmit 90 [ 470.520430][T12335] syzkaller1: tun_net_xmit 86 [ 470.687276][T14478] netlink: 'syz.3.2291': attribute type 21 has an invalid length. [ 470.708087][T14478] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2291'. [ 470.751954][T14481] netlink: set zone limit has 8 unknown bytes [ 470.782893][T14478] netlink: 'syz.3.2291': attribute type 21 has an invalid length. [ 470.814741][T14478] netlink: 'syz.3.2291': attribute type 6 has an invalid length. [ 470.855665][T14478] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2291'. [ 471.825858][T14502] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 471.847958][T14502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2294'. [ 472.034185][T14510] netlink: 'syz.0.2297': attribute type 6 has an invalid length. [ 472.069566][T14510] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2297'. [ 472.348822][T14517] netlink: 'syz.3.2301': attribute type 29 has an invalid length. [ 472.397611][T14517] netlink: 'syz.3.2301': attribute type 29 has an invalid length. [ 472.452205][T14520] netlink: 'syz.4.2302': attribute type 10 has an invalid length. [ 472.491517][T14520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2302'. [ 472.519078][T14520] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 472.645886][T14514] netlink: 'syz.3.2301': attribute type 29 has an invalid length. [ 472.677978][T14517] netlink: 'syz.3.2301': attribute type 29 has an invalid length. [ 473.346816][ T5776] Bluetooth: hci4: unknown advertising packet type: 0x20 [ 473.346910][ T5776] Bluetooth: hci4: Malformed LE Event: 0x02 [ 473.587215][T14535] syzkaller0: entered promiscuous mode [ 473.697947][T14535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2304'. [ 476.166686][T14550] validate_nla: 2 callbacks suppressed [ 476.166704][T14550] netlink: 'syz.4.2309': attribute type 10 has an invalid length. [ 476.181166][T14550] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2309'. [ 476.191049][T14550] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 476.198380][T14550] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.225877][T14550] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 476.364809][T14553] IPv6: NLM_F_CREATE should be specified when creating new route [ 476.385792][T14553] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2310'. [ 476.637290][T14560] netlink: 'syz.3.2313': attribute type 10 has an invalid length. [ 476.669747][T14560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2313'. [ 476.688581][T14560] ipvlan1: entered promiscuous mode [ 476.716754][T14560] ipvlan1: entered allmulticast mode [ 476.722506][T14560] veth0_vlan: entered allmulticast mode [ 476.868279][T14560] bridge0: port 4(ipvlan1) entered blocking state [ 476.906404][T14560] bridge0: port 4(ipvlan1) entered disabled state [ 476.949344][T14560] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 477.002743][T14570] netlink: 'syz.4.2315': attribute type 10 has an invalid length. [ 477.202630][T14582] netlink: 'syz.1.2320': attribute type 10 has an invalid length. [ 477.228931][T14582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2320'. [ 477.239199][T14582] netlink: 'syz.1.2320': attribute type 10 has an invalid length. [ 477.250250][T14582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2320'. [ 479.577171][T14594] netlink: 'syz.1.2323': attribute type 153 has an invalid length. [ 479.585158][T14594] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2323'. [ 479.657856][T14604] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2325'. [ 480.084277][T14606] netlink: 'syz.1.2326': attribute type 6 has an invalid length. [ 480.098171][T14606] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2326'. [ 483.157761][T14631] netlink: 'syz.0.2332': attribute type 13 has an invalid length. [ 483.179149][T14631] netlink: 'syz.0.2332': attribute type 58 has an invalid length. [ 483.197967][T14631] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2332'. [ 483.209303][T14627] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2332'. [ 483.405410][T14636] netlink: 'syz.0.2334': attribute type 7 has an invalid length. [ 483.422607][T14637] netlink: 'syz.0.2334': attribute type 15 has an invalid length. [ 483.432296][T14637] netlink: 'syz.0.2334': attribute type 7 has an invalid length. [ 483.449660][T14637] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2334'. [ 483.654950][T14639] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2335'. [ 485.537107][T14681] netlink: 'syz.4.2347': attribute type 1 has an invalid length. [ 485.558730][T14681] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2347'. [ 485.784491][T14686] netlink: 'syz.3.2348': attribute type 3 has an invalid length. [ 485.793486][T14686] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2348'. [ 485.902171][T14682] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2346'. [ 488.473665][T14682] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 488.488131][T14682] CPU: 1 PID: 14682 Comm: syz.1.2346 Not tainted syzkaller #0 [ 488.495632][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 488.505689][T14682] Call Trace: [ 488.508982][T14682] [ 488.511937][T14682] dump_stack_lvl+0x18c/0x250 [ 488.516644][T14682] ? show_regs_print_info+0x20/0x20 [ 488.521846][T14682] ? load_image+0x420/0x420 [ 488.526364][T14682] sysfs_warn_dup+0x8e/0xa0 [ 488.530969][T14682] sysfs_do_create_link_sd+0xc0/0x110 [ 488.536344][T14682] device_add_class_symlinks+0x1cf/0x240 [ 488.541988][T14682] device_add+0x4f9/0xc40 [ 488.546319][T14682] wiphy_register+0x1d99/0x2ac0 [ 488.551208][T14682] ? cfg80211_event_work+0x40/0x40 [ 488.556490][T14682] ? minstrel_ht_alloc+0x88a/0x990 [ 488.561613][T14682] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 488.567714][T14682] ieee80211_register_hw+0x2dd8/0x3b30 [ 488.573180][T14682] ? ieee80211_register_hw+0xfb1/0x3b30 [ 488.578727][T14682] ? ieee80211_tasklet_handler+0x20/0x20 [ 488.584360][T14682] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 488.590255][T14682] ? __debug_object_init+0xec/0x450 [ 488.595463][T14682] ? __asan_memset+0x22/0x40 [ 488.600055][T14682] ? __hrtimer_init+0x189/0x270 [ 488.604905][T14682] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 488.610650][T14682] ? mac80211_hwsim_free+0x220/0x220 [ 488.615928][T14682] ? rcu_is_watching+0x15/0xb0 [ 488.620715][T14682] ? kstrndup+0xbd/0x140 [ 488.625050][T14682] hwsim_new_radio_nl+0xdad/0x1a70 [ 488.630165][T14682] ? __nla_validate+0x50/0x50 [ 488.634942][T14682] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 488.641282][T14682] ? __nla_parse+0x40/0x50 [ 488.645706][T14682] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 488.652038][T14682] genl_family_rcv_msg_doit+0x21a/0x310 [ 488.657587][T14682] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 488.663482][T14682] ? bpf_lsm_capable+0x9/0x10 [ 488.668160][T14682] ? security_capable+0x89/0xb0 [ 488.673013][T14682] genl_rcv_msg+0x611/0x7a0 [ 488.677529][T14682] ? genl_bind+0x360/0x360 [ 488.681941][T14682] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 488.688273][T14682] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 488.694855][T14682] ? ref_tracker_free+0x686/0x830 [ 488.699905][T14682] netlink_rcv_skb+0x235/0x4c0 [ 488.704667][T14682] ? genl_bind+0x360/0x360 [ 488.709095][T14682] ? netlink_ack+0x1160/0x1160 [ 488.713867][T14682] ? __lock_acquire+0x7d80/0x7d80 [ 488.718896][T14682] ? down_read+0x1ac/0x2e0 [ 488.723316][T14682] genl_rcv+0x28/0x40 [ 488.727294][T14682] netlink_unicast+0x7b1/0x930 [ 488.732071][T14682] netlink_sendmsg+0x8d0/0xbf0 [ 488.736841][T14682] ? netlink_getsockopt+0x590/0x590 [ 488.742031][T14682] ? apparmor_socket_sendmsg+0x8e/0x330 [ 488.747575][T14682] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 488.752856][T14682] ? security_socket_sendmsg+0x80/0xa0 [ 488.758312][T14682] ? netlink_getsockopt+0x590/0x590 [ 488.763503][T14682] ____sys_sendmsg+0x61b/0x980 [ 488.768273][T14682] ? __asan_memset+0x22/0x40 [ 488.772861][T14682] ? __sys_sendmsg_sock+0x30/0x30 [ 488.777875][T14682] ? __import_iovec+0x5f2/0x850 [ 488.782731][T14682] ? import_iovec+0x73/0xa0 [ 488.787234][T14682] ___sys_sendmsg+0x2a6/0x360 [ 488.791916][T14682] ? __sys_sendmsg+0x2b0/0x2b0 [ 488.796694][T14682] ? trace_call_bpf+0xc3/0x6c0 [ 488.801511][T14682] __se_sys_sendmsg+0x1d0/0x2c0 [ 488.806353][T14682] ? perf_trace_preemptirq_template+0x269/0x330 [ 488.812612][T14682] ? __x64_sys_sendmsg+0x80/0x80 [ 488.817561][T14682] ? trace_sys_enter+0x1f/0x80 [ 488.822328][T14682] do_syscall_64+0x55/0xb0 [ 488.826741][T14682] ? clear_bhb_loop+0x40/0x90 [ 488.831417][T14682] ? clear_bhb_loop+0x40/0x90 [ 488.836097][T14682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.841984][T14682] RIP: 0033:0x7ff8c8d9e0d9 [ 488.846398][T14682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.866000][T14682] RSP: 002b:00007ff8c9cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.874587][T14682] RAX: ffffffffffffffda RBX: 00007ff8c9026090 RCX: 00007ff8c8d9e0d9 [ 488.882646][T14682] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 488.890635][T14682] RBP: 00007ff8c8e35024 R08: 0000000000000000 R09: 0000000000000000 [ 488.898601][T14682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.906570][T14682] R13: 00007ff8c9026128 R14: 00007ff8c9026090 R15: 00007fff82b1c1f8 [ 488.914548][T14682] [ 489.206108][T14695] netlink: 'syz.4.2351': attribute type 10 has an invalid length. [ 489.214683][T14695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2351'. [ 489.249547][T14695] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 489.474233][T14707] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2355'. [ 489.529651][T14707] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 489.560156][T14712] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2356'. [ 489.589391][T14712] openvswitch: netlink: Key type 29 is not supported [ 490.203123][T14723] netlink: 'syz.4.2359': attribute type 10 has an invalid length. [ 490.275642][T14723] netlink: 'syz.4.2359': attribute type 10 has an invalid length. [ 490.314950][T14723] netlink: 209216 bytes leftover after parsing attributes in process `syz.4.2359'. [ 490.374314][T14723] openvswitch: netlink: Message has 4 unknown bytes. [ 491.303368][T14748] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2365'. [ 491.852261][T14763] netlink: 'syz.1.2369': attribute type 33 has an invalid length. [ 491.874589][T14763] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2369'. [ 492.557407][T14772] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 493.557383][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 497.475176][T14803] cgroup: fork rejected by pids controller in /syz0 [ 497.774073][T14911] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2382'. [ 497.928136][T14911] team_slave_0 (unregistering): left promiscuous mode [ 497.934988][T14911] team_slave_0 (unregistering): left allmulticast mode [ 497.952270][T14911] team0: Port device team_slave_0 removed [ 498.325481][T14928] netlink: 'syz.4.2388': attribute type 10 has an invalid length. [ 498.357745][T14928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2388'. [ 498.389549][T14928] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 498.595818][T14933] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 498.641847][T14933] netlink: 'syz.3.2389': attribute type 3 has an invalid length. [ 498.688237][T14933] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.2389'. [ 498.796165][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 498.805793][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 498.816670][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.849884][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.880089][ T5781] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 498.894095][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 499.473799][T14934] netlink: 'syz.3.2389': attribute type 5 has an invalid length. [ 499.482059][T14934] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2389'. [ 499.596383][T14941] ƒ: renamed from tunl0 (while UP) [ 499.899596][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.993254][T14950] netlink: 'syz.1.2392': attribute type 21 has an invalid length. [ 500.030446][T14950] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2392'. [ 500.053930][T14935] chnl_net:caif_netlink_parms(): no params data found [ 500.121211][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.240866][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.397121][T14935] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.404682][T14935] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.417972][T14935] bridge_slave_0: entered allmulticast mode [ 500.426141][T14935] bridge_slave_0: entered promiscuous mode [ 500.438840][T14935] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.446837][T14935] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.454514][T14935] bridge_slave_1: entered allmulticast mode [ 500.462748][T14935] bridge_slave_1: entered promiscuous mode [ 500.531599][ T5781] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 500.540601][T14935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.583610][T14935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.658372][T14935] team0: Port device team_slave_0 added [ 500.671618][T14935] team0: Port device team_slave_1 added [ 500.705174][T14935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.740261][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.790210][T14935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.896656][T14935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.903659][T14935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.038926][T14935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.069690][ T5781] Bluetooth: hci2: command tx timeout [ 501.251455][T14935] hsr_slave_0: entered promiscuous mode [ 501.261593][T14935] hsr_slave_1: entered promiscuous mode [ 501.297621][T14935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.331139][T14935] Cannot create hsr debugfs directory [ 501.437596][T14978] netlink: 'syz.1.2400': attribute type 9 has an invalid length. [ 501.515613][T14978] netlink: 'syz.1.2400': attribute type 23 has an invalid length. [ 501.649427][T14978] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.2400'. [ 501.716129][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.723491][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.835134][T14990] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2402'. [ 502.499245][ T5781] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 503.145628][ T5781] Bluetooth: hci2: command tx timeout [ 503.694303][T15017] sit0: left promiscuous mode [ 504.179257][T15016] sit0: entered promiscuous mode [ 504.443986][T15044] netlink: 'syz.3.2410': attribute type 19 has an invalid length. [ 504.464987][T15044] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.2410'. [ 504.552649][T15059] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2412'. [ 504.893810][T14935] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 504.926070][T14935] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 505.087444][T14935] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 505.146738][T14935] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.225991][ T5781] Bluetooth: hci2: command tx timeout [ 505.274799][T15077] netlink: 'syz.4.2417': attribute type 5 has an invalid length. [ 505.313434][T15077] netlink: 'syz.4.2417': attribute type 1 has an invalid length. [ 505.404524][T15084] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2418'. [ 505.499736][T15077] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.2417'. [ 505.742815][T14935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.794493][T14935] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.048595][ T7981] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.055833][ T7981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.171287][ T7962] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.178510][ T7962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.201111][T15103] syz.4.2422[15103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.201334][T15103] syz.4.2422[15103] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.566090][ T11] bond0: (slave .3ãc¤±): Releasing backup interface [ 506.670921][T15103] netlink: 'syz.4.2422': attribute type 21 has an invalid length. [ 507.164029][T14935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.248169][ T11] hsr_slave_0: left promiscuous mode [ 507.306029][ T5781] Bluetooth: hci2: command tx timeout [ 507.324378][ T11] veth1_macvtap: left promiscuous mode [ 507.332047][ T11] veth1_vlan: left promiscuous mode [ 507.338654][ T11] veth0_vlan: left promiscuous mode [ 507.550989][ T11] geneve1 (unregistering): left promiscuous mode [ 507.562272][ T11] geneve1 (unregistering): left allmulticast mode [ 507.574611][ T11] team0 (unregistering): Port device geneve1 removed [ 507.715288][ T11] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 507.981739][ T11] team_slave_1 (unregistering): left promiscuous mode [ 507.988707][ T11] team_slave_1 (unregistering): left allmulticast mode [ 507.998413][ T11] team0 (unregistering): Port device team_slave_1 removed [ 508.042184][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.364021][ T11] bond0 (unregistering): Released all slaves [ 508.432942][T15152] netlink: 'syz.1.2430': attribute type 10 has an invalid length. [ 508.534907][T15156] netlink: 'syz.3.2432': attribute type 21 has an invalid length. [ 508.565342][T15156] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2432'. [ 508.623218][T14935] veth0_vlan: entered promiscuous mode [ 508.662906][T14935] veth1_vlan: entered promiscuous mode [ 508.892299][T14935] veth0_macvtap: entered promiscuous mode [ 508.961831][T14935] veth1_macvtap: entered promiscuous mode [ 509.040122][T14935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.066087][T14935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.091613][T14935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 509.109057][T14935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.123370][T14935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.141037][T14935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0“€7熦 [ 509.167624][T14935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.184060][T14935] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.195300][T14935] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.212358][T14935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.227470][T15174] syzkaller0: entered promiscuous mode [ 509.236251][T15174] syzkaller0: entered allmulticast mode [ 509.264836][T14935] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.285539][T14935] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.294622][T14935] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.320316][T14935] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.538813][ T7962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.554675][ T7962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.617720][ T7962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.632086][ T7962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.808675][T15203] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2444'. [ 509.837322][T15203] hsr_slave_0: left promiscuous mode [ 509.850421][T15203] hsr_slave_1: left promiscuous mode [ 510.115557][T15209] netlink: 'syz.4.2446': attribute type 2 has an invalid length. [ 510.145182][T15209] netlink: 'syz.4.2446': attribute type 8 has an invalid length. [ 510.179109][T15209] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2446'. [ 510.247111][T15212] netlink: 'syz.4.2446': attribute type 2 has an invalid length. [ 510.295580][T15212] netlink: 'syz.4.2446': attribute type 8 has an invalid length. [ 510.305645][T15212] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2446'. [ 511.733376][T15247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.753980][T15247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.763881][T15247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.797880][T15247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.806286][T15247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 511.813816][T15247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.846706][ T5777] bond0: (slave syz_tun): Releasing backup interface [ 511.860765][T15207] netlink: 'syz.3.2445': attribute type 4 has an invalid length. [ 511.880011][T15207] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.2445'. [ 511.925334][T15207] netlink: 'syz.3.2445': attribute type 10 has an invalid length. [ 511.995761][T15207] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2445'. [ 512.278600][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.378524][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.498899][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.677228][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.719474][T15247] Bluetooth: hci1: command tx timeout [ 555.416026][ T5781] Bluetooth: hci1: command tx timeout [ 562.454378][ T5781] Bluetooth: hci1: command tx timeout [ 587.450742][ T5781] Bluetooth: hci1: command tx timeout [ 587.547302][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 587.554077][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 618.345375][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 618.352462][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15280/1:b..l [ 618.360901][ C0] rcu: (detected by 0, t=10502 jiffies, g=66073, q=591 ncpus=2) [ 618.368647][ C0] task:syz.3.2464 state:R running task stack:24904 pid:15280 ppid:12047 flags:0x00004006 [ 618.380819][ C0] Call Trace: [ 618.384114][ C0] [ 618.387070][ C0] __schedule+0x15ae/0x4660 [ 618.391608][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 618.396665][ C0] ? asan.module_dtor+0x20/0x20 [ 618.401532][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 618.407535][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 618.412840][ C0] preempt_schedule_irq+0xbf/0x150 [ 618.417966][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 618.423704][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 618.429528][ C0] irqentry_exit+0x67/0x70 [ 618.433958][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 618.439950][ C0] RIP: 0010:__local_bh_enable_ip+0x142/0x1c0 [ 618.445991][ C0] Code: 8a e8 f2 53 3c 09 65 66 8b 05 ba eb b0 7e 66 85 c0 75 54 bf 01 00 00 00 e8 2b 1d 0a 00 e8 56 16 3b 00 fb 65 8b 05 86 eb b0 7e <85> c0 75 05 e8 35 d0 ad ff 48 c7 04 24 0e 36 e0 45 4b c7 04 37 00 [ 618.465612][ C0] RSP: 0018:ffffc900042c7a00 EFLAGS: 00000286 [ 618.471695][ C0] RAX: 0000000080000000 RBX: 0000000000000200 RCX: b53fb6a68e6fe200 [ 618.479677][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d32e0 [ 618.487663][ C0] RBP: ffffc900042c7a90 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 618.495639][ C0] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffffffff88bf0e64 [ 618.503625][ C0] R13: ffffc900042c7d00 R14: dffffc0000000000 R15: 1ffff92000858f40 [ 618.511612][ C0] ? bpf_test_run+0x174/0x870 [ 618.516327][ C0] ? _local_bh_enable+0xa0/0xa0 [ 618.521190][ C0] ? __asan_memset+0x22/0x40 [ 618.525815][ C0] ? bpf_probe_read_kernel+0x67/0x70 [ 618.531108][ C0] ? bpf_test_run+0x174/0x870 [ 618.535888][ C0] bpf_test_run+0x3dd/0x870 [ 618.540511][ C0] ? bpf_test_run+0x174/0x870 [ 618.545211][ C0] ? dst_hold+0x70/0x70 [ 618.549387][ C0] ? eth_get_headlen+0x210/0x210 [ 618.554423][ C0] ? convert___skb_to_skb+0x3d/0x590 [ 618.559727][ C0] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 618.565134][ C0] ? cpu_online+0x60/0x60 [ 618.569481][ C0] bpf_prog_test_run+0x31f/0x390 [ 618.574439][ C0] __sys_bpf+0x49d/0x890 [ 618.578692][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 618.584093][ C0] ? lock_chain_count+0x20/0x20 [ 618.588965][ C0] __x64_sys_bpf+0x7c/0x90 [ 618.593391][ C0] do_syscall_64+0x55/0xb0 [ 618.597820][ C0] ? clear_bhb_loop+0x40/0x90 [ 618.602509][ C0] ? clear_bhb_loop+0x40/0x90 [ 618.607204][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 618.613109][ C0] RIP: 0033:0x7f456199e0d9 [ 618.617535][ C0] RSP: 002b:00007f45627f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.625968][ C0] RAX: ffffffffffffffda RBX: 00007f4561c26090 RCX: 00007f456199e0d9 [ 618.633952][ C0] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 618.641932][ C0] RBP: 00007f4561a35024 R08: 0000000000000000 R09: 0000000000000000 [ 618.649909][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.657888][ C0] R13: 00007f4561c26128 R14: 00007f4561c26090 R15: 00007fff50b605e8 [ 618.665887][ C0] [ 618.668914][ C0] rcu: rcu_preempt kthread starved for 1991 jiffies! g66073 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 618.680028][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 618.690028][ C0] rcu: RCU grace-period kthread stack dump: [ 618.695931][ C0] task:rcu_preempt state:R running task stack:26856 pid:17 ppid:2 flags:0x00004000 [ 618.706730][ C0] Call Trace: [ 618.710012][ C0] [ 618.712957][ C0] __schedule+0x15ae/0x4660 [ 618.717484][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 618.722526][ C0] ? lock_chain_count+0x20/0x20 [ 618.727395][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 618.732611][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 618.738522][ C0] ? asan.module_dtor+0x20/0x20 [ 618.743382][ C0] ? rcu_is_watching+0x15/0xb0 [ 618.748188][ C0] schedule+0xbd/0x170 [ 618.752271][ C0] schedule_timeout+0x188/0x2d0 [ 618.757149][ C0] ? console_conditional_schedule+0x40/0x40 [ 618.763064][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 618.768984][ C0] ? update_process_times+0x1b0/0x1b0 [ 618.774371][ C0] ? prepare_to_swait_event+0x344/0x360 [ 618.779938][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 618.784811][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 618.790973][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 618.796011][ C0] ? rcu_gp_init+0x1530/0x1530 [ 618.800788][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 618.806093][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 618.811310][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 618.816563][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 618.821164][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 618.826289][ C0] ? __kthread_parkme+0x71/0x1c0 [ 618.831237][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 618.836278][ C0] kthread+0x2fa/0x390 [ 618.840353][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 618.845473][ C0] ? kthread_blkcg+0xd0/0xd0 [ 618.850083][ C0] ret_from_fork+0x48/0x80 [ 618.854535][ C0] ? kthread_blkcg+0xd0/0xd0 [ 618.859137][ C0] ret_from_fork_asm+0x11/0x20 [ 618.863973][ C0] [ 618.867000][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 618.873324][ C0] CPU: 0 PID: 15278 Comm: syz.3.2464 Not tainted syzkaller #0 [ 618.880788][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.890887][ C0] RIP: 0010:ktime_get_with_offset+0x52/0x330 [ 618.896971][ C0] Code: fd 02 0f 87 d9 02 00 00 e8 eb c5 0f 00 48 b9 00 00 00 00 00 fc ff df 48 8d 1c dd a0 c5 cc 8a 48 89 d8 48 c1 e8 03 80 3c 08 00 <74> 08 48 89 df e8 f4 48 68 00 48 8b 03 48 89 04 24 8b 2d a3 cc 14 [ 618.916593][ C0] RSP: 0018:ffffc90000007948 EFLAGS: 00000246 [ 618.922674][ C0] RAX: 1ffffffff15998b5 RBX: ffffffff8accc5a8 RCX: dffffc0000000000 [ 618.930663][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000003 [ 618.938639][ C0] RBP: 0000000000000001 R08: ffff88802bba8000 R09: 0000000000000002 [ 618.946624][ C0] R10: 0000000000000080 R11: 0000000000000100 R12: ffff88807d56b618 [ 618.954602][ C0] R13: ffff88805c1fe2e8 R14: dffffc0000000000 R15: 0000000000000080 [ 618.962584][ C0] FS: 00007f45628126c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 618.971524][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 618.978116][ C0] CR2: 00007fff6c8b0150 CR3: 000000005fb6e000 CR4: 00000000003506f0 [ 618.986113][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300 [ 618.994115][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 619.002103][ C0] Call Trace: [ 619.005392][ C0] [ 619.008254][ C0] mac80211_hwsim_tx_frame_no_nl+0x6fe/0x11e0 [ 619.014350][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 619.020650][ C0] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 619.027097][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 619.032396][ C0] ? lock_chain_count+0x20/0x20 [ 619.037260][ C0] ? mac80211_hwsim_tx_frame_nl+0xbb0/0xbb0 [ 619.043175][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 619.048999][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 619.054484][ C0] mac80211_hwsim_beacon_tx+0x3df/0x770 [ 619.060056][ C0] __iterate_interfaces+0x225/0x4c0 [ 619.065365][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 619.071793][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 619.079003][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 619.085436][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 619.092479][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 619.097692][ C0] ? hw_scan_work+0xf10/0xf10 [ 619.102669][ C0] __hrtimer_run_queues+0x525/0xc10 [ 619.107916][ C0] ? hrtimer_interrupt+0x980/0x980 [ 619.113058][ C0] ? read_tsc+0x9/0x20 [ 619.117154][ C0] hrtimer_run_softirq+0x177/0x290 [ 619.122297][ C0] handle_softirqs+0x27d/0x820 [ 619.127077][ C0] ? read_tsc+0x9/0x20 [ 619.131162][ C0] ? ktime_get+0x24b/0x280 [ 619.135599][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 619.140385][ C0] ? do_softirq+0x1a0/0x1a0 [ 619.144905][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 619.150128][ C0] __irq_exit_rcu+0xd3/0x190 [ 619.154731][ C0] ? irq_exit_rcu+0x20/0x20 [ 619.159264][ C0] irq_exit_rcu+0x9/0x20 [ 619.163515][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 619.169445][ C0] [ 619.172388][ C0] [ 619.175325][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.181341][ C0] RIP: 0010:__schedule+0x13b/0x4660 [ 619.186647][ C0] Code: 08 4c 89 ff e8 d6 e3 48 f7 49 8b 07 48 89 44 24 28 4c 8d 70 20 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 4c 89 f7 e8 ab e3 48 f7 4d 8b 36 4c 89 f0 48 c1 e8 03 48 b9 [ 619.206278][ C0] RSP: 0018:ffffc9000471f740 EFLAGS: 00000246 [ 619.212366][ C0] RAX: 1ffff11005775004 RBX: ffffffff8ca95a30 RCX: dffffc0000000000 [ 619.220351][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000471f8e0 [ 619.228422][ C0] RBP: ffffc9000471f950 R08: ffffc9000471f8df R09: 0000000000000000 [ 619.236408][ C0] R10: ffffc9000471f8d0 R11: fffff520008e3f1c R12: 0000000000000001 [ 619.244389][ C0] R13: ffff8880b8e00000 R14: ffff88802bba8020 R15: ffff8880b8e3cca0 [ 619.252393][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 619.258223][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 619.264667][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 619.271884][ C0] ? lock_chain_count+0x20/0x20 [ 619.276751][ C0] ? asan.module_dtor+0x20/0x20 [ 619.281628][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.287807][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 619.293022][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.299202][ C0] preempt_schedule_irq+0xbf/0x150 [ 619.304329][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 619.310061][ C0] ? acct_update_integrals+0x37b/0x3d0 [ 619.315537][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 619.321376][ C0] irqentry_exit+0x67/0x70 [ 619.325836][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.331850][ C0] RIP: 0010:do_exit+0x63c/0x2530 [ 619.336813][ C0] Code: 00 74 0a 48 8b 7c 24 20 e8 31 d1 8d 00 48 8b 44 24 20 48 8b 18 48 8d 7b 04 be 04 00 00 00 e8 fb d2 8d 00 45 31 f6 f0 ff 4b 04 <0f> 95 c3 41 0f 94 c6 bf 02 00 00 00 44 89 f6 e8 60 50 35 00 84 db [ 619.356441][ C0] RSP: 0018:ffffc9000471fac0 EFLAGS: 00000202 [ 619.362526][ C0] RAX: ffff88802bba8901 RBX: ffff888029406c00 RCX: ffffffff81522435 [ 619.370519][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff888029406c04 [ 619.378502][ C0] RBP: ffffc9000471fc30 R08: ffff888029406c07 R09: 1ffff11005280d80 [ 619.386486][ C0] R10: dffffc0000000000 R11: ffffed1005280d81 R12: 1ffff11005775005 [ 619.394467][ C0] R13: 0000000000000009 R14: 0000000000000000 R15: dffffc0000000000 [ 619.402459][ C0] ? do_exit+0x635/0x2530 [ 619.406825][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 619.412828][ C0] ? put_task_struct+0xc0/0xc0 [ 619.417614][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.423791][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 619.429005][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 619.435185][ C0] do_group_exit+0x22d/0x2f0 [ 619.439807][ C0] ? _raw_spin_unlock_irq+0x29/0x50 [ 619.445113][ C0] get_signal+0x12a6/0x1390 [ 619.449913][ C0] arch_do_signal_or_restart+0xc2/0x7b0 [ 619.455516][ C0] ? lock_chain_count+0x20/0x20 [ 619.460381][ C0] ? get_sigframe_size+0x20/0x20 [ 619.465363][ C0] exit_to_user_mode_loop+0x70/0x110 [ 619.470667][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 619.476232][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 619.481707][ C0] do_syscall_64+0x61/0xb0 [ 619.486309][ C0] ? clear_bhb_loop+0x40/0x90 [ 619.491006][ C0] ? clear_bhb_loop+0x40/0x90 [ 619.495695][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 619.501599][ C0] RIP: 0033:0x7f456199e0d9 [ 619.506030][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.526863][ C0] RSP: 002b:00007f45628120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 619.535297][ C0] RAX: fffffffffffffff5 RBX: 00007f4561c25fa8 RCX: 00007f456199e0d9 [ 619.543398][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4561c25fa8 [ 619.551381][ C0] RBP: 00007f4561c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 619.559359][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.567335][ C0] R13: 00007f4561c26038 R14: 00007fff50b60500 R15: 00007fff50b605e8 [ 619.575337][ C0] [ 623.330324][T15290] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 623.475497][T15290] CPU: 0 PID: 15290 Comm: syz-executor Not tainted syzkaller #0 [ 623.483194][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.493263][T15290] Call Trace: [ 623.496551][T15290] [ 623.499491][T15290] dump_stack_lvl+0x18c/0x250 [ 623.504191][T15290] ? show_regs_print_info+0x20/0x20 [ 623.509402][T15290] ? load_image+0x420/0x420 [ 623.513930][T15290] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 623.520408][T15290] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 623.526924][T15290] warn_alloc+0x246/0x340 [ 623.531278][T15290] ? zone_watermark_ok_safe+0x230/0x230 [ 623.536838][T15290] ? _raw_spin_unlock+0x28/0x40 [ 623.541718][T15290] __vmalloc_node_range+0x661/0x1320 [ 623.547021][T15290] ? __asan_memset+0x22/0x40 [ 623.551651][T15290] ? free_vm_area+0x50/0x50 [ 623.556169][T15290] ? perf_trace_preemptirq_template+0x269/0x330 [ 623.562434][T15290] ? kcov_remote_reset+0xc0/0xc0 [ 623.567388][T15290] vmalloc_user+0x74/0x80 [ 623.571742][T15290] ? kcov_ioctl+0x58/0x610 [ 623.576213][T15290] kcov_ioctl+0x58/0x610 [ 623.580469][T15290] ? bpf_lsm_file_ioctl+0x9/0x10 [ 623.585440][T15290] ? security_file_ioctl+0x80/0xa0 [ 623.590568][T15290] ? kcov_remote_reset+0xc0/0xc0 [ 623.595518][T15290] __se_sys_ioctl+0xfd/0x170 [ 623.600160][T15290] do_syscall_64+0x55/0xb0 [ 623.604589][T15290] ? clear_bhb_loop+0x40/0x90 [ 623.609348][T15290] ? clear_bhb_loop+0x40/0x90 [ 623.614041][T15290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 623.619947][T15290] RIP: 0033:0x7f9c9a79dd6b [ 623.624378][T15290] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 623.643996][T15290] RSP: 002b:00007ffc67739960 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 623.652424][T15290] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f9c9a79dd6b [ 623.660407][T15290] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000db [ 623.668387][T15290] RBP: 00007f9c9aa26308 R08: 0000000000000000 R09: 0000000000000000 [ 623.676804][T15290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.684783][T15290] R13: 0000000000000003 R14: 00007ffc67739c18 R15: 0000000000000000 [ 623.692780][T15290] [ 623.998816][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 624.745768][T15290] Mem-Info: [ 624.749041][T15290] active_anon:11289 inactive_anon:0 isolated_anon:0 [ 624.749041][T15290] active_file:17398 inactive_file:40132 isolated_file:0 [ 624.749041][T15290] unevictable:768 dirty:3 writeback:13 [ 624.749041][T15290] slab_reclaimable:11046 slab_unreclaimable:93355 [ 624.749041][T15290] mapped:32003 shmem:1373 pagetables:617 [ 624.749041][T15290] sec_pagetables:0 bounce:0 [ 624.749041][T15290] kernel_misc_reclaimable:0 [ 624.749041][T15290] free:1327190 free_pcp:7499 free_cma:0 [ 624.985898][T15290] Node 0 active_anon:45156kB inactive_anon:0kB active_file:69592kB inactive_file:160324kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129712kB dirty:12kB writeback:52kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11944kB pagetables:2468kB sec_pagetables:0kB all_unreclaimable? no [ 625.167611][T15290] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 625.335415][T15290] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 625.506002][T15290] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 625.512052][T15290] Node 0 DMA32 free:1385776kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:45148kB inactive_anon:0kB active_file:69592kB inactive_file:159508kB unevictable:1536kB writepending:60kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:9576kB local_pcp:1588kB free_cma:0kB [ 625.715668][T15290] lowmem_reserve[]: 0 0 0 0 0 [ 625.720655][T15290] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 625.885679][T15290] lowmem_reserve[]: 0 0 0 0 0 [ 625.890867][T15290] Node 1 Normal free:3891128kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21076kB local_pcp:11384kB free_cma:0kB [ 626.115620][T15290] lowmem_reserve[]: 0 0 0 0 0 [ 626.121459][T15290] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 626.225578][T15290] Node 0 DMA32: 2*4kB (UE) 454*8kB (UME) 1147*16kB (UM) 890*32kB (ME) 477*64kB (UME) 237*128kB (UME) 111*256kB (UME) 89*512kB (UME) 21*1024kB (UM) 4*2048kB (ME) 283*4096kB (UM) = 1374184kB [ 626.357095][T15290] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 626.425724][T15290] Node 1 Normal: 144*4kB (UE) 51*8kB (UME) 36*16kB (UME) 45*32kB (UME) 20*64kB (UE) 6*128kB (UME) 0*256kB 2*512kB (UM) 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3891128kB [ 626.516327][T15290] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.565615][T15290] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 626.575146][T15290] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 626.665525][T15290] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 626.675021][T15290] 58904 total pagecache pages [ 626.735720][T15290] 0 pages in swap cache [ 626.740036][T15290] Free swap = 124996kB [ 626.744398][T15290] Total swap = 124996kB [ 626.835686][T15290] 2097051 pages RAM [ 626.839819][T15290] 0 pages HighMem/MovableOnly [ 626.844791][T15290] 416958 pages reserved [ 626.887463][T15290] 0 pages cma reserved [ 627.741624][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 628.172803][T15303] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9