last executing test programs: 5.166736992s ago: executing program 4 (id=3472): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x52}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x48800) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038900fe08"], 0xfdef) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x4, [@union={0x2, 0x8, 0x0, 0x5, 0x1, 0xb, [{0x1, 0x1, 0x5}, {0x0, 0x5, 0x3}, {0x10, 0x3, 0x7}, {0x3, 0x0, 0xc2e7d3bd}, {0x0, 0x2, 0xd6}, {0x8, 0x2, 0x7}, {0x2, 0x4}, {0x6, 0x3, 0xe}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x9}}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x5}]}, {0x0, [0x5f, 0x61]}}, &(0x7f00000007c0)=""/129, 0xac, 0x81, 0x1, 0x7046}, 0x28) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg$unix(r2, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)={'b', ' *:* ', 'rw\x00'}, 0x9) 5.164578648s ago: executing program 3 (id=3482): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4001) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.062103715s ago: executing program 2 (id=3473): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x3}, 0x10, 0x4, 0x0, 0x6, 0x1, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{}, &(0x7f0000001380), &(0x7f00000013c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 4.963172965s ago: executing program 3 (id=3475): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000020000000000000000850000003600000018010000696c6c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000007112200000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$kcm(0x10, 0x100000000002, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x36}, 0x41fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="030000002020642500000000002020207b1af8ff000000fbffffffffffffffb769163373e0"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd9, &(0x7f0000000180)=""/217, 0x41000, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=[{0x2, 0x3, 0x0, 0x5}, {0x0, 0x4, 0x4}, {0x1, 0x0, 0x6}], 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x10) r7 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7fffffff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1}, 0x0) 4.431451011s ago: executing program 2 (id=3476): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40a, 0x4, @perf_bp={0x0, 0x1}, 0x104082, 0xa1b7, 0xffffffff, 0x0, 0x1ff, 0xffffffff, 0x0, 0x0, 0xffffb7fe, 0x0, 0x8}, 0x0, 0x5, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x11, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 4.328193377s ago: executing program 3 (id=3478): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)}, 0x20005) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0b}, 0x884) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd3", 0xd5}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) 3.912748846s ago: executing program 3 (id=3480): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340), 0x4) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.272855093s ago: executing program 4 (id=3483): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.803661211s ago: executing program 0 (id=3485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4000) r4 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='afs_dir_check_failed\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x8) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40086602, 0x110e22fff2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0xffffffff7fffffff}, 0x0, 0xca, 0x6, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000000a030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.225721004s ago: executing program 2 (id=3488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x3}, 0x10, 0x4, 0x0, 0x6, 0x1, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{}, &(0x7f0000001380), &(0x7f00000013c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.143024903s ago: executing program 3 (id=3489): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31066b876c1d0000007ea6e763160af36504001ac0080040000500020002000000ef64bc24eab556a705251e618294ff0051f60a9553adac000e4509c5bbcd72c6c953ec3ded4d8217961381fd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d800000018002f25e6924c1b00e6b904021d080006007c09e8fe55a10a0015400200142602600e1208000f0000000401a8001600140003400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001f180000000000000014d6d930dfe1d9d322303983a475730d16a4683f5aeb4edbb57a5025ccca1e10360000000000000080d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b9f65137743370e97039207", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='rxrpc_resend\x00', r1, 0x0, 0xffffffffffffff7f}, 0x18) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x2}, 0x104141, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x5, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000440)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), &(0x7f0000000600), 0x8, 0x93, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x84, 0x84, 0x9, [@struct={0x1, 0x9, 0x0, 0x4, 0x0, 0x5, [{0x3, 0x4, 0x2e}, {0x8, 0x4, 0x920}, {0x10, 0x2, 0x4}, {0x8, 0x1, 0x3}, {0x5, 0x2}, {0x4, 0x2}, {0xa, 0x4, 0x3}, {0x4, 0x1, 0x2}, {0xa, 0x4, 0x5}]}, @ptr={0x8, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30, 0xec, 0x30, 0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000800)=""/37, 0xa5, 0x25, 0x0, 0x81}, 0x28) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r11) write$cgroup_type(r11, &(0x7f0000000080), 0x11ffffce1) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x4, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000002c0)='GPL\x00', 0xffff, 0x0, 0x0, 0x41000, 0x0, '\x00', r9, @fallback=0x2c, r10, 0x8, &(0x7f0000000a80)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0x4, 0x8, 0x8}, 0x10, 0xffffffffffffffff, r5, 0x0, &(0x7f0000000b00)=[r11], 0x0, 0x10, 0x5}, 0x94) sendmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000780)="a9", 0xfffffdef}], 0x11}, 0x0) 2.129834753s ago: executing program 4 (id=3490): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000020000000000000000850000003600000018010000696c6c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000007112200000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$kcm(0x10, 0x100000000002, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x36}, 0x41fe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="030000002020642500000000002020207b1af8ff000000fbffffffffffffffb769163373e0"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd9, &(0x7f0000000180)=""/217, 0x41000, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xf, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=[{0x2, 0x3, 0x0, 0x5}, {0x0, 0x4, 0x4}, {0x1, 0x0, 0x6}], 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7fffffff, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) 1.979398986s ago: executing program 0 (id=3491): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x47fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x7, @perf_bp={&(0x7f0000000040)}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_bp={&(0x7f00000000c0), 0xc}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xc, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d39, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100}, 0x0, 0x6, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x21, 0x0, 0x9, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x9, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@initr0, @jmp={0x4, 0x1, 0x9, 0x4, 0x4, 0xfffffffffffffffc}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r5}) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 1.978988829s ago: executing program 2 (id=3492): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)}, 0x20005) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0b}, 0x884) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd3", 0xd5}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) 1.906609054s ago: executing program 1 (id=3493): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x0, 0x10}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, r1, 0x3, 0x4, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24008084) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x408c050) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0xf000}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, 0x0, 0x2, 0x2c, &(0x7f00000002c0)=""/44, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xd, 0x2, 0x51}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x5, 0x4, 0x4}, {0x4, 0x4, 0x5, 0x6}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x1400, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.743364203s ago: executing program 4 (id=3494): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x3, 0x3, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$kcm(0x29, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000005d25a80", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd0525816d6b67bf927e4a75ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.473232954s ago: executing program 0 (id=3495): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x5, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441505"], 0x30}, 0x40880) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x9a, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a44080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000180)={'wlan1\x00', @remote}) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) 1.402877031s ago: executing program 1 (id=3496): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4001) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.335838734s ago: executing program 2 (id=3497): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0x0, r0, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='rdma.current\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000dc0)="5c00000014006b02c84e21000af32c6e0a0675f80800000044000100fec00e000600004e0033df090e8497b1ed90", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r3, &(0x7f00000002c0), 0x12) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181014100000000010000000000000e002e000f00000002800200121f", 0x2e}], 0x1}, 0x20000010) 1.224354638s ago: executing program 4 (id=3498): socket$kcm(0xa, 0x3, 0x73) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x801, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x105b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x0, 0x80000001, 0x5b2773a4, 0x1, 0x6, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffff5fffffffffff, r0, 0x3) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x4000000007fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x101, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x4) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) r5 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r5, 0x1, 0x41, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) recvmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/15, 0xf}, 0x2062) openat$cgroup_ro(r3, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) 1.134326866s ago: executing program 0 (id=3499): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340), 0x4) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 898.524192ms ago: executing program 2 (id=3500): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x21, 0x2, 0x2) r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 777.951504ms ago: executing program 3 (id=3501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$kcm(0x18, 0x0, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) socket$kcm(0x28, 0x1, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, 0x0, 0x30044889) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000), 0x4) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0xffffffffffffffff, 0x7, r3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x5, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000005d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1fb}, 0x8480, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x45, 0xff, 0x0, 0x80, 0x0, 0xee6, 0x14a0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x2, @perf_config_ext={0x7fff, 0xaec}, 0x110104, 0x32, 0x0, 0x3, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071123600000000009500000000000000e805daf1"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x49) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640), 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 754.673304ms ago: executing program 1 (id=3502): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r1}, &(0x7f0000001380), &(0x7f00000013c0)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r2}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000"], 0x0, 0x26}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 688.936519ms ago: executing program 0 (id=3503): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14905, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x17, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="250a000000000000631104000000000018"], &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f", @ANYRES16=r0], 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair(0x9, 0x800, 0x22, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xa, 0x5, 0x0) recvmsg$kcm(r1, 0x0, 0x40000022) setsockopt$sock_attach_bpf(r2, 0x29, 0x6, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) socket$kcm(0x29, 0x5, 0x0) 473.263418ms ago: executing program 1 (id=3504): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x1009, 0x2e, 0x4, 0x3, 0x3, 0x40, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$kcm(0x29, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000ad0000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffefffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d30000000000000005d25a80", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd0525816d6b67bf927e4a75ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 319.685171ms ago: executing program 1 (id=3505): socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x25, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x407fff, 0x8}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="85000000ae00000095000025bbb61bf100000000008d7127309162c6bb3c9e3ee98544b6bbc6e21724cfef8bcba772f3bd75043eca7ad9bf561aaf410cf898478ea5aea2a336"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf6, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a86080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff400", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0x0) 137.685061ms ago: executing program 1 (id=3506): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000030000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0x0, 0x0, 0x10}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00'}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, r1, 0x3, 0x4, 0x5}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x24008084) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x408c050) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0xf000}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, 0x0, 0x2, 0x2c, &(0x7f00000002c0)=""/44, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xd, 0x2, 0x51}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x5, 0x4, 0x4}, {0x4, 0x4, 0x5, 0x6}], 0x10, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x1400, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 90.120324ms ago: executing program 4 (id=3507): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x5, 0x1, 0x8, 0x1}, 0x48) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0xf, 0x3, 0x2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbc0cfb91c82f4a9164dda5e67a46d8e841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d72166cb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d090014b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd8f200000017587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eb00ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbb1d44925ce66ea1a94e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d9"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7ff1, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x25346c7d6a446d0f, 0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffffffffffffe74, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c11", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 0s ago: executing program 0 (id=3508): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001580)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, &(0x7f0000002540)}, 0x20005) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000080), 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x6, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0b}, 0x884) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e43", 0xd7}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) kernel console output (not intermixed with test programs): ages cma reserved [ 105.261775][ T6026] team0: Port device geneve1 added [ 105.514186][ T6035] syzkaller0: entered promiscuous mode [ 105.534345][ T6035] syzkaller0: entered allmulticast mode [ 105.658013][ T6038] netlink: 'syz.4.33': attribute type 10 has an invalid length. [ 105.697954][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.707385][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.778847][ T6038] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.786398][ T6038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.794707][ T6038] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.802251][ T6038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.948503][ T6038] team0: Port device bridge0 added [ 106.712373][ T6065] netlink: 'syz.3.43': attribute type 33 has an invalid length. [ 106.730559][ T6065] netlink: 152 bytes leftover after parsing attributes in process `syz.3.43'. [ 107.539702][ T6088] netlink: 132 bytes leftover after parsing attributes in process `syz.1.51'. [ 108.761354][ T6124] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.66'. [ 108.835883][ T6131] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 108.896192][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.908101][ T6131] bond0: (slave team0): Enslaving as an active interface with an up link [ 110.191048][ T6153] syz.2.76 uses obsolete (PF_INET,SOCK_PACKET) [ 110.752518][ T6166] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 111.547623][ T6190] €Â: renamed from hsr0 (while UP) [ 112.641514][ T5852] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 113.433488][ T6232] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.857985][ T6239] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.109'. [ 113.887028][ T6246] syzkaller0: entered promiscuous mode [ 113.887079][ T6246] syzkaller0: entered allmulticast mode [ 114.704590][ T5852] Bluetooth: hci2: command tx timeout [ 118.540585][ T6308] netlink: 26 bytes leftover after parsing attributes in process `syz.0.135'. [ 119.099805][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.109214][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.118358][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.127574][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.136708][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.145825][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.154963][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.164116][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.173270][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.182402][ T6321] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 119.787694][ T6340] netlink: 176 bytes leftover after parsing attributes in process `syz.2.149'. [ 120.661950][ T6345] netlink: 56 bytes leftover after parsing attributes in process `syz.0.150'. [ 121.026705][ T5852] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 121.055294][ T6351] syzkaller0: entered promiscuous mode [ 121.107503][ T6351] syzkaller0: entered allmulticast mode [ 121.897524][ T5852] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 122.575347][ T6403] netlink: 'syz.1.172': attribute type 10 has an invalid length. [ 122.649388][ T6403] batman_adv: batadv0: Adding interface: wlan0 [ 122.668118][ T6403] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.711566][ T6403] batman_adv: batadv0: Interface activated: wlan0 [ 122.746872][ T6406] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.174'. [ 122.985728][ T6413] netlink: 'syz.2.175': attribute type 10 has an invalid length. [ 122.988350][ T6412] netlink: 'syz.4.177': attribute type 6 has an invalid length. [ 123.031904][ T6412] netlink: 'syz.4.177': attribute type 7 has an invalid length. [ 123.058401][ T6412] netlink: 13182 bytes leftover after parsing attributes in process `syz.4.177'. [ 123.218922][ T6413] team0: Port device geneve1 added [ 123.723122][ T6425] syz.3.181 (6425) used greatest stack depth: 16856 bytes left [ 123.911083][ T6437] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.187'. [ 124.465274][ C0] Illegal XDP return value 16128 on prog (id 126) dev veth1_to_team, expect packet loss! [ 124.916287][ T6455] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 125.191607][ T6455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.236800][ T6455] team0: Port device batadv0 added [ 125.317293][ T6458] netlink: 'syz.1.196': attribute type 10 has an invalid length. [ 125.562157][ T6458] team0: Port device geneve1 added [ 125.993854][ T6471] netlink: 'syz.1.201': attribute type 12 has an invalid length. [ 126.029406][ T6471] netlink: 132 bytes leftover after parsing attributes in process `syz.1.201'. [ 126.514148][ T6487] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.208'. [ 126.559827][ T6487] net_ratelimit: 3319 callbacks suppressed [ 126.559880][ T6487] netlink: zone id is out of range [ 126.622850][ T6487] netlink: zone id is out of range [ 126.642743][ T6487] netlink: get zone limit has 8 unknown bytes [ 128.054963][ T6520] : entered promiscuous mode [ 128.064731][ T6520] : entered allmulticast mode [ 129.635196][ T5852] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 132.275148][ T6579] netlink: 'syz.1.242': attribute type 16 has an invalid length. [ 132.314067][ T6579] netlink: 48 bytes leftover after parsing attributes in process `syz.1.242'. [ 132.359822][ T6582] netlink: 'syz.3.243': attribute type 10 has an invalid length. [ 132.575433][ T6582] batman_adv: batadv0: Adding interface: netdevsim0 [ 132.582292][ T6582] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.608205][ T6582] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 132.635311][ T6579] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.789408][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.795939][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.360970][ T6599] delete_channel: no stack [ 135.387013][ T6636] netlink: 'syz.3.260': attribute type 1 has an invalid length. [ 135.398155][ T6636] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.260'. [ 135.671341][ T6638] netlink: 'syz.3.261': attribute type 10 has an invalid length. [ 137.327128][ T6657] openvswitch: netlink: Flow actions attr not present in new flow. [ 138.810924][ T5852] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 139.555352][ T6712] : renamed from bond0 (while UP) [ 139.812829][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.3.292'. [ 140.115861][ T6727] netlink: 'syz.0.295': attribute type 4 has an invalid length. [ 140.129275][ T6727] netlink: 152 bytes leftover after parsing attributes in process `syz.0.295'. [ 140.184285][ T6729] wg2: entered promiscuous mode [ 140.199139][ T6729] wg2: entered allmulticast mode [ 140.239342][ T6727] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 140.958295][ T6745] netlink: 'syz.4.303': attribute type 10 has an invalid length. [ 140.970431][ T6745] team0: Device ipvlan1 failed to register rx_handler [ 141.328368][ T6749] syzkaller0: create flow: hash 3037976589 index 1 [ 141.568995][ T6762] netlink: 132 bytes leftover after parsing attributes in process `syz.0.309'. [ 141.589063][ T6748] syzkaller0: delete flow: hash 3037976589 index 1 [ 144.048920][ T6775] syzkaller0: entered promiscuous mode [ 144.083966][ T6775] syzkaller0: entered allmulticast mode [ 144.471066][ T6797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.319'. [ 149.036237][ T6797] caif0: entered promiscuous mode [ 149.041336][ T6797] caif0: entered allmulticast mode [ 149.948690][ T5217] udevd[5217]: worker [6807] terminated by signal 33 (Unknown signal 33) [ 149.966460][ T5217] udevd[5217]: worker [6807] failed while handling '/devices/virtual/block/loop4' [ 150.049292][ T5217] udevd[5217]: worker [6819] terminated by signal 33 (Unknown signal 33) [ 150.064195][ T5217] udevd[5217]: worker [6819] failed while handling '/devices/virtual/block/loop0' [ 150.494659][ T6865] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.344'. [ 150.597484][ T6871] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 150.625066][ T6872] netlink: 'syz.3.346': attribute type 1 has an invalid length. [ 150.633249][ T6871] syzkaller1: group set to 0 [ 150.652612][ T6871] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 150.660285][ T6872] netlink: 17 bytes leftover after parsing attributes in process `syz.3.346'. [ 150.686545][ T6871] syzkaller1: persist enabled [ 150.768489][ T5852] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 151.319702][ T6893] veth1_vlan: entered allmulticast mode [ 151.830448][ T6907] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.360'. [ 152.110950][ T6915] netlink: 'syz.3.366': attribute type 10 has an invalid length. [ 152.166584][ T6915] team0: Port device batadv0 removed [ 152.187479][ T6915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.214629][ T6915] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 152.272990][ T6920] bond0: entered promiscuous mode [ 152.289909][ T6920] bond_slave_0: entered promiscuous mode [ 152.304190][ T6920] bond_slave_1: entered promiscuous mode [ 152.318205][ T6920] batadv0: entered promiscuous mode [ 152.406084][ T6919] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.368'. [ 153.577810][ T6955] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 153.585930][ T6955] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 153.716348][ T6961] syzkaller0: entered allmulticast mode [ 153.855473][ T5852] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 154.191172][ T6973] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 154.274022][ T6973] syzkaller0: entered promiscuous mode [ 154.292216][ T6973] syzkaller0: entered allmulticast mode [ 154.374973][ T6974] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.388'. [ 155.244573][ T5852] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 156.720758][ T7008] blkio.reset_stats is deprecated [ 156.821310][ T7010] syz.2.402: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 156.845253][ T7010] CPU: 0 UID: 0 PID: 7010 Comm: syz.2.402 Not tainted 6.16.0-rc3-syzkaller-g03fe01ddd1d8 #0 PREEMPT(full) [ 156.845310][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.845323][ T7010] Call Trace: [ 156.845333][ T7010] [ 156.845343][ T7010] dump_stack_lvl+0x189/0x250 [ 156.845390][ T7010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.845418][ T7010] ? __pfx__printk+0x10/0x10 [ 156.845448][ T7010] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 156.845480][ T7010] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 156.845513][ T7010] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 156.845545][ T7010] warn_alloc+0x214/0x310 [ 156.845568][ T7010] ? stack_depot_save_flags+0x40/0x900 [ 156.845599][ T7010] ? __pfx_warn_alloc+0x10/0x10 [ 156.845625][ T7010] ? kasan_save_track+0x4f/0x80 [ 156.845656][ T7010] ? xskq_create+0x56/0x170 [ 156.845679][ T7010] ? xsk_init_queue+0xb0/0x110 [ 156.845701][ T7010] ? xsk_setsockopt+0x4de/0x710 [ 156.845721][ T7010] ? do_sock_setsockopt+0x25a/0x3e0 [ 156.845752][ T7010] ? __x64_sys_setsockopt+0x18b/0x220 [ 156.845784][ T7010] ? do_syscall_64+0xfa/0x3b0 [ 156.845810][ T7010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.845840][ T7010] __vmalloc_node_range_noprof+0x125/0x12f0 [ 156.845913][ T7010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 156.845944][ T7010] ? __kasan_kmalloc+0x93/0xb0 [ 156.845982][ T7010] vmalloc_user_noprof+0xad/0xf0 [ 156.846006][ T7010] ? xskq_create+0xbf/0x170 [ 156.846033][ T7010] xskq_create+0xbf/0x170 [ 156.846063][ T7010] xsk_init_queue+0xb0/0x110 [ 156.846091][ T7010] xsk_setsockopt+0x4de/0x710 [ 156.846119][ T7010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.846151][ T7010] ? aa_sock_opt_perm+0x74/0x110 [ 156.846180][ T7010] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 156.846206][ T7010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 156.846232][ T7010] do_sock_setsockopt+0x25a/0x3e0 [ 156.846270][ T7010] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 156.846321][ T7010] ? __fget_files+0x2a/0x420 [ 156.846355][ T7010] __x64_sys_setsockopt+0x18b/0x220 [ 156.846398][ T7010] do_syscall_64+0xfa/0x3b0 [ 156.846428][ T7010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.846449][ T7010] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 156.846472][ T7010] ? clear_bhb_loop+0x60/0xb0 [ 156.846497][ T7010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.846518][ T7010] RIP: 0033:0x7f321458e929 [ 156.846547][ T7010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.846567][ T7010] RSP: 002b:00007f321544b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 156.846592][ T7010] RAX: ffffffffffffffda RBX: 00007f32147b5fa0 RCX: 00007f321458e929 [ 156.846609][ T7010] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 156.846624][ T7010] RBP: 00007f3214610b39 R08: 0000000000000004 R09: 0000000000000000 [ 156.846638][ T7010] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 156.846652][ T7010] R13: 0000000000000000 R14: 00007f32147b5fa0 R15: 00007ffcf209fdd8 [ 156.846687][ T7010] [ 156.846734][ T7010] Mem-Info: [ 157.145819][ T7014] netlink: 'syz.1.404': attribute type 10 has an invalid length. [ 157.152727][ T7010] active_anon:6308 inactive_anon:0 isolated_anon:0 [ 157.152727][ T7010] active_file:1146 inactive_file:39853 isolated_file:0 [ 157.152727][ T7010] unevictable:768 dirty:266 writeback:0 [ 157.152727][ T7010] slab_reclaimable:9858 slab_unreclaimable:97162 [ 157.152727][ T7010] mapped:29063 shmem:1359 pagetables:1009 [ 157.152727][ T7010] sec_pagetables:0 bounce:0 [ 157.152727][ T7010] kernel_misc_reclaimable:0 [ 157.152727][ T7010] free:1325595 free_pcp:20190 free_cma:0 [ 157.171690][ T7014] netlink: 2 bytes leftover after parsing attributes in process `syz.1.404'. [ 157.175808][ T7010] Node 0 active_anon:25232kB inactive_anon:0kB active_file:4584kB inactive_file:159204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116252kB dirty:1060kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11256kB pagetables:3872kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.291278][ T7010] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.326998][ T7010] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.357930][ T7010] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 157.364658][ T7010] Node 0 DMA32 free:1385924kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25180kB inactive_anon:0kB active_file:4584kB inactive_file:157632kB unevictable:1536kB writepending:1060kB present:3129332kB managed:2558348kB mlocked:0kB bounce:0kB free_pcp:61064kB local_pcp:41472kB free_cma:0kB [ 157.398059][ T7010] lowmem_reserve[]: 0 0 1 1 1 [ 157.404037][ T7010] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 157.440808][ T7010] lowmem_reserve[]: 0 0 0 0 0 [ 157.446400][ T7010] Node 1 Normal free:3901084kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19488kB local_pcp:11360kB free_cma:0kB [ 157.479111][ T7010] lowmem_reserve[]: 0 0 0 0 0 [ 157.484815][ T7010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.499197][ T7010] Node 0 DMA32: 1693*4kB (UME) 978*8kB (UME) 301*16kB (UME) 1243*32kB (UME) 271*64kB (UME) 50*128kB (UME) 22*256kB (UME) 8*512kB (UM) 5*1024kB (UM) 3*2048kB (ME) 313*4096kB (M) = 1385972kB [ 157.524046][ T7010] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 157.538192][ T7010] Node 1 Normal: 205*4kB (UME) 61*8kB (UME) 52*16kB (UME) 102*32kB (UME) 36*64kB (UME) 3*128kB (ME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3901084kB [ 157.558723][ T7010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.569087][ T7010] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.578953][ T7010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.588904][ T7010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.598812][ T7010] 42355 total pagecache pages [ 157.607227][ T7010] 0 pages in swap cache [ 157.611791][ T7010] Free swap = 124996kB [ 157.624894][ T7010] Total swap = 124996kB [ 157.629252][ T7010] 2097051 pages RAM [ 157.634113][ T7010] 0 pages HighMem/MovableOnly [ 157.643048][ T7010] 425422 pages reserved [ 157.656773][ T7010] 0 pages cma reserved [ 158.440153][ T6986] netlink: 766 bytes leftover after parsing attributes in process `syz.3.392'. [ 158.451812][ T7004] wg2: left promiscuous mode [ 158.460339][ T7004] wg2: left allmulticast mode [ 158.473022][ T7006] wg2: entered promiscuous mode [ 158.480766][ T7006] wg2: entered allmulticast mode [ 158.491947][ T7014] batadv_slave_1: entered promiscuous mode [ 158.500715][ T7014] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.528171][ T7014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.561133][ T7014] bridge0: port 3(batadv_slave_1) entered blocking state [ 158.574067][ T7014] bridge0: port 3(batadv_slave_1) entered disabled state [ 158.602245][ T7014] batadv_slave_1: entered allmulticast mode [ 158.610877][ T7014] bridge0: port 3(batadv_slave_1) entered blocking state [ 158.618169][ T7014] bridge0: port 3(batadv_slave_1) entered forwarding state [ 159.011340][ T5852] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 159.724886][ T5852] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 160.599151][ T7073] netlink: 'syz.0.425': attribute type 2 has an invalid length. [ 160.670026][ T7073] netlink: 'syz.0.425': attribute type 8 has an invalid length. [ 160.710592][ T7073] netlink: 132 bytes leftover after parsing attributes in process `syz.0.425'. [ 161.069528][ T7084] netlink: 'syz.3.430': attribute type 28 has an invalid length. [ 161.239445][ T7096] syzkaller0: entered promiscuous mode [ 161.245156][ T7096] syzkaller0: entered allmulticast mode [ 161.583843][ T7102] netlink: 'syz.3.437': attribute type 39 has an invalid length. [ 162.449396][ T5852] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 167.640838][ C1] sched: DL replenish lagged too much [ 169.816004][ T7170] delete_channel: no stack [ 169.847947][ T7178] veth1_macvtap: entered allmulticast mode [ 170.372360][ T5852] Bluetooth: hci0: unexpected event 0x2c length: 15 < 17 [ 176.286477][ T7273] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.501'. [ 176.963207][ T7288] syzkaller0: entered promiscuous mode [ 176.994711][ T7288] syzkaller0: entered allmulticast mode [ 178.198156][ T7306] netlink: 'syz.3.515': attribute type 10 has an invalid length. [ 178.224394][ T7306] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.232311][ T7306] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.281325][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.289039][ T7306] bridge0: port 2(bridge_slave_1) entered listening state [ 178.296940][ T7306] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.304558][ T7306] bridge0: port 1(bridge_slave_0) entered listening state [ 178.328848][ T7306] team0: Port device bridge0 added [ 179.374449][ T7333] netlink: 56 bytes leftover after parsing attributes in process `syz.3.524'. [ 181.776669][ T7367] delete_channel: no stack [ 181.877489][ T7381] : entered promiscuous mode [ 181.899975][ T7381] : entered allmulticast mode [ 182.130975][ T7385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.540'. [ 183.846643][ T7416] : entered promiscuous mode [ 183.851422][ T7416] : entered allmulticast mode [ 184.032995][ T7422] netlink: 'syz.0.557': attribute type 10 has an invalid length. [ 185.008344][ T7435] netlink: 'syz.4.571': attribute type 10 has an invalid length. [ 185.293721][ T7435] team0: Port device geneve1 added [ 185.358060][ T7441] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 185.374499][ T7441] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.394911][ T7441] bond0: (slave team0): Enslaving as an active interface with an up link [ 185.690634][ T7449] syzkaller0: entered promiscuous mode [ 185.700262][ T7449] syzkaller0: entered allmulticast mode [ 185.949429][ T7455] : entered promiscuous mode [ 185.962080][ T7455] : entered allmulticast mode [ 187.595730][ T7483] netlink: 'syz.1.578': attribute type 10 has an invalid length. [ 187.915001][ T7493] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 188.010317][ T7493] team0: Port device geneve1 added [ 188.063462][ T7497] : entered promiscuous mode [ 188.068325][ T7497] : entered allmulticast mode [ 188.191038][ T5852] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 191.081375][ T7565] netlink: 'syz.3.605': attribute type 10 has an invalid length. [ 193.583057][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 193.591104][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 193.626672][ T7588] netlink: 'syz.1.628': attribute type 10 has an invalid length. [ 194.227556][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.234130][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.350936][ T7611] netlink: 'syz.2.625': attribute type 10 has an invalid length. [ 194.547396][ T7617] netlink: 'syz.1.627': attribute type 10 has an invalid length. [ 195.566548][ T7611] batman_adv: batadv0: Adding interface: wlan0 [ 195.576451][ T7611] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.606468][ T7611] batman_adv: batadv0: Interface activated: wlan0 [ 195.619303][ T7617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.638858][ T7617] team0: Port device batadv0 added [ 196.872296][ T7622] delete_channel: no stack [ 196.996926][ T7638] netlink: 'syz.3.639': attribute type 10 has an invalid length. [ 197.035561][ T7638] team0: Device ipvlan1 failed to register rx_handler [ 198.933797][ T7654] netlink: 'syz.1.646': attribute type 4 has an invalid length. [ 198.951891][ T7654] netlink: 152 bytes leftover after parsing attributes in process `syz.1.646'. [ 198.983972][ T7654] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 201.839959][ T7700] : renamed from bond0 [ 201.879904][ T7700] : left promiscuous mode [ 201.902516][ T7700] bond_slave_0: left promiscuous mode [ 201.923166][ T7700] bond_slave_1: left promiscuous mode [ 201.928993][ T7700] batadv0: left promiscuous mode [ 205.406139][ T7724] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.670'. [ 205.738847][ T7729] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.674'. [ 207.376953][ T7736] wg2: entered promiscuous mode [ 207.392407][ T7736] wg2: entered allmulticast mode [ 207.943139][ T7760] : renamed from bond0 (while UP) [ 208.943062][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.950421][ C0] bridge0: topology change detected, propagating [ 208.957412][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.964704][ C0] bridge0: topology change detected, propagating [ 211.815860][ T7792] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.695'. [ 212.392127][ T7799] netlink: 766 bytes leftover after parsing attributes in process `syz.0.698'. [ 212.501343][ T7799] bond_slave_0: entered promiscuous mode [ 212.512374][ T7799] bond_slave_1: entered promiscuous mode [ 213.562563][ T7824] netlink: 766 bytes leftover after parsing attributes in process `syz.2.718'. [ 213.756813][ T7835] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 213.763976][ T7835] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 214.091934][ T7843] netlink: 'syz.4.714': attribute type 1 has an invalid length. [ 214.120351][ T7843] netlink: 17 bytes leftover after parsing attributes in process `syz.4.714'. [ 214.307278][ T7850] syzkaller0: entered promiscuous mode [ 214.329889][ T7850] syzkaller0: entered allmulticast mode [ 214.339634][ T12] syzkaller0: tun_net_xmit 48 [ 214.396186][ T7850] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 214.429863][ T7850] syzkaller0: tun_net_xmit 1280 [ 214.494880][ T5852] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 214.506449][ T7857] netlink: 26 bytes leftover after parsing attributes in process `syz.2.730'. [ 214.668935][ T7863] netlink: 'syz.1.723': attribute type 10 has an invalid length. [ 215.747947][ T7863] team0: Port device batadv0 removed [ 215.761859][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.770670][ T7863] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 215.805990][ T7869] bond0: entered promiscuous mode [ 215.811113][ T7869] bond_slave_0: entered promiscuous mode [ 215.824856][ T7869] bond_slave_1: entered promiscuous mode [ 215.830777][ T7869] team0: entered promiscuous mode [ 215.839695][ T7869] team_slave_0: entered promiscuous mode [ 215.847588][ T7869] team_slave_1: entered promiscuous mode [ 215.857096][ T7869] geneve1: entered promiscuous mode [ 215.865233][ T7869] batadv0: entered promiscuous mode [ 215.920211][ T7871] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 215.927531][ T7871] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 215.982969][ T7873] syzkaller0: entered allmulticast mode [ 216.190981][ T7877] netlink: 766 bytes leftover after parsing attributes in process `syz.1.725'. [ 216.790024][ T7868] Bluetooth: hci4: command 0x0406 tx timeout [ 216.796460][ T7868] Bluetooth: hci0: command 0x0406 tx timeout [ 216.802757][ T7866] Bluetooth: hci1: command 0x0406 tx timeout [ 216.809666][ T7866] Bluetooth: hci3: command 0x0406 tx timeout [ 220.075207][ T51] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 220.448354][ T7962] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.757'. [ 220.819808][ T7972] netlink: 'syz.4.761': attribute type 39 has an invalid length. [ 221.383116][ T7981] netlink: 766 bytes leftover after parsing attributes in process `syz.4.764'. [ 221.655007][ T7986] netlink: 'syz.3.767': attribute type 6 has an invalid length. [ 221.670692][ T7986] netlink: 'syz.3.767': attribute type 7 has an invalid length. [ 221.685679][ T7986] netlink: 13182 bytes leftover after parsing attributes in process `syz.3.767'. [ 221.706406][ T7991] netlink: 'syz.2.766': attribute type 1 has an invalid length. [ 221.718525][ T7991] netlink: 17 bytes leftover after parsing attributes in process `syz.2.766'. [ 221.902101][ T51] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 222.597001][ T8017] netlink: 'syz.4.778': attribute type 10 has an invalid length. [ 222.619431][ T8017] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.627202][ T8017] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.786098][ T8017] team0: Port device bridge0 removed [ 222.806844][ T8017] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.814778][ T8017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.822812][ T8017] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.830299][ T8017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.991754][ T8017] : (slave bridge0): Enslaving as an active interface with an up link [ 223.081686][ T8030] netlink: 'syz.2.782': attribute type 6 has an invalid length. [ 223.109297][ T8030] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.782'. [ 223.262575][ T8036] netlink: 'syz.2.782': attribute type 10 has an invalid length. [ 224.103699][ T8036] : (slave team0): Releasing backup interface [ 224.148343][ T8036] team0 (unregistering): Port device team_slave_0 removed [ 224.174424][ T8036] team0 (unregistering): Port device team_slave_1 removed [ 224.188411][ T8036] team0 (unregistering): Port device geneve1 removed [ 224.567089][ T51] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 225.096309][ T8090] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 225.635660][ T8104] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 225.823405][ T8113] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 225.831265][ T8113] netlink: 'syz.4.815': attribute type 4 has an invalid length. [ 225.839639][ T8113] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.815'. [ 225.998649][ T8118] netlink: 22 bytes leftover after parsing attributes in process `syz.0.816'. [ 226.746405][ T8138] syzkaller0: entered promiscuous mode [ 226.752059][ T8138] syzkaller0: entered allmulticast mode [ 227.520226][ T8156] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 228.325792][ T8170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.845'. [ 230.290122][ T8170] caif0: entered promiscuous mode [ 230.296174][ T8170] caif0: entered allmulticast mode [ 230.719253][ T5168] Bluetooth: hci3: command 0x0406 tx timeout [ 230.822531][ T8195] delete_channel: no stack [ 230.900172][ T8204] sctp: [Deprecated]: syz.0.848 (pid 8204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.900172][ T8204] Use struct sctp_sack_info instead [ 230.929903][ T8206] netlink: 'syz.2.849': attribute type 10 has an invalid length. [ 230.945869][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.954407][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.052915][ T8207] netlink: 17247 bytes leftover after parsing attributes in process `syz.2.849'. [ 231.093512][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.100800][ T8206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.108367][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.116130][ T8206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.130078][ T8206] : (slave bridge0): Enslaving as an active interface with an up link [ 231.462319][ T8221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.469662][ T8221] IPv6: NLM_F_CREATE should be set when creating new route [ 231.477022][ T8221] IPv6: NLM_F_CREATE should be set when creating new route [ 231.554413][ T8226] netlink: 180 bytes leftover after parsing attributes in process `syz.4.858'. [ 231.827743][ T8230] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 232.748808][ T8266] syzkaller0: entered promiscuous mode [ 232.754462][ T8266] syzkaller0: entered allmulticast mode [ 233.229666][ T8274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.237255][ T8274] IPv6: NLM_F_CREATE should be set when creating new route [ 233.244920][ T8274] IPv6: NLM_F_CREATE should be set when creating new route [ 233.252501][ T8274] IPv6: NLM_F_CREATE should be set when creating new route [ 233.512555][ T8289] netlink: 'syz.3.884': attribute type 10 has an invalid length. [ 233.521377][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.528879][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.600715][ T8289] team0: Port device bridge0 removed [ 233.615863][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.623326][ T8289] bridge0: port 2(bridge_slave_1) entered listening state [ 233.631115][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.638472][ T8289] bridge0: port 1(bridge_slave_0) entered listening state [ 233.800230][ T8289] : (slave bridge0): Enslaving as an active interface with an up link [ 234.845470][ T8312] netlink: 22 bytes leftover after parsing attributes in process `syz.2.890'. [ 235.483133][ T8336] veth1_macvtap: entered allmulticast mode [ 236.102548][ T8352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 236.109882][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 236.117209][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 236.758849][ T8367] netlink: 22 bytes leftover after parsing attributes in process `syz.4.906'. [ 237.232495][ T8374] netlink: 180 bytes leftover after parsing attributes in process `syz.1.914'. [ 237.257482][ T8378] veth1_macvtap: entered allmulticast mode [ 238.054030][ T8406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.061326][ T8406] IPv6: NLM_F_CREATE should be set when creating new route [ 238.068662][ T8406] IPv6: NLM_F_CREATE should be set when creating new route [ 238.582468][ T8415] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 238.590848][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.598754][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.636011][ T8411] netlink: 'syz.1.927': attribute type 6 has an invalid length. [ 238.658998][ T8411] netlink: 'syz.1.927': attribute type 7 has an invalid length. [ 238.674482][ T8418] netlink: 17247 bytes leftover after parsing attributes in process `syz.0.935'. [ 238.714650][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.722064][ T8415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.729686][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.736960][ T8415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.747580][ T8411] netlink: 13182 bytes leftover after parsing attributes in process `syz.1.927'. [ 238.829029][ T8415] bridge0: entered promiscuous mode [ 238.889348][ T8415] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 239.791334][ T51] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 239.976980][ T8443] veth1_macvtap: entered allmulticast mode [ 241.661893][ T8482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.669648][ T8482] IPv6: NLM_F_CREATE should be set when creating new route [ 241.677376][ T8482] IPv6: NLM_F_CREATE should be set when creating new route [ 241.685052][ T8482] IPv6: NLM_F_CREATE should be set when creating new route [ 241.910173][ T8487] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.946'. [ 242.521777][ T8494] veth1_macvtap: entered allmulticast mode [ 243.616286][ T8507] netlink: 26 bytes leftover after parsing attributes in process `syz.1.965'. [ 243.840049][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 243.848648][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 243.856849][ T51] Bluetooth: hci4: hardware error 0x00 [ 245.009342][ T8542] syzkaller0: entered promiscuous mode [ 245.015089][ T8542] syzkaller0: entered allmulticast mode [ 245.230015][ T5168] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 246.066298][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 247.274568][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 248.193763][ T8590] netlink: 'syz.2.984': attribute type 15 has an invalid length. [ 248.217702][ T8590] netlink: 11206 bytes leftover after parsing attributes in process `syz.2.984'. [ 248.402301][ T5168] Bluetooth: hci3: unexpected event 0x10 length: 15 > 1 [ 248.403379][ T51] Bluetooth: hci3: hardware error 0x00 [ 248.481332][ T8597] netlink: 'syz.0.986': attribute type 10 has an invalid length. [ 248.512555][ T8601] syzkaller0: entered allmulticast mode [ 248.765591][ T8607] netlink: 'syz.0.991': attribute type 29 has an invalid length. [ 249.262537][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 249.270673][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 250.462177][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 252.186334][ T8632] netlink: 'syz.4.1003': attribute type 10 has an invalid length. [ 252.625667][ T8648] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.1008'. [ 253.323081][ T8667] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1016'. [ 254.511378][ T8690] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.758999][ T8697] @ÿ: renamed from bond_slave_0 (while UP) [ 255.223849][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.233003][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.259131][ T8707] bridge0: entered allmulticast mode [ 255.349405][ T8712] : port 1(ip6gretap0) entered blocking state [ 255.400762][ T8712] : port 1(ip6gretap0) entered disabled state [ 255.452505][ T8712] ip6gretap0: entered allmulticast mode [ 255.468134][ T8712] ip6gretap0: entered promiscuous mode [ 255.672669][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.682568][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.851674][ T8724] netlink: 'syz.0.1036': attribute type 39 has an invalid length. [ 256.385899][ T51] Bluetooth: hci0: unexpected subevent 0x05 length: 14 > 12 [ 256.869961][ T8747] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.1044'. [ 258.462133][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 258.559005][ T8771] netlink: 'syz.3.1052': attribute type 39 has an invalid length. [ 258.981343][ T8779] netlink: 'syz.3.1056': attribute type 3 has an invalid length. [ 259.054300][ T8779] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1056'. [ 259.123522][ T8783] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.1059'. [ 259.321219][ T8790] netlink: 'syz.3.1062': attribute type 11 has an invalid length. [ 259.345672][ T8790] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.1062'. [ 259.390537][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.398127][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.423983][ T8788] bridge0: entered allmulticast mode [ 259.450401][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.457667][ T8791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.465308][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.472586][ T8791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.542722][ T8791] bridge0: entered promiscuous mode [ 259.608656][ T51] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 259.653957][ T8795] @ÿ: renamed from bond_slave_0 (while UP) [ 260.047139][ T8789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.199968][ T51] Bluetooth: hci2: unexpected subevent 0x05 length: 14 > 12 [ 260.316342][ T51] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17 [ 260.416310][ T8815] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1071'. [ 260.496710][ T8818] delete_channel: no stack [ 260.990783][ T51] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 260.995391][ T8834] @ÿ: renamed from bond_slave_0 (while UP) [ 261.625246][ T8858] netlink: 'syz.1.1085': attribute type 3 has an invalid length. [ 261.635304][ T8858] netlink: 'syz.1.1085': attribute type 1 has an invalid length. [ 261.650408][ T8858] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1085'. [ 261.923507][ T51] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 262.222161][ T51] Bluetooth: hci2: command tx timeout [ 262.615254][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 264.640607][ T8912] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1109'. [ 265.532325][ T8926] netlink: 'syz.2.1114': attribute type 46 has an invalid length. [ 265.901775][ T8938] netlink: 'syz.1.1118': attribute type 3 has an invalid length. [ 265.944949][ T8938] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 265.975069][ T8938] netlink: 191152 bytes leftover after parsing attributes in process `syz.1.1118'. [ 267.403345][ T8978] netlink: 'syz.1.1133': attribute type 39 has an invalid length. [ 268.228131][ T9007] netlink: 'syz.4.1144': attribute type 10 has an invalid length. [ 269.312563][ T9027] netlink: 'syz.2.1153': attribute type 10 has an invalid length. [ 269.475316][ T9029] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1154'. [ 269.749340][ T9041] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1157'. [ 270.174337][ T9043] netlink: 'syz.0.1159': attribute type 10 has an invalid length. [ 270.678802][ T9043] macvlan0: entered allmulticast mode [ 270.798207][ T9043] team0: Port device macvlan0 added [ 273.667497][ T9076] netlink: 'syz.3.1171': attribute type 39 has an invalid length. [ 274.658415][ T9099] netlink: 'syz.4.1181': attribute type 3 has an invalid length. [ 274.705155][ T9099] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1181'. [ 276.449412][ T9140] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1197'. [ 277.696027][ T9173] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1209'. [ 278.325307][ T9180] netlink: 'syz.1.1212': attribute type 10 has an invalid length. [ 278.520606][ T9180] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 278.638489][ T9180] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.815177][ T9190] netlink: 'syz.0.1216': attribute type 2 has an invalid length. [ 278.842783][ T9190] netlink: 'syz.0.1216': attribute type 8 has an invalid length. [ 278.872119][ T9190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1216'. [ 279.761142][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.769039][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.793535][ T9207] bridge0: left promiscuous mode [ 280.199888][ T9211] netlink: 'syz.3.1225': attribute type 16 has an invalid length. [ 280.222250][ T9211] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1225'. [ 280.636711][ T9224] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1230'. [ 281.380219][ T9240] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.388241][ T9240] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.441783][ T9240] bridge0: entered allmulticast mode [ 281.728237][ T9246] syzkaller0: entered promiscuous mode [ 281.753675][ T9246] syzkaller0: entered allmulticast mode [ 281.794468][ T9252] netlink: 'syz.1.1242': attribute type 3 has an invalid length. [ 281.807342][ T9252] netlink: 16142 bytes leftover after parsing attributes in process `syz.1.1242'. [ 282.579694][ T9269] netlink: 'syz.3.1249': attribute type 10 has an invalid length. [ 285.301862][ T9285] netlink: 'syz.0.1256': attribute type 10 has an invalid length. [ 285.512453][ T9285] veth0_vlan: left promiscuous mode [ 285.564688][ T9285] veth0_vlan: entered promiscuous mode [ 285.617339][ T9285] team0: Device veth0_vlan failed to register rx_handler [ 285.640068][ T9293] netlink: 'syz.1.1258': attribute type 46 has an invalid length. [ 285.779593][ T5168] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11 [ 286.533269][ T9314] netlink: 'syz.3.1269': attribute type 39 has an invalid length. [ 288.876771][ T9328] netlink: 'syz.0.1273': attribute type 46 has an invalid length. [ 293.092799][ T5168] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 293.764696][ T9365] netlink: 'syz.2.1286': attribute type 6 has an invalid length. [ 293.795683][ T9365] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1286'. [ 296.341375][ T9438] netlink: 'syz.4.1315': attribute type 39 has an invalid length. [ 297.326251][ T9464] wg2: entered promiscuous mode [ 297.350878][ T9464] wg2: entered allmulticast mode [ 297.609798][ T9469] syzkaller0: entered promiscuous mode [ 297.616748][ T9469] syzkaller0: entered allmulticast mode [ 297.778297][ T9477] netlink: 'syz.4.1330': attribute type 10 has an invalid length. [ 297.787837][ T9477] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1330'. [ 298.107608][ T9488] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1333'. [ 298.154419][ T9488] openvswitch: netlink: Message has 4 unknown bytes. [ 298.548147][ T9497] netlink: 'syz.4.1336': attribute type 46 has an invalid length. [ 298.877927][ T9504] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1338'. [ 300.161090][ T9529] netlink: 'syz.0.1349': attribute type 10 has an invalid length. [ 300.170837][ T9528] netlink: 'syz.1.1350': attribute type 11 has an invalid length. [ 300.192480][ T9528] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1350'. [ 300.211658][ T9532] netlink: 'syz.1.1350': attribute type 10 has an invalid length. [ 300.218636][ T9529] veth0_vlan: left promiscuous mode [ 300.250558][ T9529] veth0_vlan: entered promiscuous mode [ 300.307279][ T9529] team0: Device veth0_vlan failed to register rx_handler [ 300.475752][ T9532] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 300.520400][ T9532] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 300.561739][ T9526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.774966][ T9548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.275733][ T9574] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.1366'. [ 301.484904][ T9577] delete_channel: no stack [ 302.141342][ T9609] netlink: 'syz.0.1379': attribute type 39 has an invalid length. [ 302.175614][ T9606] netlink: 35840 bytes leftover after parsing attributes in process `syz.4.1378'. [ 302.508617][ T9619] netlink: 'syz.0.1381': attribute type 2 has an invalid length. [ 302.529148][ T9619] netlink: 137592 bytes leftover after parsing attributes in process `syz.0.1381'. [ 304.805927][ T9630] syzkaller0: entered promiscuous mode [ 304.822182][ T9630] syzkaller0: entered allmulticast mode [ 305.187742][ T9648] netlink: 'syz.1.1393': attribute type 21 has an invalid length. [ 305.203412][ T9648] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1393'. [ 305.219296][ T9648] netlink: 'syz.1.1393': attribute type 6 has an invalid length. [ 305.229780][ T9648] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1393'. [ 305.527318][ T9658] netlink: 'syz.3.1396': attribute type 46 has an invalid length. [ 306.906754][ T9679] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1406'. [ 307.562154][ T9694] netlink: 'syz.1.1411': attribute type 46 has an invalid length. [ 307.751523][ T9703] netlink: 'syz.4.1415': attribute type 2 has an invalid length. [ 307.770155][ T9703] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1415'. [ 307.784935][ T9703] nbd: must specify a device to reconfigure [ 307.791345][ T9704] netlink: 'syz.3.1414': attribute type 46 has an invalid length. [ 308.062805][ T9709] netlink: 'syz.1.1416': attribute type 25 has an invalid length. [ 308.077764][ T9709] netlink: 'syz.1.1416': attribute type 28 has an invalid length. [ 308.250349][ T9718] netlink: 'syz.2.1421': attribute type 21 has an invalid length. [ 308.630384][ T9725] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1422'. [ 309.087950][ T9740] lo: entered allmulticast mode [ 309.126231][ T9740] lo: entered promiscuous mode [ 309.131222][ T9740] lo: left allmulticast mode [ 309.216867][ T51] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 309.216919][ T51] Bluetooth: hci0: unexpected event for opcode 0x2064 [ 309.284916][ T9748] netlink: 'syz.2.1430': attribute type 39 has an invalid length. [ 310.426948][ T9782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.438566][ T9782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.449955][ T9782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.458630][ T9782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.487223][ T9782] batman_adv: batadv0: Removing interface: netdevsim0 [ 310.516289][ T9782] : (slave batadv0): Releasing backup interface [ 310.765928][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 310.775951][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 310.792362][ T9789] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1448'. [ 310.806432][ T9789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1448'. [ 310.822414][ T9789] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1448'. [ 310.954557][ T9798] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1450'. [ 312.622531][ T9828] netlink: 'syz.2.1461': attribute type 39 has an invalid length. [ 312.757488][ T9835] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 313.228914][ T9849] syz.2.1470: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 313.251047][ T9849] CPU: 1 UID: 0 PID: 9849 Comm: syz.2.1470 Not tainted 6.16.0-rc3-syzkaller-g03fe01ddd1d8 #0 PREEMPT(full) [ 313.251076][ T9849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.251101][ T9849] Call Trace: [ 313.251110][ T9849] [ 313.251119][ T9849] dump_stack_lvl+0x189/0x250 [ 313.251184][ T9849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.251211][ T9849] ? __pfx__printk+0x10/0x10 [ 313.251240][ T9849] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 313.251270][ T9849] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 313.251301][ T9849] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 313.251334][ T9849] warn_alloc+0x214/0x310 [ 313.251356][ T9849] ? stack_depot_save_flags+0x40/0x900 [ 313.251386][ T9849] ? __pfx_warn_alloc+0x10/0x10 [ 313.251411][ T9849] ? kasan_save_track+0x4f/0x80 [ 313.251443][ T9849] ? xskq_create+0x56/0x170 [ 313.251466][ T9849] ? xsk_init_queue+0xb0/0x110 [ 313.251486][ T9849] ? xsk_setsockopt+0x4de/0x710 [ 313.251505][ T9849] ? do_sock_setsockopt+0x25a/0x3e0 [ 313.251536][ T9849] ? __x64_sys_setsockopt+0x18b/0x220 [ 313.251572][ T9849] ? do_syscall_64+0xfa/0x3b0 [ 313.251598][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.251646][ T9849] __vmalloc_node_range_noprof+0x125/0x12f0 [ 313.251704][ T9849] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.251734][ T9849] ? __kasan_kmalloc+0x93/0xb0 [ 313.251771][ T9849] vmalloc_user_noprof+0xad/0xf0 [ 313.251792][ T9849] ? xskq_create+0xbf/0x170 [ 313.251817][ T9849] xskq_create+0xbf/0x170 [ 313.251846][ T9849] xsk_init_queue+0xb0/0x110 [ 313.251874][ T9849] xsk_setsockopt+0x4de/0x710 [ 313.251900][ T9849] ? __pfx_xsk_setsockopt+0x10/0x10 [ 313.251930][ T9849] ? aa_sock_opt_perm+0x74/0x110 [ 313.251957][ T9849] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 313.251981][ T9849] ? __pfx_xsk_setsockopt+0x10/0x10 [ 313.252005][ T9849] do_sock_setsockopt+0x25a/0x3e0 [ 313.252048][ T9849] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 313.252089][ T9849] ? __fget_files+0x2a/0x420 [ 313.252121][ T9849] __x64_sys_setsockopt+0x18b/0x220 [ 313.252172][ T9849] do_syscall_64+0xfa/0x3b0 [ 313.252198][ T9849] ? lockdep_hardirqs_on+0x9c/0x150 [ 313.252224][ T9849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.252245][ T9849] ? clear_bhb_loop+0x60/0xb0 [ 313.252271][ T9849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.252292][ T9849] RIP: 0033:0x7f321458e929 [ 313.252312][ T9849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.252329][ T9849] RSP: 002b:00007f321542a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 313.252352][ T9849] RAX: ffffffffffffffda RBX: 00007f32147b6080 RCX: 00007f321458e929 [ 313.252366][ T9849] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 313.252378][ T9849] RBP: 00007f3214610b39 R08: 0000000000000004 R09: 0000000000000000 [ 313.252391][ T9849] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 313.252403][ T9849] R13: 0000000000000000 R14: 00007f32147b6080 R15: 00007ffcf209fdd8 [ 313.252437][ T9849] [ 313.616190][ T9849] Mem-Info: [ 313.619381][ T9849] active_anon:12502 inactive_anon:0 isolated_anon:0 [ 313.619381][ T9849] active_file:20641 inactive_file:39913 isolated_file:0 [ 313.619381][ T9849] unevictable:768 dirty:336 writeback:0 [ 313.619381][ T9849] slab_reclaimable:10334 slab_unreclaimable:97731 [ 313.619381][ T9849] mapped:34246 shmem:6866 pagetables:1043 [ 313.619381][ T9849] sec_pagetables:0 bounce:0 [ 313.619381][ T9849] kernel_misc_reclaimable:0 [ 313.619381][ T9849] free:1304526 free_pcp:15075 free_cma:0 [ 313.742219][ T9854] netlink: 'syz.0.1473': attribute type 10 has an invalid length. [ 313.860585][ T9849] Node 0 active_anon:65408kB inactive_anon:0kB active_file:82564kB inactive_file:159444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:150980kB dirty:1340kB writeback:0kB shmem:41428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11444kB pagetables:4036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 313.906213][ T9859] netlink: 'syz.3.1471': attribute type 46 has an invalid length. [ 313.942741][ T9849] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 313.951493][ T9857] netlink: 'syz.0.1473': attribute type 25 has an invalid length. [ 314.029681][ T9857] netlink: 'syz.0.1473': attribute type 1 has an invalid length. [ 314.045754][ T9857] bridge0: port 1(bridge_slave_0) entered learning state [ 314.103466][ T9849] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 314.209315][ T9856] sit0: entered promiscuous mode [ 314.222393][ T9849] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 314.284896][ T9849] Node 0 DMA32 free:1273868kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:70320kB inactive_anon:0kB active_file:84264kB inactive_file:157872kB unevictable:1536kB writepending:1364kB present:3129332kB managed:2558348kB mlocked:0kB bounce:0kB free_pcp:41780kB local_pcp:16604kB free_cma:0kB [ 314.320237][ T9856] sit0: entered allmulticast mode [ 314.422210][ T9849] lowmem_reserve[]: 0 0 1 1 1 [ 314.432640][ T9849] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 314.552093][ T9849] lowmem_reserve[]: 0 0 0 0 0 [ 314.557026][ T9849] Node 1 Normal free:3903132kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17568kB local_pcp:6624kB free_cma:0kB [ 314.712748][ T9849] lowmem_reserve[]: 0 0 0 0 0 [ 314.717635][ T9849] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 314.837273][ T9849] Node 0 DMA32: 627*4kB (UE) 157*8kB (UE) 310*16kB (UE) 1052*32kB (UE) 1229*64kB (UME) 339*128kB (UME) 116*256kB (UM) 33*512kB (UM) 13*1024kB (UME) 3*2048kB (U) 252*4096kB (UM) = 1262676kB [ 314.910147][ T9849] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 314.953877][ T9849] Node 1 Normal: 205*4kB (UME) 61*8kB (UME) 52*16kB (UME) 152*32kB (UME) 43*64kB (UME) 3*128kB (ME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3903132kB [ 315.006302][ T9849] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.062010][ T9849] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.112440][ T9849] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 315.145489][ T9849] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 315.182067][ T9849] 73318 total pagecache pages [ 315.188633][ T9849] 0 pages in swap cache [ 315.202016][ T9849] Free swap = 124996kB [ 315.206374][ T9849] Total swap = 124996kB [ 315.221852][ T9849] 2097051 pages RAM [ 315.226993][ T9849] 0 pages HighMem/MovableOnly [ 315.231735][ T9849] 425422 pages reserved [ 315.237745][ T9849] 0 pages cma reserved [ 315.627389][ T9880] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1480'. [ 316.074856][ T9892] netlink: 'syz.2.1485': attribute type 46 has an invalid length. [ 317.126972][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.133390][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.068766][ T9931] netlink: 'syz.2.1497': attribute type 46 has an invalid length. [ 318.275331][ T9936] netlink: 'syz.0.1498': attribute type 29 has an invalid length. [ 318.311783][ T9937] netlink: 'syz.0.1498': attribute type 29 has an invalid length. [ 318.739395][ T9949] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 318.784195][ T9949] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 320.543075][ T51] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 321.184794][ T9999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1519'. [ 323.021532][ T51] Bluetooth: hci2: unexpected event 0x20 length: 15 > 7 [ 325.047997][ T51] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 325.404945][T10073] lo: entered allmulticast mode [ 325.457624][T10073] lo: entered promiscuous mode [ 325.475772][T10073] lo: left allmulticast mode [ 326.023332][T10088] netlink: 103612 bytes leftover after parsing attributes in process `syz.4.1555'. [ 326.390111][T10095] syzkaller0: entered promiscuous mode [ 326.403266][T10095] syzkaller0: entered allmulticast mode [ 327.642654][T10111] bridge0: entered allmulticast mode [ 327.679284][T10116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.687536][T10116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.733866][T10116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.754038][T10116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.814916][T10116] batman_adv: batadv0: Interface deactivated: wlan0 [ 327.821664][T10116] batman_adv: batadv0: Removing interface: wlan0 [ 327.878521][T10121] netlink: 'syz.1.1568': attribute type 10 has an invalid length. [ 327.911650][T10121] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1568'. [ 328.871387][T10144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.888178][T10143] netlink: 'syz.4.1576': attribute type 10 has an invalid length. [ 328.978075][T10139] delete_channel: no stack [ 329.015335][T10149] netlink: 'syz.3.1580': attribute type 3 has an invalid length. [ 329.023772][T10149] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 329.031781][T10149] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1580'. [ 329.105213][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 329.114060][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 329.122041][ T5168] Bluetooth: hci1: hardware error 0x00 [ 329.237455][T10153] netlink: 'syz.1.1581': attribute type 10 has an invalid length. [ 329.249738][T10153] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1581'. [ 329.620742][T10164] netlink: 'syz.3.1586': attribute type 10 has an invalid length. [ 330.934119][T10202] netlink: 'syz.0.1601': attribute type 9 has an invalid length. [ 331.151971][T10196] delete_channel: no stack [ 331.187470][ T5168] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 333.752576][T10235] netlink: 'syz.0.1614': attribute type 7 has an invalid length. [ 333.828247][T10240] netlink: 'syz.4.1616': attribute type 10 has an invalid length. [ 333.873126][T10239] netlink: 'syz.1.1615': attribute type 4 has an invalid length. [ 333.908120][T10239] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1615'. [ 333.909097][T10243] netlink: 'syz.4.1616': attribute type 10 has an invalid length. [ 333.929385][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.937322][T10243] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1616'. [ 333.964518][T10240] : (slave batadv0): Enslaving as an active interface with an up link [ 333.988462][T10243] batadv0: entered promiscuous mode [ 334.004412][T10243] batadv0: entered allmulticast mode [ 334.046792][T10243] : (slave batadv0): Releasing backup interface [ 334.063450][T10243] bridge0: port 3(batadv0) entered blocking state [ 334.088621][T10243] bridge0: port 3(batadv0) entered disabled state [ 334.327909][ T2994] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 334.337779][ T2994] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 334.374328][T10256] netlink: 'syz.3.1621': attribute type 39 has an invalid length. [ 334.689476][T10269] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1629'. [ 335.479030][T10298] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.708071][T10309] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1645'. [ 336.059915][T10321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1650'. [ 336.097384][T10321] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.215310][T10321] bridge_slave_0 (unregistering): left allmulticast mode [ 336.236179][T10321] bridge_slave_0 (unregistering): left promiscuous mode [ 336.250995][T10321] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.684119][T10353] syzkaller0: entered promiscuous mode [ 337.710962][T10353] syzkaller0: entered allmulticast mode [ 338.855279][T10385] netlink: 'syz.3.1672': attribute type 10 has an invalid length. [ 338.869974][T10385] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1672'. [ 343.926808][T10481] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1709'. [ 344.658578][T10484] delete_channel: no stack [ 344.731673][T10493] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1712'. [ 344.915070][T10498] netlink: 'syz.1.1714': attribute type 10 has an invalid length. [ 344.936344][T10498] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1714'. [ 345.530009][T10513] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 346.113892][T10518] netlink: 'syz.2.1720': attribute type 46 has an invalid length. [ 346.560552][T10527] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1723'. [ 347.034394][T10544] netlink: 'syz.4.1729': attribute type 10 has an invalid length. [ 347.071716][T10544] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1729'. [ 348.563868][T10573] netlink: 'syz.3.1738': attribute type 10 has an invalid length. [ 348.615642][T10573] bridge0: port 3(netdevsim0) entered blocking state [ 348.644978][T10573] bridge0: port 3(netdevsim0) entered disabled state [ 348.655882][T10573] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 348.666952][T10573] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 349.612698][T10590] cgroup: fork rejected by pids controller in /syz2 [ 350.299621][T10608] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 350.326473][T10608] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1754'. [ 351.323321][T10631] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1763'. [ 351.448472][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.465366][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.476347][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.485294][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.495406][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 352.011594][T10633] chnl_net:caif_netlink_parms(): no params data found [ 352.268116][T10660] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1769'. [ 352.499765][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.511392][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.520811][T10633] bridge_slave_0: entered allmulticast mode [ 352.535070][T10633] bridge_slave_0: entered promiscuous mode [ 352.544624][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.552212][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.559539][T10633] bridge_slave_1: entered allmulticast mode [ 352.568172][T10633] bridge_slave_1: entered promiscuous mode [ 352.799180][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.813215][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.976192][T10633] team0: Port device team_slave_0 added [ 353.001662][T10633] team0: Port device team_slave_1 added [ 353.114112][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.124422][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.167840][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.196711][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.209181][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.238028][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.347980][T10633] hsr_slave_0: entered promiscuous mode [ 353.354923][T10633] hsr_slave_1: entered promiscuous mode [ 353.463222][T10685] netlink: 'syz.4.1779': attribute type 10 has an invalid length. [ 353.517057][T10685] macvlan0: entered allmulticast mode [ 353.540435][T10685] veth1_vlan: entered allmulticast mode [ 353.553948][T10685] team0: Port device macvlan0 added [ 353.555706][T10689] netlink: 'syz.3.1780': attribute type 10 has an invalid length. [ 353.572172][T10689] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1780'. [ 353.592299][ T5168] Bluetooth: hci1: command tx timeout [ 353.724417][T10633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.844690][T10633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.018464][T10633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.146353][T10633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.359452][T10633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 354.376117][T10633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 354.388413][T10633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.418890][T10633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.597318][T10633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.632836][T10633] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.667149][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.674488][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.701828][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.709083][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.786326][ T3007] wlan1: Trigger new scan to find an IBSS to join [ 354.914116][T10725] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1791'. [ 355.304186][T10741] netlink: 'syz.1.1794': attribute type 10 has an invalid length. [ 355.463369][T10633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.635662][T10633] veth0_vlan: entered promiscuous mode [ 355.667576][ T5168] Bluetooth: hci1: command tx timeout [ 355.681649][T10633] veth1_vlan: entered promiscuous mode [ 355.713496][T10633] veth0_macvtap: entered promiscuous mode [ 355.724996][T10633] veth1_macvtap: entered promiscuous mode [ 355.749269][T10633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.876160][T10633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.988902][T10633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.064000][T10633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.085508][T10633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.094358][T10633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.436953][ T2962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.481841][ T2962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.549281][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.568716][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.634710][T10762] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1805'. [ 356.644997][T10762] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 357.742358][ T5168] Bluetooth: hci1: command tx timeout [ 357.952180][T10790] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1814'. [ 358.150088][T10795] netlink: 'syz.0.1814': attribute type 10 has an invalid length. [ 358.209483][T10795] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1814'. [ 358.621357][T10806] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1815'. [ 358.782700][ T36] wlan1: Trigger new scan to find an IBSS to join [ 359.593995][T10830] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 359.824497][ T5168] Bluetooth: hci1: command tx timeout [ 359.830497][ T2962] wlan1: Creating new IBSS network, BSSID b6:91:56:11:1a:21 [ 359.889902][T10838] netlink: 1057 bytes leftover after parsing attributes in process `syz.4.1827'. [ 359.940478][T10838] netlink: 'syz.4.1827': attribute type 10 has an invalid length. [ 359.950333][T10844] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.1830'. [ 360.019800][T10846] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1829'. [ 360.514201][T10864] netlink: 'syz.0.1837': attribute type 10 has an invalid length. [ 360.587671][T10864] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1837'. [ 361.107705][T10864] team0: Port device macvlan0 removed [ 361.714136][ T5168] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 362.239571][T10905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1851'. [ 362.281473][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.548279][T10905] bridge_slave_0 (unregistering): left allmulticast mode [ 362.567904][T10905] bridge_slave_0 (unregistering): left promiscuous mode [ 362.611723][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.937517][T10920] netlink: 'syz.0.1858': attribute type 10 has an invalid length. [ 363.053031][T10920] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 363.061130][T10920] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 363.070754][ T13] wlan1: Selected IBSS BSSID b6:91:56:11:1a:21 based on configured SSID [ 363.180966][T10928] netlink: 'syz.4.1861': attribute type 10 has an invalid length. [ 363.749534][T10938] netlink: 'syz.4.1866': attribute type 10 has an invalid length. [ 364.228421][T10952] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1869'. [ 365.049282][T10966] sctp: [Deprecated]: syz.3.1875 (pid 10966) Use of int in max_burst socket option deprecated. [ 365.049282][T10966] Use struct sctp_assoc_value instead [ 366.198575][T10982] netlink: 'syz.4.1883': attribute type 10 has an invalid length. [ 366.231784][T10982] netdevsim netdevsim4 ªªªªªª: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.241649][T10982] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.265928][T10982] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.279233][T10982] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.296525][T10982] geneve0: entered promiscuous mode [ 366.534215][T10982] netdevsim netdevsim4 ªªªªªª: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.647699][T10982] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.683813][T10982] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.696459][T10982] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.761712][T10982] : (slave geneve0): Enslaving as an active interface with an up link [ 366.821989][T10992] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1884'. [ 366.836517][T10994] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1884'. [ 367.152807][T11003] batadv_slave_1: left allmulticast mode [ 367.186705][T11003] bridge0: port 3(batadv_slave_1) entered disabled state [ 367.380591][T11003] bridge_slave_1: left allmulticast mode [ 367.386929][T11003] bridge_slave_1: left promiscuous mode [ 367.394735][T11003] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.520520][T11003] bridge_slave_0: left promiscuous mode [ 367.564688][T11003] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.609397][T11015] netlink: 'syz.0.1892': attribute type 3 has an invalid length. [ 367.617520][T11015] netlink: 'syz.0.1892': attribute type 1 has an invalid length. [ 367.629232][T11015] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1892'. [ 367.871021][T11011] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 368.226487][T11025] mac80211_hwsim hwsim17 4: renamed from wlan1 (while UP) [ 368.266357][T11028] netlink: 'syz.0.1899': attribute type 39 has an invalid length. [ 368.381237][T11025] netlink: 'syz.2.1898': attribute type 10 has an invalid length. [ 368.438233][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.633921][T11025] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.642345][T11025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.730150][T11040] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1903'. [ 368.769275][T11025] team0: Port device bridge0 added [ 368.818692][T11042] netlink: 'syz.1.1902': attribute type 10 has an invalid length. [ 368.877471][T11040] bridge_slave_0 (unregistering): left allmulticast mode [ 368.885655][T11040] bridge_slave_0 (unregistering): left promiscuous mode [ 368.893737][T11040] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.979624][T11042] veth1_macvtap: left promiscuous mode [ 369.447124][T11054] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 370.343847][T11077] netlink: 'syz.4.1916': attribute type 10 has an invalid length. [ 370.385018][T11079] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1917'. [ 370.446723][T11077] bridge0: port 1(ªªªªªª) entered blocking state [ 370.460434][T11077] bridge0: port 1(ªªªªªª) entered disabled state [ 370.468242][T11077] netdevsim netdevsim4 ªªªªªª: entered allmulticast mode [ 370.489240][T11077] netdevsim netdevsim4 ªªªªªª: entered promiscuous mode [ 370.516890][T11079] netlink: 22 bytes leftover after parsing attributes in process `syz.3.1917'. [ 371.280745][T11101] delete_channel: no stack [ 371.823093][ T13] wlan1: Trigger new scan to find an IBSS to join [ 371.829664][ T2962] wlan1: Trigger new scan to find an IBSS to join [ 373.528009][T11141] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 373.545602][T11141] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.569546][T11141] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.612073][T11141] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.644195][T11141] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.682765][T11141] geneve0: entered promiscuous mode [ 373.810905][T11141] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.882381][T11141] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.910064][T11141] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.919715][T11141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.970500][T11141] : (slave geneve0): Enslaving as an active interface with an up link [ 374.152473][T11156] sit0: entered promiscuous mode [ 374.157730][T11156] sit0: entered allmulticast mode [ 374.891797][ T13] wlan1: Trigger new scan to find an IBSS to join [ 374.894765][ T2962] wlan1: Trigger new scan to find an IBSS to join [ 375.725361][T11190] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 375.759175][T11190] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1959'. [ 375.951360][ T2994] wlan1: Creating new IBSS network, BSSID 3e:07:82:7a:2f:43 [ 376.222308][T11201] netlink: 'syz.0.1963': attribute type 10 has an invalid length. [ 376.831648][T11214] netlink: 'syz.3.1968': attribute type 39 has an invalid length. [ 377.037650][T11201] team0 (unregistering): Port device team_slave_0 removed [ 377.127873][T11201] team0 (unregistering): Port device team_slave_1 removed [ 377.676516][T11201] team0 (unregistering): Port device geneve1 removed [ 377.831123][ T3007] wlan1: Creating new IBSS network, BSSID 92:76:52:a7:ba:5f [ 378.415327][T11231] netlink: 'syz.0.1972': attribute type 12 has an invalid length. [ 378.423426][T11231] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1972'. [ 378.560252][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.566727][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.019755][T11259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1982'. [ 380.316755][T11260] netlink: 'syz.1.1982': attribute type 7 has an invalid length. [ 380.377235][T11261] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1982'. [ 382.182382][T11267] netlink: 'syz.4.1986': attribute type 49 has an invalid length. [ 382.513292][T11275] netlink: 'syz.3.1991': attribute type 10 has an invalid length. [ 382.552647][T11275] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.576019][T11275] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.625093][T11275] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.653437][T11275] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.338217][T11294] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1987'. [ 383.569586][T11301] netlink: 'syz.3.1999': attribute type 29 has an invalid length. [ 383.589913][T11301] netlink: 'syz.3.1999': attribute type 29 has an invalid length. [ 383.623851][T11305] netlink: 'syz.2.2001': attribute type 49 has an invalid length. [ 383.709453][T11301] netlink: 'syz.3.1999': attribute type 29 has an invalid length. [ 383.838285][T11305] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2001'. [ 383.891253][T11313] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2003'. [ 384.186756][T11320] netlink: 'syz.0.2006': attribute type 9 has an invalid length. [ 384.194867][T11320] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.2006'. [ 385.544209][T11346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2016'. [ 385.701849][T11346] bridge_slave_0 (unregistering): left allmulticast mode [ 385.714462][T11346] bridge_slave_0 (unregistering): left promiscuous mode [ 385.721914][T11346] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.776814][T11350] netlink: 'syz.2.2018': attribute type 10 has an invalid length. [ 385.842691][T11350] bond0: (slave bond_slave_0): Releasing backup interface [ 386.038755][T11364] netlink: 'syz.0.2022': attribute type 9 has an invalid length. [ 386.064839][T11364] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.2022'. [ 386.303634][T11375] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2021'. [ 386.338418][T11378] netlink: 'syz.3.2023': attribute type 10 has an invalid length. [ 386.388379][T11378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2023'. [ 387.957342][T11399] netlink: 'syz.2.2031': attribute type 10 has an invalid length. [ 388.011332][T11399] geneve0: entered promiscuous mode [ 388.077473][T11399] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 390.792300][ T2962] wlan1: Trigger new scan to find an IBSS to join [ 391.443150][T11470] netlink: 'syz.2.2055': attribute type 9 has an invalid length. [ 391.451233][T11470] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.2055'. [ 391.981711][T11487] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2062'. [ 392.116463][T11485] netlink: 'syz.3.2059': attribute type 10 has an invalid length. [ 393.049297][T11508] netlink: 'syz.1.2069': attribute type 9 has an invalid length. [ 393.081104][T11508] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.2069'. [ 393.337970][T11513] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2072'. [ 393.482688][T11516] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 393.593779][T11522] netlink: 'syz.4.2076': attribute type 21 has an invalid length. [ 393.614219][T11522] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2076'. [ 393.671635][T11522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2076'. [ 394.465180][T11544] bridge_slave_1: left allmulticast mode [ 394.517415][T11544] bridge_slave_1: left promiscuous mode [ 394.577101][T11544] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.784932][ T12] wlan1: Trigger new scan to find an IBSS to join [ 395.266240][T11544] team0: Port device bridge0 removed [ 395.521287][T11560] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2088'. [ 396.678521][T11602] netlink: 'syz.1.2104': attribute type 10 has an invalid length. [ 396.701066][T11602] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2104'. [ 396.757090][T11602] batadv0: entered allmulticast mode [ 396.782145][ T12] wlan1: Creating new IBSS network, BSSID 4a:d9:7a:76:75:37 [ 396.795749][T11602] bond0: (slave batadv0): Releasing backup interface [ 396.843960][T11602] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 396.861166][T11603] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2105'. [ 397.387334][T11623] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2112'. [ 397.407455][T11623] netlink: zone id is out of range [ 397.414646][T11623] netlink: zone id is out of range [ 397.439500][T11623] netlink: zone id is out of range [ 397.463292][T11623] netlink: zone id is out of range [ 397.482310][T11623] netlink: zone id is out of range [ 397.499655][T11623] netlink: zone id is out of range [ 397.519498][T11623] netlink: zone id is out of range [ 397.534522][T11623] netlink: zone id is out of range [ 398.786688][T11661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2125'. [ 399.772376][T11694] netlink: 'syz.3.2137': attribute type 6 has an invalid length. [ 399.788302][T11694] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2137'. [ 399.996204][T11699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2139'. [ 402.478384][T11748] netlink: 'syz.4.2154': attribute type 4 has an invalid length. [ 402.572651][T11748] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2154'. [ 402.736645][T11748] net_ratelimit: 77 callbacks suppressed [ 402.736682][T11748] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 404.726426][T11786] netlink: 'syz.2.2179': attribute type 49 has an invalid length. [ 405.549216][ T5168] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 405.723508][T11804] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2174'. [ 406.064377][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.254395][T11819] netlink: 'syz.4.2180': attribute type 10 has an invalid length. [ 407.449586][T11819] team0: Device dummy0 is up. Set it down before adding it as a team port [ 408.010376][T11839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2187'. [ 408.134189][T11842] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.2189'. [ 408.206506][T11844] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2190'. [ 408.281239][T11848] netlink: 'syz.4.2191': attribute type 39 has an invalid length. [ 408.319896][T11844] netlink: 6328 bytes leftover after parsing attributes in process `syz.2.2190'. [ 408.341902][T11850] netlink: 'syz.3.2192': attribute type 10 has an invalid length. [ 408.787117][T11850] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 408.863277][T11850] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 408.888449][T11850] bridge0: port 3(netdevsim0) entered disabled state [ 408.957412][T11850] : (slave netdevsim0): Enslaving as an active interface with an up link [ 410.218110][T11887] netlink: 'syz.1.2206': attribute type 9 has an invalid length. [ 410.236682][T11887] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.2206'. [ 411.335980][T11906] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 412.522740][T11930] netlink: 'syz.0.2222': attribute type 2 has an invalid length. [ 412.530739][T11930] netlink: 'syz.0.2222': attribute type 8 has an invalid length. [ 412.545616][T11930] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2222'. [ 413.210810][T11940] delete_channel: no stack [ 413.415755][T11949] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2230'. [ 413.526151][T11949] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 413.696074][T11958] netlink: 'syz.4.2234': attribute type 2 has an invalid length. [ 413.720617][T11958] netlink: 'syz.4.2234': attribute type 1 has an invalid length. [ 413.743787][T11958] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2234'. [ 413.833040][ T59] wlan1: Trigger new scan to find an IBSS to join [ 414.264718][T11978] netlink: 'syz.2.2242': attribute type 33 has an invalid length. [ 414.289865][T11981] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 414.296835][T11981] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 414.997513][T11997] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2247'. [ 415.456431][T11997] netlink: 'syz.4.2247': attribute type 10 has an invalid length. [ 415.502156][T11997] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2247'. [ 418.043436][T12066] netlink: 149044 bytes leftover after parsing attributes in process `syz.2.2270'. [ 418.880739][ T12] wlan1: Trigger new scan to find an IBSS to join [ 418.952807][ T5168] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 419.246521][T12106] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 419.705440][T12117] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.2287'. [ 419.878463][ T2962] wlan1: Creating new IBSS network, BSSID 7a:bb:55:ea:15:63 [ 419.907774][T12129] netlink: 'syz.1.2292': attribute type 10 has an invalid length. [ 419.944781][T12129] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2292'. [ 419.964739][T12129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.031244][T12133] netlink: 'syz.4.2294': attribute type 39 has an invalid length. [ 421.032898][T12158] netlink: 'syz.3.2302': attribute type 10 has an invalid length. [ 421.102235][T12158] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2302'. [ 422.077809][T12184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 422.085113][T12184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 422.598612][T12196] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2315'. [ 423.252634][T12212] sit0: entered allmulticast mode [ 423.919044][T12222] sctp: [Deprecated]: syz.1.2323 (pid 12222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.919044][T12222] Use struct sctp_sack_info instead [ 425.057084][T12247] netlink: 'syz.1.2331': attribute type 39 has an invalid length. [ 425.713946][T12264] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2339'. [ 426.944378][ T5168] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 426.953303][ T5168] Bluetooth: hci1: Injecting HCI hardware error event [ 426.961615][ T5168] Bluetooth: hci1: hardware error 0x00 [ 427.260345][T12288] netlink: 'syz.1.2349': attribute type 2 has an invalid length. [ 427.763792][T12293] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2351'. [ 427.882711][T12295] netlink: 'syz.1.2352': attribute type 9 has an invalid length. [ 427.890629][T12295] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.2352'. [ 428.363025][T12311] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.2356'. [ 429.029207][ T5168] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 429.068858][T12328] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2365'. [ 429.233991][T12333] netlink: 'syz.0.2367': attribute type 9 has an invalid length. [ 429.249731][T12333] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.2367'. [ 430.449863][T12364] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2379'. [ 431.006179][T12377] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2385'. [ 431.364045][T12385] netlink: 'syz.4.2387': attribute type 2 has an invalid length. [ 431.405518][T12388] netlink: 'syz.2.2388': attribute type 10 has an invalid length. [ 431.474915][T12388] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 431.705089][T12399] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2392'. [ 432.113556][T12395] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.2390'. [ 432.173805][T12410] netlink: 'syz.4.2396': attribute type 9 has an invalid length. [ 432.219898][T12410] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.2396'. [ 433.815408][T12447] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2408'. [ 435.573359][T12463] netlink: 'syz.1.2413': attribute type 39 has an invalid length. [ 437.108980][T12500] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2425'. [ 437.248376][T12499] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2423'. [ 437.338189][T12499] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 437.365892][T12503] sock: sock_timestamping_bind_phc: sock not bind to device [ 438.524392][T12527] sock: sock_timestamping_bind_phc: sock not bind to device [ 438.858592][T12536] netlink: 'syz.4.2435': attribute type 10 has an invalid length. [ 438.872369][T12536] netdevsim netdevsim4 ªªªªªª: left allmulticast mode [ 438.879409][T12536] netdevsim netdevsim4 ªªªªªª: left promiscuous mode [ 438.933040][T12536] bridge0: port 1(ªªªªªª) entered disabled state [ 439.052181][T12536] : (slave ªªªªªª): Enslaving as an active interface with an up link [ 439.950106][T12551] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2442'. [ 439.987498][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.994203][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.702986][T12570] netlink: 'syz.2.2451': attribute type 39 has an invalid length. [ 440.702997][T12569] netlink: 'syz.0.2450': attribute type 39 has an invalid length. [ 441.927844][T12583] netlink: 'syz.1.2455': attribute type 2 has an invalid length. [ 443.442845][T12591] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.2456'. [ 444.845751][T12620] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 445.664267][T12630] netlink: 'syz.1.2471': attribute type 2 has an invalid length. [ 445.689805][T12630] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2471'. [ 449.169707][T12704] sit0: entered allmulticast mode [ 449.801394][T12707] netlink: 14975 bytes leftover after parsing attributes in process `syz.2.2506'. [ 450.526336][T12720] netlink: 'syz.0.2500': attribute type 21 has an invalid length. [ 450.989169][T12728] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2502'. [ 451.416236][T12736] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.2504'. [ 452.006813][T12751] wg2: left promiscuous mode [ 452.011508][T12751] wg2: left allmulticast mode [ 452.076448][T12755] wg2: entered promiscuous mode [ 452.131642][T12755] wg2: entered allmulticast mode [ 452.619323][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 453.063022][T12772] netlink: 'syz.3.2519': attribute type 9 has an invalid length. [ 453.071174][T12772] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.2519'. [ 454.095261][T12797] netlink: 'syz.0.2528': attribute type 9 has an invalid length. [ 454.126297][T12797] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.2528'. [ 454.264739][T12800] netlink: 'syz.2.2526': attribute type 17 has an invalid length. [ 454.288943][T12800] netlink: 'syz.2.2526': attribute type 16 has an invalid length. [ 454.306983][T12800] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2526'. [ 454.695994][T12805] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2530'. [ 454.996510][T12813] netlink: 'syz.3.2534': attribute type 9 has an invalid length. [ 455.015267][T12813] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.2534'. [ 455.031846][T12811] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 456.650284][T12850] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2545'. [ 456.836540][T12857] netlink: 'syz.1.2547': attribute type 6 has an invalid length. [ 456.895706][T12857] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2547'. [ 458.842465][T12896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2560'. [ 464.704692][T12985] netlink: 'syz.3.2590': attribute type 29 has an invalid length. [ 464.728827][T12985] netlink: 'syz.3.2590': attribute type 29 has an invalid length. [ 464.756929][T12983] netlink: 'syz.3.2590': attribute type 29 has an invalid length. [ 465.078145][T12997] netlink: 'syz.1.2594': attribute type 9 has an invalid length. [ 465.086502][T12997] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.2594'. [ 465.341527][T13007] netlink: 'syz.3.2593': attribute type 17 has an invalid length. [ 465.407359][T13007] netlink: 'syz.3.2593': attribute type 16 has an invalid length. [ 465.422283][T13007] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2593'. [ 466.393358][T13037] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2608'. [ 466.760414][T13047] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2607'. [ 466.770641][T13047] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 467.191784][T13055] @ÿ: renamed from bond_slave_0 [ 467.341190][T13060] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2615'. [ 467.754263][T13078] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2623'. [ 469.144541][T13122] netlink: 'syz.3.2634': attribute type 6 has an invalid length. [ 469.168189][T13122] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2634'. [ 469.720518][T13135] netlink: 'syz.1.2641': attribute type 17 has an invalid length. [ 469.752335][T13135] netlink: 'syz.1.2641': attribute type 16 has an invalid length. [ 469.780704][T13135] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2641'. [ 470.321905][T13152] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2647'. [ 473.800582][T13236] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.2671'. [ 474.801424][T13256] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2681'. [ 475.217977][T13266] netlink: 'syz.2.2683': attribute type 10 has an invalid length. [ 475.294397][T13266] team0: Device ipvlan1 failed to register rx_handler [ 475.379539][T13268] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.391061][T13293] netlink: 'syz.4.2692': attribute type 39 has an invalid length. [ 478.738686][T13355] netlink: 'syz.2.2712': attribute type 9 has an invalid length. [ 478.750180][T13355] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.2712'. [ 479.366542][T13373] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2717'. [ 479.980053][T13389] netlink: 'syz.3.2723': attribute type 10 has an invalid length. [ 482.566554][T13429] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2736'. [ 482.595043][T13429] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 483.313075][ T5168] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 483.547123][T13454] netlink: 'syz.1.2744': attribute type 10 has an invalid length. [ 483.558366][T13454] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2744'. [ 485.346500][ T5168] Bluetooth: hci2: command tx timeout [ 486.057871][T13519] netlink: 'syz.3.2764': attribute type 10 has an invalid length. [ 486.087408][T13519] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2764'. [ 486.454916][T13528] netlink: 'syz.0.2767': attribute type 9 has an invalid length. [ 486.508397][T13528] netlink: 49779 bytes leftover after parsing attributes in process `syz.0.2767'. [ 486.829590][T13547] netlink: 'syz.3.2771': attribute type 10 has an invalid length. [ 486.983565][T13550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.030232][T13550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.103624][T13550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.148056][T13550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.089153][T13567] netlink: 'syz.3.2778': attribute type 10 has an invalid length. [ 488.128618][T13567] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2778'. [ 488.326990][T13576] netlink: 'syz.0.2781': attribute type 10 has an invalid length. [ 488.353315][T13576] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2781'. [ 488.384087][T13578] netlink: 'syz.1.2782': attribute type 9 has an invalid length. [ 488.416035][T13578] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.2782'. [ 489.727797][T13607] netlink: 'syz.2.2793': attribute type 10 has an invalid length. [ 489.765161][T13607] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2793'. [ 490.322997][T13628] syz.1.2800: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 490.338705][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.1.2800 Not tainted 6.16.0-rc3-syzkaller-g03fe01ddd1d8 #0 PREEMPT(full) [ 490.338733][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.338752][T13628] Call Trace: [ 490.338761][T13628] [ 490.338770][T13628] dump_stack_lvl+0x189/0x250 [ 490.338803][T13628] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.338831][T13628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.338878][T13628] warn_alloc+0x214/0x310 [ 490.338901][T13628] ? stack_depot_save_flags+0x40/0x900 [ 490.338932][T13628] ? __pfx_warn_alloc+0x10/0x10 [ 490.338957][T13628] ? kasan_save_track+0x4f/0x80 [ 490.338989][T13628] ? xskq_create+0x56/0x170 [ 490.339012][T13628] ? xsk_init_queue+0xb0/0x110 [ 490.339033][T13628] ? xsk_setsockopt+0x4de/0x710 [ 490.339053][T13628] ? do_sock_setsockopt+0x25a/0x3e0 [ 490.339083][T13628] ? __x64_sys_setsockopt+0x18b/0x220 [ 490.339113][T13628] ? do_syscall_64+0xfa/0x3b0 [ 490.339138][T13628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.339168][T13628] __vmalloc_node_range_noprof+0x125/0x12f0 [ 490.339224][T13628] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 490.339254][T13628] ? __kasan_kmalloc+0x93/0xb0 [ 490.339289][T13628] vmalloc_user_noprof+0xad/0xf0 [ 490.339309][T13628] ? xskq_create+0xbf/0x170 [ 490.339335][T13628] xskq_create+0xbf/0x170 [ 490.339363][T13628] xsk_init_queue+0xb0/0x110 [ 490.339390][T13628] xsk_setsockopt+0x4de/0x710 [ 490.339416][T13628] ? __pfx_xsk_setsockopt+0x10/0x10 [ 490.339446][T13628] ? aa_sock_opt_perm+0x74/0x110 [ 490.339483][T13628] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 490.339506][T13628] ? __pfx_xsk_setsockopt+0x10/0x10 [ 490.339529][T13628] do_sock_setsockopt+0x25a/0x3e0 [ 490.339564][T13628] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 490.339608][T13628] ? __fget_files+0x2a/0x420 [ 490.339638][T13628] __x64_sys_setsockopt+0x18b/0x220 [ 490.339677][T13628] do_syscall_64+0xfa/0x3b0 [ 490.339705][T13628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.339723][T13628] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 490.339743][T13628] ? clear_bhb_loop+0x60/0xb0 [ 490.339767][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.339792][T13628] RIP: 0033:0x7efc1c98e929 [ 490.339809][T13628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.339827][T13628] RSP: 002b:00007efc1d889038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 490.339847][T13628] RAX: ffffffffffffffda RBX: 00007efc1cbb5fa0 RCX: 00007efc1c98e929 [ 490.339862][T13628] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 490.339874][T13628] RBP: 00007efc1ca10b39 R08: 0000000000000004 R09: 0000000000000000 [ 490.339886][T13628] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 490.339902][T13628] R13: 0000000000000000 R14: 00007efc1cbb5fa0 R15: 00007ffc7db64958 [ 490.339933][T13628] [ 490.340118][T13628] Mem-Info: [ 490.682502][T13628] active_anon:9965 inactive_anon:0 isolated_anon:0 [ 490.682502][T13628] active_file:21087 inactive_file:39989 isolated_file:0 [ 490.682502][T13628] unevictable:768 dirty:378 writeback:0 [ 490.682502][T13628] slab_reclaimable:10586 slab_unreclaimable:100141 [ 490.682502][T13628] mapped:29237 shmem:1359 pagetables:1064 [ 490.682502][T13628] sec_pagetables:0 bounce:0 [ 490.682502][T13628] kernel_misc_reclaimable:0 [ 490.682502][T13628] free:1300950 free_pcp:16428 free_cma:0 [ 490.746387][T13628] Node 0 active_anon:39960kB inactive_anon:0kB active_file:84348kB inactive_file:159748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116948kB dirty:1512kB writeback:0kB shmem:3900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11356kB pagetables:4092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 490.911094][T13628] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 491.037893][T13628] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 491.354725][T13628] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 491.361170][T13628] Node 0 DMA32 free:1285408kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:39512kB inactive_anon:0kB active_file:84348kB inactive_file:158176kB unevictable:1536kB writepending:1520kB present:3129332kB managed:2558348kB mlocked:0kB bounce:0kB free_pcp:48332kB local_pcp:27588kB free_cma:0kB [ 491.475884][T13628] lowmem_reserve[]: 0 0 1 1 1 [ 491.491577][T13628] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 491.598488][T13628] lowmem_reserve[]: 0 0 0 0 0 [ 491.633660][T13628] Node 1 Normal free:3905436kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15232kB local_pcp:10176kB free_cma:0kB [ 491.687812][T13628] lowmem_reserve[]: 0 0 0 0 0 [ 491.696626][T13628] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 491.712858][T13628] Node 0 DMA32: 1336*4kB (UME) 1134*8kB (UME) 985*16kB (UME) 783*32kB (UME) 978*64kB (UM) 497*128kB (UME) 200*256kB (UME) 81*512kB (UME) 30*1024kB (UME) 5*2048kB (UM) 237*4096kB (UM) = 1285824kB [ 491.740505][T13628] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 491.757546][T13628] Node 1 Normal: 205*4kB (UME) 61*8kB (UME) 52*16kB (UME) 198*32kB (UME) 52*64kB (UME) 5*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3905436kB [ 491.778984][T13628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.793728][T13644] netlink: 'syz.2.2805': attribute type 9 has an invalid length. [ 491.808855][T13644] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2805'. [ 491.819473][T13628] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.834715][T13628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 491.847553][T13628] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 491.859155][T13628] 62434 total pagecache pages [ 491.866765][T13628] 0 pages in swap cache [ 491.871247][T13628] Free swap = 124996kB [ 491.875919][T13628] Total swap = 124996kB [ 491.880178][T13628] 2097051 pages RAM [ 491.886639][T13628] 0 pages HighMem/MovableOnly [ 491.891405][T13628] 425422 pages reserved [ 491.899405][T13628] 0 pages cma reserved [ 492.070607][T13647] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 492.077192][T13647] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 492.355495][T13656] netlink: 'syz.0.2808': attribute type 10 has an invalid length. [ 492.382410][T13656] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2808'. [ 493.877302][T13701] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2823'. [ 494.140333][T13710] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2827'. [ 494.156955][T13710] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 494.177280][T13710] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 495.564671][T13737] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2836'. [ 496.297924][T13752] netlink: 495 bytes leftover after parsing attributes in process `syz.3.2839'. [ 496.305975][T13754] netlink: 'syz.1.2840': attribute type 9 has an invalid length. [ 496.338597][T13754] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2840'. [ 497.898408][T13803] netlink: 'syz.2.2856': attribute type 9 has an invalid length. [ 497.910429][T13803] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2856'. [ 500.944360][T13874] netlink: 'syz.2.2880': attribute type 9 has an invalid length. [ 500.952366][T13874] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.2880'. [ 501.443961][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.451110][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.902610][T13895] netlink: 'syz.3.2884': attribute type 10 has an invalid length. [ 503.121058][T13924] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 503.956670][T13951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2904'. [ 504.050605][T13955] netlink: 'syz.2.2905': attribute type 10 has an invalid length. [ 504.059374][T13955] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2905'. [ 504.175805][T13960] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 504.803626][T13984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2918'. [ 507.679137][T14090] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2954'. [ 508.779837][T14133] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2967'. [ 509.499293][T14156] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 509.511082][T14154] netlink: 'syz.1.2978': attribute type 9 has an invalid length. [ 509.545946][T14154] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2978'. [ 510.402878][T14190] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 510.671621][T14203] netlink: 'syz.0.2994': attribute type 46 has an invalid length. [ 510.900825][T14209] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2995'. [ 511.247672][T14219] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 511.545156][T14224] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 511.858769][T14233] netlink: 'syz.1.3005': attribute type 46 has an invalid length. [ 512.111360][T14244] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 512.400836][T14257] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 512.580530][T14263] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 512.897624][T14275] netlink: 'syz.3.3020': attribute type 46 has an invalid length. [ 512.975368][T14273] netlink: 'syz.2.3019': attribute type 9 has an invalid length. [ 512.984810][T14273] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3019'. [ 513.653686][T14303] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 513.831067][T14310] netlink: 'syz.3.3032': attribute type 46 has an invalid length. [ 514.029187][T14317] netlink: 'syz.1.3036': attribute type 9 has an invalid length. [ 514.039383][T14317] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.3036'. [ 514.862912][ T2962] wlan1: Trigger new scan to find an IBSS to join [ 514.993916][T14342] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 515.071319][T14347] netlink: 'syz.4.3047': attribute type 46 has an invalid length. [ 515.156131][T14351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3049'. [ 516.067162][T14385] netlink: 'syz.2.3061': attribute type 46 has an invalid length. [ 516.139659][T14388] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3063'. [ 516.594879][T14406] netlink: 'syz.2.3071': attribute type 9 has an invalid length. [ 516.603203][T14406] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.3071'. [ 517.246429][T14418] netlink: 'syz.2.3074': attribute type 46 has an invalid length. [ 517.310378][T14420] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 517.829064][ T36] wlan1: Trigger new scan to find an IBSS to join [ 518.705296][T14452] netlink: 'syz.1.3088': attribute type 46 has an invalid length. [ 518.759061][T14454] netlink: 'syz.4.3087': attribute type 9 has an invalid length. [ 518.772420][T14454] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.3087'. [ 519.053537][T14466] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 519.991468][T14493] netlink: 'syz.4.3101': attribute type 46 has an invalid length. [ 520.296407][T14500] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 520.712770][T14509] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 520.750915][T14511] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3108'. [ 520.868408][ T36] wlan1: Trigger new scan to find an IBSS to join [ 521.107747][T14525] netlink: 'syz.2.3115': attribute type 46 has an invalid length. [ 521.538738][T14538] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 521.566290][T14540] netlink: 'syz.1.3118': attribute type 10 has an invalid length. [ 521.597793][T14540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 521.829254][T14550] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 522.131150][T14556] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3125'. [ 522.149275][T14559] netlink: 'syz.4.3126': attribute type 46 has an invalid length. [ 522.580071][T14569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.602551][T14569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.630706][T14569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.644532][T14569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.790942][ T12] wlan1: Creating new IBSS network, BSSID d2:fe:fb:44:96:5e [ 522.879436][T14573] netlink: 'syz.4.3132': attribute type 9 has an invalid length. [ 522.888167][T14573] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.3132'. [ 523.159791][T14588] netlink: 'syz.3.3137': attribute type 46 has an invalid length. [ 523.187440][ T3007] wlan1: Selected IBSS BSSID d2:fe:fb:44:96:5e based on configured SSID [ 523.187453][T14586] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 523.319878][T14590] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.3139'. [ 523.835989][T14614] netlink: 'syz.1.3145': attribute type 9 has an invalid length. [ 523.854211][T14614] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.3145'. [ 524.132715][T14623] netlink: 'syz.3.3149': attribute type 46 has an invalid length. [ 524.532983][T14634] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3154'. [ 524.627003][T14643] netlink: 'syz.1.3156': attribute type 29 has an invalid length. [ 524.644334][T14638] netlink: 'syz.1.3156': attribute type 29 has an invalid length. [ 524.652988][T14638] netlink: 'syz.1.3156': attribute type 29 has an invalid length. [ 524.949367][T14657] team0: Device dummy0 is up. Set it down before adding it as a team port [ 525.363710][T14673] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.3169'. [ 525.824529][T14680] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.3171'. [ 526.088643][T14690] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3173'. [ 526.556701][T14717] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3182'. [ 526.750128][T14722] validate_nla: 4 callbacks suppressed [ 526.750173][T14722] netlink: 'syz.2.3184': attribute type 9 has an invalid length. [ 526.765402][T14722] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.3184'. [ 526.987098][T14735] netlink: 'syz.1.3187': attribute type 46 has an invalid length. [ 528.017159][T14753] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 528.274617][T14762] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3196'. [ 528.430373][T14774] netlink: 'syz.4.3200': attribute type 46 has an invalid length. [ 529.614462][T14798] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 530.043930][T14820] netlink: 'syz.2.3213': attribute type 9 has an invalid length. [ 530.055699][T14820] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.3213'. [ 530.313854][ T49] wlan1: Selected IBSS BSSID d2:fe:fb:44:96:5e based on configured SSID [ 530.313865][T14826] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 531.213437][T14865] netlink: 'syz.1.3232': attribute type 9 has an invalid length. [ 531.244765][T14865] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.3232'. [ 531.348292][T14869] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 531.352102][ T2994] wlan1: Selected IBSS BSSID d2:fe:fb:44:96:5e based on configured SSID [ 532.385456][T14912] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.684212][T14917] netlink: 'syz.2.3249': attribute type 9 has an invalid length. [ 532.705254][T14917] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.3249'. [ 533.371239][T14933] netlink: 'syz.2.3255': attribute type 10 has an invalid length. [ 533.714009][T14945] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 533.948067][T14952] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3262'. [ 533.986314][T14952] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 534.026417][T14952] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 534.341675][T14964] netlink: 'syz.3.3265': attribute type 9 has an invalid length. [ 534.362958][T14964] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.3265'. [ 535.905039][T14996] mac80211_hwsim hwsim22 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 536.177528][T15004] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 536.290063][T15010] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.3280'. [ 536.320619][T15010] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 536.362987][T15010] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 536.368876][T15013] netlink: 'syz.3.3281': attribute type 9 has an invalid length. [ 536.398310][T15013] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.3281'. [ 538.207715][T15046] netlink: 'syz.4.3291': attribute type 12 has an invalid length. [ 538.227482][T15046] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3291'. [ 541.276243][T15065] netlink: 'syz.3.3298': attribute type 9 has an invalid length. [ 541.285911][T15065] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.3298'. [ 541.296220][T15067] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3297'. [ 542.252573][T15124] netlink: 'syz.1.3317': attribute type 9 has an invalid length. [ 542.285684][T15124] netlink: 49779 bytes leftover after parsing attributes in process `syz.1.3317'. [ 544.270411][T15188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.304267][T15188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.320218][T15188] batman_adv: batadv0: Interface deactivated: wlan0 [ 544.328385][T15188] batman_adv: batadv0: Removing interface: wlan0 [ 544.428150][T15197] netlink: 'syz.4.3338': attribute type 10 has an invalid length. [ 544.476293][T15197] team0: Device ipvlan1 failed to register rx_handler [ 548.050454][T15327] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3387'. [ 548.064041][T15327] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 548.091061][T15327] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 549.369855][T15355] netlink: 'syz.2.3396': attribute type 9 has an invalid length. [ 549.402593][T15355] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.3396'. [ 550.599524][T15379] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3403'. [ 550.609236][T15379] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 550.617831][T15379] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 551.066234][T15394] netlink: 'syz.0.3408': attribute type 10 has an invalid length. [ 551.363128][T15410] netlink: 'syz.1.3412': attribute type 10 has an invalid length. [ 551.907888][T15417] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3425'. [ 552.154318][T15428] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3429'. [ 553.542256][T15446] netlink: 'syz.4.3423': attribute type 29 has an invalid length. [ 553.584543][T15446] netlink: 'syz.4.3423': attribute type 29 has an invalid length. [ 553.604796][T15446] netlink: 'syz.4.3423': attribute type 29 has an invalid length. [ 555.423121][T15449] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3424'. [ 556.217263][T15471] mac80211_hwsim hwsim7 O3ãc¤±: renamed from wlan1 [ 556.333221][T15474] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3433'. [ 558.445159][T15519] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3449'. [ 558.628963][T15532] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.3453'. [ 558.650493][T15532] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 558.660254][T15532] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 558.728282][T15541] netlink: 'syz.0.3455': attribute type 46 has an invalid length. [ 559.561432][T15554] netlink: 'syz.3.3460': attribute type 9 has an invalid length. [ 559.591997][T15554] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.3460'. [ 560.421234][T15577] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 560.574256][T15584] netlink: 'syz.2.3469': attribute type 46 has an invalid length. [ 560.685188][T15588] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 560.863714][T15592] syzkaller0: entered promiscuous mode [ 560.880828][T15592] syzkaller0: entered allmulticast mode [ 562.867143][T15619] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 562.878006][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.888902][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.174394][T15631] netlink: 'syz.1.3484': attribute type 46 has an invalid length. [ 563.819863][T15644] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3489'. [ 563.836579][T15644] netlink: 'syz.3.3489': attribute type 21 has an invalid length. [ 563.860663][T15644] netlink: 'syz.3.3489': attribute type 3 has an invalid length. [ 563.895728][T15644] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3489'. [ 564.716516][T15675] netlink: 'syz.2.3497': attribute type 46 has an invalid length. [ 564.880107][T15683] bridge0: port 3(batadv0) entered disabled state [ 565.018258][T15683] bridge_slave_1: left allmulticast mode [ 565.082242][T15683] bridge_slave_1: left promiscuous mode [ 565.089249][T15683] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.247691][T15683] : (slave bridge0): Releasing backup interface [ 565.808362][T15712] netlink: 'syz.4.3507': attribute type 9 has an invalid length. [ 565.818626][T15712] netlink: 49779 bytes leftover after parsing attributes in process `syz.4.3507'. [ 565.832981][ T12] wlan1: Trigger new scan to find an IBSS to join [ 565.841037][ T12] ------------[ cut here ]------------ [ 565.847832][ T12] UBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1223:5 [ 565.856369][ T12] index 1 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]') [ 565.904983][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-syzkaller-g03fe01ddd1d8 #0 PREEMPT(full) [ 565.905010][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 565.905023][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 565.905059][ T12] Call Trace: [ 565.905067][ T12] [ 565.905076][ T12] dump_stack_lvl+0x189/0x250 [ 565.905107][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.905131][ T12] ? __pfx__printk+0x10/0x10 [ 565.905171][ T12] ubsan_epilogue+0xa/0x40 [ 565.905198][ T12] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 565.905235][ T12] ieee80211_request_ibss_scan+0x600/0x8b0 [ 565.905274][ T12] ieee80211_ibss_work+0xde7/0x1060 [ 565.905307][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 565.905342][ T12] ? ieee80211_iface_work+0xf39/0xfe0 [ 565.905369][ T12] ? rcu_is_watching+0x15/0xb0 [ 565.905398][ T12] cfg80211_wiphy_work+0x2df/0x460 [ 565.905427][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 565.905452][ T12] process_scheduled_works+0xae1/0x17b0 [ 565.905513][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 565.905555][ T12] worker_thread+0x8a0/0xda0 [ 565.905606][ T12] kthread+0x70e/0x8a0 [ 565.905638][ T12] ? __pfx_worker_thread+0x10/0x10 [ 565.905660][ T12] ? __pfx_kthread+0x10/0x10 [ 565.905690][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 565.905713][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.905734][ T12] ? __pfx_kthread+0x10/0x10 [ 565.905763][ T12] ret_from_fork+0x3fc/0x770 [ 565.905787][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 565.905815][ T12] ? __switch_to_asm+0x39/0x70 [ 565.905840][ T12] ? __switch_to_asm+0x33/0x70 [ 565.905864][ T12] ? __pfx_kthread+0x10/0x10 [ 565.905892][ T12] ret_from_fork_asm+0x1a/0x30 [ 565.905934][ T12] [ 565.905947][ T12] ---[ end trace ]--- [ 566.085967][ T12] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 566.093215][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc3-syzkaller-g03fe01ddd1d8 #0 PREEMPT(full) [ 566.104694][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.114773][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 566.121024][ T12] Call Trace: [ 566.124305][ T12] [ 566.127277][ T12] dump_stack_lvl+0x99/0x250 [ 566.131888][ T12] ? __asan_memcpy+0x40/0x70 [ 566.136507][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 566.141719][ T12] ? __pfx__printk+0x10/0x10 [ 566.146350][ T12] panic+0x2db/0x790 [ 566.150257][ T12] ? __pfx_panic+0x10/0x10 [ 566.154690][ T12] ? _printk+0xcf/0x120 [ 566.158872][ T12] ? __pfx__printk+0x10/0x10 [ 566.163487][ T12] check_panic_on_warn+0x89/0xb0 [ 566.168437][ T12] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 566.174190][ T12] ieee80211_request_ibss_scan+0x600/0x8b0 [ 566.180031][ T12] ieee80211_ibss_work+0xde7/0x1060 [ 566.185276][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 566.190927][ T12] ? ieee80211_iface_work+0xf39/0xfe0 [ 566.196319][ T12] ? rcu_is_watching+0x15/0xb0 [ 566.201094][ T12] cfg80211_wiphy_work+0x2df/0x460 [ 566.206224][ T12] ? process_scheduled_works+0x9ef/0x17b0 [ 566.211952][ T12] process_scheduled_works+0xae1/0x17b0 [ 566.217526][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 566.223523][ T12] worker_thread+0x8a0/0xda0 [ 566.228140][ T12] kthread+0x70e/0x8a0 [ 566.232243][ T12] ? __pfx_worker_thread+0x10/0x10 [ 566.237384][ T12] ? __pfx_kthread+0x10/0x10 [ 566.241987][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 566.247188][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 566.252410][ T12] ? __pfx_kthread+0x10/0x10 [ 566.257013][ T12] ret_from_fork+0x3fc/0x770 [ 566.261607][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 566.266726][ T12] ? __switch_to_asm+0x39/0x70 [ 566.271501][ T12] ? __switch_to_asm+0x33/0x70 [ 566.276273][ T12] ? __pfx_kthread+0x10/0x10 [ 566.280873][ T12] ret_from_fork_asm+0x1a/0x30 [ 566.285658][ T12] [ 566.288988][ T12] Kernel Offset: disabled [ 566.293395][ T12] Rebooting in 86400 seconds..