last executing test programs: 2m0.805427718s ago: executing program 2 (id=794): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690300000000000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0x9}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, @perf_bp={0x0}, 0x104101, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfe33) getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x21, &(0x7f0000000800)=@raw=[@map_fd, @map_fd={0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd3d4455}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @ringbuf_query, @tail_call, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @alu={0x7, 0x0, 0xa, 0xb, 0x5, 0x1, 0xffffffffffffffff}], &(0x7f0000000600)='syzkaller\x00', 0x5, 0x2a, &(0x7f0000000640)=""/42, 0x41000, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x0, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x4, 0x3, 0x4, 0xa}, {0x4, 0x1, 0xfffff800, 0x7}, {0x3, 0x5, 0x2, 0x1}, {0x2, 0x3, 0x7, 0x3}], 0x10, 0x2, @void, @value}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@fallback=r0, 0x12, 0x1, 0x6d25, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000240), &(0x7f0000000280)=[0x0, 0x0, 0x0]}, 0x40) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) sendmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x8041}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e02000000000000000000000000000005"], 0x0, 0x37, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000740)={r3}, 0x10) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m59.838548607s ago: executing program 2 (id=804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)}, 0x20) 1m37.802292133s ago: executing program 2 (id=804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)}, 0x20) 1m19.150164194s ago: executing program 2 (id=804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)}, 0x20) 1m2.312337541s ago: executing program 2 (id=804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)}, 0x20) 39.03486342s ago: executing program 2 (id=804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)}, 0x20) 37.1976299s ago: executing program 32 (id=804): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000001300)}, 0x20) 3.482097154s ago: executing program 5 (id=1349): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000003040)=""/4111, 0x100f}, {&(0x7f0000000000)=""/159, 0x9f}], 0x4}, 0x40000000) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2be", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.361254967s ago: executing program 3 (id=1350): socket$kcm(0xa, 0x2, 0x88) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) (async) r1 = socket$kcm(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'veth0_to_batadv\x00'}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000035000b3fd300000000000000108e5178", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x90000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x1}) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, 0x0, 0x8) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7ffc, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91f, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xf}, 0x18404, 0x2, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r4}, &(0x7f00000005c0), &(0x7f0000000600)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_int(r6, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.28787381s ago: executing program 0 (id=1351): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ca10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="03000000040000000400"], 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) close(r6) 3.113547481s ago: executing program 3 (id=1352): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f8ffffff720a00fef8ffffff71a4f0ff000000005d040200000000001d400500000000004704000001ed000062030000000000f53e440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c500000057bd81cb2af0b176275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e5b5b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb9134658fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9a958f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f94fefe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a1074649c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c0dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6acdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e924d6b1594af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fed000000007baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e70300000000000000fee18a22da19fcdb4c2890cda1f96b952511e34cb14ea4a10a6f1dbaa69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca485683252b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a0032f37ff559be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee07751532d5e7d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e2fa3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde20300accc5bd40a2968b59c93d35f8e42366fdef907000000f01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e015cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933f638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb581012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00000000000000003542591d17b5e8d9be772914cf4e3129e7929aa238bd99c3ddd895e33d8cf6c3d6cc883f0319aec94fb4cffde7a6d1fa1bcc03ead3912c2a68ca172adf3f9417207ea83d03a108d2ae15ee38c06dc98a0d1696b7c7fe142440776889154a93888972462439ae33b24c90e13c8f80d4e32716e96825d7bbdd97e4bae368d009b4611619a778f547fa1c92cc656a89728a6a1758b98fd27e1f5e1b446506d8947ca82bac7c2f00"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2663], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) 2.89334162s ago: executing program 3 (id=1353): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', r4, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) close(0x3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 2.643568258s ago: executing program 0 (id=1356): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x53, 0x7}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$kcm(0x25, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0xa, 0x6, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000200)={'dvmrp0\x00', 0x600}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) 2.529155847s ago: executing program 3 (id=1357): r0 = socket$kcm(0x11, 0x2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) close(0xffffffffffffffff) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000300)={r1}, 0x3b) close(r2) (async) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)={r3}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20008000) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000000) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)}, 0x42) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x7, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xff}]}]}, {0x0, [0x2e, 0x5f, 0x51, 0x5f, 0x7f]}}, 0x0, 0x33, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x300, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 2.527032792s ago: executing program 5 (id=1358): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES16=r0], 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x19, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xa, 0x1c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x24, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095", @ANYRESDEC=r0, @ANYRESOCT=r0], &(0x7f0000000080)='syzkaller\x00', 0x7, 0xffffffffffffff31, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.201399347s ago: executing program 5 (id=1361): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000004000000000000000000000005000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000200), &(0x7f00000003c0)=r6}, 0x20) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) r7 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r8, r9, 0x0, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) 1.897812307s ago: executing program 4 (id=1364): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000097420018000000000200000000000000000000001c0000000000000000000000ef080000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93824fc60100c024002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000)=r4, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703360000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x95}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) 1.55311994s ago: executing program 4 (id=1365): openat$tun(0xffffffffffffff9c, 0x0, 0x109000, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000440)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0189436, &(0x7f00000005c0)=0x400000001) r4 = getpid() r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x4, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x62b7850d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x8}, @call={0x85, 0x0, 0x0, 0xc8}]}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xa3, &(0x7f0000000600)=""/163, 0x41100, 0x44, '\x00', r8, @fallback=0x11, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x1000, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000740)='/\x00') 1.236954671s ago: executing program 0 (id=1366): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ca10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4004, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x6}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x11, 0x2, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r5, 0x8) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="03000000040000000400"], 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) close(r6) 1.222567357s ago: executing program 5 (id=1367): r0 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xead3086ce9776e26}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2d, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) r4 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x4000040) (async, rerun: 32) r5 = socket$kcm(0x2, 0x5, 0x84) (rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xee, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x4, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0xb, 0x0, 0x30) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) close(r7) setsockopt$sock_attach_bpf(r5, 0x84, 0x19, &(0x7f0000000000), 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000780)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) setsockopt$sock_attach_bpf(r0, 0x88, 0xa, &(0x7f00000002c0), 0x4) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x20000880) 1.196137403s ago: executing program 3 (id=1368): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000003040)=""/4111, 0x100f}, {&(0x7f0000000000)=""/159, 0x9f}], 0x4}, 0x40000000) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2be", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.194645643s ago: executing program 1 (id=1369): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0xffffffffffff7247}, 0x0, 0x4, 0x0, 0x5, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) 1.089142201s ago: executing program 4 (id=1370): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x2111, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x1ff, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, r0, 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 891.896068ms ago: executing program 5 (id=1371): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@sco, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffeffff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x8, &(0x7f0000000280)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1}, @ldst={0x2, 0x1, 0x3, 0x3, 0x8, 0xfffffffffffffff8, 0x10}, @exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f00000002c0)='GPL\x00', 0xe6, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x0, 0x7, 0xff000000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0x2, 0xa}], 0x10, 0xdc7, @void, @value}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x20}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xb) ioctl$TUNGETFILTER(r1, 0x801054db, 0x0) 798.315849ms ago: executing program 5 (id=1372): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e24, 0x40000003, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x80, 0x0}, 0x24000890) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x4, 0x0, 0x9}, {0x10000002, 0x5}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) r5 = socket$kcm(0x2, 0x5, 0x84) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r7) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d48000500000000000000258f2e6400b8f9e6aaeb88bea123dc2c6726e89b0ce24f89a565ee52dcd729cd3909bc510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000011c0)='\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x82, &(0x7f0000000000)=r10, 0x8) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000100)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x1, 0x2, 0x3, 0x9, 0x18, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r11, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r12}, 0x10) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r14 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r14, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="6b00000000000000010000000c00000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf055090461", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) ioctl$TUNSETOFFLOAD(r13, 0x80047441, 0xf0ff1f00000000) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x80, 0x0}, 0xe07e872420dfefca) 760.387555ms ago: executing program 1 (id=1373): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="d80000001c0081044e81f7b01acfe2222db4f782db44b9040a1d08030e0000", 0xfffffffffffffe91}, {&(0x7f0000000000)="b61929f78c4d596c43b14569d96e0992b407438b33b268f65592e3cf987f910f439f16911b166784d302ac"}, {&(0x7f0000000080)="43e08b6a307289760bc692dcc6b807e1bc1bbc3e742dc2c2f1098d31d96b55fbdb3f61bc6bc8d7566f327d4370ac0b439bf6630f8f47d9735c18ede4d9b09b8cddcf94c09f222b1189109c603403a6dc9965"}], 0x10000377, 0x0, 0xffffffffffffffe7, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 697.266156ms ago: executing program 4 (id=1374): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x373, 0x8}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x8001, 0x8, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r2, 0x0, 0x9, &(0x7f0000000100)='\x00\x008\xe5\xa5\x00\x00\x00\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r13 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xe}, 0x406, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000004009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r14}, 0x10) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000003c0000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r15) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[], 0x48) 633.045052ms ago: executing program 0 (id=1375): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x87fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7c, 0x1, @perf_bp={0x0, 0x5}, 0x14105, 0xdcd, 0xfffffbff, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1a, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a40)={0x0, r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000001840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0xe, &(0x7f0000000a00)=ANY=[@ANYRES64=0x0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8900630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000003e40)={&(0x7f00000038c0)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x48000) sendmsg$sock(r4, &(0x7f0000003880)={0x0, 0x0, 0x0}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000780)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x9, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r8 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0xc0, 0x3, 0x0, 0x7, 0x0, 0x7fffffffffffffff, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffc01, 0x4, @perf_config_ext={0x3, 0x5}, 0x4, 0x100000001, 0xa0, 0x3, 0xfffffffffffffc01, 0x6, 0x8000, 0x0, 0x1, 0x0, 0x7ff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000009c0)='!\')--{\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x0]}}, &(0x7f00000004c0)=""/195, 0x27, 0xc3, 0x1, 0x0, 0x10000, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f0000000700)={&(0x7f0000000680)=""/8, 0x8, 0x0, &(0x7f00000006c0)=""/11, 0xb}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x13, 0x1d, &(0x7f0000000040)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @ldst={0x3, 0x0, 0x1, 0xb, 0xb, 0xc, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff9}, @call={0x85, 0x0, 0x0, 0x8b}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x3}], &(0x7f0000000140)='GPL\x00', 0xffff, 0xe2, &(0x7f0000000380)=""/226, 0x41100, 0x14, '\x00', r9, @fallback=0x3, r10, 0x8, &(0x7f0000000600)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000640)={0x1, 0xe, 0x7, 0x6}, 0x10, r11, r5, 0x2, &(0x7f0000000780), &(0x7f00000007c0)=[{0x3, 0x4, 0xc, 0x7}, {0x2, 0x3, 0x4, 0x6}], 0x10, 0x4, @void, @value}, 0x94) 630.037325ms ago: executing program 1 (id=1376): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xce, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5f116219, 0xaea}, 0x110904, 0x32, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000001a80)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x4}}, @var={0x8, 0x0, 0x0, 0xe, 0x1, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x3c, 0x0, 0x17}, @struct={0x9, 0x2, 0x0, 0x4, 0x1, 0x5, [{0xa, 0x5, 0x30}, {0xf, 0x0, 0x3ff}]}]}, {0x0, [0x61]}}, &(0x7f0000000080)=""/164, 0x77, 0xa4, 0x1, 0xee2, 0x10000, @value}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200350000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f0000000240)=""/167, 0xa7, 0x0, &(0x7f0000000300)=""/157, 0x9d}}, 0x10) 488.307797ms ago: executing program 4 (id=1377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d80000001d0081044e81f782db44b9040a1d080005000000e8fe54a1180015000600142603600e1208000f0000000401a80016000a00014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x30, 0x4, 0x0, 0xfffff004}, {0x6, 0x0, 0x0, 0xa}]}) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 365.689438ms ago: executing program 1 (id=1378): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={0xffffffffffffffff, 0x27, 0xe40, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b08009f59d351", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 228.16833ms ago: executing program 0 (id=1379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="331601000013"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000080000000000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000400000008000000017a1abaaec48c9b9d5eb9", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x4}, 0x1400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 227.375427ms ago: executing program 4 (id=1380): openat$tun(0xffffffffffffff9c, 0x0, 0x109000, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000440)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0xc0189436, &(0x7f00000005c0)=0x400000001) r4 = getpid() r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000000030000ca75ffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x4, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0x0, 0x0}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r3, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x13, 0x13, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf3}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x62b7850d}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_idx={0x18, 0x8}, @call={0x85, 0x0, 0x0, 0xc8}]}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0xa3, &(0x7f0000000600)=""/163, 0x41100, 0x44, '\x00', r8, @fallback=0x11, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0xa, 0x1000, 0x9}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r0], 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000740)='/\x00') 223.105455ms ago: executing program 1 (id=1381): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x2}, 0x50) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1c}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 32.941999ms ago: executing program 0 (id=1382): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0, r2}) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)="d8000000210081044e81f782db44b904020006000080000000000000e80c0d2000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8db52b46481277cf4090000001fb791643a101ecec9456d6845dfe1d9db22f3d233de7929623df5c74ffe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40deee4edef3d939acd92954b43370e", 0xd8}], 0x1}, 0x0) 2.687952ms ago: executing program 1 (id=1383): r0 = getpid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4}, r0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = getpid() r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0xf0, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1c00, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x3) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x2, 0x1, 0xfffffff7, 0x1008, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x3, @void, @value, @void, @value}, 0x50) (async) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1f, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {{0x6, 0x0, 0xb, 0x9, 0x0, 0x4}, {0x65, 0x0, 0x6, 0x9}}, [@printk={@ld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x2, 0xa, 0x9}, {0x4, 0x0, 0x3, 0x9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x15}}], {{0x5, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$kcm(0x2d, 0x5, 0x84) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x81, [{0x7, 0x3, 0xfffffffd}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x2e]}}, 0x0, 0x3a, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r6, 0xc, 0x0, 0x7fffffff, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r0, r1, 0x0, 0x3, &(0x7f0000000300)='*}\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map=r6, r7, 0x9, 0x30, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x7, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x2e, 0x5f]}}, &(0x7f00000014c0)=""/2, 0x39, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close(r1) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f4305", 0x0, 0x6f12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=1384): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0xffffffffffff7247}, 0x0, 0x4, 0x0, 0x5, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}], 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) kernel console output (not intermixed with test programs): w IBSS network, BSSID 50:50:50:50:50:50 [ 97.922721][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.942656][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.517311][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.544080][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.835774][ T2939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.843680][ T2939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.410193][ T5954] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 99.432883][ T5959] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 99.588814][ T5964] team0: Port device team_slave_0 removed [ 99.619106][ T5964] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 99.647179][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.650096][ T5960] netlink: 'syz.1.2': attribute type 29 has an invalid length. [ 99.669451][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.573704][ T5978] syzkaller0: entered promiscuous mode [ 100.595343][ T5978] syzkaller0: entered allmulticast mode [ 101.402258][ T5995] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.554244][ T6000] netlink: 'syz.1.19': attribute type 16 has an invalid length. [ 101.614860][ T6000] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19'. [ 101.966015][ T6005] syz.3.22: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 101.990949][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.3.22 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 101.990982][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.991001][ T6005] Call Trace: [ 101.991020][ T6005] [ 101.991029][ T6005] dump_stack_lvl+0x241/0x360 [ 101.991080][ T6005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.991113][ T6005] ? __pfx__printk+0x10/0x10 [ 101.991142][ T6005] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 101.991178][ T6005] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 101.991209][ T6005] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 101.991243][ T6005] warn_alloc+0x27c/0x410 [ 101.991268][ T6005] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 101.991291][ T6005] ? __pfx_warn_alloc+0x10/0x10 [ 101.991315][ T6005] ? kasan_save_track+0x3f/0x80 [ 101.991337][ T6005] ? __kasan_kmalloc+0x9d/0xb0 [ 101.991365][ T6005] ? xsk_setsockopt+0x4f9/0x840 [ 101.991396][ T6005] ? do_sock_setsockopt+0x3b1/0x710 [ 101.991416][ T6005] ? __x64_sys_setsockopt+0x1ee/0x280 [ 101.991435][ T6005] ? do_syscall_64+0xf3/0x230 [ 101.991459][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.991491][ T6005] __vmalloc_node_range_noprof+0x128/0x1390 [ 101.991551][ T6005] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.991579][ T6005] ? __kasan_kmalloc+0x9d/0xb0 [ 101.991628][ T6005] vmalloc_user_noprof+0x74/0x80 [ 101.991650][ T6005] ? xskq_create+0xb6/0x170 [ 101.991670][ T6005] xskq_create+0xb6/0x170 [ 101.991694][ T6005] xsk_init_queue+0xa1/0x100 [ 101.991719][ T6005] xsk_setsockopt+0x4f9/0x840 [ 101.991756][ T6005] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.991787][ T6005] ? __lock_acquire+0xad5/0xd80 [ 101.991809][ T6005] ? __pfx_aa_sk_perm+0x10/0x10 [ 101.991842][ T6005] ? aa_sock_opt_perm+0x79/0x120 [ 101.991878][ T6005] ? __pfx_xsk_setsockopt+0x10/0x10 [ 101.991911][ T6005] do_sock_setsockopt+0x3b1/0x710 [ 101.991940][ T6005] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 101.991959][ T6005] ? __fget_files+0x2a/0x420 [ 101.991984][ T6005] ? __fget_files+0x39d/0x420 [ 101.992001][ T6005] ? __fget_files+0x2a/0x420 [ 101.992038][ T6005] __x64_sys_setsockopt+0x1ee/0x280 [ 101.992068][ T6005] do_syscall_64+0xf3/0x230 [ 101.992094][ T6005] ? clear_bhb_loop+0x45/0xa0 [ 101.992120][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.992141][ T6005] RIP: 0033:0x7fc62258d169 [ 101.992166][ T6005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.992183][ T6005] RSP: 002b:00007fc623405038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 101.992206][ T6005] RAX: ffffffffffffffda RBX: 00007fc6227a5fa0 RCX: 00007fc62258d169 [ 101.992222][ T6005] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 101.992235][ T6005] RBP: 00007fc62260e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 101.992249][ T6005] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 101.992263][ T6005] R13: 0000000000000000 R14: 00007fc6227a5fa0 R15: 00007ffdd03ec5a8 [ 101.992298][ T6005] [ 101.992427][ T6005] Mem-Info: [ 102.315202][ T6005] active_anon:4801 inactive_anon:0 isolated_anon:0 [ 102.315202][ T6005] active_file:1053 inactive_file:38301 isolated_file:0 [ 102.315202][ T6005] unevictable:768 dirty:1503 writeback:0 [ 102.315202][ T6005] slab_reclaimable:9742 slab_unreclaimable:100197 [ 102.315202][ T6005] mapped:29580 shmem:1425 pagetables:910 [ 102.315202][ T6005] sec_pagetables:0 bounce:0 [ 102.315202][ T6005] kernel_misc_reclaimable:0 [ 102.315202][ T6005] free:1342775 free_pcp:504 free_cma:0 [ 102.363674][ T6005] Node 0 active_anon:19204kB inactive_anon:0kB active_file:4212kB inactive_file:153132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118320kB dirty:6008kB writeback:0kB shmem:4164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11048kB pagetables:3640kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.409116][ T6005] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 102.452863][ T6005] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 102.514967][ T6005] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 102.521027][ T6005] Node 0 DMA32 free:1451544kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:18996kB inactive_anon:0kB active_file:4212kB inactive_file:153040kB unevictable:1536kB writepending:6000kB present:3129332kB managed:2547272kB mlocked:0kB bounce:0kB free_pcp:2196kB local_pcp:624kB free_cma:0kB [ 102.563564][ T6005] lowmem_reserve[]: 0 0 0 0 0 [ 102.606612][ T6005] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:8kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 102.658568][ T6005] lowmem_reserve[]: 0 0 0 0 0 [ 102.668227][ T6005] Node 1 Normal free:3905348kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:160kB free_cma:0kB [ 102.709137][ T6005] lowmem_reserve[]: 0 0 0 0 0 [ 102.714341][ T6005] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 102.735843][ T6005] Node 0 DMA32: 99*4kB (UME) 183*8kB (UM) 85*16kB (UME) 21*32kB (UME) 3*64kB (UE) 3*128kB (E) 5*256kB (UME) 5*512kB (M) 4*1024kB (UME) 5*2048kB (ME) 349*4096kB (UM) = 1452148kB [ 102.759088][ T6005] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 102.771935][ T6005] Node 1 Normal: 143*4kB (UME) 61*8kB (UME) 34*16kB (UME) 208*32kB (UME) 102*64kB (UME) 25*128kB (UME) 13*256kB (UM) 6*512kB (UM) 2*1024kB (ME) 0*2048kB 947*4096kB (M) = 3905348kB [ 102.809355][ T6005] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.840909][ T6005] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.861690][ T6014] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 102.885505][ T6005] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.896603][ T6005] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.906580][ T6005] 40779 total pagecache pages [ 102.911555][ T6005] 0 pages in swap cache [ 102.915931][ T6005] Free swap = 124996kB [ 102.920312][ T6005] Total swap = 124996kB [ 102.924839][ T6005] 2097051 pages RAM [ 102.929597][ T6005] 0 pages HighMem/MovableOnly [ 102.934561][ T6005] 428575 pages reserved [ 102.939240][ T6005] 0 pages cma reserved [ 103.139111][ T6017] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 103.156669][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25'. [ 104.096630][ T6014] team0: Port device wlan1 added [ 104.103253][ T6017] bridge0: port 3(dummy0) entered blocking state [ 104.124874][ T6017] bridge0: port 3(dummy0) entered disabled state [ 104.134276][ T6017] dummy0: entered allmulticast mode [ 104.153750][ T6017] dummy0: entered promiscuous mode [ 104.162373][ T6017] bridge0: port 3(dummy0) entered blocking state [ 104.169213][ T6017] bridge0: port 3(dummy0) entered forwarding state [ 104.295419][ T6019] netlink: 'syz.0.27': attribute type 10 has an invalid length. [ 104.329541][ T6019] netlink: 55 bytes leftover after parsing attributes in process `syz.0.27'. [ 104.542161][ T6025] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 104.550510][ T6025] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 104.720940][ T6031] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 104.745916][ T6032] netlink: 149044 bytes leftover after parsing attributes in process `syz.1.32'. [ 104.752153][ T6031] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.31'. [ 104.801583][ T6028] delete_channel: no stack [ 104.999151][ T6031] syz.2.31 uses obsolete (PF_INET,SOCK_PACKET) [ 105.628241][ T6025] warning: `syz.4.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.672885][ T6029] wlan1: mtu less than device minimum [ 106.280950][ T6057] netdevsim netdevsim2 ªªªªªª: renamed from netdevsim0 (while UP) [ 106.746132][ T6073] netlink: 'syz.4.43': attribute type 37 has an invalid length. [ 107.282319][ T6088] netlink: 'syz.1.44': attribute type 10 has an invalid length. [ 107.298568][ T6088] netlink: 40 bytes leftover after parsing attributes in process `syz.1.44'. [ 107.311355][ T6088] team0: entered promiscuous mode [ 107.320475][ T6088] team_slave_1: entered promiscuous mode [ 107.477755][ T6088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 107.946894][ T6096] netlink: 'syz.2.47': attribute type 10 has an invalid length. [ 107.955640][ T6096] netlink: 2 bytes leftover after parsing attributes in process `syz.2.47'. [ 108.426888][ T6110] Driver unsupported XDP return value 0 on prog (id 48) dev N/A, expect packet loss! [ 108.522754][ T6113] netlink: 'syz.2.52': attribute type 10 has an invalid length. [ 108.553881][ T6113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.52'. [ 108.593757][ T6113] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 108.894129][ T6125] syzkaller0: entered promiscuous mode [ 108.959763][ T6125] syzkaller0: entered allmulticast mode [ 109.387080][ T6142] netlink: 'syz.3.60': attribute type 25 has an invalid length. [ 109.450373][ T6139] netlink: 'syz.0.59': attribute type 2 has an invalid length. [ 109.499167][ T6139] netlink: 'syz.0.59': attribute type 2 has an invalid length. [ 110.114922][ T6148] netlink: 'syz.0.62': attribute type 10 has an invalid length. [ 110.137886][ T6148] netlink: 40 bytes leftover after parsing attributes in process `syz.0.62'. [ 110.158096][ T6148] bridge0: port 3(dummy0) entered blocking state [ 110.171364][ T6148] bridge0: port 3(dummy0) entered disabled state [ 110.179323][ T6148] dummy0: entered allmulticast mode [ 110.227016][ T6148] dummy0: entered promiscuous mode [ 110.233651][ T6148] bridge0: port 3(dummy0) entered blocking state [ 110.240417][ T6148] bridge0: port 3(dummy0) entered forwarding state [ 110.270913][ T6152] netlink: 'syz.1.64': attribute type 29 has an invalid length. [ 110.291681][ T6156] netlink: 'syz.1.64': attribute type 29 has an invalid length. [ 110.304500][ T6152] netlink: 'syz.1.64': attribute type 29 has an invalid length. [ 110.313185][ T6152] netlink: 'syz.1.64': attribute type 29 has an invalid length. [ 110.402377][ T6163] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.65'. [ 111.259173][ T6173] netlink: 40 bytes leftover after parsing attributes in process `syz.0.69'. [ 111.268797][ T6173] dummy0: left allmulticast mode [ 111.273865][ T6173] dummy0: left promiscuous mode [ 111.288697][ T6173] bridge0: port 3(dummy0) entered disabled state [ 111.338960][ T6173] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 111.957774][ T6198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.79'. [ 111.985097][ T6198] bridge0: port 3(dummy0) entered blocking state [ 111.991777][ T6198] bridge0: port 3(dummy0) entered disabled state [ 112.071969][ T6198] dummy0: entered allmulticast mode [ 112.109386][ T6198] dummy0: entered promiscuous mode [ 112.124212][ T6198] bridge0: port 3(dummy0) entered blocking state [ 112.131006][ T6198] bridge0: port 3(dummy0) entered forwarding state [ 112.193214][ T6203] IPv6: Can't replace route, no match found [ 112.769076][ T6223] syzkaller0: entered promiscuous mode [ 112.775982][ T6223] syzkaller0: entered allmulticast mode [ 112.917426][ T6222] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 113.173045][ T6234] netlink: 60 bytes leftover after parsing attributes in process `syz.3.90'. [ 113.555957][ T5857] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 113.990209][ T6261] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.97'. [ 115.231203][ T5857] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 116.202290][ T6283] validate_nla: 4 callbacks suppressed [ 116.202313][ T6283] netlink: 'syz.1.106': attribute type 33 has an invalid length. [ 116.280830][ T6283] netlink: 152 bytes leftover after parsing attributes in process `syz.1.106'. [ 116.369065][ T6286] netlink: 'syz.3.105': attribute type 25 has an invalid length. [ 116.743590][ T6297] netlink: 'syz.3.110': attribute type 33 has an invalid length. [ 116.769386][ T6297] netlink: 'syz.3.110': attribute type 26 has an invalid length. [ 116.781812][ T6297] netlink: 'syz.3.110': attribute type 28 has an invalid length. [ 116.796567][ T6297] netlink: 'syz.3.110': attribute type 29 has an invalid length. [ 116.808809][ T6297] netlink: 'syz.3.110': attribute type 31 has an invalid length. [ 116.898143][ T6302] netlink: 'syz.1.111': attribute type 10 has an invalid length. [ 117.373481][ T6302] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 117.392482][ T6307] netlink: 830 bytes leftover after parsing attributes in process `syz.2.113'. [ 117.409549][ T6316] netlink: 'syz.3.115': attribute type 2 has an invalid length. [ 117.435429][ T6316] netlink: 'syz.3.115': attribute type 9 has an invalid length. [ 117.464815][ T6316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.115'. [ 117.678618][ T6319] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.118'. [ 117.850033][ T6324] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.116'. [ 117.861629][ T6324] netlink: zone id is out of range [ 117.871386][ T6324] netlink: get zone limit has 8 unknown bytes [ 117.943114][ T5857] Bluetooth: hci4: unexpected event 0x0b length: 15 > 11 [ 119.586894][ T6384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.134'. [ 119.735449][ T6384] dummy0: left allmulticast mode [ 119.741456][ T6384] dummy0: left promiscuous mode [ 119.767838][ T6384] bridge0: port 3(dummy0) entered disabled state [ 119.869372][ T6384] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 119.962761][ T5857] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 120.549395][ T6409] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.144'. [ 120.712581][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 121.983738][ T6462] validate_nla: 4 callbacks suppressed [ 121.983762][ T6462] netlink: 'syz.1.157': attribute type 2 has an invalid length. [ 122.014797][ T6462] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.157'. [ 122.024311][ T6457] netlink: 68 bytes leftover after parsing attributes in process `syz.2.159'. [ 126.018854][ T6491] netlink: 'syz.4.166': attribute type 10 has an invalid length. [ 126.129296][ T6491] team0: Device veth1_vlan failed to register rx_handler [ 126.300756][ T6503] netlink: 10 bytes leftover after parsing attributes in process `syz.1.165'. [ 126.792444][ T6520] netlink: 10 bytes leftover after parsing attributes in process `syz.1.175'. [ 127.231450][ T6535] netlink: 'syz.3.179': attribute type 25 has an invalid length. [ 127.859045][ T6550] netlink: 'syz.4.185': attribute type 3 has an invalid length. [ 127.882823][ T6550] netlink: 132 bytes leftover after parsing attributes in process `syz.4.185'. [ 127.939702][ T6548] syz.4.185 (6548) used greatest stack depth: 18856 bytes left [ 128.577097][ T6561] netlink: 'syz.2.188': attribute type 25 has an invalid length. [ 128.707598][ T6568] netlink: 'syz.4.191': attribute type 39 has an invalid length. [ 129.692736][ T6584] netlink: 'syz.2.198': attribute type 10 has an invalid length. [ 129.766172][ T6584] : (slave dummy0): Enslaving as an active interface with an up link [ 134.684320][ T6682] netlink: 'syz.2.224': attribute type 46 has an invalid length. [ 134.794339][ T6685] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 135.224479][ T6685] team0: Port device netdevsim0 added [ 135.922765][ T6695] netlink: 'syz.4.230': attribute type 49 has an invalid length. [ 136.397293][ T6714] netlink: 763 bytes leftover after parsing attributes in process `syz.4.238'. [ 136.712258][ T6723] netlink: 'syz.2.240': attribute type 7 has an invalid length. [ 136.744429][ T6723] netlink: 'syz.2.240': attribute type 6 has an invalid length. [ 137.130622][ T6735] syz.0.246 (6735) used greatest stack depth: 18176 bytes left [ 137.159788][ T6741] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 137.365862][ T6741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.419802][ T6741] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 137.463512][ T6749] netlink: 763 bytes leftover after parsing attributes in process `syz.4.251'. [ 137.817146][ T6763] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.256'. [ 138.060134][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.067241][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.880159][ T6792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'. [ 138.903090][ T6789] netlink: 60 bytes leftover after parsing attributes in process `syz.2.265'. [ 139.221042][ T6802] -1: renamed from syzkaller0 [ 139.956227][ T6831] raw_sendmsg: syz.0.277 forgot to set AF_INET. Fix it! [ 140.103257][ T6831] netlink: 'syz.0.277': attribute type 6 has an invalid length. [ 140.122000][ T6845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.281'. [ 140.122259][ T6831] netlink: 'syz.0.277': attribute type 7 has an invalid length. [ 140.158331][ T6831] netlink: 13182 bytes leftover after parsing attributes in process `syz.0.277'. [ 140.314841][ T6843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.281'. [ 140.544794][ T6851] netlink: 2176 bytes leftover after parsing attributes in process `syz.4.285'. [ 141.451786][ T6866] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.290'. [ 141.476993][ T6866] netlink: 'syz.1.290': attribute type 10 has an invalid length. [ 141.494703][ T6866] netlink: 55 bytes leftover after parsing attributes in process `syz.1.290'. [ 141.545579][ T6867] netlink: 809 bytes leftover after parsing attributes in process `syz.0.289'. [ 141.571951][ T6867] netlink: 130160 bytes leftover after parsing attributes in process `syz.0.289'. [ 141.590511][ T6867] netlink: 809 bytes leftover after parsing attributes in process `syz.0.289'. [ 141.767089][ T55] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 142.277820][ T6882] C: renamed from team_slave_0 (while UP) [ 142.348499][ T6882] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 142.398808][ T6882] netlink: 152 bytes leftover after parsing attributes in process `syz.3.294'. [ 142.438373][ T6882] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 143.323843][ T6899] tap0: tun_chr_ioctl cmd 2147767507 [ 143.962872][ T6908] syzkaller0: entered promiscuous mode [ 144.017990][ T6908] syzkaller0: entered allmulticast mode [ 144.571284][ T6926] netlink: 'syz.0.310': attribute type 10 has an invalid length. [ 144.579543][ T6926] netlink: 156 bytes leftover after parsing attributes in process `syz.0.310'. [ 144.796315][ T55] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 146.147974][ T6937] netlink: 'syz.2.312': attribute type 25 has an invalid length. [ 146.668855][ T6950] netlink: 'syz.3.320': attribute type 10 has an invalid length. [ 146.686069][ T6950] netlink: 3819 bytes leftover after parsing attributes in process `syz.3.320'. [ 146.759112][ T6951] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 146.801359][ T6951] netlink: 'syz.4.319': attribute type 29 has an invalid length. [ 147.253476][ T6963] netlink: 'syz.0.323': attribute type 2 has an invalid length. [ 147.304124][ T6963] netlink: 'syz.0.323': attribute type 8 has an invalid length. [ 147.560547][ T6963] netlink: 132 bytes leftover after parsing attributes in process `syz.0.323'. [ 147.564068][ T55] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 148.880525][ T6983] netlink: 60 bytes leftover after parsing attributes in process `syz.0.330'. [ 149.005940][ T6988] netlink: 60 bytes leftover after parsing attributes in process `syz.0.330'. [ 149.082898][ T6990] netlink: 60 bytes leftover after parsing attributes in process `syz.0.330'. [ 149.742341][ T7008] netlink: 'syz.0.338': attribute type 10 has an invalid length. [ 149.771174][ T7008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.338'. [ 150.066723][ T7012] syzkaller0: entered promiscuous mode [ 150.078643][ T7012] syzkaller0: entered allmulticast mode [ 150.126496][ T7012] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 150.658742][ T55] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 150.939412][ T7035] netlink: 64 bytes leftover after parsing attributes in process `syz.0.345'. [ 153.222107][ T7144] netlink: 'syz.4.362': attribute type 10 has an invalid length. [ 153.283348][ T7144] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 153.955100][ T7157] netlink: 'syz.1.366': attribute type 25 has an invalid length. [ 154.300965][ T7165] netlink: 'syz.1.370': attribute type 10 has an invalid length. [ 154.414513][ T7165] geneve0: entered promiscuous mode [ 154.477921][ T7165] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 154.848088][ T7182] netlink: 6 bytes leftover after parsing attributes in process `syz.4.375'. [ 154.937341][ T7182] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 155.388073][ T7188] netlink: 64 bytes leftover after parsing attributes in process `syz.3.378'. [ 155.804223][ T7193] netlink: 3 bytes leftover after parsing attributes in process `syz.1.381'. [ 155.840824][ T7199] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 155.906350][ T7199] netlink: 55 bytes leftover after parsing attributes in process `syz.0.379'. [ 156.110433][ T7199] netlink: 48 bytes leftover after parsing attributes in process `syz.0.379'. [ 156.515091][ T7215] netlink: 2 bytes leftover after parsing attributes in process `syz.1.388'. [ 158.841409][ T7250] delete_channel: no stack [ 158.867314][ T7223] syzkaller0: entered promiscuous mode [ 158.874114][ T7223] syzkaller0: entered allmulticast mode [ 161.172804][ T7287] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 161.337798][ T7292] FAULT_INJECTION: forcing a failure. [ 161.337798][ T7292] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 161.455247][ T7292] CPU: 0 UID: 0 PID: 7292 Comm: syz.4.411 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 161.455283][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.455297][ T7292] Call Trace: [ 161.455309][ T7292] [ 161.455321][ T7292] dump_stack_lvl+0x241/0x360 [ 161.455383][ T7292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.455419][ T7292] ? __pfx__printk+0x10/0x10 [ 161.455499][ T7292] should_fail_ex+0x424/0x570 [ 161.455542][ T7292] _copy_from_iter+0x211/0x1c70 [ 161.455595][ T7292] ? __build_skb_around+0x247/0x3d0 [ 161.455645][ T7292] ? __alloc_skb+0x298/0x480 [ 161.455680][ T7292] ? __pfx__copy_from_iter+0x10/0x10 [ 161.455727][ T7292] ? __pfx___alloc_skb+0x10/0x10 [ 161.455766][ T7292] ? skb_put+0x114/0x1f0 [ 161.455801][ T7292] netlink_sendmsg+0x73c/0xcd0 [ 161.455868][ T7292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.455913][ T7292] ? aa_sock_msg_perm+0x91/0x160 [ 161.455965][ T7292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.455992][ T7292] __sock_sendmsg+0x221/0x270 [ 161.456036][ T7292] ____sys_sendmsg+0x523/0x860 [ 161.456093][ T7292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.456113][ T7292] ? __fget_files+0x2a/0x420 [ 161.456148][ T7292] ? __fget_files+0x2a/0x420 [ 161.456201][ T7292] __sys_sendmsg+0x271/0x360 [ 161.456246][ T7292] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.456374][ T7292] ? perf_trace_preemptirq_template+0xfa/0x400 [ 161.456457][ T7292] ? do_syscall_64+0xb6/0x230 [ 161.456495][ T7292] do_syscall_64+0xf3/0x230 [ 161.456524][ T7292] ? clear_bhb_loop+0x45/0xa0 [ 161.456555][ T7292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.456575][ T7292] RIP: 0033:0x7f95f7d8d169 [ 161.456604][ T7292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.456620][ T7292] RSP: 002b:00007f95f8afe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.456649][ T7292] RAX: ffffffffffffffda RBX: 00007f95f7fa5fa0 RCX: 00007f95f7d8d169 [ 161.456663][ T7292] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 161.456675][ T7292] RBP: 00007f95f8afe090 R08: 0000000000000000 R09: 0000000000000000 [ 161.456695][ T7292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.456707][ T7292] R13: 0000000000000000 R14: 00007f95f7fa5fa0 R15: 00007fff41a1e028 [ 161.456771][ T7292] [ 161.745820][ T7293] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 161.777030][ T7293] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 162.939093][ T7313] : renamed from bond_slave_0 (while UP) [ 163.091336][ T7320] netlink: 'syz.2.420': attribute type 13 has an invalid length. [ 163.682026][ T7335] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 163.691420][ T7335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.427'. [ 163.720930][ T7335] veth0_vlan: entered allmulticast mode [ 163.747902][ T7335] bridge0: port 3(veth0_vlan) entered blocking state [ 163.771726][ T7335] bridge0: port 3(veth0_vlan) entered disabled state [ 163.797877][ T7335] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 163.858159][ T7343] netlink: 'syz.3.429': attribute type 10 has an invalid length. [ 163.880863][ T7343] netlink: 152 bytes leftover after parsing attributes in process `syz.3.429'. [ 163.979614][ T7343] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 164.081643][ T7348] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 164.149026][ T7355] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 164.251034][ T7355] team0: Port device geneve1 added [ 164.433119][ T7362] FAULT_INJECTION: forcing a failure. [ 164.433119][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.452813][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.4.436 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 164.452844][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.452856][ T7362] Call Trace: [ 164.452865][ T7362] [ 164.452873][ T7362] dump_stack_lvl+0x241/0x360 [ 164.452911][ T7362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.452940][ T7362] ? __pfx__printk+0x10/0x10 [ 164.452982][ T7362] should_fail_ex+0x424/0x570 [ 164.453009][ T7362] _copy_from_user+0x2d/0xb0 [ 164.453039][ T7362] copy_msghdr_from_user+0xb3/0x580 [ 164.453072][ T7362] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 164.453096][ T7362] ? __fget_files+0x2a/0x420 [ 164.453118][ T7362] ? __fget_files+0x2a/0x420 [ 164.453145][ T7362] __sys_sendmsg+0x20a/0x360 [ 164.453172][ T7362] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.453247][ T7362] ? do_syscall_64+0xb6/0x230 [ 164.453274][ T7362] do_syscall_64+0xf3/0x230 [ 164.453298][ T7362] ? clear_bhb_loop+0x45/0xa0 [ 164.453321][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.453341][ T7362] RIP: 0033:0x7f95f7d8d169 [ 164.453358][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.453375][ T7362] RSP: 002b:00007f95f8afe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.453404][ T7362] RAX: ffffffffffffffda RBX: 00007f95f7fa5fa0 RCX: 00007f95f7d8d169 [ 164.453419][ T7362] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 164.453432][ T7362] RBP: 00007f95f8afe090 R08: 0000000000000000 R09: 0000000000000000 [ 164.453444][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.453455][ T7362] R13: 0000000000000000 R14: 00007f95f7fa5fa0 R15: 00007fff41a1e028 [ 164.453486][ T7362] [ 165.588765][ T7380] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 165.598790][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 165.621767][ T7380] netlink: 2 bytes leftover after parsing attributes in process `syz.3.442'. [ 165.651673][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 165.699357][ T7380] netlink: 2 bytes leftover after parsing attributes in process `syz.3.442'. [ 166.265919][ T7404] FAULT_INJECTION: forcing a failure. [ 166.265919][ T7404] name failslab, interval 1, probability 0, space 0, times 1 [ 166.279310][ T7404] CPU: 0 UID: 0 PID: 7404 Comm: syz.1.451 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 166.279339][ T7404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.279352][ T7404] Call Trace: [ 166.279360][ T7404] [ 166.279369][ T7404] dump_stack_lvl+0x241/0x360 [ 166.279408][ T7404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.279438][ T7404] ? __pfx__printk+0x10/0x10 [ 166.279472][ T7404] ? __pfx___might_resched+0x10/0x10 [ 166.279503][ T7404] should_fail_ex+0x424/0x570 [ 166.279530][ T7404] should_failslab+0xac/0x100 [ 166.279559][ T7404] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 166.279590][ T7404] ? __alloc_skb+0x1c2/0x480 [ 166.279625][ T7404] __alloc_skb+0x1c2/0x480 [ 166.279658][ T7404] ? __pfx___alloc_skb+0x10/0x10 [ 166.279690][ T7404] ? netlink_autobind+0xd6/0x2f0 [ 166.279716][ T7404] ? netlink_autobind+0x2b0/0x2f0 [ 166.279746][ T7404] netlink_sendmsg+0x638/0xcd0 [ 166.279786][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.279817][ T7404] ? aa_sock_msg_perm+0x91/0x160 [ 166.279850][ T7404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.279876][ T7404] __sock_sendmsg+0x221/0x270 [ 166.279905][ T7404] ____sys_sendmsg+0x523/0x860 [ 166.279934][ T7404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.279953][ T7404] ? __fget_files+0x2a/0x420 [ 166.279974][ T7404] ? __fget_files+0x2a/0x420 [ 166.280002][ T7404] __sys_sendmsg+0x271/0x360 [ 166.280030][ T7404] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.280085][ T7404] ? perf_trace_preemptirq_template+0xfa/0x400 [ 166.280127][ T7404] ? do_syscall_64+0xb6/0x230 [ 166.280156][ T7404] do_syscall_64+0xf3/0x230 [ 166.280180][ T7404] ? clear_bhb_loop+0x45/0xa0 [ 166.280205][ T7404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.280224][ T7404] RIP: 0033:0x7faf9e78d169 [ 166.280251][ T7404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.280267][ T7404] RSP: 002b:00007faf9f6b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.280289][ T7404] RAX: ffffffffffffffda RBX: 00007faf9e9a5fa0 RCX: 00007faf9e78d169 [ 166.280304][ T7404] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 166.280317][ T7404] RBP: 00007faf9f6b6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.280329][ T7404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.280341][ T7404] R13: 0000000000000000 R14: 00007faf9e9a5fa0 R15: 00007ffef49a6088 [ 166.280372][ T7404] [ 166.906003][ T7416] netlink: 'syz.2.453': attribute type 6 has an invalid length. [ 166.933265][ T7416] netlink: 'syz.2.453': attribute type 3 has an invalid length. [ 166.945003][ T7416] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.453'. [ 167.005628][ T7418] netlink: 'syz.1.455': attribute type 10 has an invalid length. [ 167.032954][ T7418] netlink: 55 bytes leftover after parsing attributes in process `syz.1.455'. [ 168.630217][ T7450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.466'. [ 169.413292][ T7477] netlink: 'syz.2.475': attribute type 9 has an invalid length. [ 169.635000][ T7477] netlink: 203172 bytes leftover after parsing attributes in process `syz.2.475'. [ 169.705276][ T7484] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.470'. [ 169.743689][ T7484] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.470'. [ 170.199952][ T7485] : renamed from bond0 (while UP) [ 170.482891][ T7497] macvtap0: entered promiscuous mode [ 170.489247][ T7497] macvtap0: entered allmulticast mode [ 170.494894][ T7497] veth0_macvtap: entered allmulticast mode [ 170.743383][ T7499] netlink: 'syz.0.481': attribute type 25 has an invalid length. [ 171.422159][ T7525] netlink: 'syz.2.490': attribute type 6 has an invalid length. [ 171.538791][ T7525] netlink: 'syz.2.490': attribute type 6 has an invalid length. [ 171.565137][ T7525] netlink: 'syz.2.490': attribute type 6 has an invalid length. [ 171.941991][ T7537] openvswitch: netlink: Flow actions attr not present in new flow. [ 172.976836][ T7546] netlink: 'syz.4.497': attribute type 25 has an invalid length. [ 173.030325][ T7543] netlink: 'syz.1.495': attribute type 2 has an invalid length. [ 173.107940][ T7552] netlink: 'syz.2.498': attribute type 7 has an invalid length. [ 173.117364][ T7543] netlink: 51 bytes leftover after parsing attributes in process `syz.1.495'. [ 173.752789][ T7570] netlink: 180 bytes leftover after parsing attributes in process `syz.2.504'. [ 173.786016][ T7560] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.500'. [ 173.899911][ T7570] syzkaller0: entered promiscuous mode [ 173.934635][ T7570] syzkaller0: entered allmulticast mode [ 178.997268][ T7582] netlink: 'syz.0.508': attribute type 10 has an invalid length. [ 179.513601][ T55] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 180.464378][ T55] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 183.557155][ T7608] netlink: 'syz.3.516': attribute type 10 has an invalid length. [ 183.666434][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.518'. [ 183.789773][ T7608] veth1_macvtap: left promiscuous mode [ 185.078857][ T55] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 185.863991][ T7656] netdevsim netdevsim0 ªªªªªª: renamed from netdevsim0 (while UP) [ 186.553924][ T7686] netlink: 'syz.2.540': attribute type 29 has an invalid length. [ 186.719289][ T7685] netlink: 'syz.2.540': attribute type 29 has an invalid length. [ 186.762188][ T7686] netlink: 'syz.2.540': attribute type 29 has an invalid length. [ 186.785394][ T7695] netlink: 'syz.2.540': attribute type 29 has an invalid length. [ 187.896701][ T7707] syzkaller0: entered promiscuous mode [ 187.995986][ T7707] syzkaller0: entered allmulticast mode [ 188.496285][ T55] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 191.366824][ T7732] netlink: 60 bytes leftover after parsing attributes in process `syz.2.549'. [ 191.589892][ T7739] netlink: 'syz.0.550': attribute type 21 has an invalid length. [ 191.604769][ T7736] netlink: 'syz.0.550': attribute type 21 has an invalid length. [ 191.623173][ T7738] netlink: 2 bytes leftover after parsing attributes in process `syz.4.551'. [ 191.678326][ T7736] netlink: 132 bytes leftover after parsing attributes in process `syz.0.550'. [ 191.696084][ T7736] netlink: 'syz.0.550': attribute type 1 has an invalid length. [ 191.705514][ T7739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.550'. [ 191.714858][ T7739] netlink: 'syz.0.550': attribute type 1 has an invalid length. [ 192.430426][ T7745] netlink: 'syz.3.553': attribute type 25 has an invalid length. [ 192.959460][ T7762] FAULT_INJECTION: forcing a failure. [ 192.959460][ T7762] name failslab, interval 1, probability 0, space 0, times 0 [ 193.004677][ T7762] CPU: 1 UID: 0 PID: 7762 Comm: syz.2.559 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 193.004713][ T7762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.004726][ T7762] Call Trace: [ 193.004736][ T7762] [ 193.004747][ T7762] dump_stack_lvl+0x241/0x360 [ 193.004797][ T7762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.004832][ T7762] ? __pfx__printk+0x10/0x10 [ 193.004882][ T7762] ? __pfx___might_resched+0x10/0x10 [ 193.004927][ T7762] should_fail_ex+0x424/0x570 [ 193.004970][ T7762] should_failslab+0xac/0x100 [ 193.005011][ T7762] __kmalloc_noprof+0xdf/0x4d0 [ 193.005044][ T7762] ? tomoyo_encode+0x26f/0x540 [ 193.005092][ T7762] tomoyo_encode+0x26f/0x540 [ 193.005128][ T7762] ? __pfx_sockfs_dname+0x10/0x10 [ 193.005165][ T7762] tomoyo_realpath_from_path+0x59e/0x5e0 [ 193.005236][ T7762] tomoyo_path_number_perm+0x245/0x790 [ 193.005281][ T7762] ? tomoyo_path_number_perm+0x215/0x790 [ 193.005321][ T7762] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 193.005371][ T7762] ? perf_trace_lock+0x39c/0x4a0 [ 193.005495][ T7762] ? __fget_files+0x2a/0x420 [ 193.005519][ T7762] ? __fget_files+0x2a/0x420 [ 193.005552][ T7762] ? __fget_files+0x2a/0x420 [ 193.005599][ T7762] security_file_ioctl+0xc6/0x2a0 [ 193.005636][ T7762] __se_sys_ioctl+0x46/0x160 [ 193.005675][ T7762] do_syscall_64+0xf3/0x230 [ 193.005706][ T7762] ? clear_bhb_loop+0x45/0xa0 [ 193.005739][ T7762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.005761][ T7762] RIP: 0033:0x7fb64bd8d169 [ 193.005783][ T7762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.005801][ T7762] RSP: 002b:00007fb64cb5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 193.005823][ T7762] RAX: ffffffffffffffda RBX: 00007fb64bfa5fa0 RCX: 00007fb64bd8d169 [ 193.005839][ T7762] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 193.005852][ T7762] RBP: 00007fb64cb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.005865][ T7762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.005877][ T7762] R13: 0000000000000000 R14: 00007fb64bfa5fa0 R15: 00007ffc329cbe98 [ 193.005941][ T7762] [ 193.006011][ T7762] ERROR: Out of memory at tomoyo_realpath_from_path. [ 193.406334][ T7778] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 193.435145][ T7779] netlink: 2 bytes leftover after parsing attributes in process `syz.4.564'. [ 193.474797][ T7777] netlink: 60 bytes leftover after parsing attributes in process `syz.1.562'. [ 193.691170][ T7785] netlink: 'syz.0.567': attribute type 25 has an invalid length. [ 194.945947][ T55] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 195.602116][ T7822] FAULT_INJECTION: forcing a failure. [ 195.602116][ T7822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.622747][ T7822] CPU: 1 UID: 0 PID: 7822 Comm: syz.2.576 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 195.622774][ T7822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.622786][ T7822] Call Trace: [ 195.622794][ T7822] [ 195.622802][ T7822] dump_stack_lvl+0x241/0x360 [ 195.622841][ T7822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.622871][ T7822] ? __pfx__printk+0x10/0x10 [ 195.622915][ T7822] should_fail_ex+0x424/0x570 [ 195.622945][ T7822] _copy_from_user+0x2d/0xb0 [ 195.622976][ T7822] get_user_ifreq+0xc3/0x200 [ 195.623005][ T7822] sock_ioctl+0x7b6/0x900 [ 195.623033][ T7822] ? __pfx_sock_ioctl+0x10/0x10 [ 195.623055][ T7822] ? __fget_files+0x2a/0x420 [ 195.623093][ T7822] ? __pfx_sock_ioctl+0x10/0x10 [ 195.623121][ T7822] __se_sys_ioctl+0xf1/0x160 [ 195.623150][ T7822] do_syscall_64+0xf3/0x230 [ 195.623175][ T7822] ? clear_bhb_loop+0x45/0xa0 [ 195.623220][ T7822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.623241][ T7822] RIP: 0033:0x7fb64bd8d169 [ 195.623261][ T7822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.623277][ T7822] RSP: 002b:00007fb64cb5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.623299][ T7822] RAX: ffffffffffffffda RBX: 00007fb64bfa5fa0 RCX: 00007fb64bd8d169 [ 195.623313][ T7822] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 195.623325][ T7822] RBP: 00007fb64cb5f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.623338][ T7822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.623350][ T7822] R13: 0000000000000000 R14: 00007fb64bfa5fa0 R15: 00007ffc329cbe98 [ 195.623392][ T7822] [ 195.795302][ T7831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 195.806161][ T7830] netlink: 60 bytes leftover after parsing attributes in process `syz.3.578'. [ 196.277901][ T7842] Â: renamed from pim6reg1 [ 196.731385][ T7863] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 196.996222][ T7871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.590'. [ 197.027307][ T7867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.590'. [ 197.390209][ T7874] FAULT_INJECTION: forcing a failure. [ 197.390209][ T7874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.434877][ T7874] CPU: 1 UID: 0 PID: 7874 Comm: syz.0.593 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 197.434907][ T7874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.434920][ T7874] Call Trace: [ 197.434932][ T7874] [ 197.434945][ T7874] dump_stack_lvl+0x241/0x360 [ 197.435006][ T7874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.435047][ T7874] ? __pfx__printk+0x10/0x10 [ 197.435165][ T7874] should_fail_ex+0x424/0x570 [ 197.435225][ T7874] _copy_from_user+0x2d/0xb0 [ 197.435269][ T7874] br_dev_read_uargs+0x16b/0x450 [ 197.435320][ T7874] ? __pfx_br_dev_read_uargs+0x10/0x10 [ 197.435410][ T7874] br_dev_siocdevprivate+0xf0/0x1e40 [ 197.435449][ T7874] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 197.435485][ T7874] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 197.435518][ T7874] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 197.435593][ T7874] ? __mutex_lock+0xbe3/0x10c0 [ 197.435657][ T7874] ? __mutex_lock+0x5f3/0x10c0 [ 197.435709][ T7874] ? dev_ioctl+0x8b0/0x1380 [ 197.435747][ T7874] ? full_name_hash+0x93/0xe0 [ 197.435821][ T7874] dev_ifsioc+0xc04/0x1010 [ 197.435878][ T7874] ? dev_load+0x21/0x1f0 [ 197.435927][ T7874] dev_ioctl+0x8c3/0x1380 [ 197.435996][ T7874] sock_ioctl+0x819/0x900 [ 197.436047][ T7874] ? __pfx_sock_ioctl+0x10/0x10 [ 197.436069][ T7874] ? __fget_files+0x2a/0x420 [ 197.436170][ T7874] ? __pfx_sock_ioctl+0x10/0x10 [ 197.436214][ T7874] __se_sys_ioctl+0xf1/0x160 [ 197.436264][ T7874] do_syscall_64+0xf3/0x230 [ 197.436298][ T7874] ? clear_bhb_loop+0x45/0xa0 [ 197.436340][ T7874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.436362][ T7874] RIP: 0033:0x7f8507f8d169 [ 197.436387][ T7874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.436405][ T7874] RSP: 002b:00007f8508d02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.436427][ T7874] RAX: ffffffffffffffda RBX: 00007f85081a5fa0 RCX: 00007f8507f8d169 [ 197.436443][ T7874] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 197.436456][ T7874] RBP: 00007f8508d02090 R08: 0000000000000000 R09: 0000000000000000 [ 197.436469][ T7874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.436486][ T7874] R13: 0000000000000000 R14: 00007f85081a5fa0 R15: 00007ffee1f490d8 [ 197.436589][ T7874] [ 198.042205][ T7883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.598'. [ 198.640859][ T7909] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.603'. [ 198.935640][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.1.605'. [ 198.960510][ T7920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.605'. [ 199.038862][ T7925] FAULT_INJECTION: forcing a failure. [ 199.038862][ T7925] name failslab, interval 1, probability 0, space 0, times 0 [ 199.177813][ T7925] CPU: 1 UID: 0 PID: 7925 Comm: syz.0.606 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 199.177844][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.177857][ T7925] Call Trace: [ 199.177866][ T7925] [ 199.177877][ T7925] dump_stack_lvl+0x241/0x360 [ 199.177926][ T7925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.177961][ T7925] ? __pfx__printk+0x10/0x10 [ 199.178013][ T7925] ? __pfx___might_resched+0x10/0x10 [ 199.178067][ T7925] should_fail_ex+0x424/0x570 [ 199.178110][ T7925] should_failslab+0xac/0x100 [ 199.178150][ T7925] __kmalloc_noprof+0xdf/0x4d0 [ 199.178182][ T7925] ? br_dev_siocdevprivate+0x635/0x1e40 [ 199.178225][ T7925] br_dev_siocdevprivate+0x635/0x1e40 [ 199.178264][ T7925] ? __pfx___mutex_trylock_common+0x10/0x10 [ 199.178298][ T7925] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 199.178341][ T7925] ? trace_contention_end+0x3c/0x120 [ 199.178374][ T7925] ? __mutex_lock+0x380/0x10c0 [ 199.178421][ T7925] ? __pfx_perf_trace_lock+0x10/0x10 [ 199.178462][ T7925] ? dev_ioctl+0x8b0/0x1380 [ 199.178494][ T7925] ? full_name_hash+0x93/0xe0 [ 199.178542][ T7925] dev_ifsioc+0xc04/0x1010 [ 199.178585][ T7925] ? dev_load+0x21/0x1f0 [ 199.178623][ T7925] dev_ioctl+0x8c3/0x1380 [ 199.178668][ T7925] sock_ioctl+0x819/0x900 [ 199.178707][ T7925] ? __pfx_sock_ioctl+0x10/0x10 [ 199.178730][ T7925] ? __fget_files+0x2a/0x420 [ 199.178796][ T7925] ? __pfx_sock_ioctl+0x10/0x10 [ 199.178830][ T7925] __se_sys_ioctl+0xf1/0x160 [ 199.178869][ T7925] do_syscall_64+0xf3/0x230 [ 199.178897][ T7925] ? clear_bhb_loop+0x45/0xa0 [ 199.178930][ T7925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.178951][ T7925] RIP: 0033:0x7f8507f8d169 [ 199.178974][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.178990][ T7925] RSP: 002b:00007f8508d02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.179012][ T7925] RAX: ffffffffffffffda RBX: 00007f85081a5fa0 RCX: 00007f8507f8d169 [ 199.179027][ T7925] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 199.179040][ T7925] RBP: 00007f8508d02090 R08: 0000000000000000 R09: 0000000000000000 [ 199.179059][ T7925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.179071][ T7925] R13: 0000000000000000 R14: 00007f85081a5fa0 R15: 00007ffee1f490d8 [ 199.179138][ T7925] [ 199.498602][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.505028][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.736943][ T7939] netlink: 'syz.1.610': attribute type 39 has an invalid length. [ 200.207105][ T7963] netlink: 36 bytes leftover after parsing attributes in process `syz.2.616'. [ 201.224710][ T7963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.715538][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.620'. [ 201.757687][ T7985] netlink: 60 bytes leftover after parsing attributes in process `syz.0.620'. [ 201.934259][ T7989] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.621'. [ 202.049394][ T7994] FAULT_INJECTION: forcing a failure. [ 202.049394][ T7994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.119236][ T7994] CPU: 0 UID: 0 PID: 7994 Comm: syz.0.622 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 202.119266][ T7994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.119279][ T7994] Call Trace: [ 202.119287][ T7994] [ 202.119297][ T7994] dump_stack_lvl+0x241/0x360 [ 202.119337][ T7994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.119367][ T7994] ? __pfx__printk+0x10/0x10 [ 202.119414][ T7994] should_fail_ex+0x424/0x570 [ 202.119444][ T7994] _copy_to_user+0x31/0xb0 [ 202.119479][ T7994] br_dev_siocdevprivate+0x6b4/0x1e40 [ 202.119510][ T7994] ? __pfx___mutex_trylock_common+0x10/0x10 [ 202.119541][ T7994] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 202.119571][ T7994] ? trace_contention_end+0x3c/0x120 [ 202.119598][ T7994] ? __mutex_lock+0x380/0x10c0 [ 202.119628][ T7994] ? __lock_acquire+0xad5/0xd80 [ 202.119678][ T7994] ? dev_ioctl+0x8b0/0x1380 [ 202.119705][ T7994] ? full_name_hash+0x93/0xe0 [ 202.119736][ T7994] dev_ifsioc+0xc04/0x1010 [ 202.119768][ T7994] ? dev_load+0x21/0x1f0 [ 202.119798][ T7994] dev_ioctl+0x8c3/0x1380 [ 202.119831][ T7994] sock_ioctl+0x819/0x900 [ 202.119860][ T7994] ? __pfx_sock_ioctl+0x10/0x10 [ 202.119882][ T7994] ? __fget_files+0x2a/0x420 [ 202.119919][ T7994] ? __pfx_sock_ioctl+0x10/0x10 [ 202.119946][ T7994] __se_sys_ioctl+0xf1/0x160 [ 202.119974][ T7994] do_syscall_64+0xf3/0x230 [ 202.119998][ T7994] ? clear_bhb_loop+0x45/0xa0 [ 202.120024][ T7994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.120044][ T7994] RIP: 0033:0x7f8507f8d169 [ 202.120062][ T7994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.120078][ T7994] RSP: 002b:00007f8505df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.120107][ T7994] RAX: ffffffffffffffda RBX: 00007f85081a6080 RCX: 00007f8507f8d169 [ 202.120123][ T7994] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000006 [ 202.120136][ T7994] RBP: 00007f8505df6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.120149][ T7994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.120161][ T7994] R13: 0000000000000000 R14: 00007f85081a6080 R15: 00007ffee1f490d8 [ 202.120199][ T7994] [ 202.852382][ T8003] netlink: 'syz.3.626': attribute type 25 has an invalid length. [ 202.960369][ T8012] netlink: 'syz.4.630': attribute type 29 has an invalid length. [ 203.245969][ T8016] delete_channel: no stack [ 203.362119][ T8019] netlink: 'syz.4.633': attribute type 10 has an invalid length. [ 203.570841][ T8025] netlink: 60 bytes leftover after parsing attributes in process `syz.3.632'. [ 203.701480][ T8021] netlink: 60 bytes leftover after parsing attributes in process `syz.3.632'. [ 203.905564][ T8031] netlink: 763 bytes leftover after parsing attributes in process `syz.4.636'. [ 205.653716][ T8049] netlink: 'syz.3.643': attribute type 25 has an invalid length. [ 206.395038][ T8063] FAULT_INJECTION: forcing a failure. [ 206.395038][ T8063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.426115][ T8063] CPU: 0 UID: 0 PID: 8063 Comm: syz.4.646 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 206.426146][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.426158][ T8063] Call Trace: [ 206.426166][ T8063] [ 206.426175][ T8063] dump_stack_lvl+0x241/0x360 [ 206.426217][ T8063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.426247][ T8063] ? __pfx__printk+0x10/0x10 [ 206.426296][ T8063] should_fail_ex+0x424/0x570 [ 206.426328][ T8063] _copy_to_user+0x31/0xb0 [ 206.426363][ T8063] simple_read_from_buffer+0xc4/0x170 [ 206.426410][ T8063] proc_fail_nth_read+0x1ef/0x260 [ 206.426439][ T8063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.426467][ T8063] ? rw_verify_area+0x246/0x630 [ 206.426490][ T8063] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.426516][ T8063] vfs_read+0x21f/0xb90 [ 206.426549][ T8063] ? __pfx___mutex_lock+0x10/0x10 [ 206.426576][ T8063] ? __pfx_vfs_read+0x10/0x10 [ 206.426606][ T8063] ? __fget_files+0x2a/0x420 [ 206.426629][ T8063] ? __fget_files+0x39d/0x420 [ 206.426646][ T8063] ? __fget_files+0x2a/0x420 [ 206.426680][ T8063] ksys_read+0x19d/0x2d0 [ 206.426709][ T8063] ? __pfx_ksys_read+0x10/0x10 [ 206.426743][ T8063] ? do_syscall_64+0xb6/0x230 [ 206.426773][ T8063] do_syscall_64+0xf3/0x230 [ 206.426798][ T8063] ? clear_bhb_loop+0x45/0xa0 [ 206.426825][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.426845][ T8063] RIP: 0033:0x7f95f7d8bb7c [ 206.426865][ T8063] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.426881][ T8063] RSP: 002b:00007f95f8afe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.426903][ T8063] RAX: ffffffffffffffda RBX: 00007f95f7fa5fa0 RCX: 00007f95f7d8bb7c [ 206.426918][ T8063] RDX: 000000000000000f RSI: 00007f95f8afe0a0 RDI: 0000000000000007 [ 206.426931][ T8063] RBP: 00007f95f8afe090 R08: 0000000000000000 R09: 0000000000000000 [ 206.426944][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.426955][ T8063] R13: 0000000000000000 R14: 00007f95f7fa5fa0 R15: 00007fff41a1e028 [ 206.426995][ T8063] [ 207.132812][ T8072] netlink: 60 bytes leftover after parsing attributes in process `syz.1.648'. [ 207.165450][ T8070] netlink: 60 bytes leftover after parsing attributes in process `syz.1.648'. [ 207.199217][ T8073] netlink: 763 bytes leftover after parsing attributes in process `syz.2.649'. [ 207.212469][ T8075] delete_channel: no stack [ 207.218416][ T8075] delete_channel: no stack [ 207.240103][ T8075] netlink: 'syz.4.651': attribute type 10 has an invalid length. [ 207.273077][ T8075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.651'. [ 207.339134][ T8075] bond0: (slave dummy0): Releasing backup interface [ 207.376405][ T8075] bridge0: port 3(dummy0) entered blocking state [ 207.383182][ T8075] bridge0: port 3(dummy0) entered disabled state [ 207.390585][ T8075] dummy0: entered allmulticast mode [ 207.400699][ T8075] dummy0: entered promiscuous mode [ 208.356540][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.662'. [ 209.103592][ T8126] netlink: 'syz.0.668': attribute type 25 has an invalid length. [ 209.129220][ T8130] netlink: 2 bytes leftover after parsing attributes in process `syz.3.669'. [ 209.147975][ T55] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 209.446234][ T8145] FAULT_INJECTION: forcing a failure. [ 209.446234][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 209.497541][ T8145] CPU: 0 UID: 0 PID: 8145 Comm: syz.3.674 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 209.497569][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 209.497580][ T8145] Call Trace: [ 209.497587][ T8145] [ 209.497595][ T8145] dump_stack_lvl+0x241/0x360 [ 209.497633][ T8145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.497668][ T8145] ? __pfx__printk+0x10/0x10 [ 209.497696][ T8145] ? ref_tracker_alloc+0x316/0x4c0 [ 209.497718][ T8145] should_fail_ex+0x424/0x570 [ 209.497740][ T8145] should_failslab+0xac/0x100 [ 209.497766][ T8145] kmem_cache_alloc_noprof+0x78/0x390 [ 209.497789][ T8145] ? skb_clone+0x20c/0x390 [ 209.497812][ T8145] skb_clone+0x20c/0x390 [ 209.497833][ T8145] __netlink_deliver_tap+0x3c4/0x7f0 [ 209.497867][ T8145] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.497888][ T8145] netlink_deliver_tap+0x19d/0x1b0 [ 209.497912][ T8145] netlink_sendskb+0x68/0x140 [ 209.497933][ T8145] netlink_unicast+0x39f/0x9a0 [ 209.497951][ T8145] ? __asan_memcpy+0x40/0x70 [ 209.497976][ T8145] ? __pfx_netlink_unicast+0x10/0x10 [ 209.498005][ T8145] netlink_rcv_skb+0x296/0x480 [ 209.498028][ T8145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.498053][ T8145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.498092][ T8145] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.498117][ T8145] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.498141][ T8145] netlink_unicast+0x7f8/0x9a0 [ 209.498170][ T8145] ? __pfx_netlink_unicast+0x10/0x10 [ 209.498192][ T8145] ? skb_put+0x114/0x1f0 [ 209.498213][ T8145] netlink_sendmsg+0x8c3/0xcd0 [ 209.498248][ T8145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.498275][ T8145] ? aa_sock_msg_perm+0x91/0x160 [ 209.498304][ T8145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.498324][ T8145] __sock_sendmsg+0x221/0x270 [ 209.498349][ T8145] ____sys_sendmsg+0x523/0x860 [ 209.498376][ T8145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.498391][ T8145] ? __fget_files+0x2a/0x420 [ 209.498409][ T8145] ? __fget_files+0x2a/0x420 [ 209.498432][ T8145] __sys_sendmsg+0x271/0x360 [ 209.498460][ T8145] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.498528][ T8145] ? do_syscall_64+0xb6/0x230 [ 209.498550][ T8145] do_syscall_64+0xf3/0x230 [ 209.498574][ T8145] ? clear_bhb_loop+0x45/0xa0 [ 209.498594][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.498610][ T8145] RIP: 0033:0x7fc62258d169 [ 209.498625][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.498639][ T8145] RSP: 002b:00007fc623405038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.498656][ T8145] RAX: ffffffffffffffda RBX: 00007fc6227a5fa0 RCX: 00007fc62258d169 [ 209.498668][ T8145] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 209.498679][ T8145] RBP: 00007fc623405090 R08: 0000000000000000 R09: 0000000000000000 [ 209.498689][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.498698][ T8145] R13: 0000000000000000 R14: 00007fc6227a5fa0 R15: 00007ffdd03ec5a8 [ 209.498725][ T8145] [ 210.319586][ T8154] netlink: 'syz.3.676': attribute type 4 has an invalid length. [ 211.044167][ T5850] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 211.049507][ T8175] netlink: 60 bytes leftover after parsing attributes in process `syz.4.683'. [ 211.126540][ T8174] netlink: 763 bytes leftover after parsing attributes in process `syz.0.681'. [ 211.145673][ T8173] netlink: 60 bytes leftover after parsing attributes in process `syz.4.683'. [ 211.333641][ T8181] FAULT_INJECTION: forcing a failure. [ 211.333641][ T8181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.347183][ T8181] CPU: 0 UID: 0 PID: 8181 Comm: syz.3.686 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 211.347211][ T8181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 211.347233][ T8181] Call Trace: [ 211.347241][ T8181] [ 211.347250][ T8181] dump_stack_lvl+0x241/0x360 [ 211.347289][ T8181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.347320][ T8181] ? __pfx__printk+0x10/0x10 [ 211.347361][ T8181] should_fail_ex+0x424/0x570 [ 211.347389][ T8181] _copy_to_user+0x31/0xb0 [ 211.347422][ T8181] simple_read_from_buffer+0xc4/0x170 [ 211.347457][ T8181] proc_fail_nth_read+0x1ef/0x260 [ 211.347483][ T8181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.347509][ T8181] ? rw_verify_area+0x246/0x630 [ 211.347531][ T8181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.347555][ T8181] vfs_read+0x21f/0xb90 [ 211.347585][ T8181] ? __pfx___mutex_lock+0x10/0x10 [ 211.347610][ T8181] ? __pfx_vfs_read+0x10/0x10 [ 211.347636][ T8181] ? __fget_files+0x2a/0x420 [ 211.347656][ T8181] ? __fget_files+0x39d/0x420 [ 211.347673][ T8181] ? __fget_files+0x2a/0x420 [ 211.347700][ T8181] ksys_read+0x19d/0x2d0 [ 211.347726][ T8181] ? __pfx_ksys_read+0x10/0x10 [ 211.347756][ T8181] ? do_syscall_64+0xb6/0x230 [ 211.347784][ T8181] do_syscall_64+0xf3/0x230 [ 211.347808][ T8181] ? clear_bhb_loop+0x45/0xa0 [ 211.347833][ T8181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.347852][ T8181] RIP: 0033:0x7fc62258bb7c [ 211.347871][ T8181] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 211.347888][ T8181] RSP: 002b:00007fc623405030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.347910][ T8181] RAX: ffffffffffffffda RBX: 00007fc6227a5fa0 RCX: 00007fc62258bb7c [ 211.347925][ T8181] RDX: 000000000000000f RSI: 00007fc6234050a0 RDI: 0000000000000004 [ 211.347938][ T8181] RBP: 00007fc623405090 R08: 0000000000000000 R09: 0000000000000000 [ 211.347950][ T8181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.347962][ T8181] R13: 0000000000000000 R14: 00007fc6227a5fa0 R15: 00007ffdd03ec5a8 [ 211.347994][ T8181] [ 211.744165][ T8180] netlink: 'syz.4.685': attribute type 25 has an invalid length. [ 211.943084][ T8193] netlink: 'syz.0.690': attribute type 4 has an invalid length. [ 212.225073][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 212.231211][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 212.238197][ T5850] Bluetooth: hci1: command 0x0406 tx timeout [ 212.244260][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 212.251146][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 212.365224][ T8204] netlink: 'syz.0.694': attribute type 29 has an invalid length. [ 212.512930][ T8213] netlink: 60 bytes leftover after parsing attributes in process `syz.1.695'. [ 212.533488][ T8211] netlink: 60 bytes leftover after parsing attributes in process `syz.1.695'. [ 212.592633][ T8215] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 212.631916][ T8215] syzkaller0: linktype set to 778 [ 212.649509][ T8219] netlink: 763 bytes leftover after parsing attributes in process `syz.2.698'. [ 212.663207][ T8220] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 213.042397][ T8241] netlink: 'syz.1.704': attribute type 4 has an invalid length. [ 213.091259][ T8240] netlink: 'syz.0.703': attribute type 25 has an invalid length. [ 213.366416][ T8252] netlink: 'syz.0.707': attribute type 29 has an invalid length. [ 213.468600][ T8254] netlink: 'syz.1.708': attribute type 21 has an invalid length. [ 213.519188][ T8254] netlink: 156 bytes leftover after parsing attributes in process `syz.1.708'. [ 213.528466][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 213.623599][ T8264] netlink: 763 bytes leftover after parsing attributes in process `syz.0.711'. [ 214.436352][ T8279] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.716'. [ 214.528270][ T8280] netlink: 1 bytes leftover after parsing attributes in process `syz.4.713'. [ 214.587487][ T8284] netlink: 'syz.0.718': attribute type 25 has an invalid length. [ 214.681469][ T8286] netlink: 'syz.3.719': attribute type 4 has an invalid length. [ 214.703120][ T8289] netlink: 'syz.1.720': attribute type 29 has an invalid length. [ 215.007083][ T8299] netlink: 763 bytes leftover after parsing attributes in process `syz.2.725'. [ 217.059048][ T8349] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 217.590790][ T8365] validate_nla: 5 callbacks suppressed [ 217.590815][ T8365] netlink: 'syz.1.746': attribute type 21 has an invalid length. [ 217.654749][ T8365] IPv6: NLM_F_CREATE should be specified when creating new route [ 217.662665][ T8365] IPv6: Can't replace route, no match found [ 217.717913][ T8370] netlink: 'syz.4.747': attribute type 10 has an invalid length. [ 217.737186][ T8373] netlink: 'syz.2.748': attribute type 29 has an invalid length. [ 217.748493][ T8372] netlink: 'syz.3.749': attribute type 4 has an invalid length. [ 217.758164][ T8370] dummy0: left allmulticast mode [ 217.758220][ T8370] dummy0: left promiscuous mode [ 217.758477][ T8370] bridge0: port 3(dummy0) entered disabled state [ 217.806062][ T8370] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 217.828964][ T8373] netlink: 'syz.2.748': attribute type 29 has an invalid length. [ 217.850857][ T8376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.750'. [ 217.944392][ T8377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 218.143261][ T8386] netlink: 'syz.2.751': attribute type 25 has an invalid length. [ 218.432877][ T8389] pimreg0: tun_chr_ioctl cmd 1074025680 [ 219.121682][ T8402] syzkaller0: entered promiscuous mode [ 219.149251][ T8402] syzkaller0: entered allmulticast mode [ 219.197725][ T8409] netlink: 'syz.2.758': attribute type 27 has an invalid length. [ 219.656634][ T8414] netlink: 'syz.3.761': attribute type 29 has an invalid length. [ 219.730477][ T8415] netlink: 'syz.3.761': attribute type 29 has an invalid length. [ 219.855064][ T8419] netlink: 'syz.0.763': attribute type 10 has an invalid length. [ 219.973221][ T8419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 220.061127][ T8421] sit0: entered allmulticast mode [ 220.169801][ T8423] sit0: entered promiscuous mode [ 222.997404][ T8474] validate_nla: 5 callbacks suppressed [ 222.997805][ T8474] netlink: 'syz.4.780': attribute type 25 has an invalid length. [ 223.229884][ T8473] netlink: 763 bytes leftover after parsing attributes in process `syz.2.781'. [ 223.545348][ T8490] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 223.585795][ T8490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.651081][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.752052][ T8498] netlink: 'syz.4.790': attribute type 10 has an invalid length. [ 223.756270][ T8490] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 223.782333][ T8494] netlink: 'syz.1.788': attribute type 29 has an invalid length. [ 223.793366][ T8496] netlink: 'syz.1.788': attribute type 29 has an invalid length. [ 224.071736][ T8509] netlink: 'syz.4.792': attribute type 16 has an invalid length. [ 224.100520][ T8509] netlink: 156 bytes leftover after parsing attributes in process `syz.4.792'. [ 224.331644][ T8520] netlink: 763 bytes leftover after parsing attributes in process `syz.0.798'. [ 224.729006][ T7097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.732181][ T8533] netlink: 'syz.3.802': attribute type 10 has an invalid length. [ 224.800281][ T8530] netlink: 763 bytes leftover after parsing attributes in process `syz.4.800'. [ 224.841739][ T8533] bridge0: port 3(dummy0) entered disabled state [ 224.861141][ T8533] dummy0: left allmulticast mode [ 224.882035][ T8533] dummy0: left promiscuous mode [ 224.888623][ T8533] bridge0: port 3(dummy0) entered disabled state [ 224.905374][ T8533] : (slave dummy0): Enslaving as an active interface with an up link [ 225.048364][ T7097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.477481][ T7097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.637181][ T7097] netdevsim netdevsim2 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.951053][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.960273][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.969000][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.005590][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.014046][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.486723][ T7097] bridge_slave_1: left allmulticast mode [ 226.492699][ T7097] bridge_slave_1: left promiscuous mode [ 226.545660][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.579639][ T7097] bridge_slave_0: left allmulticast mode [ 226.593326][ T7097] bridge_slave_0: left promiscuous mode [ 226.601788][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.604159][ T8578] netlink: 'syz.0.817': attribute type 10 has an invalid length. [ 226.720614][ T8580] netlink: 140 bytes leftover after parsing attributes in process `syz.3.818'. [ 226.805971][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.815349][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.824459][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.833639][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.842803][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.851963][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.861119][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.870348][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.879496][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 226.888647][ T8582] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 227.482529][ T7097]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.495037][ T7097]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.507258][ T7097]  (unregistering): (slave dummy0): Releasing backup interface [ 227.517049][ T7097]  (unregistering): Released all slaves [ 227.702431][ T8591] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.821'. [ 228.070431][ T5845] Bluetooth: hci0: command tx timeout [ 228.238554][ T8554] chnl_net:caif_netlink_parms(): no params data found [ 228.573170][ T8612] netlink: 'syz.4.825': attribute type 21 has an invalid length. [ 229.244469][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.262748][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.285378][ T8554] bridge_slave_0: entered allmulticast mode [ 229.294305][ T8554] bridge_slave_0: entered promiscuous mode [ 229.446966][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.454245][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.478855][ T8554] bridge_slave_1: entered allmulticast mode [ 229.506674][ T8554] bridge_slave_1: entered promiscuous mode [ 229.734182][ T8650] netlink: 'syz.3.835': attribute type 3 has an invalid length. [ 229.759526][ T8650] netlink: 'syz.3.835': attribute type 1 has an invalid length. [ 229.804882][ T8650] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.835'. [ 229.942810][ T8659] netlink: 'syz.4.837': attribute type 27 has an invalid length. [ 230.154867][ T5845] Bluetooth: hci0: command tx timeout [ 230.570737][ T7097] hsr_slave_0: left promiscuous mode [ 230.605884][ T7097] hsr_slave_1: left promiscuous mode [ 230.650412][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.678211][ T7097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.743652][ T7097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.770013][ T7097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.812068][ T7097] veth1_macvtap: left promiscuous mode [ 230.826957][ T7097] veth0_macvtap: left promiscuous mode [ 230.834085][ T7097] veth1_vlan: left promiscuous mode [ 230.954091][ T8676] netlink: 'syz.3.839': attribute type 21 has an invalid length. [ 232.103662][ T7097] team0 (unregistering): Port device team_slave_1 removed [ 232.140712][ T7097] team0 (unregistering): Port device team_slave_0 removed [ 232.219451][ T5845] Bluetooth: hci0: command tx timeout [ 232.514842][ T8648] netlink: 763 bytes leftover after parsing attributes in process `syz.0.834'. [ 232.530624][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.567106][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.627335][ T8676] netlink: 144 bytes leftover after parsing attributes in process `syz.3.839'. [ 232.929012][ T8554] team0: Port device team_slave_0 added [ 232.990296][ T8554] team0: Port device team_slave_1 added [ 233.142480][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.165649][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.270524][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.311564][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.364474][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.478933][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.773166][ T8554] hsr_slave_0: entered promiscuous mode [ 233.821625][ T8554] hsr_slave_1: entered promiscuous mode [ 233.972753][ T5845] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 234.296789][ T5845] Bluetooth: hci0: command tx timeout [ 234.873906][ T8737] netlink: 'syz.3.854': attribute type 25 has an invalid length. [ 235.257223][ T8746] tun0: tun_chr_ioctl cmd 1074025675 [ 235.262583][ T8746] tun0: persist disabled [ 235.378752][ T8751] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.857'. [ 235.397026][ T8746] tun0: tun_chr_ioctl cmd 2147767517 [ 235.425745][ T8751] net_ratelimit: 3319 callbacks suppressed [ 235.425766][ T8751] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 235.469448][ T8751] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 236.035717][ T8554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.047635][ T8554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.061075][ T8554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.103106][ T8554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.512462][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.567196][ T8782] netlink: 'syz.1.867': attribute type 25 has an invalid length. [ 236.609414][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.651571][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.658840][ T7115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.672895][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.680137][ T7115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.021217][ T8554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.048932][ T5845] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 237.765536][ T8811] netlink: 'syz.3.873': attribute type 2 has an invalid length. [ 238.915987][ T8826] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.875'. [ 239.851360][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.301884][ T8554] veth0_vlan: entered promiscuous mode [ 240.460496][ T8554] veth1_vlan: entered promiscuous mode [ 240.767502][ T8554] veth0_macvtap: entered promiscuous mode [ 240.838953][ T8554] veth1_macvtap: entered promiscuous mode [ 241.027202][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.078403][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.121533][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.183576][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.224738][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.270798][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.319718][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.396946][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.456079][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.497316][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.554754][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.604998][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.646592][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.691545][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.761109][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.868251][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.967038][ T8554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.057191][ T8554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.088987][ T8554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.139982][ T8554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.379495][ T8878] netlink: 'syz.4.883': attribute type 25 has an invalid length. [ 244.463981][ T7122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.515332][ T7122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.903180][ T7115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.937159][ T7115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.098926][ T8898] netlink: 2 bytes leftover after parsing attributes in process `syz.3.887'. [ 245.551222][ T8910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.891'. [ 245.603233][ T8908] netlink: 60 bytes leftover after parsing attributes in process `syz.3.891'. [ 246.313484][ T8939] netlink: 'syz.0.896': attribute type 25 has an invalid length. [ 246.833577][ T8955] netlink: 60 bytes leftover after parsing attributes in process `syz.0.900'. [ 246.868822][ T8956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.900'. [ 247.718059][ T8979] FAULT_INJECTION: forcing a failure. [ 247.718059][ T8979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.741336][ T8980] netlink: 60 bytes leftover after parsing attributes in process `syz.0.903'. [ 247.779618][ T8977] netlink: 60 bytes leftover after parsing attributes in process `syz.0.903'. [ 247.806249][ T8979] CPU: 1 UID: 0 PID: 8979 Comm: syz.4.906 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 247.806281][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.806303][ T8979] Call Trace: [ 247.806316][ T8979] [ 247.806329][ T8979] dump_stack_lvl+0x241/0x360 [ 247.806392][ T8979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.806434][ T8979] ? __pfx__printk+0x10/0x10 [ 247.806561][ T8979] should_fail_ex+0x424/0x570 [ 247.806626][ T8979] _copy_from_user+0x2d/0xb0 [ 247.806678][ T8979] sock_copy_user_timeval+0x2f8/0x590 [ 247.806737][ T8979] ? __pfx_sock_copy_user_timeval+0x10/0x10 [ 247.806855][ T8979] sock_set_timeout+0xa9/0x310 [ 247.806921][ T8979] ? __pfx_sock_set_timeout+0x10/0x10 [ 247.807026][ T8979] sk_setsockopt+0x19be/0x3340 [ 247.807124][ T8979] ? __pfx_sk_setsockopt+0x10/0x10 [ 247.807207][ T8979] ? aa_sk_perm+0x96f/0xac0 [ 247.807264][ T8979] ? perf_trace_lock+0x13d/0x4a0 [ 247.807298][ T8979] ? ksys_write+0x24e/0x2d0 [ 247.807334][ T8979] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.807391][ T8979] ? __pfx_perf_trace_lock+0x10/0x10 [ 247.807414][ T8979] ? aa_sock_opt_perm+0x79/0x120 [ 247.807492][ T8979] do_sock_setsockopt+0x2fe/0x710 [ 247.807560][ T8979] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 247.807579][ T8979] ? __fget_files+0x2a/0x420 [ 247.807634][ T8979] ? __fget_files+0x39d/0x420 [ 247.807663][ T8979] ? __fget_files+0x2a/0x420 [ 247.807744][ T8979] __x64_sys_setsockopt+0x1ee/0x280 [ 247.807818][ T8979] do_syscall_64+0xf3/0x230 [ 247.807852][ T8979] ? clear_bhb_loop+0x45/0xa0 [ 247.807896][ T8979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.807919][ T8979] RIP: 0033:0x7f95f7d8d169 [ 247.807946][ T8979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.807963][ T8979] RSP: 002b:00007f95f8afe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.807985][ T8979] RAX: ffffffffffffffda RBX: 00007f95f7fa5fa0 RCX: 00007f95f7d8d169 [ 247.808000][ T8979] RDX: 0000000000000015 RSI: 0000000000000001 RDI: 0000000000000005 [ 247.808012][ T8979] RBP: 00007f95f8afe090 R08: 0000000000000010 R09: 0000000000000000 [ 247.808024][ T8979] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 247.808035][ T8979] R13: 0000000000000000 R14: 00007f95f7fa5fa0 R15: 00007fff41a1e028 [ 247.808136][ T8979] [ 247.827655][ T8976] netlink: 'syz.1.904': attribute type 29 has an invalid length. [ 248.159143][ T8982] netlink: 47 bytes leftover after parsing attributes in process `syz.1.904'. [ 248.169166][ T8983] netlink: 47 bytes leftover after parsing attributes in process `syz.1.904'. [ 248.184841][ T8976] netlink: 'syz.1.904': attribute type 29 has an invalid length. [ 248.246643][ T8976] netlink: 'syz.1.904': attribute type 29 has an invalid length. [ 248.813501][ T8989] netlink: 'syz.0.909': attribute type 25 has an invalid length. [ 249.139242][ T5845] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 249.338736][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 249.355487][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 249.365012][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 249.374088][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 249.383862][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.704367][ T9018] netlink: 60 bytes leftover after parsing attributes in process `syz.3.917'. [ 250.094945][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 250.823592][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.832837][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.851962][ T9007] bridge_slave_0: entered allmulticast mode [ 250.879793][ T9007] bridge_slave_0: entered promiscuous mode [ 250.927818][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.956553][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.000248][ T9007] bridge_slave_1: entered allmulticast mode [ 251.016800][ T9007] bridge_slave_1: entered promiscuous mode [ 251.045103][ T9043] netlink: 'syz.4.922': attribute type 25 has an invalid length. [ 251.132936][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.174272][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.206800][ T9056] netlink: 'syz.0.925': attribute type 2 has an invalid length. [ 251.243562][ T9056] netlink: 'syz.0.925': attribute type 8 has an invalid length. [ 251.264844][ T9056] netlink: 'syz.0.925': attribute type 9 has an invalid length. [ 251.279958][ T9056] netlink: 'syz.0.925': attribute type 10 has an invalid length. [ 251.313945][ T9056] netlink: 'syz.0.925': attribute type 11 has an invalid length. [ 251.415778][ T5857] Bluetooth: hci0: command tx timeout [ 251.562197][ T9007] team0: Port device team_slave_0 added [ 251.672362][ T9007] team0: Port device team_slave_1 added [ 251.682213][ T5857] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 251.850229][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.874751][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.911741][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.955007][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.984094][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.118208][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.498060][ T9073] __nla_validate_parse: 2 callbacks suppressed [ 252.498084][ T9073] netlink: 763 bytes leftover after parsing attributes in process `syz.4.931'. [ 252.726556][ T9007] hsr_slave_0: entered promiscuous mode [ 252.773081][ T9007] hsr_slave_1: entered promiscuous mode [ 252.795048][ T9007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.834953][ T9007] Cannot create hsr debugfs directory [ 253.236525][ T9086] netlink: 2 bytes leftover after parsing attributes in process `syz.3.933'. [ 253.494754][ T5857] Bluetooth: hci0: command tx timeout [ 253.834470][ T9007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.051610][ T9007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.348327][ T9007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.686271][ T9105] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.941'. [ 254.707871][ T9007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.745203][ T9105] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.941'. [ 254.853590][ T9105] netlink: 24032 bytes leftover after parsing attributes in process `syz.0.941'. [ 255.529683][ T9107] delete_channel: no stack [ 255.575405][ T5857] Bluetooth: hci0: command tx timeout [ 256.031175][ T9007] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.170541][ T9007] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.272669][ T9007] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.710009][ T9121] netlink: 'syz.0.945': attribute type 25 has an invalid length. [ 256.766598][ T9007] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.654856][ T5857] Bluetooth: hci0: command tx timeout [ 257.699741][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.796520][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.830604][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.837862][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.903412][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.910774][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.942803][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.128598][ T5857] Bluetooth: hci1: unexpected event 0x03 length: 15 > 11 [ 259.493559][ T9007] veth0_vlan: entered promiscuous mode [ 259.585017][ T9166] netlink: 'syz.4.958': attribute type 25 has an invalid length. [ 259.650123][ T9007] veth1_vlan: entered promiscuous mode [ 259.691569][ T9169] sit0: entered allmulticast mode [ 259.837556][ T9170] sit0: entered promiscuous mode [ 260.578574][ T9177] netlink: 763 bytes leftover after parsing attributes in process `syz.3.960'. [ 260.702707][ T9007] veth0_macvtap: entered promiscuous mode [ 260.757544][ T9007] veth1_macvtap: entered promiscuous mode [ 260.832318][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.866736][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.901777][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.940379][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.951336][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.957981][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.975062][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.002121][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.012672][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.044771][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.069921][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.112020][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.164729][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.207898][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.250426][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.305233][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.354668][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.385177][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.414907][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.446803][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.474590][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.513954][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.574286][ T9189] netlink: 'syz.4.966': attribute type 21 has an invalid length. [ 261.855958][ T9007] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.876262][ T9007] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.894176][ T9007] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.913578][ T9007] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.826393][ T9203] netlink: 227 bytes leftover after parsing attributes in process `syz.3.970'. [ 262.880738][ T9214] netlink: 'syz.4.972': attribute type 25 has an invalid length. [ 263.173893][ T7115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.177563][ T9221] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 263.235470][ T7115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.276978][ T9221] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.973'. [ 264.666540][ T7122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.704707][ T7122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.495325][ T9251] netlink: 'syz.4.986': attribute type 25 has an invalid length. [ 267.541987][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 267.556888][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 267.570439][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.597694][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.611123][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 268.548144][ T9285] netlink: 'syz.0.995': attribute type 1 has an invalid length. [ 268.573543][ T9285] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.995'. [ 269.655717][ T5845] Bluetooth: hci0: command tx timeout [ 271.734699][ T5845] Bluetooth: hci0: command tx timeout [ 272.883820][ T9295] netlink: 'syz.3.997': attribute type 21 has an invalid length. [ 273.155001][ T9302] netlink: 'syz.3.1000': attribute type 21 has an invalid length. [ 273.162893][ T9302] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1000'. [ 273.175277][ T9302] netlink: 'syz.3.1000': attribute type 5 has an invalid length. [ 273.211245][ T9302] netlink: 'syz.3.1000': attribute type 6 has an invalid length. [ 273.225227][ T9302] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1000'. [ 273.243772][ T9304] netlink: 'syz.4.999': attribute type 25 has an invalid length. [ 273.614047][ T9271] chnl_net:caif_netlink_parms(): no params data found [ 273.814801][ T5845] Bluetooth: hci0: command tx timeout [ 273.833224][ T9326] netlink: 'syz.0.1006': attribute type 37 has an invalid length. [ 273.852925][ T9326] netlink: 'syz.0.1006': attribute type 10 has an invalid length. [ 273.866287][ T9271] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.873639][ T9271] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.882000][ T9326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1006'. [ 273.891434][ T9271] bridge_slave_0: entered allmulticast mode [ 273.906126][ T9271] bridge_slave_0: entered promiscuous mode [ 273.917803][ T9271] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.925450][ T9271] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.933059][ T9271] bridge_slave_1: entered allmulticast mode [ 273.942368][ T9271] bridge_slave_1: entered promiscuous mode [ 273.961998][ T9326] batman_adv: batadv0: Adding interface: virt_wifi0 [ 273.973076][ T9326] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.002089][ T9326] batman_adv: batadv0: Interface activated: virt_wifi0 [ 274.075027][ T9332] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1008'. [ 274.105714][ T9334] netlink: 'syz.3.1009': attribute type 15 has an invalid length. [ 274.131809][ T9334] netlink: 'syz.3.1009': attribute type 7 has an invalid length. [ 274.152187][ T9271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.251487][ T9271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.353932][ T9271] team0: Port device team_slave_0 added [ 274.365853][ T9271] team0: Port device team_slave_1 added [ 274.499373][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.529384][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.579457][ T9271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.592782][ T9271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.599977][ T9271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.642432][ T9271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.679826][ T9347] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1015'. [ 274.859597][ T9352] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1016'. [ 274.878109][ T9271] hsr_slave_0: entered promiscuous mode [ 274.889449][ T9271] hsr_slave_1: entered promiscuous mode [ 274.897953][ T9271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.906555][ T9271] Cannot create hsr debugfs directory [ 275.849216][ T9271] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.895192][ T5845] Bluetooth: hci0: command tx timeout [ 275.917655][ T9389] netlink: 'syz.3.1029': attribute type 2 has an invalid length. [ 275.931744][ T9389] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1029'. [ 276.120972][ T9271] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.231004][ T9271] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.571288][ T9271] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.626283][ T9418] netlink: 'syz.4.1037': attribute type 10 has an invalid length. [ 276.642675][ T9418] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1037'. [ 276.721467][ T9416] netlink: 'syz.0.1033': attribute type 25 has an invalid length. [ 276.800715][ T9418] bond0: (slave dummy0): Releasing backup interface [ 276.898240][ T9418] bridge0: port 3(dummy0) entered blocking state [ 276.918937][ T9418] bridge0: port 3(dummy0) entered disabled state [ 276.925704][ T9418] dummy0: entered allmulticast mode [ 276.932877][ T9418] dummy0: entered promiscuous mode [ 277.097787][ T9271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.223436][ T9271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.274315][ T9429] netlink: 'syz.4.1041': attribute type 21 has an invalid length. [ 277.360969][ T9427] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1040'. [ 277.451390][ T9429] netlink: 'syz.4.1041': attribute type 1 has an invalid length. [ 277.504858][ T9271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.544649][ T9426] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1040'. [ 277.555221][ T9430] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1040'. [ 277.625295][ T9271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.673325][ T9429] netlink: 'syz.4.1041': attribute type 10 has an invalid length. [ 277.748332][ T9437] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1043'. [ 278.078094][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.099852][ T9429] bridge_slave_1: left allmulticast mode [ 278.109011][ T9429] bridge_slave_1: left promiscuous mode [ 278.114956][ T9429] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.137170][ T9429] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 278.517561][ T9271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.558707][ T9271] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.594363][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.601682][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.672344][ T7121] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.679659][ T7121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.122432][ T9470] validate_nla: 1 callbacks suppressed [ 279.122455][ T9470] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 279.182680][ T9470] __nla_validate_parse: 1 callbacks suppressed [ 279.182699][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 279.218619][ T9271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.323632][ T9271] veth0_vlan: entered promiscuous mode [ 279.376690][ T9271] veth1_vlan: entered promiscuous mode [ 279.472211][ T9271] veth0_macvtap: entered promiscuous mode [ 279.484874][ T9271] veth1_macvtap: entered promiscuous mode [ 279.522000][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.536010][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.546956][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.557863][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.568640][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.582137][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.592632][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.603483][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.613602][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.624658][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.638209][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.681800][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.693209][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.703196][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.718604][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.729697][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.753201][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.763932][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.781748][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.792423][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.794928][ T9478] netlink: 'syz.0.1054': attribute type 2 has an invalid length. [ 279.809587][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.811637][ T9478] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1054'. [ 279.827220][ T9271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.850954][ T9271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.865194][ T9271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.939624][ T9271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.965968][ T9271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.993125][ T9271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.004736][ T9271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.462474][ T7113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.480664][ T7113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.503898][ T9495] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1061'. [ 280.533805][ T9497] dummy0: left allmulticast mode [ 280.540468][ T9497] dummy0: left promiscuous mode [ 280.548906][ T9497] bridge0: port 3(dummy0) entered disabled state [ 280.596003][ T9497] bridge_slave_0: left allmulticast mode [ 280.601723][ T9497] bridge_slave_0: left promiscuous mode [ 280.692151][ T9497] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.908077][ T9504] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 280.938351][ T9504] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 280.954728][ T9509] netlink: 'syz.3.1065': attribute type 2 has an invalid length. [ 280.985696][ T9509] netlink: 51 bytes leftover after parsing attributes in process `syz.3.1065'. [ 281.007292][ T9507] netlink: 'syz.1.1063': attribute type 25 has an invalid length. [ 281.291437][ T7114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.310369][ T7114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.565528][ T9543] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 282.574093][ T9543] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1076'. [ 282.599685][ T9544] netlink: 'syz.1.1077': attribute type 25 has an invalid length. [ 283.355476][ T9552] netlink: 'syz.4.1081': attribute type 10 has an invalid length. [ 283.363400][ T9552] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1081'. [ 283.777108][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.786259][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.798706][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.808883][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.817986][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.645073][ T9569] chnl_net:caif_netlink_parms(): no params data found [ 285.906144][ T5857] Bluetooth: hci0: command tx timeout [ 287.976263][ T5857] Bluetooth: hci0: command tx timeout [ 288.072454][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.090984][ T9569] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.104731][ T9569] bridge_slave_0: entered allmulticast mode [ 288.113233][ T9569] bridge_slave_0: entered promiscuous mode [ 288.150075][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.177925][ T9569] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.221285][ T9569] bridge_slave_1: entered allmulticast mode [ 288.231712][ T9569] bridge_slave_1: entered promiscuous mode [ 288.290555][ T9615] netlink: 'syz.3.1097': attribute type 12 has an invalid length. [ 288.306660][ T9618] netlink: 'syz.0.1096': attribute type 2 has an invalid length. [ 288.315034][ T9615] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.1097'. [ 289.253862][ T9569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.326077][ T9569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.043998][ T9569] team0: Port device team_slave_0 added [ 290.055712][ T5857] Bluetooth: hci0: command tx timeout [ 290.099257][ T9569] team0: Port device team_slave_1 added [ 290.174905][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.183256][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.230294][ T9569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.244109][ T9569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.258978][ T9569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.320509][ T9569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.506089][ T9569] hsr_slave_0: entered promiscuous mode [ 290.513538][ T9569] hsr_slave_1: entered promiscuous mode [ 290.533335][ T9569] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.568330][ T9569] Cannot create hsr debugfs directory [ 292.143454][ T5845] Bluetooth: hci0: command tx timeout [ 292.243337][ T9569] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.383522][ T9569] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.512118][ T9569] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.679147][ T9569] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.054436][ T9569] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.071539][ T9569] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.089317][ T9569] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.144431][ T9689] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1122'. [ 293.169423][ T9569] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 294.518815][ T9710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 298.549636][ T9569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.710999][ T9569] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.864148][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.871760][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.990229][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.997967][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.155020][ T9786] netlink: 'syz.4.1142': attribute type 21 has an invalid length. [ 304.258014][ T9786] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1142'. [ 304.341404][ T9789] netlink: 65035 bytes leftover after parsing attributes in process `syz.4.1142'. [ 306.072202][ T9804] netlink: 'syz.1.1148': attribute type 29 has an invalid length. [ 306.183436][ T9804] netlink: 'syz.1.1148': attribute type 29 has an invalid length. [ 306.296575][ T9805] netlink: 'syz.1.1148': attribute type 29 has an invalid length. [ 306.308637][ T9805] netlink: 'syz.1.1148': attribute type 29 has an invalid length. [ 309.455696][ T9827] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1155'. [ 309.475389][ T9828] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1155'. [ 311.289186][ T9843] netlink: 'syz.0.1160': attribute type 10 has an invalid length. [ 311.298591][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 311.316147][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 311.334447][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 311.367007][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 311.385683][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 311.405055][ T9843] bridge0: port 3(ªªªªªª) entered blocking state [ 311.411879][ T9843] bridge0: port 3(ªªªªªª) entered disabled state [ 311.436221][ T9843] netdevsim netdevsim0 ªªªªªª: entered allmulticast mode [ 311.489302][ T9843] netdevsim netdevsim0 ªªªªªª: entered promiscuous mode [ 312.866640][ T9854] netlink: 'syz.0.1163': attribute type 3 has an invalid length. [ 312.908244][ T9854] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1163'. [ 313.286534][ T9862] netlink: 'syz.4.1164': attribute type 3 has an invalid length. [ 313.294372][ T9862] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1164'. [ 313.494884][ T5857] Bluetooth: hci0: command tx timeout [ 313.710913][ T9841] chnl_net:caif_netlink_parms(): no params data found [ 314.627019][ T9875] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 314.647491][ T9876] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 314.832301][ T9891] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1171'. [ 315.031406][ T9890] netlink: 'syz.1.1173': attribute type 39 has an invalid length. [ 315.053604][ T9877] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 315.089688][ T9891] caif0: entered promiscuous mode [ 315.095461][ T9891] caif0: entered allmulticast mode [ 315.200176][ T9878] netlink: 'syz.0.1169': attribute type 29 has an invalid length. [ 315.351791][ T9841] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.363447][ T9841] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.427381][ T9841] bridge_slave_0: entered allmulticast mode [ 315.458595][ T9900] netlink: 'syz.0.1175': attribute type 10 has an invalid length. [ 315.468138][ T9841] bridge_slave_0: entered promiscuous mode [ 315.574793][ T5857] Bluetooth: hci0: command tx timeout [ 315.772149][ T9900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.970239][ T9900] team0: Port device bond0 added [ 316.015505][ T9841] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.024213][ T9841] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.031920][ T9841] bridge_slave_1: entered allmulticast mode [ 316.039835][ T9841] bridge_slave_1: entered promiscuous mode [ 316.284334][ T9841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.321470][ T9841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.608219][ T9920] netlink: 'syz.3.1183': attribute type 11 has an invalid length. [ 316.636277][ T9919] netlink: 'syz.3.1183': attribute type 11 has an invalid length. [ 316.735520][ T9841] team0: Port device team_slave_0 added [ 316.749384][ T9841] team0: Port device team_slave_1 added [ 317.028186][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.066517][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.134684][ T9841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.177135][ T9929] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1186'. [ 317.382238][ T9841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.395251][ T9841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.492917][ T9841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.654900][ T5857] Bluetooth: hci0: command tx timeout [ 317.841893][ T9841] hsr_slave_0: entered promiscuous mode [ 317.866009][ T9841] hsr_slave_1: entered promiscuous mode [ 317.872669][ T9841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.913620][ T9841] Cannot create hsr debugfs directory [ 318.662372][ T9970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1199'. [ 319.193114][ T9968] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1200'. [ 319.220814][ T9970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'. [ 319.610523][ T9841] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 319.736398][ T5857] Bluetooth: hci0: command tx timeout [ 319.881889][ T9841] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.965467][ T9841] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.021891][ T9841] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.442870][ T9841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 320.788444][T10005] netlink: 'syz.3.1210': attribute type 29 has an invalid length. [ 320.841930][ T9841] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.917735][ T7122] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.924970][ T7122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.006151][ T7122] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.013328][ T7122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.778799][T10027] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1215'. [ 321.979806][ T9841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.391696][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.399721][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.517765][T10037] delete_channel: no stack [ 322.662038][T10043] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1221'. [ 322.938481][T10053] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.1225'. [ 323.216443][ T9841] veth0_vlan: entered promiscuous mode [ 323.257098][ T9841] veth1_vlan: entered promiscuous mode [ 323.338127][ T9841] veth0_macvtap: entered promiscuous mode [ 323.360299][ T9841] veth1_macvtap: entered promiscuous mode [ 323.421447][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.434053][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.446164][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.473505][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.491900][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.503990][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.523108][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.547202][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.559549][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.573343][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.605915][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 323.618002][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.631948][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.640746][T10070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1229'. [ 323.672623][T10074] delete_channel: no stack [ 323.677819][T10074] delete_channel: no stack [ 323.695852][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.707818][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.724671][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.749447][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.773319][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.815514][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.842343][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.863554][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.876123][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.887871][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.900510][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.922949][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.943849][ T9841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.954970][ T9841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.972772][ T9841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.058782][ T9841] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.099365][ T9841] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.124694][ T9841] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.133558][ T9841] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.456524][T10094] netlink: 'syz.1.1236': attribute type 21 has an invalid length. [ 324.566921][T10094] netlink: 'syz.1.1236': attribute type 6 has an invalid length. [ 324.594766][T10094] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1236'. [ 324.655680][ T7114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.663573][ T7114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.818680][ T7121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.836053][ T7121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.958911][T10128] Â: renamed from pim6reg1 [ 326.184864][T10138] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1249'. [ 326.740389][T10153] netlink: 'syz.4.1254': attribute type 29 has an invalid length. [ 326.782347][T10152] netlink: 'syz.4.1254': attribute type 29 has an invalid length. [ 326.906553][T10153] netlink: 'syz.4.1254': attribute type 2 has an invalid length. [ 327.010548][T10153] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1254'. [ 328.262347][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1263'. [ 328.499498][T10188] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.1265'. [ 328.520922][T10188] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1265'. [ 328.567855][T10188] netlink: 24032 bytes leftover after parsing attributes in process `syz.3.1265'. [ 328.711265][T10190] bond0: (slave bond_slave_0): Releasing backup interface [ 329.426292][T10200] C: renamed from team_slave_0 [ 329.529240][T10200] netlink: 'syz.1.1268': attribute type 1 has an invalid length. [ 329.581414][T10200] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1268'. [ 330.054413][T10219] netlink: 'syz.5.1274': attribute type 10 has an invalid length. [ 330.106282][T10219] team0: Port device geneve1 added [ 330.585508][T10235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1276'. [ 330.677833][T10242] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1281'. [ 330.766118][T10245] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1282'. [ 336.048887][T10289] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1295'. [ 337.012627][T10310] netlink: 65023 bytes leftover after parsing attributes in process `syz.5.1303'. [ 337.440783][T10327] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1308'. [ 337.459187][T10327] netlink: zone id is out of range [ 337.469951][T10327] netlink: zone id is out of range [ 337.483007][T10327] netlink: get zone limit has 8 unknown bytes [ 337.958211][T10338] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1312'. [ 338.358691][T10352] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 338.379828][T10352] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 338.833769][T10360] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1320'. [ 339.413496][T10381] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1327'. [ 339.439429][T10382] netlink: 'syz.4.1327': attribute type 1 has an invalid length. [ 339.579672][T10392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1330'. [ 339.610175][T10392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1330'. [ 339.657605][T10388] netlink: 763 bytes leftover after parsing attributes in process `syz.5.1328'. [ 339.708384][T10392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1330'. [ 340.807631][T10428] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 341.135268][T10433] netlink: 763 bytes leftover after parsing attributes in process `syz.0.1344'. [ 341.966308][ T5857] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 342.756756][T10488] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1362'. [ 342.956754][T10494] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1364'. [ 342.978492][T10494] netlink: 'syz.4.1364': attribute type 10 has an invalid length. [ 342.994053][T10494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1364'. [ 343.022185][T10494] veth0_vlan: entered allmulticast mode [ 343.050825][T10494] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 344.131780][T10522] netlink: 'syz.5.1372': attribute type 5 has an invalid length. [ 344.543745][T10533] syzkaller0: entered allmulticast mode [ 344.873560][T10546] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1382'. [ 344.910120][T10544] ------------[ cut here ]------------ [ 344.916234][T10544] WARNING: CPU: 0 PID: 10544 at kernel/events/core.c:5572 __free_event+0x50f/0x620 [ 344.925741][T10544] Modules linked in: [ 344.929978][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.1.1383 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 344.941285][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 344.951445][T10544] RIP: 0010:__free_event+0x50f/0x620 [ 344.956901][T10544] Code: ff 48 c7 c7 20 0d df 8e e8 ee a2 a6 ff 43 0f b6 44 25 00 84 c0 0f 85 f5 00 00 00 41 80 26 ef e9 ea fc ff ff e8 52 44 cb ff 90 <0f> 0b 90 42 80 3c 3b 00 0f 85 2d fe ff ff e9 30 fe ff ff e8 39 44 [ 344.978395][T10544] RSP: 0018:ffffc9000b1cf858 EFLAGS: 00010293 [ 344.986332][T10544] RAX: ffffffff81f8132e RBX: 1ffff1100f7daca6 RCX: ffff8880251f0000 [ 344.994384][T10544] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 345.003293][T10544] RBP: 0000000000000003 R08: ffffffff81f810fb R09: 1ffff1100fe06b45 [ 345.011457][T10544] R10: dffffc0000000000 R11: ffffed100fe06b46 R12: ffff88807bed6528 [ 345.019824][T10544] R13: ffff88807bed6530 R14: 1ffff1100f7daca5 R15: dffffc0000000000 [ 345.027956][T10544] FS: 00007faf9f6956c0(0000) GS:ffff888124f97000(0000) knlGS:0000000000000000 [ 345.037033][T10544] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.043669][T10544] CR2: 00007faf9f653d58 CR3: 0000000068420000 CR4: 00000000003526f0 [ 345.051831][T10544] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 345.059976][T10544] DR3: 0000200000000300 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 345.069406][T10544] Call Trace: [ 345.072739][T10544] [ 345.076754][T10544] inherit_event+0x190/0x9d0 [ 345.081403][T10544] ? alloc_perf_context+0x1ac/0x230 [ 345.086810][T10544] inherit_task_group+0x18d/0x4f0 [ 345.091907][T10544] perf_event_init_task+0x244/0x650 [ 345.097428][T10544] ? __pfx_perf_event_init_task+0x10/0x10 [ 345.103210][T10544] ? __asan_memset+0x23/0x50 [ 345.107994][T10544] ? sched_fork+0x102/0x630 [ 345.112579][T10544] copy_process+0x151e/0x3d10 [ 345.117432][T10544] ? copy_process+0xa07/0x3d10 [ 345.122268][T10544] ? __pfx_copy_process+0x10/0x10 [ 345.127470][T10544] ? migrate_enable+0x397/0x520 [ 345.132409][T10544] kernel_clone+0x242/0x930 [ 345.137095][T10544] ? __pfx_kernel_clone+0x10/0x10 [ 345.142188][T10544] ? trace_call_bpf+0xb9/0x8a0 [ 345.147137][T10544] __x64_sys_clone+0x268/0x2e0 [ 345.151969][T10544] ? __pfx___x64_sys_clone+0x10/0x10 [ 345.157398][T10544] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 345.164063][T10544] ? do_syscall_64+0xb6/0x230 [ 345.170307][T10544] do_syscall_64+0xf3/0x230 [ 345.176438][T10544] ? clear_bhb_loop+0x45/0xa0 [ 345.181192][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.187213][T10544] RIP: 0033:0x7faf9e78d169 [ 345.191682][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.211493][T10544] RSP: 002b:00007faf9f694fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 345.220103][T10544] RAX: ffffffffffffffda RBX: 00007faf9e9a6080 RCX: 00007faf9e78d169 [ 345.228259][T10544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ab009400 [ 345.236345][T10544] RBP: 00007faf9e80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.244411][T10544] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.252564][T10544] R13: 0000000000000000 R14: 00007faf9e9a6080 R15: 00007ffef49a6088 [ 345.260787][T10544] [ 345.263876][T10544] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.271205][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.1.1383 Not tainted 6.14.0-syzkaller-gc9661394850d #0 PREEMPT(full) [ 345.282435][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 345.292505][T10544] Call Trace: [ 345.295807][T10544] [ 345.298747][T10544] dump_stack_lvl+0x241/0x360 [ 345.303455][T10544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.308705][T10544] ? __pfx__printk+0x10/0x10 [ 345.313404][T10544] ? vscnprintf+0x5d/0x90 [ 345.317754][T10544] panic+0x349/0x880 [ 345.321665][T10544] ? __warn+0x174/0x4d0 [ 345.325840][T10544] ? __pfx_panic+0x10/0x10 [ 345.330288][T10544] __warn+0x344/0x4d0 [ 345.334286][T10544] ? __free_event+0x50f/0x620 [ 345.338981][T10544] report_bug+0x2b3/0x500 [ 345.343411][T10544] ? __free_event+0x50f/0x620 [ 345.348106][T10544] ? __free_event+0x50f/0x620 [ 345.352803][T10544] ? __free_event+0x511/0x620 [ 345.357501][T10544] handle_bug+0x89/0x170 [ 345.361759][T10544] exc_invalid_op+0x1a/0x50 [ 345.366278][T10544] asm_exc_invalid_op+0x1a/0x20 [ 345.371141][T10544] RIP: 0010:__free_event+0x50f/0x620 [ 345.376447][T10544] Code: ff 48 c7 c7 20 0d df 8e e8 ee a2 a6 ff 43 0f b6 44 25 00 84 c0 0f 85 f5 00 00 00 41 80 26 ef e9 ea fc ff ff e8 52 44 cb ff 90 <0f> 0b 90 42 80 3c 3b 00 0f 85 2d fe ff ff e9 30 fe ff ff e8 39 44 [ 345.396079][T10544] RSP: 0018:ffffc9000b1cf858 EFLAGS: 00010293 [ 345.402165][T10544] RAX: ffffffff81f8132e RBX: 1ffff1100f7daca6 RCX: ffff8880251f0000 [ 345.410148][T10544] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 345.418150][T10544] RBP: 0000000000000003 R08: ffffffff81f810fb R09: 1ffff1100fe06b45 [ 345.426144][T10544] R10: dffffc0000000000 R11: ffffed100fe06b46 R12: ffff88807bed6528 [ 345.434129][T10544] R13: ffff88807bed6530 R14: 1ffff1100f7daca5 R15: dffffc0000000000 [ 345.442121][T10544] ? __free_event+0x2db/0x620 [ 345.446811][T10544] ? __free_event+0x50e/0x620 [ 345.451507][T10544] ? __free_event+0x50e/0x620 [ 345.456197][T10544] inherit_event+0x190/0x9d0 [ 345.460793][T10544] ? alloc_perf_context+0x1ac/0x230 [ 345.466018][T10544] inherit_task_group+0x18d/0x4f0 [ 345.471057][T10544] perf_event_init_task+0x244/0x650 [ 345.476271][T10544] ? __pfx_perf_event_init_task+0x10/0x10 [ 345.482009][T10544] ? __asan_memset+0x23/0x50 [ 345.486607][T10544] ? sched_fork+0x102/0x630 [ 345.491130][T10544] copy_process+0x151e/0x3d10 [ 345.495835][T10544] ? copy_process+0xa07/0x3d10 [ 345.500615][T10544] ? __pfx_copy_process+0x10/0x10 [ 345.505649][T10544] ? migrate_enable+0x397/0x520 [ 345.510526][T10544] kernel_clone+0x242/0x930 [ 345.515054][T10544] ? __pfx_kernel_clone+0x10/0x10 [ 345.520107][T10544] ? trace_call_bpf+0xb9/0x8a0 [ 345.524890][T10544] __x64_sys_clone+0x268/0x2e0 [ 345.529673][T10544] ? __pfx___x64_sys_clone+0x10/0x10 [ 345.534990][T10544] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 345.541606][T10544] ? do_syscall_64+0xb6/0x230 [ 345.546297][T10544] do_syscall_64+0xf3/0x230 [ 345.550816][T10544] ? clear_bhb_loop+0x45/0xa0 [ 345.555505][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.561413][T10544] RIP: 0033:0x7faf9e78d169 [ 345.565841][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.585464][T10544] RSP: 002b:00007faf9f694fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 345.593895][T10544] RAX: ffffffffffffffda RBX: 00007faf9e9a6080 RCX: 00007faf9e78d169 [ 345.601877][T10544] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ab009400 [ 345.609865][T10544] RBP: 00007faf9e80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.617849][T10544] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 345.625832][T10544] R13: 0000000000000000 R14: 00007faf9e9a6080 R15: 00007ffef49a6088 [ 345.633830][T10544] [ 345.637168][T10544] Kernel Offset: disabled [ 345.641516][T10544] Rebooting in 86400 seconds..