last executing test programs: 26.70588188s ago: executing program 3 (id=2543): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x6, 0x6}, 0xc634, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x21, 0x4, 0x4, 0x100, 0x2020, 0x0, 0xe, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c00)={r8}, 0xc) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x5, 0x0, 0x0, &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000e40)={'gre0\x00', 0x10}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e80)={0x12, 0x0, 0x0, &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f2, &(0x7f0000000fc0)) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x8a, 0x3, 0x0, 0x13, 0x0, 0x4, 0x44809, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x2, 0x3129b7164949479, 0x10000007, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={r7, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f0000001200)=[{}], 0x8, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x45, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001440)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x6, 0x11, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0xb, 0x4, 0x8, 0x50, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001080)='GPL\x00', 0x8, 0x1d, &(0x7f00000010c0)=""/29, 0x41000, 0x0, '\x00', r12, 0x25, r13, 0x8, &(0x7f0000001480)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000014c0)={0x4, 0x10, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001500)=[{0x5, 0x4, 0x6, 0x3}, {0x5, 0x3, 0xb, 0xb}], 0x10, 0x1}, 0x94) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r14, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r15, 0x4020940d, &(0x7f0000000d00)=0x81000400000004) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 26.446978637s ago: executing program 1 (id=2545): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x6000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.293777784s ago: executing program 1 (id=2550): r0 = perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef6}, 0xbafa, 0xff, 0x98, 0x2, 0x0, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000940)={&(0x7f0000000980)=@file={0x1, './cgroup/../file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000006301000000000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x24000001}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x7f, 0x7, 0x9, 0x0, 0x100, 0x208d0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x4, @perf_config_ext={0x8, 0x14ed10b8}, 0x8000, 0x5, 0x1, 0x9, 0x4, 0x7, 0x0, 0x0, 0x5, 0x0, 0x8001}, 0x0, 0x10, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xfffffffffffffff9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33a2d912}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r6, 0x4) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg(r7, 0x0, 0x40) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) perf_event_open$cgroup(&(0x7f0000000000)={0x1, 0x80, 0xb3, 0x3, 0x6, 0x49, 0x0, 0x2, 0x80000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000180), 0x7}, 0x1410, 0x3fe, 0x0, 0x5, 0x1b, 0xffff0001, 0x83, 0x0, 0x4, 0x0, 0x728}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r2, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40), 0x0, 0x4e, &(0x7f00000003c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b00), &(0x7f0000000800), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000b80)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000d80), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000f00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000f40)=[0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000fc0), &(0x7f0000001000), 0x8, 0xef, 0x8, 0x8, &(0x7f0000001040)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="1e00000005000000090000000e00000000c00400", @ANYRES32=r10, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1f, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYRES8=r9], &(0x7f0000001180)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(r6, &(0x7f00000011c0)='rdma.current\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1851000007000000000000000000000029530100010000001829000064037231c1c5f8a8c5bbc041cf07aa51272c53165601fe8b5fc028c6c78a24a711a44273c63f03c5b4995873a3e67da5c3da1700d4f6555fcfff744583dd99e44b942450977f51422cde94a229710000000000000000000000000f5cb2943bde7b51fe874ec3171f5b6ab4c26b272f1a5f02f951d2b01a70a811b6faf1a9f2688abbd29661df89b30cd20b607632d6396a1fcdcff0e1deede8991310d4f1e0e0a3b0ab9d4caf05b306809a54deb88afee37dae704cb0b9542fbde2646fd21375e779141a6898cab20ea4ccfc8016f07dd6e7b70973bcc2934b555df29d48f2a69fe9f2b1640ba7183e2dee02fa9594074a9586f216c807b6753f34613f49541dd040fdb3eb3a875804bc5dd60dc22728f0f2be2af20ebc50ba2b4f0e3d3a78", @ANYRES32=r6, @ANYBLOB="00000000feffffff9500000000000000850000004d000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, &(0x7f00000003c0), 0x41100, 0x10, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000004c0)=[{0x0, 0x1, 0x4, 0x8}, {0x3, 0x2, 0x0, 0x6}, {0x3, 0x5, 0xf, 0xb}, {0x5, 0x5, 0xe, 0x9}], 0x10, 0xbf8}, 0x94) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r9, 0x400454cd, 0x336) 25.250383999s ago: executing program 3 (id=2551): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2c, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x34}, 0x28) r3 = socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x41}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x2000000}}, &(0x7f0000000d80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000dc0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2dca3, r1, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r3, &(0x7f00000007c0)={&(0x7f0000000800)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0xe8001, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000b80)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff0000ff90bfa10000000000000701000015f3ffffb702000008000000b50200000000000085000000cb00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000040)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 24.801030334s ago: executing program 3 (id=2554): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x2, 0x3e12}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="04000000040000000400000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1b, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d40)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000800) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x2000000000000384, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0x1}], 0x10, 0x30}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000040000000e100002001cd700", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000f80)={0xffffffffffffffff, 0xffffffffffffffff, 0x4, r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000680)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xfc00) r7 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x7b, &(0x7f0000000700), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r8, 0x800454e0, &(0x7f00000002c0)=r6) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xfffd}], 0x1}, 0x80d1) 24.375317357s ago: executing program 1 (id=2556): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x9, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60a02, 0x0) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f00000002c0)={'vlan0\x00'}) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) r4 = perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x15a1) setsockopt$sock_attach_bpf(r3, 0x88, 0x67, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xd) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0x1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x7f, '\x00', r6, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) 24.184234697s ago: executing program 2 (id=2557): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xfffffe0000000000, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2b, &(0x7f0000000180), 0x42) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@cgroup, 0xffffffffffffffff, 0x2, 0x10}, 0x20) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x20, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x800, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x303000, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x81, 0x80, 0x4, 0x9, 0x0, 0x200, 0x10, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0x1, @perf_bp={&(0x7f0000000480), 0x2}, 0xa, 0x9, 0x5, 0x4, 0xe1f4, 0x1, 0xa, 0x0, 0x1, 0x0, 0x3}, r2, 0x7, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x5, 0x8, 0x0, 0x3}, r2, 0xffffffffffffffff, r1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x13, &(0x7f0000000880)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x200000, 0xd6, &(0x7f0000000380)=""/214, 0x41100}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000780)='%pK \x00'}, 0x20) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x3ff, 0x1c}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%-010d \x00'}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x3, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000015c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r9, 0x5, 0xb68, 0x560b0000, &(0x7f0000001680)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r5, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)=r5}, 0x20) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e80)={0x0, 0x0}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x1b, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000800000000000000002f1a17ed749e0000950000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f00000010c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x6, 0xd, &(0x7f0000001280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000001300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0xd, 0x24, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @generic={0x40, 0x1, 0x7, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0xaa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d40)='syzkaller\x00', 0x4, 0x54, &(0x7f0000000d80)=""/84, 0x41000, 0x6, '\x00', r4, @fallback=0x1f, r5, 0x8, &(0x7f0000000e00)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000e40)={0x2, 0x10, 0x7a}, 0x10, r11, r3, 0x6, &(0x7f0000001340)=[r6, r12, r8, r13], &(0x7f0000001380)=[{0x4, 0x4, 0x8}, {0x1, 0x2, 0x2, 0x3}, {0x1, 0x2, 0xa}, {0x2, 0x1, 0xb, 0x10}, {0x5, 0x1, 0xe, 0xb}, {0x1, 0x4, 0x6, 0x6}], 0x10, 0x7a5}, 0x94) 24.086949867s ago: executing program 3 (id=2558): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x7000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.940039712s ago: executing program 1 (id=2560): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x502b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000015c0)=@ll={0x11, 0xf8, 0x0, 0x1, 0x7, 0x6, @random="77c0b5e26439"}, 0x80, &(0x7f0000001a00)}, 0x4005) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)="d8000000140081054e81f782db44b9040a1d08020a000000040000a10d000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfac64dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a50b70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x80ff}, 0x48) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815000100e000000103600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000b05d2600d00030009000100ff35", 0x14}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="050000000500000000001d000000008041"], 0x50) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_addr={0x44, 0x54, 0x5b, 0x1, 0xe, [{@private=0xa010101, 0x7}, {@multicast2, 0x9}, {@multicast1, 0x2}, {@broadcast, 0x4}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0xd}, {@broadcast, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x80b}, {@multicast2, 0xfffffff7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}]}]}}}], 0x88}, 0x20002800) 23.403411927s ago: executing program 0 (id=2562): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2c, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x34}, 0x28) r3 = socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x41}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x2000000}}, &(0x7f0000000d80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000dc0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2dca3, r1, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r3, &(0x7f00000007c0)={&(0x7f0000000800)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0xe8001, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000b80)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff0000ffd0bfa10000000000000701000015f3ffffb702000008000000b50200000000000085000000cb00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000040)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 23.350953572s ago: executing program 2 (id=2563): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000000), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000740)=@base={0x14, 0x4, 0x4, 0xadb9, 0x1800, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000002, 0x2}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x24, 0x0, 0xffff, &(0x7f00000006c0)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000540)="ba", 0x1}], 0x1}, 0x400c804) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x84, &(0x7f0000000700), 0x90) sendmsg$inet(r4, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000640)="c109000000000000001d1e01", 0xc}, {&(0x7f0000000680)="b9321d", 0x3}], 0x2}, 0x0) 23.229873944s ago: executing program 2 (id=2564): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x6, 0x0, 0x6, 0x400, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8982, &(0x7f0000000740)) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x1400, &(0x7f00000003c0)=[{&(0x7f0000000400)="140000001d000b63d25a80648c2594f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r1) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030611bc5cb60128876360864666702b1ffe80000000000000", @ANYRESDEC], 0xffdd) 23.17793747s ago: executing program 0 (id=2565): socketpair(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xec, 0x0, 0x2, 0x0, 0x0, 0x8, 0x10004, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x6, 0xfffffffe, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x5, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x2}, {0x0, 0x80004, 0x4, 0x9}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x9, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r4, @ANYRESHEX=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0xd18c9b25, &(0x7f0000000240)=[{&(0x7f0000000280)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000007", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x23}, @map_val={0x18, 0x1, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000340)='GPL\x00', 0x1, 0xaf, &(0x7f0000000380)=""/175, 0x41100, 0x20, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0x4, 0x101, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r7, r8], 0x0, 0x10, 0x9}, 0x94) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x501242, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f00000006c0)={'erspan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x541b, &(0x7f0000000d40)) 23.038574834s ago: executing program 3 (id=2566): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x100000, 0x8, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000020000004404a60007036f001c"], 0x38}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fc08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="140000001c20000000000000", @ANYRES32, @ANYBLOB="fbe80b91b6443d1df3874fec6083bf211ad2d92375c5888c260ba0712decee64935b4f37e4b90fc9cb6f450bb53b090509b29c793c1fa4019968d3959051f8b87d8ad841064599c06cd915477db49340540469ae9f0f", @ANYRES64=0x0], 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x24, 0x0, 0x53) (async) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0xd, 0x9, 0xd, 0x8, 0x0, 0x498, 0x2004, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x600000, 0x2, @perf_config_ext={0xe}, 0x9354, 0x54201faa, 0x69, 0x4, 0x2, 0x5, 0x71a, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000024c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002440), &(0x7f0000002480)=r5}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002500)={&(0x7f0000000580)="bb1e2a20f7cf17eec4b1cd2d2e3c272d5bfd57ef9f70e2cf344e533d06a3bf8f2fcac2bdc160f2fc0ddfee834364b2fe938cf155d9", &(0x7f00000005c0)=""/31, &(0x7f0000001340)="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", &(0x7f0000002340)="17c007da2666142cb16e3c86f4268b1fe8c6ddd2d859d7e6e3f8c33617c9b1e9e10d5f254336474bdf624bc892505de419cc71f5f1ffb5b3d08f04ccc08a3516a04b798d0f702646a3edf0ff18cc91e7e72e40782426ad5502f77a13abc14d206049f515b52da96a9f27b6052d93aab3b8f30a08939e14844a9ede7d5dd5f12fd98c1f4ed59f5c6de2c3ad23133d3bd50b8fa8af70f75ce5e66dce659bb01dce7f41a185a44f9100246de6cbf17d4314a9b66fca335fa784b23100119b88e1cada14caa2f17b2018d331d9c281d51f975aa52c7e7a54f3e103987be15f5b15e11de0d0", 0x2, r9, 0x4}, 0x38) 23.028805025s ago: executing program 0 (id=2567): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000001400)={0x1, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80001, 0x80631, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xbe, 0x1}, 0x102000, 0x1, 0xb, 0x9, 0x3, 0x8, 0x40, 0x0, 0x7f, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001e40)="020b0700fc67936a9f3aaae12e2d812fec00"/32, 0x33fe0}]}, 0x0) openat$cgroup_type(r0, &(0x7f0000001300), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x17, 0x8, 0x40, 0x40, 0x1}, 0x50) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40), &(0x7f0000001e80), 0x1000, r1}, 0x38) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x420c3, 0x0) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000100100000d00000001000000000000001400000000000000100100000a"], 0x30}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000015c0)="1700000016008114e00212ba0d8105040a020200030f10", 0x17}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={0xffffffffffffffff, 0xe0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a80), 0x0, 0xc4, &(0x7f0000001ac0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001a40), &(0x7f0000001480), 0x8, 0x400038, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001d00)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x39ca, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x0, &(0x7f0000001d80), 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x11, 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x11, 0x14, &(0x7f0000001900)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000019c0)={r7}, 0xc) recvmsg(r3, &(0x7f00000012c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000140)=""/151, 0x97}, {&(0x7f0000000200)=""/4096, 0x1021}], 0x2, &(0x7f0000000080)=""/102, 0x62}, 0x2040) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001380)={0x0, 0x5, 0x8}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000013c0)=@generic={&(0x7f0000001340)='./file0\x00', r8}, 0x18) 22.912601886s ago: executing program 1 (id=2568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000050000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000000c0)=[{0x2}, {0x200, 0x2000, 0x1, 0x2}, {0xfffffbfd, 0x4, 0x10406, 0x3}]}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0xffffff0a, &(0x7f0000000140)=[{&(0x7f0000000180)="c01803002e000b12d25a80648c2594f90124fc60100c03400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x2000000000000216, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000b40)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x7, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)="5c00000016006bab9a3fe3d46e17aa0a046b876c050048007ea60864160af36504bb4a43eee80fd1716dbbbc001a00b8001d001931a0e69ce517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bba170ee3b", 0x5f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000040) recvmsg$kcm(r8, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x40012100) recvmsg$kcm(r8, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x3, &(0x7f0000000f80)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000fc0)={0x6, 0x3, &(0x7f0000001080)=ANY=[], &(0x7f00000010c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r9, 0x5, 0x0, 0x0, &(0x7f0000001180), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f00000003c0)='cpu~00\t&&') ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.654803393s ago: executing program 0 (id=2569): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x4, 0xf9, 0x77, 0xc8, 0x0, 0x0, 0x48101, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x0, 0x7}, 0x20, 0x4, 0x6, 0x8, 0x4, 0x8, 0x7ff, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x3, r0, 0x1) 22.532747045s ago: executing program 0 (id=2570): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x0, 0x34}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="050000000e000000400000000300000041000000", @ANYRES32, @ANYBLOB="0000ff5a00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40), &(0x7f0000000a80), 0x1003, r1}, 0x38) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x49, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xb, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)) r4 = getpid() perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8bd7, 0x0, 0x0, 0x1}, r4, 0xe, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000780)='ns/user\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup/syz0\x00', 0x1ff) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_config_ext={0x1, 0xffffffffffffff80}, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffbbfb, 0x0, 0x6, 0x0, 0xfffffffd}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 20.936094828s ago: executing program 0 (id=2571): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2a132, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x8400) recvmsg(r0, 0x0, 0x40010040) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e00500720e0000002f77fbac141516e0000001440c0510b18000890304000084508864325f003911050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 20.886880103s ago: executing program 1 (id=2572): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000600)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_type(r1, &(0x7f0000000680), 0x11ffffce1) 20.863524035s ago: executing program 2 (id=2573): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000f80)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x2c, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000040) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x34}, 0x28) r3 = socket$kcm(0x1e, 0x5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x41}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x2000000}}, &(0x7f0000000d80)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x17, r2, 0x8, &(0x7f0000000dc0)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2dca3, r1, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x4}, 0x94) sendmsg$kcm(r3, &(0x7f00000007c0)={&(0x7f0000000800)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x80, 0x0, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0xe8001, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000b80)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff000080ffbfa10000000000000701000015f3ffffb702000008000000b50200000000000085000000cb00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000040)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 20.682862454s ago: executing program 2 (id=2574): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x1c, &(0x7f0000000780)=ANY=[@ANYBLOB="1808000005200102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000880)='GPL\x00', 0xb, 0x0, 0x0, 0x8000000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.598443971s ago: executing program 2 (id=2575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x88, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x88, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100, 0x0, 0x0, 0x3, 0x20000000}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfc, 0x0, 0x7, 0x0, 0x0, 0x3ff, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfc, 0x0, 0x7, 0x0, 0x0, 0x3ff, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f00000003c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000500)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0xb, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r5, 0x1000000, 0xe, 0x0, &(0x7f0000000ec0)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r5, 0x1000000, 0xe, 0x0, &(0x7f0000000ec0)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/191, 0xbf}, 0x0) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/191, 0xbf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$kcm(0x10, 0x3, 0x10) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000009c0)={0x0, 0xd18c9b25, &(0x7f0000000b00)=[{&(0x7f0000000b40)="e03f020033000b35d25a806c8c6f94f90924fc60100004000a000400053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socketpair(0x2c, 0x800, 0x4, &(0x7f0000000bc0)) (async) socketpair(0x2c, 0x800, 0x4, &(0x7f0000000bc0)) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000ac0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) perf_event_open(&(0x7f0000000300)={0x2, 0x81ab, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000b80), 0x1}, 0x8520, 0x6, 0x3, 0xaaf04684de878bda, 0x9, 0x1000, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 15.437611838s ago: executing program 3 (id=2576): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891c, &(0x7f0000000040)={'\x00', @random="0200ff7fffff"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000000c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x5, 0xb68, 0x0, &(0x7f00000004c0)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x541b, &(0x7f0000000d40)) 5.1975449s ago: executing program 32 (id=2571): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x2a132, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x8400) recvmsg(r0, 0x0, 0x40010040) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e00500720e0000002f77fbac141516e0000001440c0510b18000890304000084508864325f003911050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) 5.117327359s ago: executing program 33 (id=2572): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000600)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_type(r1, &(0x7f0000000680), 0x11ffffce1) 84.705391ms ago: executing program 34 (id=2575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x88, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x88, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x10100, 0x0, 0x0, 0x3, 0x20000000}, 0x0, 0xaffffffeffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfc, 0x0, 0x7, 0x0, 0x0, 0x3ff, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xfc, 0x0, 0x7, 0x0, 0x0, 0x3ff, 0x20, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f00000003c0)=r3, 0x4) sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000500)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0xb, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r5, 0x1000000, 0xe, 0x0, &(0x7f0000000ec0)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r5, 0x1000000, 0xe, 0x0, &(0x7f0000000ec0)="e0b9547ed387c6e950a4e1f95bec", 0x0, 0xf, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x18) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/191, 0xbf}, 0x0) (async) recvmsg(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/191, 0xbf}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socket$kcm(0x10, 0x3, 0x10) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000009c0)={0x0, 0xd18c9b25, &(0x7f0000000b00)=[{&(0x7f0000000b40)="e03f020033000b35d25a806c8c6f94f90924fc60100004000a000400053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x0, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socketpair(0x2c, 0x800, 0x4, &(0x7f0000000bc0)) (async) socketpair(0x2c, 0x800, 0x4, &(0x7f0000000bc0)) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xc, &(0x7f00000009c0)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000ac0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) perf_event_open(&(0x7f0000000300)={0x2, 0x81ab, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000b80), 0x1}, 0x8520, 0x6, 0x3, 0xaaf04684de878bda, 0x9, 0x1000, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 35 (id=2576): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x891c, &(0x7f0000000040)={'\x00', @random="0200ff7fffff"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000000c0)) socketpair(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000c80)={0x0, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000000d40)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0x5, 0xb68, 0x0, &(0x7f00000004c0)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x541b, &(0x7f0000000d40)) kernel console output (not intermixed with test programs): netlink: 'syz.2.1124': attribute type 1 has an invalid length. [ 253.712333][ T9828] netlink: 'syz.2.1124': attribute type 3 has an invalid length. [ 253.733007][ T9830] netlink: 'syz.2.1124': attribute type 10 has an invalid length. [ 253.738220][ T9828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1124'. [ 253.753751][ T9830] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1124'. [ 253.937399][ T9839] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1126'. [ 254.432247][ T9857] netlink: 'syz.1.1134': attribute type 46 has an invalid length. [ 254.617814][ T9867] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 254.632223][ T9867] netlink: 'syz.3.1136': attribute type 3 has an invalid length. [ 254.644404][ T9867] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1136'. [ 254.676032][ T9867] netlink: 'syz.3.1136': attribute type 10 has an invalid length. [ 254.684652][ T9867] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1136'. [ 255.202549][ T9885] netlink: 'syz.0.1145': attribute type 21 has an invalid length. [ 255.217648][ T9885] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1145'. [ 255.742874][ T6141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.915170][ T9906] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1154'. [ 256.016090][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.024764][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.167281][ T9917] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1157'. [ 256.199886][ T9917] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1157'. [ 256.837795][ T9937] syzkaller0: entered promiscuous mode [ 256.843531][ T9937] syzkaller0: entered allmulticast mode [ 259.121936][ T9950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.584089][ T9975] validate_nla: 10 callbacks suppressed [ 259.584132][ T9975] netlink: 'syz.2.1175': attribute type 1 has an invalid length. [ 259.623922][ T9975] netlink: 'syz.2.1175': attribute type 3 has an invalid length. [ 259.644421][ T9975] __nla_validate_parse: 5 callbacks suppressed [ 259.644477][ T9975] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1175'. [ 259.648364][ T9976] netlink: 'syz.2.1175': attribute type 10 has an invalid length. [ 259.698171][ T9976] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1175'. [ 260.378694][ T9988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1182'. [ 260.404006][ T9988] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1182'. [ 260.449255][ T9988] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1182'. [ 260.545348][ T9994] netlink: 'syz.2.1183': attribute type 3 has an invalid length. [ 260.565626][ T9994] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1183'. [ 260.731040][T10005] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 260.741254][T10005] netlink: 'syz.1.1185': attribute type 3 has an invalid length. [ 260.749900][T10005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1185'. [ 260.771860][T10005] netlink: 'syz.1.1185': attribute type 10 has an invalid length. [ 260.780721][T10005] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1185'. [ 260.870018][T10009] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.1188'. [ 261.019002][T10009] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 262.534622][T10042] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1198'. [ 262.564011][T10042] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 262.823881][T10052] netlink: 'syz.2.1202': attribute type 1 has an invalid length. [ 262.848209][T10052] netlink: 'syz.2.1202': attribute type 3 has an invalid length. [ 262.865845][T10052] netlink: 'syz.2.1202': attribute type 10 has an invalid length. [ 263.008385][T10057] rxe_eth0 speed is unknown, defaulting to 1000 [ 264.156299][T10090] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 265.307455][T10118] validate_nla: 3 callbacks suppressed [ 265.307498][T10118] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 265.369380][T10118] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 265.377960][T10120] netlink: 'syz.1.1220': attribute type 29 has an invalid length. [ 265.407777][T10118] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 265.432021][T10118] veth0_vlan: entered allmulticast mode [ 265.626529][T10118] veth0_vlan: left promiscuous mode [ 265.680046][T10118] veth0_vlan: entered promiscuous mode [ 265.711531][T10118] team0: Device veth0_vlan failed to register rx_handler [ 265.835279][T10129] __nla_validate_parse: 5 callbacks suppressed [ 265.835303][T10129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1225'. [ 265.851813][T10133] netlink: 'syz.0.1224': attribute type 1 has an invalid length. [ 265.863051][T10133] netlink: 'syz.0.1224': attribute type 3 has an invalid length. [ 265.864898][T10129] : renamed from caif0 [ 265.871341][T10133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1224'. [ 265.902182][T10129] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 265.935347][T10132] netlink: 'syz.0.1224': attribute type 10 has an invalid length. [ 265.946221][T10132] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1224'. [ 266.309740][T10146] netlink: 'syz.3.1231': attribute type 2 has an invalid length. [ 266.328358][T10146] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1231'. [ 266.354149][T10147] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1230'. [ 267.381273][T10174] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 267.408721][T10174] netlink: 'syz.3.1239': attribute type 3 has an invalid length. [ 267.426949][T10174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1239'. [ 267.470735][T10181] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1239'. [ 267.536383][T10182] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1242'. [ 267.564108][T10177] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1242'. [ 268.853472][T10207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 268.860966][T10207] IPv6: NLM_F_CREATE should be set when creating new route [ 268.868693][T10207] IPv6: NLM_F_CREATE should be set when creating new route [ 268.876135][T10207] IPv6: NLM_F_CREATE should be set when creating new route [ 269.398797][T10225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1256'. [ 270.250226][T10246] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 270.476496][T10254] validate_nla: 4 callbacks suppressed [ 270.476513][T10254] netlink: 'syz.0.1267': attribute type 3 has an invalid length. [ 270.634220][T10261] netlink: 'syz.2.1270': attribute type 19 has an invalid length. [ 270.722484][T10266] netlink: 'syz.2.1273': attribute type 9 has an invalid length. [ 270.753508][T10268] netlink: 'syz.1.1272': attribute type 1 has an invalid length. [ 270.765804][T10268] netlink: 'syz.1.1272': attribute type 3 has an invalid length. [ 270.796275][T10268] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 272.030326][T10312] pim6reg1: entered promiscuous mode [ 272.058284][T10312] pim6reg1: entered allmulticast mode [ 272.376766][T10325] __nla_validate_parse: 8 callbacks suppressed [ 272.376809][T10325] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1289'. [ 272.540964][T10334] netlink: 'syz.2.1292': attribute type 1 has an invalid length. [ 272.553925][T10334] netlink: 'syz.2.1292': attribute type 3 has an invalid length. [ 272.564416][T10334] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1292'. [ 272.585059][T10334] netlink: 'syz.2.1292': attribute type 10 has an invalid length. [ 272.593276][T10334] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1292'. [ 272.691145][T10339] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1294'. [ 272.708226][T10339] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 274.147057][T10371] netlink: 'syz.3.1305': attribute type 1 has an invalid length. [ 274.169219][T10371] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1305'. [ 274.198632][T10371] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1305'. [ 275.131263][T10396] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1315'. [ 275.150850][T10396] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1315'. [ 275.182084][T10396] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.1315'. [ 276.036346][T10418] validate_nla: 7 callbacks suppressed [ 276.036387][T10418] netlink: 'syz.1.1323': attribute type 1 has an invalid length. [ 276.069707][T10418] netlink: 'syz.1.1323': attribute type 3 has an invalid length. [ 276.077762][T10418] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1323'. [ 276.092590][T10422] netlink: 'syz.1.1323': attribute type 10 has an invalid length. [ 276.684121][T10433] netlink: 'syz.0.1328': attribute type 33 has an invalid length. [ 277.129535][T10433] rxe_eth0 speed is unknown, defaulting to 1000 [ 277.596825][T10460] netlink: 'syz.3.1336': attribute type 21 has an invalid length. [ 277.638333][T10460] __nla_validate_parse: 2 callbacks suppressed [ 277.638346][T10460] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1336'. [ 278.042332][T10471] rxe_eth0 speed is unknown, defaulting to 1000 [ 278.059655][T10474] netlink: 'syz.3.1340': attribute type 1 has an invalid length. [ 278.080966][T10474] netlink: 'syz.3.1340': attribute type 3 has an invalid length. [ 278.091079][T10474] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1340'. [ 278.122164][T10474] netlink: 'syz.3.1340': attribute type 10 has an invalid length. [ 278.141605][T10474] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1340'. [ 278.211696][T10477] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1341'. [ 279.895997][T10491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.953263][T10497] netlink: 'syz.2.1347': attribute type 10 has an invalid length. [ 279.968004][T10497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1347'. [ 279.984385][T10497] dummy0: entered promiscuous mode [ 279.991826][T10497] dummy0: entered allmulticast mode [ 280.000847][T10497] bridge0: port 4(dummy0) entered blocking state [ 280.015394][T10497] bridge0: port 4(dummy0) entered disabled state [ 280.533045][T10521] syzkaller0: entered promiscuous mode [ 280.548220][T10521] syzkaller0: entered allmulticast mode [ 280.563298][T10529] netlink: 'syz.1.1353': attribute type 1 has an invalid length. [ 280.595480][T10529] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1353'. [ 280.774067][T10525] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1353'. [ 283.823191][T10564] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1366'. [ 284.685255][T10574] validate_nla: 2 callbacks suppressed [ 284.685291][T10574] netlink: 'syz.3.1368': attribute type 1 has an invalid length. [ 284.708348][T10574] netlink: 'syz.3.1368': attribute type 3 has an invalid length. [ 284.716627][T10574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1368'. [ 284.739861][T10574] netlink: 'syz.3.1368': attribute type 10 has an invalid length. [ 284.758284][T10574] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1368'. [ 285.686588][T10620] Dead loop on virtual device ip6_vti0, fix it urgently! [ 285.730330][T10620] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1380'. [ 285.760342][T10620] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 285.785361][T10621] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1381'. [ 285.821691][T10619] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1381'. [ 285.998440][T10629] netlink: 'syz.3.1382': attribute type 21 has an invalid length. [ 286.020620][T10629] netlink: 'syz.3.1382': attribute type 6 has an invalid length. [ 286.047249][T10629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1382'. [ 286.668220][ T2985] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 286.745478][T10635] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1384'. [ 286.775008][T10633] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1384'. [ 286.792062][T10635] netlink: del zone limit has 8 unknown bytes [ 286.825623][T10633] netlink: del zone limit has 8 unknown bytes [ 286.834304][T10637] netlink: 'syz.1.1385': attribute type 1 has an invalid length. [ 286.845679][T10637] netlink: 'syz.1.1385': attribute type 3 has an invalid length. [ 286.853951][T10637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1385'. [ 286.875044][T10637] netlink: 'syz.1.1385': attribute type 10 has an invalid length. [ 287.253062][T10648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.263760][T10648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.154303][T10648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.178198][T10648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.219314][T10648] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 290.914623][T10673] netlink: 'syz.2.1399': attribute type 1 has an invalid length. [ 290.936850][T10673] netlink: 'syz.2.1399': attribute type 3 has an invalid length. [ 290.945177][T10673] __nla_validate_parse: 1 callbacks suppressed [ 290.945190][T10673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1399'. [ 291.422077][T10681] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1401'. [ 291.452912][T10681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 291.464341][T10680] netlink: 'syz.3.1402': attribute type 3 has an invalid length. [ 291.496338][T10680] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1402'. [ 291.522200][T10686] ipvlan1: entered promiscuous mode [ 291.540116][T10686] ipvlan1: entered allmulticast mode [ 291.545535][T10686] veth0_vlan: entered allmulticast mode [ 291.661559][T10689] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 291.670521][T10690] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.1404'. [ 291.678223][T10689] netlink: 'syz.1.1403': attribute type 3 has an invalid length. [ 291.698242][T10689] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1403'. [ 291.984709][T10689] netlink: 'syz.1.1403': attribute type 10 has an invalid length. [ 292.004499][T10689] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1403'. [ 292.328536][T10696] netlink: 'syz.3.1405': attribute type 5 has an invalid length. [ 292.555758][T10707] netlink: 'syz.0.1408': attribute type 33 has an invalid length. [ 292.578662][T10707] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1408'. [ 294.133979][T10728] delete_channel: no stack [ 294.177093][T10739] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 294.202907][T10739] netlink: 'syz.3.1416': attribute type 3 has an invalid length. [ 294.226236][T10739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1416'. [ 294.289941][T10740] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1416'. [ 295.790514][T10759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.177598][T10779] Dead loop on virtual device ip6_vti0, fix it urgently! [ 296.239891][T10779] __nla_validate_parse: 3 callbacks suppressed [ 296.239927][T10779] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1430'. [ 296.256292][T10779] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 296.764385][T10788] validate_nla: 8 callbacks suppressed [ 296.764419][T10788] netlink: 'syz.1.1435': attribute type 21 has an invalid length. [ 296.786928][T10788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1435'. [ 296.798208][T10788] netlink: 'syz.1.1435': attribute type 1 has an invalid length. [ 297.034013][T10799] netlink: 'syz.2.1437': attribute type 3 has an invalid length. [ 297.045892][T10797] netlink: 'syz.1.1436': attribute type 153 has an invalid length. [ 297.065970][T10797] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1436'. [ 297.076266][T10799] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1437'. [ 297.240105][T10797] netlink: 'syz.1.1436': attribute type 29 has an invalid length. [ 297.269114][T10797] netlink: 'syz.1.1436': attribute type 29 has an invalid length. [ 297.871280][T10806] netlink: 'syz.0.1439': attribute type 1 has an invalid length. [ 297.880739][T10806] netlink: 'syz.0.1439': attribute type 3 has an invalid length. [ 297.888828][T10806] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1439'. [ 297.902465][T10806] netlink: 'syz.0.1439': attribute type 10 has an invalid length. [ 297.910897][T10806] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1439'. [ 297.924221][T10798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.175886][T10812] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1451'. [ 298.336999][T10812] netlink: 'syz.0.1451': attribute type 10 has an invalid length. [ 298.390989][T10812] netlink: 56823 bytes leftover after parsing attributes in process `syz.0.1451'. [ 298.393221][T10814] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1442'. [ 298.610152][T10818] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1440'. [ 298.848523][T10818] bond0 (unregistering): left promiscuous mode [ 298.876951][T10818] bond_slave_0: left promiscuous mode [ 298.900916][T10818] bond_slave_1: left promiscuous mode [ 298.958918][T10818] bond0 (unregistering): left allmulticast mode [ 298.965608][T10818] bond_slave_0: left allmulticast mode [ 299.030671][T10818] bond_slave_1: left allmulticast mode [ 299.036348][T10818] syz_tun: left allmulticast mode [ 299.088835][T10818] team0: Port device bond0 removed [ 299.143604][T10818] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.173527][T10818] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.196508][T10818] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 299.227375][T10818] bond0 (unregistering): Released all slaves [ 299.295832][T10817] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.490889][T10829] Dead loop on virtual device ip6_vti0, fix it urgently! [ 299.556392][T10829] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 300.932222][T10857] veth1_to_bridge: entered allmulticast mode [ 300.966148][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.826848][T10860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.850672][T10860] bond0 (unregistering): Released all slaves [ 301.873818][T10861] validate_nla: 8 callbacks suppressed [ 301.873842][T10861] netlink: 'syz.2.1458': attribute type 10 has an invalid length. [ 301.887416][T10861] __nla_validate_parse: 6 callbacks suppressed [ 301.887425][T10861] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1458'. [ 301.903177][T10863] netlink: 'syz.3.1460': attribute type 21 has an invalid length. [ 301.911848][T10863] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1460'. [ 301.940414][T10863] netlink: 'syz.3.1460': attribute type 4 has an invalid length. [ 301.948647][T10863] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1460'. [ 302.378962][T10890] netlink: 'syz.2.1471': attribute type 4 has an invalid length. [ 302.407270][T10890] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1471'. [ 303.593328][T10910] netlink: 'syz.2.1468': attribute type 33 has an invalid length. [ 303.602062][T10910] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1468'. [ 303.964437][T10915] veth1_to_bridge: entered allmulticast mode [ 304.039298][ T6130] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.181139][T10910] rxe_eth0 speed is unknown, defaulting to 1000 [ 304.402408][T10926] netlink: 'syz.1.1473': attribute type 1 has an invalid length. [ 304.431172][T10926] netlink: 'syz.1.1473': attribute type 3 has an invalid length. [ 304.451358][T10926] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1473'. [ 304.490431][T10926] netlink: 'syz.1.1473': attribute type 10 has an invalid length. [ 304.519366][T10926] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1473'. [ 305.335723][T10946] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1481'. [ 305.360126][T10944] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 305.367531][T10946] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.368086][T10944] netlink: 'syz.0.1480': attribute type 3 has an invalid length. [ 305.406955][T10944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1480'. [ 305.471157][T10946] team0: Port device wlan1 added [ 308.296421][T10974] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1494'. [ 308.311797][T10974] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.337457][T10970] validate_nla: 1 callbacks suppressed [ 308.337474][T10970] netlink: 'syz.3.1486': attribute type 33 has an invalid length. [ 308.357372][T10970] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1486'. [ 308.363739][T10977] netlink: 'syz.1.1495': attribute type 29 has an invalid length. [ 308.406119][T10977] netlink: 'syz.1.1495': attribute type 29 has an invalid length. [ 308.795665][T10970] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.396931][T11000] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 309.413089][T11000] netlink: 'syz.1.1491': attribute type 3 has an invalid length. [ 309.422882][T11000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1491'. [ 309.479725][T11000] netlink: 'syz.1.1491': attribute type 10 has an invalid length. [ 309.508890][T11000] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1491'. [ 309.704555][T11011] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1492'. [ 309.730095][T11003] rxe_eth0 speed is unknown, defaulting to 1000 [ 309.750381][T11013] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1492'. [ 310.292671][T11020] netlink: 'syz.1.1496': attribute type 1 has an invalid length. [ 310.303994][T11020] netlink: 'syz.1.1496': attribute type 3 has an invalid length. [ 310.312372][T11020] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1496'. [ 310.513401][T11023] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1498'. [ 311.532346][T11044] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 311.540805][T11044] netlink: 'syz.3.1504': attribute type 3 has an invalid length. [ 311.549699][T11044] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1504'. [ 311.567340][T11044] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1504'. [ 312.615382][T11051] rxe_eth0 speed is unknown, defaulting to 1000 [ 313.741479][T11085] validate_nla: 1 callbacks suppressed [ 313.741514][T11085] netlink: 'syz.1.1517': attribute type 1 has an invalid length. [ 313.757154][T11085] netlink: 'syz.1.1517': attribute type 3 has an invalid length. [ 313.775395][T11085] __nla_validate_parse: 4 callbacks suppressed [ 313.775431][T11085] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1517'. [ 313.810306][T11085] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 313.818759][T11085] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1517'. [ 314.470088][T11097] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1521'. [ 314.637900][T11097] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.677838][T11098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.767574][T11103] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 314.902574][T11110] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1527'. [ 314.905937][T11106] sctp: [Deprecated]: syz.3.1525 (pid 11106) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.905937][T11106] Use struct sctp_sack_info instead [ 315.342785][T11126] netlink: 'syz.3.1532': attribute type 1 has an invalid length. [ 315.351239][T11126] netlink: 'syz.3.1532': attribute type 3 has an invalid length. [ 315.362368][T11126] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1532'. [ 315.384264][T11126] netlink: 'syz.3.1532': attribute type 10 has an invalid length. [ 315.398101][T11128] netlink: 'syz.2.1533': attribute type 1 has an invalid length. [ 315.406359][T11126] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1532'. [ 315.416511][T11128] netlink: 'syz.2.1533': attribute type 3 has an invalid length. [ 315.438795][T11128] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1533'. [ 315.457192][T11128] netlink: 'syz.2.1533': attribute type 10 has an invalid length. [ 315.465771][T11128] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1533'. [ 316.224533][T11145] netlink: 142516 bytes leftover after parsing attributes in process `syz.1.1541'. [ 316.234260][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1541'. [ 316.522084][T11167] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 316.538155][T11167] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 317.453798][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.460241][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.609683][T11204] mac80211_hwsim hwsim5 ..ãc¤±: renamed from wlan1 (while UP) [ 318.985371][T11210] validate_nla: 7 callbacks suppressed [ 318.985404][T11210] netlink: 'syz.2.1561': attribute type 1 has an invalid length. [ 319.008302][T11210] netlink: 'syz.2.1561': attribute type 3 has an invalid length. [ 319.048190][T11210] __nla_validate_parse: 6 callbacks suppressed [ 319.048240][T11210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1561'. [ 319.790121][T11214] netlink: 'syz.1.1562': attribute type 10 has an invalid length. [ 319.821566][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1562'. [ 319.853669][T11214] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 319.878646][T11214] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.941597][T11214] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 320.259654][ T6130] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 321.014894][T11261] netlink: set zone limit has 8 unknown bytes [ 321.027289][T11259] netlink: 'syz.3.1573': attribute type 1 has an invalid length. [ 321.060388][T11259] netlink: 'syz.3.1573': attribute type 3 has an invalid length. [ 321.073709][T11259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1573'. [ 321.099720][T11263] netlink: 'syz.3.1573': attribute type 10 has an invalid length. [ 321.119182][T11263] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1573'. [ 321.208598][T11264] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.1576'. [ 321.456677][T11272] syzkaller0: entered promiscuous mode [ 321.468494][T11272] syzkaller0: entered allmulticast mode [ 321.547041][T11278] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 321.555627][T11278] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1583'. [ 321.785696][T11283] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 321.839990][T11283] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 321.860638][T11283] netlink: 'syz.1.1585': attribute type 21 has an invalid length. [ 322.341971][T11309] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.1593'. [ 322.969435][T11321] sit0: entered promiscuous mode [ 323.321585][T11324] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.1596'. [ 323.522874][T11326] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1598'. [ 323.556064][T11326] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1598'. [ 324.305016][T11357] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 324.890527][T11383] validate_nla: 65 callbacks suppressed [ 324.890543][T11383] netlink: 'syz.2.1608': attribute type 29 has an invalid length. [ 324.917350][T11383] netlink: 'syz.2.1608': attribute type 29 has an invalid length. [ 324.937674][T11387] netlink: 'syz.2.1608': attribute type 29 has an invalid length. [ 325.020055][T11387] netlink: 'syz.2.1608': attribute type 33 has an invalid length. [ 325.028368][T11387] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1608'. [ 325.071440][T11389] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 325.088242][T11389] netlink: 'syz.1.1609': attribute type 3 has an invalid length. [ 325.106744][T11389] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1609'. [ 325.131395][T11389] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 325.151605][T11389] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1609'. [ 326.067219][T11399] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1611'. [ 327.888482][T11420] tap0: tun_chr_ioctl cmd 1074025677 [ 327.910936][T11420] tap0: linktype set to 777 [ 329.689804][T11448] netlink: 'syz.2.1630': attribute type 16 has an invalid length. [ 329.738174][T11448] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1630'. [ 330.233187][T11451] netlink: 'syz.1.1631': attribute type 21 has an invalid length. [ 330.250576][T11451] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1631'. [ 331.433794][T11472] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.1637'. [ 333.029978][T11486] netlink: 'syz.3.1642': attribute type 16 has an invalid length. [ 333.048338][T11486] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1642'. [ 333.943594][T11494] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1646'. [ 334.031525][T11496] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1646'. [ 334.480650][T11502] netlink: 'syz.0.1649': attribute type 29 has an invalid length. [ 334.554503][T11502] netlink: 'syz.0.1649': attribute type 29 has an invalid length. [ 334.602903][T11505] netlink: 'syz.0.1649': attribute type 29 has an invalid length. [ 334.679896][T11509] netlink: 'syz.0.1649': attribute type 29 has an invalid length. [ 335.432397][T11516] netlink: 'syz.0.1653': attribute type 16 has an invalid length. [ 335.458347][T11516] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1653'. [ 335.829078][T11523] netlink: 'syz.1.1655': attribute type 21 has an invalid length. [ 335.837220][T11523] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1655'. [ 338.247926][T11552] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1666'. [ 338.338746][T11550] netlink: 'syz.2.1663': attribute type 21 has an invalid length. [ 338.382894][T11550] netlink: 'syz.2.1663': attribute type 6 has an invalid length. [ 338.498119][T11550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1663'. [ 339.734681][T11566] netlink: 'syz.3.1669': attribute type 21 has an invalid length. [ 339.781345][T11566] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1669'. [ 339.998440][ T5795] Bluetooth: hci3: command 0x0406 tx timeout [ 340.201274][T11580] netlink: 'syz.2.1672': attribute type 39 has an invalid length. [ 341.117828][T11590] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.1675'. [ 341.237579][T11596] netlink: 'syz.1.1679': attribute type 40 has an invalid length. [ 341.263166][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.227185][T11619] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1688'. [ 342.275583][T11619] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.1688'. [ 343.748380][T11656] Â: renamed from ip6gretap0 (while UP) [ 343.796857][T11657] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1697'. [ 343.849403][T11664] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1699'. [ 343.884449][T11662] netlink: 'syz.0.1698': attribute type 1 has an invalid length. [ 343.894861][T11662] netlink: 'syz.0.1698': attribute type 3 has an invalid length. [ 343.903765][T11662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1698'. [ 343.935621][T11662] netlink: 'syz.0.1698': attribute type 10 has an invalid length. [ 343.945560][T11662] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1698'. [ 344.822613][T11679] netlink: 'syz.0.1706': attribute type 2 has an invalid length. [ 344.838321][T11679] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1706'. [ 344.864907][T11682] netlink: 'syz.0.1706': attribute type 6 has an invalid length. [ 344.874366][T11682] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1706'. [ 344.899025][T11684] netlink: 'syz.3.1707': attribute type 2 has an invalid length. [ 344.921373][T11684] netlink: 'syz.3.1707': attribute type 8 has an invalid length. [ 344.947429][T11684] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1707'. [ 345.836800][T11713] netlink: 'syz.1.1714': attribute type 39 has an invalid length. [ 345.960224][T11716] netlink: 'syz.2.1717': attribute type 10 has an invalid length. [ 346.004358][T11716] team0: Device hsr_slave_0 failed to register rx_handler [ 346.506070][T11738] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.1724'. [ 346.521536][T11743] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.1725'. [ 346.546737][T11743] netlink: 212400 bytes leftover after parsing attributes in process `syz.2.1725'. [ 346.547965][T11738] openvswitch: netlink: Key type 4112 is out of range max 32 [ 347.414510][T11764] netlink: 'syz.3.1729': attribute type 1 has an invalid length. [ 347.452817][T11764] netlink: 'syz.3.1729': attribute type 3 has an invalid length. [ 347.499082][T11764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1729'. [ 347.564619][T11764] netlink: 'syz.3.1729': attribute type 10 has an invalid length. [ 347.629901][T11764] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1729'. [ 348.424389][T11780] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 348.441397][T11780] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 348.763210][T11793] netlink: 'syz.1.1739': attribute type 11 has an invalid length. [ 349.115950][T11807] netlink: 'syz.0.1742': attribute type 1 has an invalid length. [ 349.138332][T11807] netlink: 'syz.0.1742': attribute type 3 has an invalid length. [ 349.146361][T11807] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1742'. [ 349.192539][T11807] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 349.209107][T11807] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1742'. [ 350.047181][T11826] rxe_eth0 speed is unknown, defaulting to 1000 [ 350.177194][T11843] netlink: 'syz.3.1749': attribute type 9 has an invalid length. [ 350.191663][T11843] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1749'. [ 350.446402][T11849] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1752'. [ 350.474965][T11849] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1752'. [ 351.386176][ T6130] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 353.534791][T11931] netlink: 'syz.0.1776': attribute type 10 has an invalid length. [ 353.581205][T11931] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 353.609110][T11931] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 353.625957][T11931] wlan1: mtu greater than device maximum [ 353.643270][T11931] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 353.850192][T11952] __nla_validate_parse: 1 callbacks suppressed [ 353.850241][T11952] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1781'. [ 353.879682][T11955] netlink: 'syz.2.1782': attribute type 1 has an invalid length. [ 354.312775][T11976] netlink: 'syz.0.1788': attribute type 3 has an invalid length. [ 354.362306][T11976] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.1788'. [ 354.557606][T11993] netlink: 'syz.0.1793': attribute type 39 has an invalid length. [ 354.573312][T11997] netlink: 'syz.1.1794': attribute type 27 has an invalid length. [ 354.584747][T11997] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1794'. [ 355.402917][T12026] netlink: 'syz.1.1804': attribute type 1 has an invalid length. [ 355.414553][T12026] netlink: 'syz.1.1804': attribute type 3 has an invalid length. [ 355.424836][T12026] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1804'. [ 355.443933][T12026] netlink: 'syz.1.1804': attribute type 10 has an invalid length. [ 355.455595][T12026] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1804'. [ 355.839479][T12032] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1807'. [ 356.525899][T12056] netlink: 'syz.1.1815': attribute type 2 has an invalid length. [ 356.547518][T12056] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1815'. [ 357.462154][T12074] netlink: 'syz.0.1819': attribute type 1 has an invalid length. [ 357.475603][T12074] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1819'. [ 357.619306][T12074] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1819'. [ 358.595665][T12096] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.1820'. [ 360.693430][T12150] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1840'. [ 362.086953][T12184] sit0: left promiscuous mode [ 362.454919][T12195] validate_nla: 2 callbacks suppressed [ 362.454938][T12195] netlink: 'syz.1.1851': attribute type 3 has an invalid length. [ 362.473382][T12195] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 362.484918][T12195] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 362.497214][T12195] netlink: 'syz.1.1851': attribute type 2 has an invalid length. [ 362.509222][T12195] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.1851'. [ 362.532780][T12206] netlink: 'syz.1.1851': attribute type 3 has an invalid length. [ 362.554625][T12196] sit0: left promiscuous mode [ 362.562770][T12206] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 362.599448][T12206] netlink: 'syz.1.1851': attribute type 1 has an invalid length. [ 362.627910][T12206] netlink: 'syz.1.1851': attribute type 2 has an invalid length. [ 362.649643][T12206] netlink: 198100 bytes leftover after parsing attributes in process `syz.1.1851'. [ 362.659065][T12196] sit0: entered promiscuous mode [ 362.830035][T12213] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1857'. [ 363.212066][T12220] delete_channel: no stack [ 363.230410][T12227] netlink: 'syz.1.1861': attribute type 10 has an invalid length. [ 363.247812][T12227] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1861'. [ 363.390438][T12227] netlink: 'syz.1.1861': attribute type 10 has an invalid length. [ 363.400705][T12227] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1861'. [ 363.431807][T12227] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1861'. [ 363.455492][T12227] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1861'. [ 363.474615][T12227] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1861'. [ 363.484870][T12227] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1861'. [ 367.607883][T12280] __nla_validate_parse: 31 callbacks suppressed [ 367.607901][T12280] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1883'. [ 367.632493][T12284] netlink: 'syz.2.1882': attribute type 11 has an invalid length. [ 367.658685][T12284] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1882'. [ 368.113341][T12294] delete_channel: no stack [ 368.137034][T12294] delete_channel: no stack [ 368.166577][T12298] validate_nla: 34 callbacks suppressed [ 368.166608][T12298] netlink: 'syz.2.1888': attribute type 1 has an invalid length. [ 368.183882][T12298] netlink: 'syz.2.1888': attribute type 3 has an invalid length. [ 368.197095][T12298] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1888'. [ 368.214631][T12298] netlink: 'syz.2.1888': attribute type 10 has an invalid length. [ 368.223334][T12298] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1888'. [ 368.518596][T12307] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1892'. [ 368.695653][T12311] FAULT_INJECTION: forcing a failure. [ 368.695653][T12311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.729371][T12311] CPU: 1 PID: 12311 Comm: syz.1.1893 Not tainted syzkaller #0 [ 368.736908][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 368.747201][T12311] Call Trace: [ 368.750852][T12311] [ 368.753801][T12311] dump_stack_lvl+0x18c/0x250 [ 368.758709][T12311] ? show_regs_print_info+0x20/0x20 [ 368.764212][T12311] ? load_image+0x420/0x420 [ 368.768875][T12311] ? __might_fault+0xaa/0x120 [ 368.773727][T12311] ? __lock_acquire+0x7eb0/0x7eb0 [ 368.778821][T12311] should_fail_ex+0x394/0x4c0 [ 368.783756][T12311] _copy_from_user+0x2f/0xe0 [ 368.788415][T12311] ___sys_sendmsg+0x1c7/0x360 [ 368.793245][T12311] ? get_pid_task+0x20/0x1e0 [ 368.797925][T12311] ? __sys_sendmsg+0x2b0/0x2b0 [ 368.802705][T12311] ? __lock_acquire+0x7eb0/0x7eb0 [ 368.807751][T12311] __se_sys_sendmsg+0x1d0/0x2c0 [ 368.812617][T12311] ? __x64_sys_sendmsg+0x80/0x80 [ 368.817660][T12311] ? lockdep_hardirqs_on+0x98/0x150 [ 368.822960][T12311] do_syscall_64+0x55/0xb0 [ 368.827511][T12311] ? clear_bhb_loop+0x40/0x90 [ 368.832436][T12311] ? clear_bhb_loop+0x40/0x90 [ 368.837135][T12311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.843138][T12311] RIP: 0033:0x7fdf7639fb19 [ 368.847754][T12311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.867743][T12311] RSP: 002b:00007fdf7731f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.876349][T12311] RAX: ffffffffffffffda RBX: 00007fdf76625fa0 RCX: 00007fdf7639fb19 [ 368.884552][T12311] RDX: 0000000000040040 RSI: 0000200000000780 RDI: 0000000000000003 [ 368.892533][T12311] RBP: 00007fdf7731f090 R08: 0000000000000000 R09: 0000000000000000 [ 368.900538][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.908512][T12311] R13: 00007fdf76626038 R14: 00007fdf76625fa0 R15: 00007ffc75b4fc98 [ 368.916617][T12311] [ 369.562100][T12334] netlink: 'syz.3.1899': attribute type 1 has an invalid length. [ 369.592039][T12334] netlink: 'syz.3.1899': attribute type 3 has an invalid length. [ 369.616648][T12334] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1899'. [ 369.655837][T12331] netlink: 'syz.3.1899': attribute type 10 has an invalid length. [ 369.691482][T12331] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1899'. [ 370.834678][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1909'. [ 370.887828][T12363] netlink: 'syz.3.1909': attribute type 3 has an invalid length. [ 371.195916][T12372] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1912'. [ 371.347602][T12380] netlink: 'syz.2.1915': attribute type 29 has an invalid length. [ 371.623768][T12380] netlink: 'syz.2.1915': attribute type 29 has an invalid length. [ 371.646004][T12383] netlink: 'syz.2.1915': attribute type 29 has an invalid length. [ 371.700256][T12390] ¥: port 1(team0) entered blocking state [ 371.708859][T12390] ¥: port 1(team0) entered disabled state [ 371.723702][T12390] team0: entered allmulticast mode [ 371.732796][T12390] team_slave_0: entered allmulticast mode [ 371.741321][T12390] team_slave_1: entered allmulticast mode [ 371.748576][T12390] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 371.760534][T12390] team0: entered promiscuous mode [ 371.766103][T12390] team_slave_0: entered promiscuous mode [ 371.777138][T12390] team_slave_1: entered promiscuous mode [ 371.785327][T12390] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 371.826253][T12391] team0: left allmulticast mode [ 371.831704][T12391] team_slave_0: left allmulticast mode [ 371.837618][T12391] team_slave_1: left allmulticast mode [ 371.843789][T12391] mac80211_hwsim hwsim23 wlan1: left allmulticast mode [ 371.874286][T12391] team0: left promiscuous mode [ 371.892774][T12391] team_slave_0: left promiscuous mode [ 371.912284][T12391] team_slave_1: left promiscuous mode [ 371.917889][T12391] mac80211_hwsim hwsim23 wlan1: left promiscuous mode [ 371.951618][T12391] ¥: port 1(team0) entered disabled state [ 372.297339][T12411] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1926'. [ 372.608136][T12420] nr0: port 1(hsr0) entered blocking state [ 372.618464][T12420] nr0: port 1(hsr0) entered disabled state [ 372.627247][T12420] hsr0: entered allmulticast mode [ 372.638382][T12420] hsr_slave_0: entered allmulticast mode [ 372.647878][T12420] hsr_slave_1: entered allmulticast mode [ 372.666729][T12420] hsr0: entered promiscuous mode [ 374.102737][T12447] __nla_validate_parse: 1 callbacks suppressed [ 374.102755][T12447] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1937'. [ 374.121864][T12448] FAULT_INJECTION: forcing a failure. [ 374.121864][T12448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.153574][T12448] CPU: 1 PID: 12448 Comm: syz.3.1935 Not tainted syzkaller #0 [ 374.161101][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 374.171181][T12448] Call Trace: [ 374.174475][T12448] [ 374.177501][T12448] dump_stack_lvl+0x18c/0x250 [ 374.182189][T12448] ? show_regs_print_info+0x20/0x20 [ 374.187393][T12448] ? load_image+0x420/0x420 [ 374.191897][T12448] ? __might_fault+0xaa/0x120 [ 374.196664][T12448] ? __lock_acquire+0x7eb0/0x7eb0 [ 374.201695][T12448] should_fail_ex+0x394/0x4c0 [ 374.206549][T12448] _copy_from_iter+0x1cd/0x1290 [ 374.211404][T12448] ? rcu_is_watching+0x15/0xb0 [ 374.216268][T12448] ? copyout_mc+0x70/0x70 [ 374.220596][T12448] ? __virt_addr_valid+0x10c/0x380 [ 374.225829][T12448] ? __virt_addr_valid+0x10c/0x380 [ 374.230951][T12448] ? __virt_addr_valid+0x10c/0x380 [ 374.236076][T12448] ? __check_object_size+0x4fc/0xa40 [ 374.241559][T12448] netlink_sendmsg+0x76b/0xbf0 [ 374.246593][T12448] ? netlink_getsockopt+0x590/0x590 [ 374.251791][T12448] ? apparmor_socket_sendmsg+0x8e/0x330 [ 374.257378][T12448] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 374.262684][T12448] ? security_socket_sendmsg+0x80/0xa0 [ 374.268175][T12448] ? netlink_getsockopt+0x590/0x590 [ 374.273721][T12448] ____sys_sendmsg+0x61b/0x980 [ 374.278492][T12448] ? __asan_memset+0x22/0x40 [ 374.283355][T12448] ? __sys_sendmsg_sock+0x30/0x30 [ 374.288557][T12448] ? __import_iovec+0x5f2/0x850 [ 374.293431][T12448] ? import_iovec+0x73/0xa0 [ 374.298020][T12448] ___sys_sendmsg+0x2a6/0x360 [ 374.302702][T12448] ? get_pid_task+0x20/0x1e0 [ 374.307298][T12448] ? __sys_sendmsg+0x2b0/0x2b0 [ 374.312242][T12448] ? __lock_acquire+0x7eb0/0x7eb0 [ 374.317283][T12448] __se_sys_sendmsg+0x1d0/0x2c0 [ 374.322147][T12448] ? __x64_sys_sendmsg+0x80/0x80 [ 374.327098][T12448] ? lockdep_hardirqs_on+0x98/0x150 [ 374.332347][T12448] do_syscall_64+0x55/0xb0 [ 374.336776][T12448] ? clear_bhb_loop+0x40/0x90 [ 374.341454][T12448] ? clear_bhb_loop+0x40/0x90 [ 374.346392][T12448] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 374.352375][T12448] RIP: 0033:0x7fc7fbf9fb19 [ 374.356786][T12448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.376485][T12448] RSP: 002b:00007fc7fcf14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.384901][T12448] RAX: ffffffffffffffda RBX: 00007fc7fc225fa0 RCX: 00007fc7fbf9fb19 [ 374.393401][T12448] RDX: 0000000000040040 RSI: 0000200000000780 RDI: 0000000000000003 [ 374.401378][T12448] RBP: 00007fc7fcf14090 R08: 0000000000000000 R09: 0000000000000000 [ 374.409349][T12448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.417324][T12448] R13: 00007fc7fc226038 R14: 00007fc7fc225fa0 R15: 00007fff8c657e98 [ 374.425396][T12448] [ 374.628205][T12453] rxe_eth0 speed is unknown, defaulting to 1000 [ 374.878164][T12474] validate_nla: 2 callbacks suppressed [ 374.878179][T12474] netlink: 'syz.1.1943': attribute type 29 has an invalid length. [ 374.901100][T12474] netlink: 'syz.1.1943': attribute type 29 has an invalid length. [ 374.920772][T12472] netlink: 'syz.1.1943': attribute type 29 has an invalid length. [ 375.324195][T12482] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1945'. [ 375.415017][T12484] netlink: 'syz.1.1946': attribute type 21 has an invalid length. [ 375.432627][T12484] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1946'. [ 375.520533][T12484] sit0: entered allmulticast mode [ 375.579765][T12488] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1947'. [ 375.628444][T12485] sit0: entered promiscuous mode [ 375.716905][T12490] FAULT_INJECTION: forcing a failure. [ 375.716905][T12490] name failslab, interval 1, probability 0, space 0, times 0 [ 375.738216][T12490] CPU: 1 PID: 12490 Comm: syz.2.1948 Not tainted syzkaller #0 [ 375.746127][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 375.756214][T12490] Call Trace: [ 375.759557][T12490] [ 375.762678][T12490] dump_stack_lvl+0x18c/0x250 [ 375.767492][T12490] ? show_regs_print_info+0x20/0x20 [ 375.772915][T12490] ? load_image+0x420/0x420 [ 375.777518][T12490] ? verify_lock_unused+0x140/0x140 [ 375.783016][T12490] should_fail_ex+0x394/0x4c0 [ 375.789265][T12490] should_failslab+0x9/0x20 [ 375.794263][T12490] slab_pre_alloc_hook+0x59/0x300 [ 375.799329][T12490] kmem_cache_alloc+0x5a/0x2d0 [ 375.804242][T12490] ? skb_clone+0x1eb/0x370 [ 375.808925][T12490] skb_clone+0x1eb/0x370 [ 375.813176][T12490] __netlink_deliver_tap+0x411/0x7f0 [ 375.818469][T12490] ? netlink_deliver_tap+0x2e/0x1b0 [ 375.823769][T12490] netlink_deliver_tap+0x19c/0x1b0 [ 375.828965][T12490] netlink_unicast+0x82f/0x9e0 [ 375.834222][T12490] netlink_sendmsg+0x8d0/0xbf0 [ 375.839104][T12490] ? netlink_getsockopt+0x590/0x590 [ 375.844331][T12490] ? apparmor_socket_sendmsg+0x8e/0x330 [ 375.850072][T12490] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 375.855376][T12490] ? security_socket_sendmsg+0x80/0xa0 [ 375.861046][T12490] ? netlink_getsockopt+0x590/0x590 [ 375.866282][T12490] ____sys_sendmsg+0x61b/0x980 [ 375.871271][T12490] ? __asan_memset+0x22/0x40 [ 375.875959][T12490] ? __sys_sendmsg_sock+0x30/0x30 [ 375.881002][T12490] ? __import_iovec+0x5f2/0x850 [ 375.885917][T12490] ? import_iovec+0x73/0xa0 [ 375.890445][T12490] ___sys_sendmsg+0x2a6/0x360 [ 375.895231][T12490] ? get_pid_task+0x20/0x1e0 [ 375.899835][T12490] ? __sys_sendmsg+0x2b0/0x2b0 [ 375.904641][T12490] ? __lock_acquire+0x7eb0/0x7eb0 [ 375.909695][T12490] __se_sys_sendmsg+0x1d0/0x2c0 [ 375.914749][T12490] ? __x64_sys_sendmsg+0x80/0x80 [ 375.919794][T12490] ? lockdep_hardirqs_on+0x98/0x150 [ 375.924999][T12490] do_syscall_64+0x55/0xb0 [ 375.929462][T12490] ? clear_bhb_loop+0x40/0x90 [ 375.934156][T12490] ? clear_bhb_loop+0x40/0x90 [ 375.938915][T12490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 375.944878][T12490] RIP: 0033:0x7f314239fb19 [ 375.949388][T12490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.969368][T12490] RSP: 002b:00007f3143333028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.977795][T12490] RAX: ffffffffffffffda RBX: 00007f3142625fa0 RCX: 00007f314239fb19 [ 375.985976][T12490] RDX: 0000000000040040 RSI: 0000200000000780 RDI: 0000000000000003 [ 375.994051][T12490] RBP: 00007f3143333090 R08: 0000000000000000 R09: 0000000000000000 [ 376.002157][T12490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.010143][T12490] R13: 00007f3142626038 R14: 00007f3142625fa0 R15: 00007ffc317314b8 [ 376.018824][T12490] [ 376.029193][T12490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1948'. [ 376.373217][T12500] netlink: 'syz.3.1953': attribute type 10 has an invalid length. [ 376.394962][T12500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.420244][T12500] batadv0: entered promiscuous mode [ 376.436740][T12500] batadv0: entered allmulticast mode [ 376.445733][T12500] team0: Port device batadv0 added [ 376.473437][T12504] netlink: 'syz.3.1953': attribute type 19 has an invalid length. [ 376.496145][T12506] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1955'. [ 376.526747][T12500] netlink: 'syz.3.1953': attribute type 4 has an invalid length. [ 376.563411][ T2985] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 376.573857][ T2985] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 376.767269][T12515] FAULT_INJECTION: forcing a failure. [ 376.767269][T12515] name failslab, interval 1, probability 0, space 0, times 0 [ 376.825448][T12515] CPU: 1 PID: 12515 Comm: syz.3.1959 Not tainted syzkaller #0 [ 376.833507][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 376.844010][T12515] Call Trace: [ 376.847316][T12515] [ 376.850303][T12515] dump_stack_lvl+0x18c/0x250 [ 376.855677][T12515] ? show_regs_print_info+0x20/0x20 [ 376.861040][T12515] ? load_image+0x420/0x420 [ 376.865891][T12515] ? __might_sleep+0xe0/0xe0 [ 376.870962][T12515] ? __lock_acquire+0x7eb0/0x7eb0 [ 376.876216][T12515] should_fail_ex+0x394/0x4c0 [ 376.880951][T12515] should_failslab+0x9/0x20 [ 376.885478][T12515] slab_pre_alloc_hook+0x59/0x300 [ 376.890576][T12515] ? rtnl_newlink+0x10d/0x2170 [ 376.895509][T12515] __kmem_cache_alloc_node+0x53/0x260 [ 376.900920][T12515] ? rtnl_newlink+0x10d/0x2170 [ 376.905711][T12515] kmalloc_trace+0x2a/0xe0 [ 376.910169][T12515] rtnl_newlink+0x10d/0x2170 [ 376.914832][T12515] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 376.920961][T12515] ? verify_lock_unused+0x140/0x140 [ 376.926196][T12515] ? __mutex_trylock_common+0x160/0x270 [ 376.931799][T12515] ? rtnl_setlink+0x4e0/0x4e0 [ 376.936514][T12515] ? trace_raw_output_contention_end+0xd0/0xd0 [ 376.942715][T12515] ? rcu_is_watching+0x15/0xb0 [ 376.947593][T12515] ? trace_contention_end+0x39/0xe0 [ 376.952881][T12515] ? __mutex_lock+0x30d/0xce0 [ 376.957650][T12515] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 376.962783][T12515] ? mutex_lock_nested+0x20/0x20 [ 376.967882][T12515] ? rtnl_setlink+0x4e0/0x4e0 [ 376.972764][T12515] rtnetlink_rcv_msg+0x843/0xf90 [ 376.977737][T12515] ? rtnetlink_rcv_msg+0x220/0xf90 [ 376.982884][T12515] ? rtnetlink_bind+0x80/0x80 [ 376.987610][T12515] ? kasan_quarantine_put+0xd8/0x220 [ 376.992926][T12515] ? lockdep_hardirqs_on+0x98/0x150 [ 376.998165][T12515] ? perf_trace_preemptirq_template+0xac/0x330 [ 377.004387][T12515] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 377.010403][T12515] ? lock_chain_count+0x20/0x20 [ 377.015385][T12515] ? __local_bh_enable_ip+0x13a/0x1c0 [ 377.020889][T12515] ? lockdep_hardirqs_on+0x98/0x150 [ 377.026169][T12515] ? __local_bh_enable_ip+0x13a/0x1c0 [ 377.031571][T12515] ? _local_bh_enable+0xa0/0xa0 [ 377.036458][T12515] ? __dev_queue_xmit+0x1481/0x3a30 [ 377.041730][T12515] ? __dev_queue_xmit+0x6d1/0x3a30 [ 377.046898][T12515] ? ref_tracker_free+0x686/0x830 [ 377.051966][T12515] netlink_rcv_skb+0x235/0x4c0 [ 377.056937][T12515] ? rtnetlink_bind+0x80/0x80 [ 377.061647][T12515] ? netlink_ack+0x1160/0x1160 [ 377.066458][T12515] ? __lock_acquire+0x7eb0/0x7eb0 [ 377.071522][T12515] ? netlink_deliver_tap+0x2e/0x1b0 [ 377.076752][T12515] netlink_unicast+0x856/0x9e0 [ 377.081582][T12515] netlink_sendmsg+0x8d0/0xbf0 [ 377.086388][T12515] ? netlink_getsockopt+0x590/0x590 [ 377.091631][T12515] ? apparmor_socket_sendmsg+0x8e/0x330 [ 377.097472][T12515] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 377.102968][T12515] ? security_socket_sendmsg+0x80/0xa0 [ 377.108457][T12515] ? netlink_getsockopt+0x590/0x590 [ 377.113683][T12515] ____sys_sendmsg+0x61b/0x980 [ 377.118572][T12515] ? __asan_memset+0x22/0x40 [ 377.123206][T12515] ? __sys_sendmsg_sock+0x30/0x30 [ 377.128259][T12515] ? __import_iovec+0x5f2/0x850 [ 377.133319][T12515] ? import_iovec+0x73/0xa0 [ 377.138036][T12515] ___sys_sendmsg+0x2a6/0x360 [ 377.142736][T12515] ? get_pid_task+0x20/0x1e0 [ 377.147360][T12515] ? __sys_sendmsg+0x2b0/0x2b0 [ 377.152195][T12515] ? __lock_acquire+0x7eb0/0x7eb0 [ 377.157256][T12515] __se_sys_sendmsg+0x1d0/0x2c0 [ 377.162216][T12515] ? __x64_sys_sendmsg+0x80/0x80 [ 377.167260][T12515] ? lockdep_hardirqs_on+0x98/0x150 [ 377.172554][T12515] do_syscall_64+0x55/0xb0 [ 377.176988][T12515] ? clear_bhb_loop+0x40/0x90 [ 377.181681][T12515] ? clear_bhb_loop+0x40/0x90 [ 377.186369][T12515] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.192262][T12515] RIP: 0033:0x7fc7fbf9fb19 [ 377.196680][T12515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.216395][T12515] RSP: 002b:00007fc7fcf14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.224897][T12515] RAX: ffffffffffffffda RBX: 00007fc7fc225fa0 RCX: 00007fc7fbf9fb19 [ 377.232870][T12515] RDX: 0000000000040040 RSI: 0000200000000780 RDI: 0000000000000003 [ 377.240949][T12515] RBP: 00007fc7fcf14090 R08: 0000000000000000 R09: 0000000000000000 [ 377.248940][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.256904][T12515] R13: 00007fc7fc226038 R14: 00007fc7fc225fa0 R15: 00007fff8c657e98 [ 377.264887][T12515] [ 377.665255][T12527] netlink: 'syz.3.1961': attribute type 1 has an invalid length. [ 377.675691][T12527] netlink: 'syz.3.1961': attribute type 3 has an invalid length. [ 377.694326][T12527] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1961'. [ 377.746909][T12519] sit0: left promiscuous mode [ 377.884904][T12527] netlink: 'syz.3.1961': attribute type 10 has an invalid length. [ 377.893404][T12527] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1961'. [ 378.433327][T12545] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1968'. [ 378.464535][T12547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1969'. [ 378.494069][T12547] FAULT_INJECTION: forcing a failure. [ 378.494069][T12547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.528169][T12547] CPU: 1 PID: 12547 Comm: syz.1.1969 Not tainted syzkaller #0 [ 378.535780][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 378.545956][T12547] Call Trace: [ 378.549248][T12547] [ 378.552187][T12547] dump_stack_lvl+0x18c/0x250 [ 378.556877][T12547] ? show_regs_print_info+0x20/0x20 [ 378.562077][T12547] ? load_image+0x420/0x420 [ 378.566586][T12547] ? __lock_acquire+0x7eb0/0x7eb0 [ 378.571610][T12547] ? snprintf+0xe9/0x140 [ 378.575889][T12547] should_fail_ex+0x394/0x4c0 [ 378.580568][T12547] _copy_to_user+0x2f/0xa0 [ 378.584982][T12547] simple_read_from_buffer+0xe7/0x150 [ 378.590637][T12547] proc_fail_nth_read+0x1e8/0x260 [ 378.595716][T12547] ? proc_fault_inject_write+0x360/0x360 [ 378.601356][T12547] ? fsnotify_perm+0x271/0x5e0 [ 378.606119][T12547] ? proc_fault_inject_write+0x360/0x360 [ 378.611779][T12547] vfs_read+0x298/0x990 [ 378.615945][T12547] ? kernel_read+0x1e0/0x1e0 [ 378.620544][T12547] ? __fget_files+0x28/0x460 [ 378.625139][T12547] ? __fget_files+0x3fc/0x460 [ 378.629852][T12547] ? __fdget_pos+0x2a3/0x330 [ 378.634444][T12547] ? ksys_read+0x74/0x260 [ 378.638801][T12547] ksys_read+0x151/0x260 [ 378.643145][T12547] ? vfs_write+0x9a0/0x9a0 [ 378.647569][T12547] ? lockdep_hardirqs_on+0x98/0x150 [ 378.652794][T12547] do_syscall_64+0x55/0xb0 [ 378.657315][T12547] ? clear_bhb_loop+0x40/0x90 [ 378.662076][T12547] ? clear_bhb_loop+0x40/0x90 [ 378.666844][T12547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.673004][T12547] RIP: 0033:0x7fdf7636034e [ 378.677444][T12547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 378.697236][T12547] RSP: 002b:00007fdf7731efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.705657][T12547] RAX: ffffffffffffffda RBX: 00007fdf7731f6c0 RCX: 00007fdf7636034e [ 378.713897][T12547] RDX: 000000000000000f RSI: 00007fdf7731f0a0 RDI: 0000000000000004 [ 378.722020][T12547] RBP: 00007fdf7731f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.730011][T12547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.737982][T12547] R13: 00007fdf76626038 R14: 00007fdf76625fa0 R15: 00007ffc75b4fc98 [ 378.745982][T12547] [ 378.893391][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.900050][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.421828][T12577] __nla_validate_parse: 1 callbacks suppressed [ 379.421862][T12577] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1978'. [ 379.485745][T12575] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1978'. [ 380.160838][T12600] netlink: 39911 bytes leftover after parsing attributes in process `syz.2.1989'. [ 380.766101][T12609] validate_nla: 4 callbacks suppressed [ 380.766117][T12609] netlink: 'syz.1.1993': attribute type 10 has an invalid length. [ 381.646720][T12622] netlink: 'syz.0.1998': attribute type 1 has an invalid length. [ 381.672181][T12622] netlink: 'syz.0.1998': attribute type 3 has an invalid length. [ 381.688842][T12622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1998'. [ 381.704686][T12630] netlink: 'syz.0.1998': attribute type 10 has an invalid length. [ 381.728898][T12630] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1998'. [ 381.763115][T12628] netlink: 'syz.3.1999': attribute type 9 has an invalid length. [ 381.779277][T12628] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1999'. [ 382.415169][ T6127] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 383.449405][T12660] netlink: 'syz.3.2011': attribute type 21 has an invalid length. [ 383.612672][T12665] netlink: 'syz.2.2014': attribute type 1 has an invalid length. [ 383.621822][T12665] netlink: 'syz.2.2014': attribute type 3 has an invalid length. [ 383.633974][T12665] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2014'. [ 383.651796][T12665] netlink: 'syz.2.2014': attribute type 10 has an invalid length. [ 383.664830][T12665] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2014'. [ 384.077318][T12681] netlink: 'syz.1.2020': attribute type 10 has an invalid length. [ 384.117142][T12681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.126326][T12681] team0: Port device batadv0 added [ 384.226807][T12681] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 384.283951][T12686] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2021'. [ 385.471628][T12708] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2030'. [ 385.803245][T12721] validate_nla: 2 callbacks suppressed [ 385.803275][T12721] netlink: 'syz.2.2035': attribute type 19 has an invalid length. [ 385.901163][T12721] netlink: 'syz.2.2035': attribute type 16 has an invalid length. [ 385.944526][T12721] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2035'. [ 386.020052][T12722] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2035'. [ 386.069312][T12729] netlink: 134640 bytes leftover after parsing attributes in process `syz.0.2038'. [ 386.252066][T12737] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2041'. [ 386.474188][T12755] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2046'. [ 387.460217][T12765] sit0: left promiscuous mode [ 387.982368][T12785] bridge0: port 3(team0) entered disabled state [ 388.004630][T12785] bridge_slave_1: left allmulticast mode [ 388.012380][T12785] bridge_slave_1: left promiscuous mode [ 388.021994][T12785] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.073675][T12785] bridge_slave_0: left allmulticast mode [ 388.108202][T12785] bridge_slave_0: left promiscuous mode [ 388.114110][T12785] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.134993][T12796] netlink: 'syz.2.2058': attribute type 29 has an invalid length. [ 388.218378][T12796] netlink: 'syz.2.2058': attribute type 29 has an invalid length. [ 388.236936][T12802] netlink: 'syz.2.2058': attribute type 29 has an invalid length. [ 388.366783][T12806] netlink: 154464 bytes leftover after parsing attributes in process `syz.2.2061'. [ 389.056127][T12817] netlink: 'syz.2.2064': attribute type 1 has an invalid length. [ 389.078256][T12817] netlink: 'syz.2.2064': attribute type 3 has an invalid length. [ 389.086476][T12817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2064'. [ 389.112274][T12817] netlink: 'syz.2.2064': attribute type 10 has an invalid length. [ 389.130989][T12817] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2064'. [ 389.154627][T12827] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2067'. [ 389.299449][T12829] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 389.319102][T12829] netlink: 'syz.0.2068': attribute type 10 has an invalid length. [ 391.746704][T12861] netlink: 'syz.2.2078': attribute type 1 has an invalid length. [ 391.759490][T12865] netlink: 'syz.3.2080': attribute type 30 has an invalid length. [ 391.773055][T12868] netlink: 'syz.2.2078': attribute type 10 has an invalid length. [ 391.807235][T12861] netlink: 'syz.2.2078': attribute type 3 has an invalid length. [ 391.832587][T12868] __nla_validate_parse: 2 callbacks suppressed [ 391.832604][T12868] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2078'. [ 391.868508][T12861] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2078'. [ 391.898502][T12871] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2082'. [ 391.914470][T12871] netlink: 'syz.1.2082': attribute type 27 has an invalid length. [ 391.923732][T12871] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2082'. [ 392.140188][T12876] netlink: 'syz.0.2083': attribute type 21 has an invalid length. [ 392.171469][T12876] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2083'. [ 393.428324][T12898] netlink: 'syz.2.2091': attribute type 21 has an invalid length. [ 393.436058][T12906] netlink: 212400 bytes leftover after parsing attributes in process `syz.3.2094'. [ 393.466896][T12906] netlink: 'syz.3.2094': attribute type 23 has an invalid length. [ 393.764893][T12920] netlink: 'syz.2.2096': attribute type 3 has an invalid length. [ 393.777679][T12920] netlink: 101512 bytes leftover after parsing attributes in process `syz.2.2096'. [ 393.844573][T12925] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 393.872895][T12925] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2098'. [ 393.912813][T12925] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2098'. [ 394.023302][T12933] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2099'. [ 397.793959][T12953] validate_nla: 2 callbacks suppressed [ 397.794000][T12953] netlink: 'syz.2.2106': attribute type 1 has an invalid length. [ 397.817461][T12953] netlink: 'syz.2.2106': attribute type 3 has an invalid length. [ 397.829540][T12953] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2106'. [ 397.870913][T12953] netlink: 'syz.2.2106': attribute type 10 has an invalid length. [ 397.901923][T12953] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2106'. [ 397.958908][T12955] netlink: 'syz.0.2107': attribute type 10 has an invalid length. [ 398.146367][T12955] team0: Device hsr_slave_0 failed to register rx_handler [ 398.384711][T12963] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2110'. [ 398.388227][T12955] syz.0.2107 (12955) used greatest stack depth: 17064 bytes left [ 398.410182][T12963] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2110'. [ 398.784416][T12973] netlink: 'syz.0.2119': attribute type 1 has an invalid length. [ 398.792080][T12974] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 398.793400][T12973] netlink: 'syz.0.2119': attribute type 3 has an invalid length. [ 398.816346][T12973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2119'. [ 398.842498][T12973] netlink: 'syz.0.2119': attribute type 10 has an invalid length. [ 398.852705][T12974] netlink: 'syz.1.2111': attribute type 3 has an invalid length. [ 398.863201][T12973] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2119'. [ 398.884731][T12974] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2111'. [ 398.908344][T12976] netlink: 'syz.1.2111': attribute type 10 has an invalid length. [ 398.928065][T12976] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2111'. [ 399.122554][T12979] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2112'. [ 400.550673][T13018] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2126'. [ 403.987133][T13106] validate_nla: 6 callbacks suppressed [ 403.987162][T13106] netlink: 'syz.2.2155': attribute type 10 has an invalid length. [ 404.045541][T13106] team0: Device hsr_slave_0 failed to register rx_handler [ 404.937577][T13141] __nla_validate_parse: 3 callbacks suppressed [ 404.937598][T13141] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.2167'. [ 404.955064][T13141] netlink: 8442 bytes leftover after parsing attributes in process `syz.3.2167'. [ 404.974384][T13142] netlink: 'syz.2.2165': attribute type 21 has an invalid length. [ 406.119726][T13167] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2176'. [ 406.801541][T13182] netlink: 'syz.2.2181': attribute type 21 has an invalid length. [ 406.843107][T13182] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2181'. [ 407.027739][T13182] netlink: 'syz.2.2181': attribute type 3 has an invalid length. [ 407.041035][T13182] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2181'. [ 408.305923][T13227] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2198'. [ 408.316632][T13225] netlink: 'syz.2.2197': attribute type 1 has an invalid length. [ 408.328404][T13225] netlink: 'syz.2.2197': attribute type 3 has an invalid length. [ 408.336514][T13225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2197'. [ 408.356182][T13225] netlink: 'syz.2.2197': attribute type 10 has an invalid length. [ 408.364608][T13225] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2197'. [ 408.483338][T13227] rxe_eth0 speed is unknown, defaulting to 1000 [ 408.584541][T13235] netlink: 'syz.2.2201': attribute type 10 has an invalid length. [ 409.646903][T13235] bridge0: port 3(team0) entered disabled state [ 409.700521][T13235] team_slave_1: left promiscuous mode [ 409.706695][T13235] team_slave_1: left allmulticast mode [ 409.727950][T13235] team0 (unregistering): Port device team_slave_1 removed [ 409.746983][T13235] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 409.754909][T13235] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 409.777680][T13235] team0 (unregistering): Port device wlan1 removed [ 410.541487][T13266] netlink: 'syz.3.2210': attribute type 1 has an invalid length. [ 410.579746][T13266] netlink: 'syz.3.2210': attribute type 3 has an invalid length. [ 410.612778][T13266] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2210'. [ 410.658585][T13269] netlink: 'syz.3.2210': attribute type 10 has an invalid length. [ 410.689306][T13269] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2210'. [ 411.991432][T13288] netlink: 'syz.3.2218': attribute type 21 has an invalid length. [ 412.000246][T13288] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2218'. [ 412.453369][T13306] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 412.510172][T13307] netlink: 'syz.3.2222': attribute type 1 has an invalid length. [ 412.543851][T13307] netlink: 'syz.3.2222': attribute type 3 has an invalid length. [ 412.573423][T13307] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2222'. [ 412.921998][T13314] netlink: 'syz.3.2222': attribute type 10 has an invalid length. [ 412.930322][T13314] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2222'. [ 413.346245][T11570] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 414.323302][T13354] netlink: 'syz.1.2236': attribute type 1 has an invalid length. [ 414.331974][T13354] netlink: 'syz.1.2236': attribute type 3 has an invalid length. [ 414.346235][T13354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2236'. [ 414.364929][T13354] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2236'. [ 415.978617][T13410] validate_nla: 1 callbacks suppressed [ 415.978655][T13410] netlink: 'syz.3.2254': attribute type 1 has an invalid length. [ 415.993529][T13410] netlink: 'syz.3.2254': attribute type 3 has an invalid length. [ 416.017402][T13410] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2254'. [ 416.047050][T13410] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 416.058423][T13410] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2254'. [ 417.085233][T13437] syzkaller0: entered promiscuous mode [ 417.110278][T13437] syzkaller0: entered allmulticast mode [ 417.117508][ T6148] syzkaller0: tun_net_xmit 48 [ 417.556170][T13456] netlink: 'syz.3.2271': attribute type 1 has an invalid length. [ 417.564539][T13456] netlink: 'syz.3.2271': attribute type 3 has an invalid length. [ 417.573758][T13456] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2271'. [ 419.203390][T13456] netlink: 'syz.3.2271': attribute type 10 has an invalid length. [ 419.211720][T13456] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2271'. [ 420.474744][T13494] netlink: 'syz.3.2283': attribute type 1 has an invalid length. [ 420.488151][T13494] netlink: 'syz.3.2283': attribute type 3 has an invalid length. [ 420.497273][T13494] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2283'. [ 420.516729][T13494] netlink: 'syz.3.2283': attribute type 10 has an invalid length. [ 420.525530][T13494] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2283'. [ 420.637741][T13491] rxe_eth0 speed is unknown, defaulting to 1000 [ 421.947784][T13544] netlink: 'syz.2.2297': attribute type 12 has an invalid length. [ 421.973419][T13547] netlink: 'syz.1.2296': attribute type 41 has an invalid length. [ 421.983974][T13544] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2297'. [ 422.052281][T13547] netlink: 'syz.1.2296': attribute type 41 has an invalid length. [ 422.073060][T13550] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2296'. [ 422.523843][T13556] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 422.544440][T13556] netlink: 'syz.3.2298': attribute type 3 has an invalid length. [ 422.583660][T13556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2298'. [ 422.995496][T13556] netlink: 'syz.3.2298': attribute type 10 has an invalid length. [ 423.004345][T13556] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2298'. [ 423.191159][T13562] netlink: 'syz.0.2300': attribute type 1 has an invalid length. [ 423.207490][T13562] netlink: 'syz.0.2300': attribute type 3 has an invalid length. [ 423.216754][T13562] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2300'. [ 423.365854][T13577] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2304'. [ 423.398862][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.438751][T13577] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2304'. [ 423.460236][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.498434][T13577] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2304'. [ 423.518848][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.539330][T13577] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2304'. [ 423.557614][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.579220][T13577] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2304'. [ 423.607043][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.631739][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.654271][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.685128][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.731396][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.766192][T13577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.617751][T13602] netlink: 'syz.0.2314': attribute type 1 has an invalid length. [ 424.645710][T13602] netlink: 'syz.0.2314': attribute type 3 has an invalid length. [ 424.975654][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.985606][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.994957][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 425.005733][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 425.020664][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 425.029099][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 425.080001][T11570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.108530][T13609] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.203375][T11570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.310375][T11570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.368099][T13618] rxe_eth0 speed is unknown, defaulting to 1000 [ 425.466286][T11570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.607811][T13618] chnl_net:caif_netlink_parms(): no params data found [ 426.939626][T13618] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.963922][T13618] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.980109][T13618] bridge_slave_0: entered allmulticast mode [ 426.987553][T13618] bridge_slave_0: entered promiscuous mode [ 426.999968][T13679] validate_nla: 6 callbacks suppressed [ 427.000000][T13679] netlink: 'syz.3.2331': attribute type 41 has an invalid length. [ 427.087493][T13618] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.095074][T13618] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.107615][T13618] bridge_slave_1: entered allmulticast mode [ 427.118323][ T5796] Bluetooth: hci1: command tx timeout [ 427.143495][T13618] bridge_slave_1: entered promiscuous mode [ 427.201812][T13618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.225722][T13618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.290517][T13618] team0: Port device team_slave_0 added [ 427.305000][T13618] team0: Port device team_slave_1 added [ 427.355967][T13618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.370271][T13618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.404001][T13618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.419377][T13618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.426848][T13618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.477359][T13618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.023551][T13618] hsr_slave_0: entered promiscuous mode [ 428.043929][T13618] hsr_slave_1: entered promiscuous mode [ 428.064002][T13618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.076046][T13618] Cannot create hsr debugfs directory [ 428.130917][T13701] __nla_validate_parse: 34 callbacks suppressed [ 428.130937][T13701] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2335'. [ 428.148288][T13701] bond0: entered promiscuous mode [ 428.153453][T13701] bond_slave_0: entered promiscuous mode [ 428.164520][T13701] bond_slave_1: entered promiscuous mode [ 428.171105][T13703] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2336'. [ 428.210399][T13701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.888144][T13718] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2340'. [ 428.907860][T13723] netlink: 'syz.0.2341': attribute type 1 has an invalid length. [ 428.916687][T13723] netlink: 'syz.0.2341': attribute type 3 has an invalid length. [ 428.926435][T13723] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2341'. [ 428.942791][T13723] netlink: 'syz.0.2341': attribute type 10 has an invalid length. [ 428.954216][T13723] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2341'. [ 428.973297][T13718] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.2340'. [ 429.206645][ T5796] Bluetooth: hci1: command tx timeout [ 429.535607][T13730] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2343'. [ 429.571786][T13730] netlink: 3060 bytes leftover after parsing attributes in process `syz.3.2343'. [ 429.814096][T13738] netlink: 'syz.3.2345': attribute type 39 has an invalid length. [ 430.035912][T13740] netlink: 'syz.1.2344': attribute type 46 has an invalid length. [ 430.051692][T13740] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2344'. [ 430.403273][T13765] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2348'. [ 430.544640][T13765] bridge0: port 4(team0) entered disabled state [ 430.904285][T13765] bridge0: port 3(dummy0) entered disabled state [ 430.935182][T13765] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.181018][T13775] netlink: 'syz.1.2352': attribute type 17 has an invalid length. [ 431.238132][T13618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 431.286917][T13618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 431.288400][ T5796] Bluetooth: hci1: command tx timeout [ 431.324022][T13618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 431.649742][T13786] netlink: 'syz.3.2355': attribute type 1 has an invalid length. [ 431.657791][T13786] netlink: 'syz.3.2355': attribute type 3 has an invalid length. [ 433.358322][ T5796] Bluetooth: hci1: command tx timeout [ 434.317504][T11570] hsr_slave_0: left promiscuous mode [ 434.324544][T11570] hsr_slave_1: left promiscuous mode [ 434.390099][T11570] bridge0: port 4(dummy0) entered disabled state [ 434.398747][T11570] bridge_slave_1: left allmulticast mode [ 434.404471][T11570] bridge_slave_1: left promiscuous mode [ 434.418056][T11570] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.429510][T11570] bridge_slave_0: left allmulticast mode [ 434.435705][T11570] bridge_slave_0: left promiscuous mode [ 434.441586][T11570] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.359157][T13786] netlink: 'syz.3.2355': attribute type 10 has an invalid length. [ 436.367023][T13786] __nla_validate_parse: 5 callbacks suppressed [ 436.367031][T13786] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2355'. [ 436.385246][T13618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 436.422834][T13808] netlink: 'syz.1.2360': attribute type 10 has an invalid length. [ 436.448052][T13808] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2360'. [ 436.806694][T13830] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2362'. [ 437.016244][T13830] bridge_slave_1: left allmulticast mode [ 437.023816][T13830] bridge_slave_1: left promiscuous mode [ 437.034955][T13830] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.053598][T13830] bridge_slave_0: left allmulticast mode [ 437.061070][T13830] bridge_slave_0: left promiscuous mode [ 437.067051][T13830] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.964620][T13837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2365'. [ 439.133410][T13843] netlink: 'syz.1.2369': attribute type 9 has an invalid length. [ 439.148295][T13843] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2369'. [ 439.491345][T13618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.634383][T13618] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.669198][T13852] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 439.672413][T13316] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.684182][T13316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.687452][T13852] netlink: 'syz.3.2371': attribute type 3 has an invalid length. [ 439.732035][T13852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2371'. [ 439.757651][ T6137] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.764898][ T6137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.808163][T13856] netlink: 'syz.3.2371': attribute type 10 has an invalid length. [ 439.832022][T13856] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2371'. [ 440.019571][T13618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.322467][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.329066][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.442701][T13618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.590762][T13618] veth0_vlan: entered promiscuous mode [ 440.631635][T13618] veth1_vlan: entered promiscuous mode [ 440.769107][T13618] veth0_macvtap: entered promiscuous mode [ 440.802258][T13618] veth1_macvtap: entered promiscuous mode [ 440.869717][T13618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.893434][T13618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.923268][T13618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.955178][T13618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.981342][T13618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.016238][T13618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.039925][T13618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.066324][T13618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.098201][T13618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.122402][T13618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.159464][T13618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.177163][T13618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.193187][T13618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.206886][T13618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.250365][T13618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.263563][T13618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.277406][T13618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.297433][T13618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.816181][T13902] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 441.851070][T13902] syzkaller0: entered promiscuous mode [ 441.856900][T13902] syzkaller0: entered allmulticast mode [ 443.906620][T13919] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 443.912696][T13919] syzkaller0: Linktype set failed because interface is up [ 443.969045][T13923] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 443.979086][T13925] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 443.984965][T13925] syzkaller0: Linktype set failed because interface is up [ 444.368458][T13316] ..ãc¤±: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 445.718614][T13316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.726581][T13316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.750741][T13946] netlink: 'syz.1.2385': attribute type 10 has an invalid length. [ 445.788092][T13946] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2385'. [ 445.908901][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.916772][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.466327][T14006] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.2394'. [ 447.514659][T14007] netlink: 'syz.1.2393': attribute type 10 has an invalid length. [ 447.563379][T14007] geneve0: entered promiscuous mode [ 447.966365][ T5795] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 447.977380][ T5795] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 447.989715][ T5795] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 448.007076][ T5795] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 448.011995][T11570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.031964][ T5795] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 448.039789][ T5795] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 448.051138][T14015] netlink: 'syz.1.2396': attribute type 39 has an invalid length. [ 448.288619][T11570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.345812][T14018] rxe_eth0 speed is unknown, defaulting to 1000 [ 448.421513][T11570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.925985][T14030] netlink: 'syz.1.2401': attribute type 9 has an invalid length. [ 448.934223][T14030] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2401'. [ 449.376624][T14018] chnl_net:caif_netlink_parms(): no params data found [ 449.465141][T11570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.714928][T14018] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.739834][T14018] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.747095][T14018] bridge_slave_0: entered allmulticast mode [ 449.779052][T14018] bridge_slave_0: entered promiscuous mode [ 449.855416][T14018] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.878267][T14018] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.885674][T14018] bridge_slave_1: entered allmulticast mode [ 449.907581][T14018] bridge_slave_1: entered promiscuous mode [ 450.109098][ T5796] Bluetooth: hci0: command tx timeout [ 450.223034][T14058] netlink: 'syz.2.2408': attribute type 10 has an invalid length. [ 450.248260][T14058] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2408'. [ 450.264430][T14018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.337795][T14018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.590557][T14018] team0: Port device team_slave_0 added [ 450.643869][T14018] team0: Port device team_slave_1 added [ 451.061402][T14018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.085125][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.175447][T14018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.469293][T14018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.476320][T14018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.505971][T14018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.646352][T14086] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.2412'. [ 451.824464][T14018] hsr_slave_0: entered promiscuous mode [ 451.892994][T14018] hsr_slave_1: entered promiscuous mode [ 451.970772][T14018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.998163][T14018] Cannot create hsr debugfs directory [ 452.158410][ T5796] Bluetooth: hci0: command tx timeout [ 454.241513][ T5796] Bluetooth: hci0: command tx timeout [ 455.185102][T14134] netlink: 'syz.2.2422': attribute type 3 has an invalid length. [ 455.230170][T14134] netlink: 163276 bytes leftover after parsing attributes in process `syz.2.2422'. [ 456.322242][ T5796] Bluetooth: hci0: command tx timeout [ 456.606796][T14150] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2425'. [ 458.410696][T14018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 459.044350][T11570] hsr_slave_0: left promiscuous mode [ 459.070526][T11570] hsr_slave_1: left promiscuous mode [ 459.089847][T11570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.107832][T11570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.154102][T11570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.178377][T11570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.716665][T11570] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 461.218923][T11570] team_slave_1 (unregistering): left promiscuous mode [ 461.227723][T11570] team_slave_1 (unregistering): left allmulticast mode [ 461.250679][T11570] team0 (unregistering): Port device team_slave_1 removed [ 461.382703][T11570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.391848][T11570] bond_slave_1 (unregistering): left promiscuous mode [ 461.466319][T11570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.475783][T11570] bond_slave_0 (unregistering): left promiscuous mode [ 461.724831][T11570] bond0 (unregistering): Released all slaves [ 461.763978][T14018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 461.775589][T14018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 461.786422][T14179] netlink: 'syz.2.2431': attribute type 39 has an invalid length. [ 461.840549][T14018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 462.063169][T14018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.086653][T14198] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2435'. [ 462.105210][T14198] bridge_slave_1: default FDB implementation only supports local addresses [ 462.161487][T14018] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.186313][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.193535][ T8486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.237005][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.244275][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.343564][T14200] sit0: entered promiscuous mode [ 463.235562][T14018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.378881][T14018] veth0_vlan: entered promiscuous mode [ 463.414564][T14018] veth1_vlan: entered promiscuous mode [ 463.476376][T14018] veth0_macvtap: entered promiscuous mode [ 463.494193][T14018] veth1_macvtap: entered promiscuous mode [ 463.540252][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.582077][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.607561][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.628337][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.644895][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.674341][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.724004][T14018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.803778][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.853769][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.891302][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.932026][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.962659][T14018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.986914][T14018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.026663][T14018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.089974][T14018] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.123024][T14018] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.134893][T14018] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.149722][T14018] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.308604][T14254] netlink: 'syz.2.2447': attribute type 7 has an invalid length. [ 464.760239][T13316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.808726][T13316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.397763][ T6137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.431756][ T6137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.671273][T14278] FAULT_INJECTION: forcing a failure. [ 465.671273][T14278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.790619][T14278] CPU: 0 PID: 14278 Comm: syz.0.2392 Not tainted syzkaller #0 [ 465.798264][T14278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 465.808374][T14278] Call Trace: [ 465.811692][T14278] [ 465.814645][T14278] dump_stack_lvl+0x18c/0x250 [ 465.819459][T14278] ? show_regs_print_info+0x20/0x20 [ 465.824854][T14278] ? load_image+0x420/0x420 [ 465.829375][T14278] ? __lock_acquire+0x7eb0/0x7eb0 [ 465.834589][T14278] ? snprintf+0xe9/0x140 [ 465.838852][T14278] should_fail_ex+0x394/0x4c0 [ 465.843670][T14278] _copy_to_user+0x2f/0xa0 [ 465.848099][T14278] simple_read_from_buffer+0xe7/0x150 [ 465.853491][T14278] proc_fail_nth_read+0x1e8/0x260 [ 465.858548][T14278] ? proc_fault_inject_write+0x360/0x360 [ 465.864200][T14278] ? fsnotify_perm+0x271/0x5e0 [ 465.869010][T14278] ? proc_fault_inject_write+0x360/0x360 [ 465.874668][T14278] vfs_read+0x298/0x990 [ 465.878887][T14278] ? kernel_read+0x1e0/0x1e0 [ 465.883504][T14278] ? __fget_files+0x28/0x460 [ 465.888119][T14278] ? __fget_files+0x3fc/0x460 [ 465.892932][T14278] ? __fdget_pos+0x2a3/0x330 [ 465.897546][T14278] ? ksys_read+0x74/0x260 [ 465.901909][T14278] ksys_read+0x151/0x260 [ 465.906187][T14278] ? vfs_write+0x9a0/0x9a0 [ 465.910714][T14278] ? lockdep_hardirqs_on+0x98/0x150 [ 465.915935][T14278] do_syscall_64+0x55/0xb0 [ 465.920363][T14278] ? clear_bhb_loop+0x40/0x90 [ 465.925051][T14278] ? clear_bhb_loop+0x40/0x90 [ 465.929748][T14278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.935659][T14278] RIP: 0033:0x7f184f76034e [ 465.940090][T14278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 465.959805][T14278] RSP: 002b:00007f18505c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.968320][T14278] RAX: ffffffffffffffda RBX: 00007f18505c26c0 RCX: 00007f184f76034e [ 465.976311][T14278] RDX: 000000000000000f RSI: 00007f18505c20a0 RDI: 0000000000000007 [ 465.984296][T14278] RBP: 00007f18505c2090 R08: 0000000000000000 R09: 0000000000000000 [ 465.992287][T14278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.000268][T14278] R13: 00007f184fa26038 R14: 00007f184fa25fa0 R15: 00007ffdf920ec08 [ 466.008281][T14278] [ 466.068648][T14281] sit0: entered allmulticast mode [ 466.146479][T14283] sit0: entered promiscuous mode [ 466.429414][T14288] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2455'. [ 466.485727][T14288] net_ratelimit: 23 callbacks suppressed [ 466.485745][T14288] openvswitch: netlink: Key type 29 is not supported [ 466.873167][ T5795] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.882600][ T5795] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.893035][ T5795] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.902677][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.915833][ T5795] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 466.923830][ T5795] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.981962][T14307] rxe_eth0 speed is unknown, defaulting to 1000 [ 467.004388][T14304] netlink: 'syz.0.2458': attribute type 3 has an invalid length. [ 467.040290][T14304] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2458'. [ 467.192177][ T2978] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.864594][ T2978] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.166928][ T2978] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.304663][T14344] sit0: entered promiscuous mode [ 468.514856][ T2978] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.608903][T14307] chnl_net:caif_netlink_parms(): no params data found [ 468.886820][T14307] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.900887][T14307] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.911399][T14307] bridge_slave_0: entered allmulticast mode [ 468.924799][T14307] bridge_slave_0: entered promiscuous mode [ 468.958587][ T5796] Bluetooth: hci2: command tx timeout [ 469.001887][T14307] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.013109][T14307] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.021575][T14307] bridge_slave_1: entered allmulticast mode [ 469.039454][T14307] bridge_slave_1: entered promiscuous mode [ 469.131021][T14307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.146274][T14307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.246581][T14307] team0: Port device team_slave_0 added [ 469.318914][T14307] team0: Port device team_slave_1 added [ 469.896035][T14390] netlink: 'syz.0.2469': attribute type 39 has an invalid length. [ 470.308042][T14307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.315068][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.358077][T14307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.380046][T14307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.387039][T14307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.468062][T14307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.600194][T14415] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2472'. [ 470.661258][T14411] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2473'. [ 470.763890][T14307] hsr_slave_0: entered promiscuous mode [ 470.791052][T14307] hsr_slave_1: entered promiscuous mode [ 470.799604][T14307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.816792][T14307] Cannot create hsr debugfs directory [ 471.039827][ T5796] Bluetooth: hci2: command tx timeout [ 472.320319][T14456] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2484'. [ 472.534602][T14456] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.2484'. [ 472.937138][T14477] netlink: 'syz.0.2487': attribute type 9 has an invalid length. [ 472.968402][T14477] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2487'. [ 473.118198][ T5796] Bluetooth: hci2: command tx timeout [ 474.104317][T14502] netlink: 'syz.2.2490': attribute type 10 has an invalid length. [ 474.139707][T14502] hsr0: entered promiscuous mode [ 474.237000][T14502] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 474.281236][T14502] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 474.320135][T14502] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 474.371055][T14502] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 474.408973][T14307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 474.429891][T14307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 474.554938][T14307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 474.672027][T14307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 474.970231][ T2978] hsr_slave_0: left promiscuous mode [ 475.035066][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.063086][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.083687][ T2978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.104548][ T2978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.124944][ T2978] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 475.195393][ T2978] veth1_macvtap: left promiscuous mode [ 475.205137][ T5796] Bluetooth: hci2: command tx timeout [ 475.217546][ T2978] veth0_macvtap: left promiscuous mode [ 475.547886][T14541] netlink: 'syz.2.2495': attribute type 29 has an invalid length. [ 476.702486][ T2978] team_slave_1 (unregistering): left promiscuous mode [ 476.717668][ T2978] team_slave_1 (unregistering): left allmulticast mode [ 476.740088][ T2978] team0 (unregistering): Port device team_slave_1 removed [ 476.891415][ T2978] team_slave_0 (unregistering): left promiscuous mode [ 476.900720][ T2978] team_slave_0 (unregistering): left allmulticast mode [ 476.941288][ T2978] team0 (unregistering): Port device team_slave_0 removed [ 477.777147][ T2978] batadv0 (unregistering): left promiscuous mode [ 477.783924][ T2978] batadv0 (unregistering): left allmulticast mode [ 477.810101][ T2978] team0 (unregistering): Port device batadv0 removed [ 478.170112][T14541] netlink: 'syz.2.2495': attribute type 29 has an invalid length. [ 478.376414][T14307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.626660][T14307] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.724088][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.731409][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.807067][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.814349][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.969970][T14557] netlink: 'syz.2.2501': attribute type 3 has an invalid length. [ 479.080637][T14307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.147521][T14557] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2501'. [ 479.653689][T14307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.747805][T14307] veth0_vlan: entered promiscuous mode [ 479.776907][T14307] veth1_vlan: entered promiscuous mode [ 479.865621][T14307] veth0_macvtap: entered promiscuous mode [ 479.907413][T14307] veth1_macvtap: entered promiscuous mode [ 479.981365][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.001024][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.022989][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.034221][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.050337][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.064152][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.107570][T14307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.133794][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.151465][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.169731][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.184893][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.198300][T14307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.219740][T14307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.237043][T14307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.251660][T14578] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2507'. [ 480.306928][T14307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.334164][T14307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.349373][T14307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.363768][T14307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.553785][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.574564][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.672474][T11570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.700623][T11570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.926099][T14589] netlink: 'syz.3.2453': attribute type 1 has an invalid length. [ 480.944877][T14589] netlink: 'syz.3.2453': attribute type 3 has an invalid length. [ 480.953423][T14590] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.960209][T14589] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2453'. [ 480.970604][T14590] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.016125][T14590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.025107][T14590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.142013][T14589] netlink: 'syz.3.2453': attribute type 10 has an invalid length. [ 481.150851][T14589] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2453'. [ 481.341789][T14597] netlink: 'syz.3.2513': attribute type 3 has an invalid length. [ 481.358238][T14597] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2513'. [ 482.639610][T14621] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 482.661698][T14621] netlink: 'syz.3.2521': attribute type 3 has an invalid length. [ 482.689589][T14621] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2521'. [ 482.733766][T14626] netlink: 'syz.3.2521': attribute type 10 has an invalid length. [ 482.758091][T14626] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2521'. [ 482.829524][T14627] netlink: 'syz.2.2523': attribute type 2 has an invalid length. [ 482.849732][T14627] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2523'. [ 483.953805][T14658] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2533'. [ 484.013741][T14658] netlink: zone id is out of range [ 484.028613][T14658] netlink: zone id is out of range [ 484.049817][T14658] netlink: zone id is out of range [ 484.055108][T14658] netlink: zone id is out of range [ 484.102592][T14658] netlink: zone id is out of range [ 484.131824][T14658] netlink: zone id is out of range [ 484.153110][T14658] netlink: zone id is out of range [ 484.193292][T14658] netlink: zone id is out of range [ 484.215696][T14658] netlink: zone id is out of range [ 484.228073][T14658] netlink: zone id is out of range [ 484.590342][T14662] validate_nla: 1 callbacks suppressed [ 484.590378][T14662] netlink: 'syz.0.2535': attribute type 1 has an invalid length. [ 484.607772][T14662] netlink: 'syz.0.2535': attribute type 3 has an invalid length. [ 484.633397][T14662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2535'. [ 484.705719][T14664] netlink: 'syz.3.2536': attribute type 2 has an invalid length. [ 484.755147][T14664] netlink: 'syz.3.2536': attribute type 8 has an invalid length. [ 484.791542][T14664] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2536'. [ 484.848188][T14662] netlink: 'syz.0.2535': attribute type 10 has an invalid length. [ 484.905965][T14662] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2535'. [ 485.362734][T14678] netlink: 'syz.0.2541': attribute type 10 has an invalid length. [ 485.382375][T14678] geneve0: entered promiscuous mode [ 485.475926][T14678] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 486.685243][T14705] netlink: 'syz.2.2549': attribute type 1 has an invalid length. [ 486.700498][T14705] netlink: 'syz.2.2549': attribute type 3 has an invalid length. [ 486.718412][T14705] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2549'. [ 486.742075][T14705] netlink: 'syz.2.2549': attribute type 10 has an invalid length. [ 486.761086][T14705] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2549'. [ 486.939894][T14715] netlink: 'syz.2.2552': attribute type 49 has an invalid length. [ 488.260926][T14744] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2560'. [ 488.299245][T14744] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2560'. [ 488.853728][T14754] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2565'. [ 488.909318][T14752] syzkaller0: entered promiscuous mode [ 488.937329][T14752] syzkaller0: entered allmulticast mode [ 489.070789][T14763] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2568'. [ 496.703829][T14801] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2575'. [ 501.765838][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.776408][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.479751][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 507.492979][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 507.501785][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 507.510055][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 507.521428][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 507.529895][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 507.654409][T14812] rxe_eth0 speed is unknown, defaulting to 1000 [ 507.666025][ T5796] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 507.676457][ T5796] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 507.689333][ T5796] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 507.697657][ T5796] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 507.706376][ T5796] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 507.719550][ T5796] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 507.972916][T14815] rxe_eth0 speed is unknown, defaulting to 1000 [ 508.282532][T14812] chnl_net:caif_netlink_parms(): no params data found [ 508.466581][T14812] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.473974][T14812] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.486252][T14812] bridge_slave_0: entered allmulticast mode [ 508.493935][T14812] bridge_slave_0: entered promiscuous mode [ 508.523310][T14812] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.530735][T14812] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.542588][T14812] bridge_slave_1: entered allmulticast mode [ 508.550070][T14812] bridge_slave_1: entered promiscuous mode [ 508.630888][T14812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.667794][T14812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.774885][T14812] team0: Port device team_slave_0 added [ 508.786725][T14815] chnl_net:caif_netlink_parms(): no params data found [ 508.824822][T14812] team0: Port device team_slave_1 added [ 508.908637][T14812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.915637][T14812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 508.947807][T14812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.013902][T14812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.024523][T14812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.056407][T14812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.097061][T14815] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.110297][T14815] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.117547][T14815] bridge_slave_0: entered allmulticast mode [ 509.131853][T14815] bridge_slave_0: entered promiscuous mode [ 509.163226][T14815] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.172927][T14815] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.184379][T14815] bridge_slave_1: entered allmulticast mode [ 509.197498][T14815] bridge_slave_1: entered promiscuous mode [ 509.598304][ T5796] Bluetooth: hci4: command tx timeout [ 509.760286][ T5796] Bluetooth: hci5: command tx timeout [ 511.678141][ T5796] Bluetooth: hci4: command tx timeout [ 511.838167][ T5796] Bluetooth: hci5: command tx timeout [ 512.684055][ T5795] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 512.700295][ T5795] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 512.708925][ T5795] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 512.717820][ T5795] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 512.726908][ T5795] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 512.734340][ T5795] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 512.797471][ T5796] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 512.813548][ T5796] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 512.822126][ T5796] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 512.835914][ T5796] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 512.844037][ T5796] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 512.856689][ T5796] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 513.758172][ T5796] Bluetooth: hci4: command tx timeout [ 513.918534][ T5796] Bluetooth: hci5: command tx timeout [ 514.798116][ T5796] Bluetooth: hci6: command tx timeout [ 514.878330][ T5796] Bluetooth: hci7: command tx timeout [ 515.838297][ T5796] Bluetooth: hci4: command tx timeout [ 516.008122][ T5796] Bluetooth: hci5: command tx timeout [ 516.878165][ T5796] Bluetooth: hci6: command tx timeout [ 516.958407][ T5796] Bluetooth: hci7: command tx timeout [ 518.958239][ T5796] Bluetooth: hci6: command tx timeout [ 519.038707][ T5796] Bluetooth: hci7: command tx timeout [ 521.038132][ T5796] Bluetooth: hci6: command tx timeout [ 521.126688][ T5796] Bluetooth: hci7: command tx timeout [ 563.205258][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.212018][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.713289][T14844] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 568.738211][T14844] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 568.746483][T14844] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 568.754794][T14844] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 568.762708][T14844] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 568.770211][T14844] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 569.848893][T14844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 569.864200][T14844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 569.872571][T14844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 569.881108][T14844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 569.888890][T14844] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 569.896240][T14844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 570.400884][T14842] Bluetooth: hci0: command 0x0406 tx timeout [ 570.798282][T14842] Bluetooth: hci8: command tx timeout [ 571.928083][T14842] Bluetooth: hci9: command tx timeout [ 572.888086][T14842] Bluetooth: hci8: command tx timeout [ 573.998177][T14842] Bluetooth: hci9: command tx timeout [ 574.409165][T14844] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 574.419665][T14844] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 574.431815][T14844] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 574.458476][T14844] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 574.471538][T14844] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 574.480296][T14844] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 574.574191][T14858] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 574.584863][T14858] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 574.595391][T14858] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 574.603747][T14858] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 574.618806][T14858] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 574.629188][T14858] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 574.966898][T14842] Bluetooth: hci8: command tx timeout [ 576.078116][T14842] Bluetooth: hci9: command tx timeout [ 577.038147][T14842] Bluetooth: hci8: command tx timeout [ 578.158206][T14842] Bluetooth: hci9: command tx timeout [ 590.881961][T14860] Bluetooth: hci2: command 0x0406 tx timeout [ 601.257919][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 601.264678][ C1] rcu: 1-....: (10381 ticks this GP) idle=689c/1/0x4000000000000000 softirq=53194/53196 fqs=4952 [ 601.276514][ C1] rcu: hardirqs softirqs csw/system [ 601.283010][ C1] rcu: number: 1217384 0 0 [ 601.289438][ C1] rcu: cputime: 18084 34395 34 ==> 52490(ms) [ 601.297238][ C1] rcu: (t=10501 jiffies g=63153 q=3207 ncpus=2) [ 601.303591][ C1] CPU: 1 PID: 14779 Comm: syz.0.2571 Not tainted syzkaller #0 [ 601.311066][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 601.321135][ C1] RIP: 0010:queue_work_on+0x1a4/0x1f0 [ 601.326552][ C1] Code: 4d 85 e4 75 16 e8 5c c9 2f 00 eb 15 e8 55 c9 2f 00 e8 30 cd 3f 09 4d 85 e4 74 ea e8 46 c9 2f 00 fb 48 c7 44 24 20 0e 36 e0 45 <48> b8 00 00 00 00 00 fc ff df 49 c7 44 05 00 00 00 00 00 41 c7 44 [ 601.346587][ C1] RSP: 0018:ffffc900001f0380 EFLAGS: 00000246 [ 601.352665][ C1] RAX: ffffffff8158155a RBX: 0000000000000000 RCX: ffff888076c98000 [ 601.360657][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 601.368638][ C1] RBP: ffffc900001f0448 R08: ffffffff922235ff R09: 1ffffffff24446bf [ 601.376616][ C1] R10: dffffc0000000000 R11: fffffbfff24446c0 R12: 0000000000000200 [ 601.384584][ C1] R13: 1ffff9200003e074 R14: 0000000000000000 R15: ffff88807cc40001 [ 601.392556][ C1] FS: 00007f18505c26c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 601.401552][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.408140][ C1] CR2: 00007f184fa25fa0 CR3: 000000005e5a0000 CR4: 00000000003506e0 [ 601.416142][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 601.424116][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 601.432099][ C1] Call Trace: [ 601.435366][ C1] [ 601.438208][ C1] ? wq_worker_last_func+0x40/0x40 [ 601.443310][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 601.449208][ C1] ? _raw_spin_unlock+0x40/0x40 [ 601.454060][ C1] ? wiphy_work_queue+0x133/0x180 [ 601.459189][ C1] ieee80211_rx_h_mgmt+0x4f0/0x6e0 [ 601.464364][ C1] ieee80211_rx_handlers+0x65b6/0xb450 [ 601.469831][ C1] ? drv_event_callback+0x250/0x250 [ 601.475014][ C1] ? __lock_acquire+0x135d/0x7eb0 [ 601.480054][ C1] ? sched_clock_cpu+0x75/0x430 [ 601.484908][ C1] ? read_tsc+0x9/0x20 [ 601.488966][ C1] ? ktime_get+0x24b/0x280 [ 601.493481][ C1] ieee80211_prepare_and_rx_handle+0x2886/0x6110 [ 601.499825][ C1] ? ieee80211_rx_8023+0x1220/0x1220 [ 601.505126][ C1] ? sta_info_get_bss+0x50/0x320 [ 601.510177][ C1] ? sta_info_get_bss+0x50/0x320 [ 601.515105][ C1] ? sta_info_get_bss+0x50/0x320 [ 601.520033][ C1] ? sta_info_get_bss+0x309/0x320 [ 601.525043][ C1] ? ieee80211_rx_data_set_sta+0x228/0x3e0 [ 601.530861][ C1] ieee80211_rx_list+0x28d4/0x3240 [ 601.535972][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 601.542123][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 601.547316][ C1] ? read_lock_is_recursive+0x20/0x20 [ 601.552687][ C1] ? ieee80211_rx_napi+0xd2/0x3c0 [ 601.557705][ C1] ieee80211_rx_napi+0x1ae/0x3c0 [ 601.562759][ C1] ? ieee80211_rx_list+0x3240/0x3240 [ 601.568074][ C1] ? skb_dequeue+0x124/0x160 [ 601.572720][ C1] ieee80211_handle_queued_frames+0x105/0x190 [ 601.578796][ C1] ? ieee80211_reconfig_filter+0x20/0x20 [ 601.584419][ C1] tasklet_action_common+0x2d4/0x460 [ 601.589721][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 601.595263][ C1] handle_softirqs+0x27d/0x820 [ 601.600025][ C1] ? read_tsc+0x9/0x20 [ 601.604091][ C1] ? ktime_get+0x24b/0x280 [ 601.608533][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 601.613309][ C1] ? do_softirq+0x1a0/0x1a0 [ 601.617815][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 601.623046][ C1] __irq_exit_rcu+0xd3/0x190 [ 601.627655][ C1] ? irq_exit_rcu+0x20/0x20 [ 601.632160][ C1] irq_exit_rcu+0x9/0x20 [ 601.636405][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 601.642134][ C1] [ 601.645067][ C1] [ 601.648083][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.654065][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 601.660043][ C1] Code: 39 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 33 7d 43 09 e8 3e 3e 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 601.679740][ C1] RSP: 0018:ffffc900045ff880 EFLAGS: 00000282 [ 601.685798][ C1] RAX: ce9ed5760a895700 RBX: 0000000000000000 RCX: ce9ed5760a895700 [ 601.693778][ C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 601.701753][ C1] RBP: ffffc900045ff8d0 R08: ffffffff8f8dda6f R09: 1ffffffff1f1bb4d [ 601.709728][ C1] R10: dffffc0000000000 R11: fffffbfff1f1bb4e R12: ffff888076c98000 [ 601.717696][ C1] R13: 1ffff110171a79a1 R14: dffffc0000000000 R15: ffff8880b8d3cd08 [ 601.725943][ C1] __schedule+0x1577/0x4720 [ 601.730519][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 601.737720][ C1] ? lock_chain_count+0x20/0x20 [ 601.742582][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 601.748561][ C1] ? asan.module_dtor+0x20/0x20 [ 601.753417][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.759559][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 601.764742][ C1] ? preempt_schedule+0xc0/0xd0 [ 601.769589][ C1] preempt_schedule_common+0x82/0xc0 [ 601.774891][ C1] preempt_schedule+0xc0/0xd0 [ 601.779556][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 601.785173][ C1] ? __pv_queued_spin_unlock_slowpath+0x199/0x2a0 [ 601.791590][ C1] ? __raw_callee_save___pv_queued_spin_unlock_slowpath+0x15/0x30 [ 601.799437][ C1] preempt_schedule_thunk+0x1a/0x30 [ 601.804682][ C1] _raw_spin_unlock+0x3a/0x40 [ 601.809378][ C1] futex_wake+0x41d/0x4f0 [ 601.813811][ C1] ? futex_wake_mark+0x150/0x150 [ 601.818758][ C1] ? perf_trace_preemptirq_template+0xac/0x330 [ 601.824919][ C1] ? preempt_schedule_irq+0xea/0x150 [ 601.830206][ C1] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 601.836101][ C1] do_futex+0x35d/0x3e0 [ 601.840261][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 601.846147][ C1] ? lock_chain_count+0x20/0x20 [ 601.850990][ C1] __se_sys_futex+0x3a9/0x440 [ 601.855671][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 601.861814][ C1] ? __x64_sys_futex+0xf0/0xf0 [ 601.866912][ C1] ? __x64_sys_futex+0x21/0xf0 [ 601.871662][ C1] do_syscall_64+0x55/0xb0 [ 601.876149][ C1] ? clear_bhb_loop+0x40/0x90 [ 601.880860][ C1] ? clear_bhb_loop+0x40/0x90 [ 601.885563][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 601.891456][ C1] RIP: 0033:0x7f184f79fb19 [ 601.895867][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.915479][ C1] RSP: 002b:00007f18505c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 601.923910][ C1] RAX: ffffffffffffffda RBX: 00007f184fa25fa8 RCX: 00007f184f79fb19 [ 601.931898][ C1] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f184fa25fac [ 601.939876][ C1] RBP: 00007f184fa25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 601.947847][ C1] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 601.955807][ C1] R13: 00007f184fa26038 R14: 00007ffdf920eb20 R15: 00007ffdf920ec08 [ 601.963789][ C1]